last executing test programs:

9m6.621677182s ago: executing program 32 (id=81):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

8m52.932153843s ago: executing program 33 (id=587):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet(0x2, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000200)=""/129, 0x81}], 0x3, 0x6, 0xfffeeffa)

5m18.447904415s ago: executing program 34 (id=3895):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)

4m43.660753201s ago: executing program 35 (id=4419):
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001080)={0x5, 0x5879, 0xfff, 0x2a, 0x3, 0x8, 0x98}, 0xc)

4m40.395963452s ago: executing program 8 (id=4457):
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000380)={@fallback, 0x24, 0x1, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8)

4m40.378121513s ago: executing program 8 (id=4459):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = dup(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r6, &(0x7f0000000140)={@val={0x0, 0x6003}, @void, @eth={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x200408d0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

4m40.039353882s ago: executing program 8 (id=4462):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8, 0xb0, 0x6, 0x3, 0x4})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x6000, 0x2a0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff], [0x0, 0x0, 0xff], 'syzkaller0\x00', 'veth0_to_bond\x00', {}, {}, 0x8, 0x0, 0x0, 0x4141eedf62d25f83}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'veth1\x00', 'ipvlan1\x00', {0xff}, {}, 0xff, 0xb9, 0x4, 0xc}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffff00, 0xff000000, 0xff000000, 0xff], 0x4e23, 0x4e21, 0x4e24, 0x4e24, 0x4, 0x1ff, 0x7, 0x1000, 0xfffffff8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x300)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r5=>0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x5, 0xdae8eb7cf4426cc7, 0xff, 0xe, 0x9, 0x200}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r5, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x6}})

4m39.267442938s ago: executing program 8 (id=4470):
r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x14)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300840e, &(0x7f00000003c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
brk(0x6)

4m39.032222402s ago: executing program 8 (id=4476):
r0 = semget$private(0x0, 0x4000000009, 0x0)
semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2)
semctl$GETNCNT(r0, 0x0, 0xe, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={<r3=>0x0, 0x5, 0x3, [0xffff, 0x9, 0x64b]}, &(0x7f00000001c0)=0xe)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x1370, 0x101}, 0x90)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4m37.995079452s ago: executing program 36 (id=4490):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

4m36.980367532s ago: executing program 8 (id=4501):
unshare(0x8040480)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008000)

4m36.962928913s ago: executing program 37 (id=4501):
unshare(0x8040480)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x0)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008000)

3m39.999376716s ago: executing program 1 (id=5305):
open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)

3m39.293497088s ago: executing program 1 (id=5311):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000200), 0x80800)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0)

3m39.056719811s ago: executing program 1 (id=5312):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3")
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000200), 0x80800)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0)

3m38.855297643s ago: executing program 1 (id=5314):
unshare(0x6a040000)
socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'netdevsim0\x00', 0x2}, 0x18)
sendto$inet(r0, 0x0, 0x0, 0x4004000, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x21, 0x3, 0x3c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe]}}, 0x5c)
socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8001)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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")
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="85", 0x1}], 0x1, 0x9c00, 0x0, 0x3)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x21, r4, 0x0, 0x0)
r5 = signalfd(r3, &(0x7f0000000100)={[0x5]}, 0x8)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x4, 0x9, 0x4, 0xfa, 0x0, 0xfffffffffffffffa, 0x20000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x44, 0x100000000, 0xb, 0x3, 0x9, 0x8, 0x6, 0x0, 0x8, 0x0, 0x4}, r4, 0xffffffffffffffff, r5, 0xa)

3m37.403189428s ago: executing program 1 (id=5335):
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000080)=0x8)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket(0x1d, 0x2, 0x6)
close(r0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x12, &(0x7f0000000280)={@empty}, 0x14)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r1)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3aff, 0xff, 0x3f, 0x1}]}}]}}]}, 0x44}}, 0x24040084)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000e80)={0x74, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044}, 0x4004005)
fsetxattr$security_capability(r3, &(0x7f0000000280), &(0x7f0000000040)=@v3={0x3000000, [{0x1, 0xfff}, {0x8}]}, 0x18, 0x7)
socket(0x10, 0x80003, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

3m36.813127043s ago: executing program 1 (id=5344):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$eJzs3c1vVFUbAPDnTD9p3/dtIW9UXEgTYyBRWlrAEGMi7AnBj52rSgtBCiW0RosklgQ3JsaNCxNXLsT/QkncunDrwo0rQ0KMYSGGyJg7vVNupzOlXzNTOr9fcuk993bueW7p03PvmXPmBtCxRrJ/ShH7I+Jqihgq7OuOfOfI0vfd//PGuWxJUS6//UeKG5+kxeKxUv51MH/xP0ORfi5F7OtaXe/cwvVLkzMz09fy8tj85atjcwvXD1+8PHlh+sL0lYlXJ04cP3b8xPiRLZ1fserTt97/cOizM+9++/XDNP7dr2dSnIxH+Tdk51X72r4t1Zz9zEaivORBcXv2cz2xxWPvFH8NVX9PHku1G9ixzue/j/+LiGdjKLoK/5tD8embbQ0OaKpyimobBXSctKn879/+QIAWq14HVO/t690Hr1Zq8lUJ0Ar3Ti11ACzlfk9EVPO/e6lvMPoj2zpwP63o50kRsbWeuSVZHT/9eOZWtkSDfjigORZvVnu5a9v/VMnN4eivlAbul1bkf6mwZNvf2mT9IzVl+Q+ts3gzIp7L2//e2FD+jxTy/71N1i//AQAAAAAAYPvcORURr9Qb/1daHv/TW2f8z2BEnNyG+p/8/l/pbr6StqE6oODeqYjXI8qpTv7nhrvy0n8r4wF60vmLM9NH8jmDh6KnLyuP1xy3OEL48Of7vmpUf3H8X7Zk9VfHAuZHuttdMxF3anJ+cqvnDUTcuxnxfGX874F8y8rxP1n7n+q0/1l+X11nHfteun220b4n5z/QLOVvIg7Wnf/z+HI7rf35HGOV64Gx6lXBai98/MX3jeqX/9A+Wfs/sHb+96Xi5/XMbez4vRFxdKG73Gj/Zq//e9M7XdXjZz6anJ+/Nh7Rm06v3j6xsZhht6rmQzVfsvw/9OLa/X/L1/+FPNwTEYvrrPOZR4O/Ndqn/Yf2yfJ/au32f3hl+7/xlYnbwz80qv/sutr/Y5U2/VC+Rf8fFK3+PI71JmhbwgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp1wpIv4TqTS6vF4qjY5GDEbE/2OgNDM7N//y+dkPrkxl+yrP/y9Vn/Q7tFRO1ef/DxfKEzXloxGxNyK+7NpTKY+em52ZavfJAwAAAAAAAAAAAAAAAAAAwA4xWJnzX+6rnf+f+b2r3dEBTdedf5Xv0Hm6N/3Kct+2BgK03ObzH3jarT//e5oaB9B6jfP/wcNyRUvDAVrI9T90rk3mv7cLYBfQ/kOnWmefXn+z4wDaQfsPAAAAAAC7yt4Dd35JEbH42p7KkunN9xnsD7tbqd0BAG1jDC90ru7ZdkcAtIt7fCAtr/1dd7J/49H/qTkBAQAAAAAAAAAAAACrHNxv/j90qrXn/xvbD7vZGvP/6yW/jwuAXaTxoz9Sb0sDAVrOPT7wpDt98/8BAAAAAAAAAAAAYAfov35pcmZm+trcwtO38sbOCGNjK4uTOyKMbV151Jwj90TEzjjBVq9U5961MYw2/10CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/RsAAP//2SQnmg==")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x0)

3m36.809632503s ago: executing program 38 (id=5344):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000100)={[{@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x0)

59.429651021s ago: executing program 6 (id=8130):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x5, 0x0, 0x17)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000440)={0x9, 0x3fffffffc00, 0x5, 0x1, 0x1, 0x0, [{0x8001, 0xeee, 0x7, '\x00', 0x2704}]})
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}}, 0x24040084)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe01, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

59.386183583s ago: executing program 6 (id=8133):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0x2, 0x4e21}}]}, 0x170}}, 0x0)

59.341890386s ago: executing program 6 (id=8134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
socket(0x1d, 0x2, 0x6)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
rt_sigsuspend(0x0, 0x0)

59.27052683s ago: executing program 6 (id=8138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000080)={[{@orlov}, {@minixdf}]}, 0x1, 0x62f, &(0x7f0000000700)="$eJzs3VtoHGsdAPD/TC61PfGkgooe4RARDoK6uRUlPnl8EdGjPR5REKWGdJuE7GZzcoEkip4+KKVYlApWsIhiH9R6WfBBBaUiiA8t1kJRRCiiFEQptbWgFCEy2d0kNNsmmsto5/eD2X7fN7v7fTP//ndmvuwlgMLqy27SiNdGxNEkonfDus5oruxr3K8+XJ/IliRWVl64nUQSEReG6xOt+yfNf59oPuw1EfHO10dMdW/ud25peWq0UinPNuv989WZ/rml5bdMVkfHy+Pl6SODA0dGhkZG3rp723r97K9++c8fvqv+ufPvPtv5odO/zsbb01y3cTt2S1/0NfdJVxzduCKJePtud5azdJv3e1X58z/d46GwTdVPX/xqRzPPu7LYRG90NLP+G1c/erc3JqbzHiOwd1YORKwABZXIfyio1nlAdv3bWvbr3OP+7/erJx7m1rONC8ALzbmd+lr8OxtzQ/Gy1WvDQ39PmleGDUlr7mgHzjyfPcc3P/Lm33zxT9kSezQPw/+m+h/zHgF56j6S9wjI01PP5z0C8nT1VN4j4KWTETHQ2bn5/D/Z8fndO7ZY/+NPZed/Z57Z2Ob8rzg+8ELeIyBP79vFv+3z/+crt/MeAT97Njv+t5v/S9fmf6LN/E9P42E7cmAiO/5/6dzGNsf//dWa/6tvmv9bj3/HQ+b/Pr7NPu7/6x+/a9d+81wW/799qzX/ly1Z/625QPberZMRT7WNf7IW/6RN/NOImNlmHy9++Mr727V/93IW/8ND4p+fla9HPBPt49+SPPL9mf0nJivlgcZt+z6e/vn377RrX3xbFv+5M+Kfnyz/Dz0k/lu9/r+0zT4upn9YbNf+nc9k8T94+dHxT//SnXxw9T9j623Ei6Pz87ODEd3Jeze3D/2ne6BYWvuotQ+z+L/xDY8+/rd7/T8YEV/YZp/XvndnpF37lytZ/K+dlP/5yeJ/fIv8bxf/rO1r2+wjHXv1X9u1P3k+i//HTrdi/5OnP3lT/AEAAAAAAAAAAAAAAAAAAAAAAHicpavf5ZukpbVympZKjd/wfmUcSiu1ufk3nagtTB9vfOfv4ehKW1/12NuoJ1l9cLW8Xh96oD4cEa+IiFMdB1frpbFa5XjeGw8F1RNx4wcvjrX5ZX4AAAAAAAAAAAAAAAAAACAvTzzw+f8/dzQ+/w88vnoiblz/xY8uZeV7HXmPBthPWf5/+171PSH/oXDkPxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf+huOQ/FNfG/AcAAAAAAAAAAAAAAAAAAAAAAAAA9tbR557LlpX6cH0iq0/XxienJmZGhgZK1YWx0lhtdqY0XquNV8qlsVp16+er1Gozg0OxsNg/X56b759bWj5WrS1Mzx+brI6Ol4+Vu/Zhm4CtXbr728/mPQYAAAAAAAAAAAAAAAAAAGBdz+qSpKWISFfLaVoqRbw8Ig5HV3JislIeiIgnI+JKR9eBrD6Y96CBHemJuPG6wZFP5D0OAAAAAAAAAAAAAAAAAABg3dzS8tRopVKeVVBQUFgr5P3KBAAAAAAAAAAAAAAAAAAAxbP+od+8RwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Vn//f+9K+S9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jX8HAAD//zynZrE=")
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000040000000030000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000002500000000da", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x3, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000014c0)={0x27, 0x0, 0x0, 0x4, 0x81, 0x8, "4bee90c3d1133f93d774939ee3c1c1cfac84096a34902e9a155397ed998da154ad7fae6a92a9389778294dd4200b55b9018139d5e84139583079ee3f2a1c9f", 0x2a}, 0x60)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa1551, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0x6, 0x6, 0x4, 0x20005, 0xa5b, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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")
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x4000011, r2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2445e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4b}, 0x100, 0x10000, 0x8, 0x1, 0x8, 0x7, 0xb, 0x0, 0x907, 0x0, 0x20000006}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x20004080)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300), 0x5}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x11, r5)
ptrace$setsig(0x4203, r5, 0x0, &(0x7f00000000c0)={0xc, 0x81, 0x1})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={&(0x7f0000000240)}, 0xa822, 0x804005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff)

58.864665604s ago: executing program 6 (id=8143):
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7)
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

58.630153368s ago: executing program 6 (id=8148):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1, 0x167, &(0x7f0000003280)="$eJzs27GqE0EUBuCTe6NZrbYWiwUbq6A+gSJXUBcUJYVWCmrjBcE0q1UexRcU5FbpRpKN2RgNJMpmxf2+IjnMz4QzRXaYhXl1PSJi+u7D04vIBoMY3o0i5oPI4yROozYLAOB/Mk8pvqWU0mgWV75ESqnrjgCAttn/AaB/ftr/I2LP/T9rvTEAoDXO/wDQP89fvHx8ryzPnhVFFvF1Vk2ryfJ7UucPHpZnt4qlPPIfsy6qanK6zm/XedH86iK/FFdX+Z3f5pfj5o06X2T3n5Sb+Wjx+eYI6wcAAIA+GBdreTPanO/H4115XW28H9g63w/j2vBoywAADjD99Pn96/Pztx8PLE5W8/9wukLRvyLyR/9CG/sVHT+YgNY1f/quOwEAAAAAAAAAAAAAAHb55fZPFhGbI6P46+tEXa8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtn0PAAD//2xeRu0=")
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)

58.543944463s ago: executing program 39 (id=8148):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1, 0x167, &(0x7f0000003280)="$eJzs27GqE0EUBuCTe6NZrbYWiwUbq6A+gSJXUBcUJYVWCmrjBcE0q1UexRcU5FbpRpKN2RgNJMpmxf2+IjnMz4QzRXaYhXl1PSJi+u7D04vIBoMY3o0i5oPI4yROozYLAOB/Mk8pvqWU0mgWV75ESqnrjgCAttn/AaB/ftr/I2LP/T9rvTEAoDXO/wDQP89fvHx8ryzPnhVFFvF1Vk2ryfJ7UucPHpZnt4qlPPIfsy6qanK6zm/XedH86iK/FFdX+Z3f5pfj5o06X2T3n5Sb+Wjx+eYI6wcAAIA+GBdreTPanO/H4115XW28H9g63w/j2vBoywAADjD99Pn96/Pztx8PLE5W8/9wukLRvyLyR/9CG/sVHT+YgNY1f/quOwEAAAAAAAAAAAAAAHb55fZPFhGbI6P46+tEXa8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtn0PAAD//2xeRu0=")
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)

46.803159808s ago: executing program 2 (id=8289):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x316575}, 0x0, {0xfd}, 0x0, 0x2})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000a, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@debug}, {@stripe={'stripe', 0x3d, 0x1}}, {@nobarrier}, {@jqfmt_vfsold}, {@nodiscard}, {@user_xattr}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e21, @broadcast}})
unshare(0x2c020400)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
io_setup(0x5, &(0x7f00000000c0))
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0)

46.464599028s ago: executing program 2 (id=8295):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000a, 0x80010, 0xffffffffffffffff, 0x0)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x12}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')

46.338163625s ago: executing program 2 (id=8298):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)

46.147907976s ago: executing program 2 (id=8299):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1a0, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
socket$inet_sctp(0x2, 0x5, 0x84)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_PAC_RESET_KEYS(0x36, 0x1)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe)
fallocate(r1, 0x10, 0x3, 0x7ffd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

45.324600885s ago: executing program 2 (id=8316):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x5, 0x0, 0x17)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000440)={0x9, 0x3fffffffc00, 0x5, 0x1, 0x1, 0x0, [{0x8001, 0xeee, 0x7, '\x00', 0x2704}]})
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}}, 0x24040084)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe01, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)

44.964265186s ago: executing program 2 (id=8319):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c}}, 0x24040084)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe01, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)

44.964019275s ago: executing program 40 (id=8319):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c}}, 0x24040084)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe01, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)

31.358712689s ago: executing program 0 (id=8493):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'tunl0\x00', @random="915dfffa4046"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880)
recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002142, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"})

31.065847397s ago: executing program 0 (id=8498):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)

30.900528726s ago: executing program 0 (id=8502):
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x101, 0x40000000000007, 0xc, 0xfffffffffffffffd, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1000, 0x24d0, 0x2, 0x3, 0x3, 0x3})
r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x5, 0x13, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0xf, 0xffffff62}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x7800, 0x20, 0x5, 0xd1, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x67, 0x0, 0x8c, 0x4, 0x0, @multicast1, @local, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x12, "32f7e729c64f491ccb27f887f824d5e9"}]}, @ssrr={0x89, 0x7, 0x8, [@remote]}]}}}}})
pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x10000000041)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x81fd)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x501, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x800000, 0x6, 0x2, 0xcc, 0xffff, 0x0, 0x0, 0x0, 0x40bb}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r6 = gettid()
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pread64(r5, &(0x7f0000000380)=""/155, 0x9b, 0x1)
write$P9_RGETLOCK(r7, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r7, 0x407, 0x7000000)
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

29.952509362s ago: executing program 0 (id=8515):
flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
listen(r0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {<r11=>0xee00, 0xee00}}, '.\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_getroute={0x60, 0x1a, 0x800, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x0, 0x8, 0xfd, 0x4, 0xc8, 0x2, 0x1000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x2c, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x28, 0x1, [{0x9}, {0x81}, {0x3ff}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0x6}, {0xa}]}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_UID={0x8, 0x19, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x8050)

29.825184359s ago: executing program 0 (id=8519):
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0xef}, 0x12200, 0x32, 0x43a1bd56, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000020e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028028000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x1)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01e1e0ebc4f0ffdbdf2504"], 0x14}}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup2(r0, r2)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="02e17207ee000100fa"], 0x9)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8)

29.567939034s ago: executing program 0 (id=8525):
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x101, 0x40000000000007, 0xc, 0xfffffffffffffffd, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1000, 0x24d0, 0x2, 0x3, 0x3, 0x3})
r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x5, 0x13, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0xf, 0xffffff62}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x7800, 0x20, 0x5, 0xd1, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x67, 0x0, 0x8c, 0x4, 0x0, @multicast1, @local, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x12, "32f7e729c64f491ccb27f887f824d5e9"}]}, @ssrr={0x89, 0x7, 0x8, [@remote]}]}}}}})
pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x10000000041)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x81fd)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x501, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x800000, 0x6, 0x2, 0xcc, 0xffff, 0x0, 0x0, 0x0, 0x40bb}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r6 = gettid()
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pread64(r5, &(0x7f0000000380)=""/155, 0x9b, 0x1)
write$P9_RGETLOCK(r7, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r7, 0x407, 0x7000000)
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

14.494762964s ago: executing program 41 (id=8525):
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x101, 0x40000000000007, 0xc, 0xfffffffffffffffd, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1000, 0x24d0, 0x2, 0x3, 0x3, 0x3})
r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x3, 0x5, 0x13, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0xf, 0xffffff62}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', r2, 0x7800, 0x20, 0x5, 0xd1, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x67, 0x0, 0x8c, 0x4, 0x0, @multicast1, @local, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x12, "32f7e729c64f491ccb27f887f824d5e9"}]}, @ssrr={0x89, 0x7, 0x8, [@remote]}]}}}}})
pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x10000000041)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r3, 0x81fd)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x501, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x800000, 0x6, 0x2, 0xcc, 0xffff, 0x0, 0x0, 0x0, 0x40bb}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r6 = gettid()
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pread64(r5, &(0x7f0000000380)=""/155, 0x9b, 0x1)
write$P9_RGETLOCK(r7, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r7, 0x407, 0x7000000)
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

2.3946402s ago: executing program 7 (id=8805):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0})

2.348519883s ago: executing program 7 (id=8806):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0) (fail_nth: 1)
fcntl$setlease(r1, 0x400, 0x2)

2.036200901s ago: executing program 7 (id=8808):
socket(0x22, 0x1, 0x5d06)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={<r1=>0x0, 0x7, 0x3ff})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000800)={r1, 0xc48, 0x0, [0xbf17, 0x80000001, 0x2, 0xb6b, 0x1], [0x7, 0xffffffff, 0x4e, 0x3, 0xd10, 0x80000000, 0x20, 0x0, 0x8, 0x9, 0x8000000000000000, 0x3, 0x10, 0x9, 0x8000000000000000, 0xf796, 0xfffffffffffffff9, 0x7, 0x2, 0xfffffffffffffc00, 0x2, 0x0, 0x8, 0x2, 0x2, 0x80000000, 0xf, 0x4, 0x1808, 0x1, 0x2, 0x7, 0x0, 0x8000000000000000, 0x2a, 0x4, 0x7, 0x7, 0x7, 0x0, 0xc, 0x8, 0x4, 0x2, 0x3, 0x3, 0xff, 0x7, 0x7fffffffffffffff, 0x0, 0x5, 0x2, 0x10, 0x53780000, 0x6, 0x6, 0x1, 0x5, 0x7, 0x100, 0xcc, 0x100, 0x4, 0xc, 0x5, 0xffffffffffffffff, 0x6b, 0x332, 0xff, 0x5, 0x9, 0x3, 0x80000000, 0xff, 0x9, 0xdc, 0xd577, 0x0, 0x8000, 0xffffffffffff77b0, 0x80000000, 0x8000000000000001, 0x8, 0x8, 0x0, 0x4, 0xd, 0x5, 0x8001, 0x75, 0x7, 0x2, 0x1, 0x2, 0x7fff, 0x35d0, 0x1, 0x2, 0x6, 0x8000, 0x2, 0x8, 0x8, 0x0, 0x10000, 0x4, 0x9, 0x48000000000, 0xab, 0x4c, 0xa4, 0x3, 0x7fffffffffffffff, 0x6, 0x0, 0xa, 0x7, 0x7, 0x5, 0xc204, 0xd5fb]}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0}) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x86d9, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async)
setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000040)={@private2, r5}, 0x14)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close_range(r2, 0xffffffffffffffff, 0x0)

1.860117361s ago: executing program 4 (id=8809):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000001c40)}, 0x20)
timer_create(0x2, 0x0, &(0x7f0000000040))
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@nfs}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000cc0)}, 0x811)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8c8}}, 0x0)
timer_settime(0x0, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0d1}, 0x4004810)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, 0x0, 0x0)

1.740149078s ago: executing program 7 (id=8812):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3)
write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e)

1.718330109s ago: executing program 7 (id=8813):
syz_read_part_table(0x104f, &(0x7f0000000000)="$eJzsz72NwmAQhsH38/lPOp3kEo6YJjA9uB/ohAQCisRINm4BOZgJVqt9og07Mnfbdl1mec0fSX639pOckq5NLv+H2zRWSZ+UPsk45H4+ps5yWo1tytB0qfOXpHmUVGuoMz2//CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7NI7AAD//7aiEHk=")
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffed5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x13bb711e)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c)

1.717850899s ago: executing program 4 (id=8814):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)

1.607524306s ago: executing program 3 (id=8815):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e5", 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xe000000f})
shutdown(0xffffffffffffffff, 0x1)
socket$unix(0x1, 0x5, 0x0)
getrlimit(0x5, &(0x7f0000000080))
close_range(r0, 0xffffffffffffffff, 0x40000000000000)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = dup(0xffffffffffffffff)
write$UHID_INPUT(r3, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)
r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, {0x0, r7}})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r7)
r8 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}, {@inode32}]})
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x1, 0x2)
fchdir(r9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r9, 0x0, 0x3, &(0x7f0000000000)=',}\x00'}, 0x30)

1.143133443s ago: executing program 4 (id=8817):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

1.105083456s ago: executing program 3 (id=8818):
r0 = socket$kcm(0x1e, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)

973.115953ms ago: executing program 4 (id=8819):
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, 0x42, 0x201, 0x0, 0x0, {0x9, 0x0, 0x300}}, 0x14}}, 0x0)
vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0/file0'}, 0x11)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioprio_get$pid(0x3, 0x0)

906.291937ms ago: executing program 9 (id=8821):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x8, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

730.009577ms ago: executing program 9 (id=8822):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

638.949062ms ago: executing program 3 (id=8823):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3)
write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e)

514.316309ms ago: executing program 3 (id=8824):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000001c40)}, 0x20)
timer_create(0x2, 0x0, &(0x7f0000000040))
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@nfs}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000cc0)}, 0x811)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8c8}}, 0x0)
timer_settime(0x0, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0d1}, 0x4004810)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

453.789333ms ago: executing program 5 (id=8825):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

450.373694ms ago: executing program 7 (id=8826):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$nl_audit(0x10, 0x3, 0x9)

299.255042ms ago: executing program 9 (id=8827):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)

298.944052ms ago: executing program 5 (id=8828):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e5", 0x1, 0x24008010, &(0x7f000005ffe4)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0xfc, 0xfe, 0x1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0xe)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xe000000f})
shutdown(0xffffffffffffffff, 0x1)
socket$unix(0x1, 0x5, 0x0)
getrlimit(0x5, &(0x7f0000000080))
close_range(r0, 0xffffffffffffffff, 0x40000000000000)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = dup(0xffffffffffffffff)
write$UHID_INPUT(r3, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)
r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, {0x0, r7}})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r7)
r8 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}, {@inode32}]})
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x1, 0x2)
fchdir(r9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r9, 0x0, 0x3, &(0x7f0000000000)=',}\x00'}, 0x30)

286.975643ms ago: executing program 3 (id=8829):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007)

252.384045ms ago: executing program 5 (id=8830):
flistxattr(0xffffffffffffffff, &(0x7f0000000280)=""/183, 0xb7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
listen(r0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9, {<r12=>0xee00, 0xee00}}, '.\x00'})
sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_getroute={0x34, 0x1a, 0x800, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x0, 0x8, 0xfd, 0x4, 0xc8, 0x2, 0x1000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_UID={0x8, 0x19, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x8050)

245.416436ms ago: executing program 9 (id=8831):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r2 = socket(0x28, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

145.436441ms ago: executing program 3 (id=8832):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
r4 = dup3(r3, r2, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000400)={@empty, 0x33, r5})
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x128f, &(0x7f0000003700)="$eJzs3c9rI1UcAPBv2vTn2qbquroL4kMvihC3PXjyUmQXxIJS7YJ6mrWphqY/aEKhIm49eRL8M0Q9ehPEf6AXL54FQaQXj3sQR9Ika9Ok3a5tWpDP55LHe+/7vm8yj4EZ5jH7r321trpSL69kjRgqFKK4ORLF+ylSDMVwtOzGS3d++fXZd957/835hYVbiyndnn939tWU0vRzP37w6XfP/9S4cuf76R/GYm9maP/Pud/2ru1d3//726jWU7We1jcaKUt3NzYa2d1aJS1X66vllN6uVbJ6JVXX65WtRspqD9pXahubmzspW1+emtzcqtTrKVvfSauVndQopMbWTso+yqrrqVwup6nJ4CyWvrmf53lEno/EaOR5nk/EZFyJx2IqpqMUM/F4PBFPxtV4Kq7F0/FMXD/oddnzBgAAAAAAAAAAAAAAAAAAgP+Xh+z/L9j/DwAAAAAAAAAAAAAAAAAAAIN3dP9/McL3/wEAAAAAAAAAAAAAAAAAAOCCPeT7/0f2/79s/z8AAAAAAAAAAAAAAAAAAAAMwnjrZzGl8Yi1L7aXtpdav636+ZWoRi0qcTNK8Vcc7P5vaZVvv7Fw62Y6MBOvrN1rx9/bXhrujp8dKcVMYbidtSt+diIiUkrd8WMxeTh+LkpxtX/+uVb+FKOH48fjxRea8Z+34stRip8/jI2oxXJEoTOPZvxnsym9/tbCRHf+G81+xxoe4CkBAACA81ZOD/Tev++2O/VtbzW1789Tu2fhhOcDR+7vi3GjeFlHTUd955PVrFarbP3HwmjfcToPWM4yck+hOWQWh2umJ39fbKY55Tid5XbG+eS9TcPncoCnLYyc3OcM5zSKp/4zB1SI3aM1eSniUcf54+tDNePHhk+d9xI9KAy1l1lW2+232Mb7JY3dPB/o3zvar2nspKjjrxmFgV6RuEj/nvTLngkAAAAAAAAAAACPou/bfxMR0fM+4Mc9NZ3Xw7vDe0c+PvuXF3CEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KsAAAD//zIyvvc=")
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
unshare(0x28000600)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2d09000000000000000002000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x99)
r10 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r11 = inotify_init1(0x800)
inotify_add_watch(r11, &(0x7f0000000380)='./file0\x00', 0x10000041)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r12, 0x2000009)
sendfile(r10, r12, 0x0, 0x20000000000006)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

133.181852ms ago: executing program 5 (id=8833):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYBLOB="01030000faffffffffff33"], 0x30}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="1c00000022000000", @ANYRES32, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES32, @ANYRES64], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0e0000000001000000000000", @ANYRES32=r3, @ANYRES64], 0x20)
gettid()

107.084514ms ago: executing program 4 (id=8834):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xa3, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="200025bd7000fcdbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000101480000000a00060008021100000000000a0006000802110000000000050018012f00000008009f00020000000800270002000000050019010d00000a000600ffffffffffff00000800270000000000080022011a030000080022019b01000008002201ba0200000a000600ffffffffff53de4cff0000d03cfee1ff7f00000800a0000900000008002600710900000a0006000802110000010000b2fff37e09bddb6686df965b250519ddb1abd9205bf8004410ab7b17b758615192beaa822c87f0d9658e8aca7ea9aab1000000000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001580)={0x0, "0c6cda5f1f233bd6bb75a2f6b9b8266e"})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, <r11=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="1c00000022000000", @ANYRES32=r6, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES32=r11, @ANYRES64], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="0e0000000001000000000000", @ANYRES32=r5, @ANYRES64], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0900000000006505801e00", @ANYRES32=0x0, @ANYBLOB, @ANYRES64], 0x20)
gettid()

98.184074ms ago: executing program 5 (id=8835):
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x1000000}, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2d09000000000000000002000000080002"], 0x2c}}, 0x0)

82.289265ms ago: executing program 9 (id=8836):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0xffffffff, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}})
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0)
r1 = socket(0xa, 0x80805, 0x0) (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0xffff, 0x3, 0x1, 0x7, 0x7fff, <r2=>0xffffffffffffffff})
r3 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@sysvgroups}]}, 0x1, 0x5e2, &(0x7f0000000600)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5namn3P7RXundn6/5NKZc+5wzvT2uefMuefMDaCy+tN/ahEHI2IyiehNZufz2iPL7J973qM/PzqfPpKo11/7PYkkS8ufn2Q/e7KDuyLixx+SONC2stypmRuXRycmxq9n+4PTVyYHp2ZuHL10ZfTi+MXxq8MvDJ86eeLkqaFjmzqvmwVpZ2+/+37vJyNvfvPVX8nQt7+MJHE6Xs6euPg8tkp/9Dd+J8nKrJ5TW11YSdqyv5PFL3HSXmKF2JD89euIiCeiN9pi4cXrjY9fKbVywLaqJxF1oKIS8Q8VlfcD8mv75dfBtVJ6JUArPDwzNwCwMv7b58YGo6sxNrD3URKLh3WSiNjcyNxS+yLi/r2R2xfujdyObRqHA4rN3oqIJ4viP2nEf190RV8j/mtL4j/tF5zLfqbpr26y/OVDxeIfWmcu/rtWjf9oEv9vLYr/tzdZfv/C5jvdS+K/e7OnBAAAAAAAAJV190xEPF/0+X9tfv5PFMz/6YmI01tQfv+y/ZWf/9cebEExQIGHZyJeKpz/W8tn//a1ZVv/acwH6EguXJoYPxYR/42II9GxJ90fWqWMo58e+LJZXn82/y9/pOXfz+YCZvV40L5n6TFjo9Ojj3veQMTDWxFPFc7/Tebb/6Sg/U/fDybXWcaBZ++ca5a3dvwD26X+dcThwvZ/4a4Vyer35xhs9AcG817BSk9/+Nl3zcrfbPy7xQQ8vrT937t6/Pcli+/XM7XxMo7PtNeb5W22/9+ZvN645UxnlvbB6PT09aGIzuRsW5q6JH1443WG3SiPhzxe0vg/8szq439F/f/uiJhd9n8nfyxdU5z7/989vzarj/4/lCeN/7ENtf8b3xi+0/d9s/LX1/6faLT1R7IU438w54s8TDuXpheEY3tRVqvrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7QS0i9kVSG5jfrtUGBiJ6IuJ/sbc2cW1q+rkL1967OpbmNb7/v5Z/02/v3H6Sf/9/36L94WX7xyNif0R83tbd2B84f21irOyTBwAAAAAAAAAAAAAAAAAAgB2ip8n6/9RvbWXXDth27WVXAChNQfz/VEY9gNbT/kN1iX+oLvEP1SX+obrEP1SX+IfqWkf8d7SiHkDraf8BAAAAAGBX2X/o7s9JRMy+2N14pDqzPJ/5we5WK7sCQGnc4geqy9QfqC7X+ECyRn5X04PWOnI1k+cf42AAAAAAAAAAAAAAqJzDB63/h6qy/h+qy/p/qK58/f+hkusBtJ5rfCDWWMlfuP5/zaMAAAAAAAAAAAAAgK00NXPj8ujExPh1G2/sjGq0cqNer99M/wp2Sn3+5Rv5VPidUp9lG/lav/Udlb9DzJbyvgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz4JwAA//+BCiVK") (async, rerun: 32)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000ff5adfffe0000001000000000000000000000000ac1414bb00"/54, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000001000000006c00000000000000ac14143500000000000000000000000000000000020000000000000000000000000000007f000001000000000000000000000000000000006c00000002000000fc0100000000000000000000000000000000000005000200"/500], 0x23c}}, 0x0) (async)
r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async)
sendfile(r3, r3, 0x0, 0x81)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080))
setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000380)=0x60, 0x4)
write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) (async)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x20040850)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r9}, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x8, 0x1, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) (async, rerun: 32)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000100)=0xffff0080) (rerun: 32)
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000000)=0x1)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000800))
r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x1fd, &(0x7f0000000480)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x8, 0xffff, r11, &(0x7f00000000c0)='!', 0x1}])

16.067928ms ago: executing program 9 (id=8837):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

15.725009ms ago: executing program 5 (id=8838):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

0s ago: executing program 4 (id=8839):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000001c40)}, 0x20)
timer_create(0x2, 0x0, &(0x7f0000000040))
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@nfs}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000cc0)}, 0x811)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8c8}}, 0x0)
timer_settime(0x0, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0d1}, 0x4004810)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ce: batadv_slave_0
[  546.135493][T28181] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.147795][ T1907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.155958][ T1907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.171670][T29098] siw: device registration error -23
[  546.193189][ T1907] veth0_virt_wifi: left promiscuous mode
[  546.199173][ T1907] veth1_macvtap: left promiscuous mode
[  546.206710][ T1907] veth0_macvtap: left promiscuous mode
[  546.216290][ T1907] veth1_vlan: left promiscuous mode
[  546.225034][ T1907] veth0_vlan: left promiscuous mode
[  546.234115][T29107] loop3: detected capacity change from 0 to 256
[  546.359109][ T1907] team0 (unregistering): Port device team_slave_1 removed
[  546.372401][ T1907] team0 (unregistering): Port device team_slave_0 removed
[  546.420737][T29113] loop3: detected capacity change from 0 to 2048
[  546.459632][ T3314]  loop3: p3 < > p4 < >
[  546.463887][ T3314] loop3: partition table partially beyond EOD, truncated
[  546.501366][T29037] chnl_net:caif_netlink_parms(): no params data found
[  546.560483][ T3314] loop3: p3 start 4284289 is beyond EOD, truncated
[  546.662120][T29113]  loop3: p3 < > p4 < >
[  546.666528][T29113] loop3: partition table partially beyond EOD, truncated
[  546.693020][T29037] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.700222][T29113] loop3: p3 start 4284289 is beyond EOD, truncated
[  546.701062][T29037] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.746576][T29037] bridge_slave_0: entered allmulticast mode
[  546.755923][T29037] bridge_slave_0: entered promiscuous mode
[  546.763838][T29037] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.771208][T29037] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.779860][T29037] bridge_slave_1: entered allmulticast mode
[  546.786769][T29037] bridge_slave_1: entered promiscuous mode
[  546.836859][T29037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.862785][T29037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.885928][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  546.912632][T29037] team0: Port device team_slave_0 added
[  546.926061][T29037] team0: Port device team_slave_1 added
[  546.926998][T29145] __nla_validate_parse: 4 callbacks suppressed
[  546.927078][T29145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8336'.
[  546.983220][T29037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.989121][T29145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8336'.
[  546.990603][T29037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.990643][T29037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.994913][T29037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  547.047700][T29037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  547.075733][T29037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  547.137715][T29037] hsr_slave_0: entered promiscuous mode
[  547.163321][T29037] hsr_slave_1: entered promiscuous mode
[  547.172025][T29159] loop4: detected capacity change from 0 to 256
[  547.178873][T29159] vfat: Bad value for 'uni_xlate'
[  547.192823][T29037] debugfs: 'hsr0' already exists in 'hsr'
[  547.198748][T29037] Cannot create hsr debugfs directory
[  547.378826][T29181] FAULT_INJECTION: forcing a failure.
[  547.378826][T29181] name failslab, interval 1, probability 0, space 0, times 0
[  547.391993][T29181] CPU: 0 UID: 0 PID: 29181 Comm: syz.4.8345 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  547.392081][T29181] Tainted: [W]=WARN
[  547.392146][T29181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  547.392159][T29181] Call Trace:
[  547.392167][T29181]  <TASK>
[  547.392175][T29181]  __dump_stack+0x1d/0x30
[  547.392205][T29181]  dump_stack_lvl+0x95/0xd0
[  547.392252][T29181]  dump_stack+0x15/0x1b
[  547.392277][T29181]  should_fail_ex+0x263/0x280
[  547.392309][T29181]  should_failslab+0x8c/0xb0
[  547.392336][T29181]  __kmalloc_cache_node_noprof+0x69/0x4a0
[  547.392388][T29181]  ? __get_vm_area_node+0x106/0x1d0
[  547.392419][T29181]  __get_vm_area_node+0x106/0x1d0
[  547.392558][T29181]  __vmalloc_node_range_noprof+0x291/0x12b0
[  547.392593][T29181]  ? bpf_prog_alloc_no_stats+0x47/0x380
[  547.392642][T29181]  ? __rcu_read_unlock+0x4e/0x70
[  547.392773][T29181]  ? avc_has_perm_noaudit+0xab/0x130
[  547.392826][T29181]  ? bpf_prog_alloc_no_stats+0x47/0x380
[  547.392871][T29181]  __vmalloc_noprof+0xa4/0xf0
[  547.392902][T29181]  ? bpf_prog_alloc_no_stats+0x47/0x380
[  547.392973][T29181]  bpf_prog_alloc_no_stats+0x47/0x380
[  547.393087][T29181]  ? bpf_prog_alloc+0x2a/0x150
[  547.393129][T29181]  bpf_prog_alloc+0x3c/0x150
[  547.393185][T29181]  bpf_prog_load+0x506/0x1140
[  547.393237][T29181]  ? security_bpf+0x2b/0x90
[  547.393281][T29181]  __sys_bpf+0x469/0x7b0
[  547.393312][T29181]  __x64_sys_bpf+0x41/0x50
[  547.393358][T29181]  x64_sys_call+0x28e1/0x3000
[  547.393386][T29181]  do_syscall_64+0xc0/0x2a0
[  547.393424][T29181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.393454][T29181] RIP: 0033:0x7fe8c904acb9
[  547.393474][T29181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.393644][T29181] RSP: 002b:00007fe8c7aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  547.393676][T29181] RAX: ffffffffffffffda RBX: 00007fe8c92c5fa0 RCX: 00007fe8c904acb9
[  547.393696][T29181] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  547.393715][T29181] RBP: 00007fe8c7aa7090 R08: 0000000000000000 R09: 0000000000000000
[  547.393759][T29181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.393776][T29181] R13: 00007fe8c92c6038 R14: 00007fe8c92c5fa0 R15: 00007ffef7ffed08
[  547.393803][T29181]  </TASK>
[  547.393814][T29181] syz.4.8345: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  547.648772][T29181] CPU: 0 UID: 0 PID: 29181 Comm: syz.4.8345 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  547.648815][T29181] Tainted: [W]=WARN
[  547.648825][T29181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  547.648896][T29181] Call Trace:
[  547.648906][T29181]  <TASK>
[  547.648915][T29181]  __dump_stack+0x1d/0x30
[  547.648946][T29181]  dump_stack_lvl+0x95/0xd0
[  547.648975][T29181]  dump_stack+0x15/0x1b
[  547.649009][T29181]  warn_alloc+0x145/0x1c0
[  547.649080][T29181]  __vmalloc_node_range_noprof+0x2b6/0x12b0
[  547.649112][T29181]  ? __rcu_read_unlock+0x4e/0x70
[  547.649141][T29181]  ? avc_has_perm_noaudit+0xab/0x130
[  547.649184][T29181]  ? bpf_prog_alloc_no_stats+0x47/0x380
[  547.649224][T29181]  __vmalloc_noprof+0xa4/0xf0
[  547.649272][T29181]  ? bpf_prog_alloc_no_stats+0x47/0x380
[  547.649387][T29181]  bpf_prog_alloc_no_stats+0x47/0x380
[  547.649431][T29181]  ? bpf_prog_alloc+0x2a/0x150
[  547.649528][T29181]  bpf_prog_alloc+0x3c/0x150
[  547.649562][T29181]  bpf_prog_load+0x506/0x1140
[  547.649642][T29181]  ? security_bpf+0x2b/0x90
[  547.649678][T29181]  __sys_bpf+0x469/0x7b0
[  547.649711][T29181]  __x64_sys_bpf+0x41/0x50
[  547.649746][T29181]  x64_sys_call+0x28e1/0x3000
[  547.649780][T29181]  do_syscall_64+0xc0/0x2a0
[  547.649817][T29181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.649847][T29181] RIP: 0033:0x7fe8c904acb9
[  547.649936][T29181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.649961][T29181] RSP: 002b:00007fe8c7aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  547.649989][T29181] RAX: ffffffffffffffda RBX: 00007fe8c92c5fa0 RCX: 00007fe8c904acb9
[  547.650009][T29181] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  547.650026][T29181] RBP: 00007fe8c7aa7090 R08: 0000000000000000 R09: 0000000000000000
[  547.650063][T29181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.650081][T29181] R13: 00007fe8c92c6038 R14: 00007fe8c92c5fa0 R15: 00007ffef7ffed08
[  547.650108][T29181]  </TASK>
[  547.859797][T29181] Mem-Info:
[  547.862953][T29181] active_anon:28079 inactive_anon:1 isolated_anon:0
[  547.862953][T29181]  active_file:26000 inactive_file:2906 isolated_file:0
[  547.862953][T29181]  unevictable:1527 dirty:392 writeback:0
[  547.862953][T29181]  slab_reclaimable:3965 slab_unreclaimable:18464
[  547.862953][T29181]  mapped:31732 shmem:19086 pagetables:2113
[  547.862953][T29181]  sec_pagetables:0 bounce:0
[  547.862953][T29181]  kernel_misc_reclaimable:0
[  547.862953][T29181]  free:1851083 free_pcp:9288 free_cma:0
[  547.910900][T29181] Node 0 active_anon:112084kB inactive_anon:4kB active_file:104000kB inactive_file:11624kB unevictable:6108kB isolated(anon):0kB isolated(file):0kB mapped:126928kB dirty:1568kB writeback:0kB shmem:76344kB kernel_stack:4720kB pagetables:8452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  547.939827][T29181] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  547.972727][T29181] lowmem_reserve[]: 0 2879 7858 7858
[  547.978684][T29181] Node 0 DMA32 free:2945392kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949020kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB
[  548.012913][T29181] lowmem_reserve[]: 0 0 4978 4978
[  548.018079][T29181] Node 0 Normal free:4443580kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112316kB inactive_anon:4kB active_file:104000kB inactive_file:11624kB unevictable:6108kB writepending:1568kB zspages:0kB present:5242880kB managed:5098240kB mlocked:6108kB bounce:0kB free_pcp:33380kB local_pcp:4764kB free_cma:0kB
[  548.053087][T29181] lowmem_reserve[]: 0 0 0 0
[  548.057697][T29181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  548.070973][T29181] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945392kB
[  548.087592][T29181] Node 0 Normal: 1609*4kB (UM) 1716*8kB (UME) 523*16kB (UME) 395*32kB (UME) 654*64kB (UME) 559*128kB (UM) 362*256kB (UM) 202*512kB (UM) 107*1024kB (UME) 73*2048kB (UME) 936*4096kB (UM) = 4443604kB
[  548.107928][T29181] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  548.117664][T29181] 47972 total pagecache pages
[  548.122796][T29181] 1 pages in swap cache
[  548.126997][T29181] Free swap  = 124992kB
[  548.131338][T29181] Total swap = 124996kB
[  548.135720][T29181] 2097051 pages RAM
[  548.139774][T29181] 0 pages HighMem/MovableOnly
[  548.144949][T29181] 81396 pages reserved
[  548.152456][T29213] loop3: detected capacity change from 0 to 256
[  548.160059][T29213] vfat: Bad value for 'uni_xlate'
[  548.219870][T29218] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8347'.
[  548.315547][T29228] siw: device registration error -23
[  548.460221][T29037] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  548.493426][T29254] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8358'.
[  548.495597][T29037] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  548.498055][T29037] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  548.518647][T29037] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  548.522654][T29254] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8358'.
[  548.522676][T29254] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8358'.
[  548.523377][T29254] netlink: 'syz.9.8358': attribute type 10 has an invalid length.
[  548.541364][T29254] rdma_rxe: rxe_newlink: failed to add syz_tun
[  548.585111][T29037] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.593859][ T3408] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0
[  548.594389][ T3408] hid-generic 0000:0000:0000.0025: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  548.597544][T29270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8357'.
[  548.611798][T29037] 8021q: adding VLAN 0 to HW filter on device team0
[  548.615651][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.615695][ T7325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.622847][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.622993][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.760416][T29037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  548.975575][T29037] veth0_vlan: entered promiscuous mode
[  548.978475][T29037] veth1_vlan: entered promiscuous mode
[  548.997336][T29037] veth0_macvtap: entered promiscuous mode
[  549.000219][T29037] veth1_macvtap: entered promiscuous mode
[  549.012376][T29037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.013872][T29037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.028434][ T7325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.028532][ T7325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.028572][ T7325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.028734][ T7325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.137858][T29322] loop5: detected capacity change from 0 to 256
[  549.257994][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  549.258013][   T29] audit: type=1400 audit(1768980916.927:4993): avc:  denied  { write } for  pid=29332 comm="syz.3.8362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  549.292277][T29333] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  549.307619][T29337] siw: device registration error -23
[  549.372922][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8364'.
[  549.599018][T29352] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  549.697207][   T29] audit: type=1326 audit(1768980917.367:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  549.831082][T29352] EXT4-fs (loop9): 1 truncate cleaned up
[  549.859386][T29352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  549.938922][   T29] audit: type=1326 audit(1768980917.407:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  549.962895][   T29] audit: type=1326 audit(1768980917.407:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  549.987102][   T29] audit: type=1326 audit(1768980917.407:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  550.011280][   T29] audit: type=1326 audit(1768980917.407:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  550.035519][   T29] audit: type=1326 audit(1768980917.407:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  550.301808][T29327] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.8361: inode has both inline data and extents flags
[  550.348214][T29352] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.387215][T29327] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.8361: couldn't read orphan inode 15 (err -117)
[  550.432572][   T29] audit: type=1326 audit(1768980918.097:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  550.456685][   T29] audit: type=1326 audit(1768980918.107:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29353 comm="syz.3.8367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f06bacb9 code=0x7ffc0000
[  550.492238][T29327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.545880][T29384] set_capacity_and_notify: 3 callbacks suppressed
[  550.545957][T29384] loop9: detected capacity change from 0 to 1024
[  550.571675][T28181] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.600464][T29384] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  550.636140][T29384] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.8370: Invalid block bitmap block 0 in block_group 0
[  550.690977][T29384] Quota error (device loop9): write_blk: dquota write failed
[  550.698632][T29384] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.8370: Failed to acquire dquot type 0
[  550.712236][T29400] loop4: detected capacity change from 0 to 256
[  550.723427][T29400] vfat: Bad value for 'uni_xlate'
[  550.771712][T29384] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.8370: Freeing blocks not in datazone - block = 0, count = 4096
[  550.806320][T29384] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.8370: Invalid inode bitmap blk 0 in block_group 0
[  550.819611][ T4310] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:19: Failed to release dquot type 0
[  550.862312][T29384] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem
[  550.884910][T29384] EXT4-fs (loop9): 1 orphan inode deleted
[  550.908151][T29384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.933105][T29415] loop3: detected capacity change from 0 to 256
[  550.943701][T29418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8376'.
[  550.952892][T29418] bond1: option mode: unable to set because the bond device has slaves
[  550.957888][T29415] vfat: Bad value for 'uni_xlate'
[  550.994847][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8376'.
[  551.013890][T29418] netlink: 'syz.4.8376': attribute type 10 has an invalid length.
[  551.050401][T29425] 9pnet_fd: Insufficient options for proto=fd
[  551.381196][T26369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.420923][T29459] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  551.477565][T29462] loop9: detected capacity change from 0 to 256
[  551.614250][T29469] loop9: detected capacity change from 0 to 256
[  551.643818][T29469] vfat: Bad value for 'uni_xlate'
[  552.055739][T29514] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  552.101707][T29514] __nla_validate_parse: 2 callbacks suppressed
[  552.101728][T29514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8390'.
[  552.666014][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8394'.
[  552.898477][T29553] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  552.941924][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8396'.
[  553.004107][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8397'.
[  553.051675][T29557] bond1: option mode: unable to set because the bond device has slaves
[  553.097539][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8397'.
[  553.106911][T29557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8397'.
[  553.157839][T29557] netlink: 'syz.4.8397': attribute type 10 has an invalid length.
[  553.377379][T29577] siw: device registration error -23
[  553.503005][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8409'.
[  553.517526][T29585] bond1: option mode: unable to set because the bond device has slaves
[  553.527840][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8409'.
[  553.537420][T29585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8409'.
[  553.549060][T29585] netlink: 'syz.4.8409': attribute type 10 has an invalid length.
[  553.647215][T29575] loop9: detected capacity change from 0 to 512
[  553.760202][T29575] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.8404: inode has both inline data and extents flags
[  553.853691][T29575] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8404: couldn't read orphan inode 15 (err -117)
[  553.902857][T29575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  554.137337][T26369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.216777][T29613] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  554.224386][T29613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8419'.
[  554.507002][T29628] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  554.516984][T29624] bond2: option mode: unable to set because the bond device is up
[  554.527289][T29630] netlink: 'syz.9.8424': attribute type 10 has an invalid length.
[  554.536652][T29630] rdma_rxe: rxe_newlink: failed to add syz_tun
[  554.544778][T29624] netlink: 'syz.3.8422': attribute type 10 has an invalid length.
[  554.715484][T29642] siw: device registration error -23
[  554.735823][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  554.735843][   T29] audit: type=1326 audit(1768980922.407:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  554.772797][T29644] loop4: detected capacity change from 0 to 512
[  554.833195][T29648] loop9: detected capacity change from 0 to 256
[  554.872666][T29648] loop9: detected capacity change from 0 to 512
[  554.879621][   T29] audit: type=1326 audit(1768980922.407:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  554.903428][T29648] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  554.904256][   T29] audit: type=1326 audit(1768980922.417:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  554.938302][   T29] audit: type=1326 audit(1768980922.417:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  554.962649][   T29] audit: type=1326 audit(1768980922.417:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  554.987048][   T29] audit: type=1326 audit(1768980922.417:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  555.010815][   T29] audit: type=1326 audit(1768980922.417:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  555.035186][   T29] audit: type=1326 audit(1768980922.417:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  555.059125][   T29] audit: type=1326 audit(1768980922.417:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  555.083255][   T29] audit: type=1326 audit(1768980922.417:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29633 comm="syz.9.8426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  555.111457][T29648] EXT4-fs (loop9): 1 truncate cleaned up
[  555.117840][T29648] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.238363][T29648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.615907][T29666] 8021q: adding VLAN 0 to HW filter on device bond1
[  555.645163][T29666] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.654265][T29666] bond1: (slave bond0): Enslaving as an active interface with an up link
[  555.664664][T29666] netlink: 'syz.5.8436': attribute type 10 has an invalid length.
[  555.672881][T29666] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.680625][T29666] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.691516][T29666] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.698817][T29666] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.706633][T29666] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.708840][T29669] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  555.714367][T29666] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.731361][T29666] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  555.741450][T29670] bridge0: port 3(syz_tun) entered blocking state
[  555.748373][T29670] bridge0: port 3(syz_tun) entered disabled state
[  555.755372][T29670] syz_tun: entered allmulticast mode
[  555.761828][T29670] syz_tun: entered promiscuous mode
[  555.767454][T29670] bridge0: port 3(syz_tun) entered blocking state
[  555.773990][T29670] bridge0: port 3(syz_tun) entered forwarding state
[  555.784625][T29666] rdma_rxe: rxe_newlink: failed to add syz_tun
[  555.824234][T29672] loop5: detected capacity change from 0 to 256
[  555.863802][T29672] loop5: detected capacity change from 0 to 512
[  555.872533][T29672] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  555.887190][T29672] EXT4-fs (loop5): 1 truncate cleaned up
[  555.893699][T29672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.927114][T29672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.237167][T29661] syz.9.8435 (29661) used greatest stack depth: 7016 bytes left
[  556.261978][T29690] loop9: detected capacity change from 0 to 1024
[  556.270076][T29690] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  556.282969][T29690] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.8445: Invalid block bitmap block 0 in block_group 0
[  556.297405][T29690] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.8445: Failed to acquire dquot type 0
[  556.309771][T29690] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.8445: Freeing blocks not in datazone - block = 0, count = 4096
[  556.329716][T29690] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.8445: Invalid inode bitmap blk 0 in block_group 0
[  556.343585][T29690] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem
[  556.352601][ T1907] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0
[  556.364539][T29690] EXT4-fs (loop9): 1 orphan inode deleted
[  556.371207][T29690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.450597][T29699] FAULT_INJECTION: forcing a failure.
[  556.450597][T29699] name failslab, interval 1, probability 0, space 0, times 0
[  556.463813][T29699] CPU: 0 UID: 0 PID: 29699 Comm: syz.3.8447 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  556.463857][T29699] Tainted: [W]=WARN
[  556.463867][T29699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  556.463884][T29699] Call Trace:
[  556.463915][T29699]  <TASK>
[  556.463923][T29699]  __dump_stack+0x1d/0x30
[  556.463949][T29699]  dump_stack_lvl+0x95/0xd0
[  556.464003][T29699]  dump_stack+0x15/0x1b
[  556.464028][T29699]  should_fail_ex+0x263/0x280
[  556.464116][T29699]  should_failslab+0x8c/0xb0
[  556.464138][T29699]  kmem_cache_alloc_noprof+0x68/0x490
[  556.464159][T29699]  ? do_fcntl_add_lease+0x48/0x2b0
[  556.464185][T29699]  do_fcntl_add_lease+0x48/0x2b0
[  556.464280][T29699]  fcntl_setlease+0xb7/0xe0
[  556.464304][T29699]  do_fcntl+0x5de/0xf80
[  556.464341][T29699]  __se_sys_fcntl+0xb1/0x120
[  556.464377][T29699]  __x64_sys_fcntl+0x43/0x50
[  556.464457][T29699]  x64_sys_call+0x2d6f/0x3000
[  556.464492][T29699]  do_syscall_64+0xc0/0x2a0
[  556.464527][T29699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.464590][T29699] RIP: 0033:0x7f47f06bacb9
[  556.464612][T29699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.464637][T29699] RSP: 002b:00007f47ef117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  556.464664][T29699] RAX: ffffffffffffffda RBX: 00007f47f0935fa0 RCX: 00007f47f06bacb9
[  556.464680][T29699] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000004
[  556.464771][T29699] RBP: 00007f47ef117090 R08: 0000000000000000 R09: 0000000000000000
[  556.464789][T29699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.464805][T29699] R13: 00007f47f0936038 R14: 00007f47f0935fa0 R15: 00007ffc5982d0d8
[  556.464876][T29699]  </TASK>
[  556.706975][T26369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.717222][T29695] 8021q: adding VLAN 0 to HW filter on device bond1
[  556.728199][T29704] netlink: 'syz.0.8448': attribute type 10 has an invalid length.
[  556.775016][ T7325] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  556.788002][T29701] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.797027][ T7325] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  556.801088][T29701] bond1: (slave bond0): Enslaving as an active interface with an up link
[  556.817349][T29712] netlink: 'syz.3.8450': attribute type 10 has an invalid length.
[  556.820894][ T7325] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  556.837137][T29704] bridge0: port 3(syz_tun) entered disabled state
[  556.843819][T29704] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.851068][T29704] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.862636][T29695] syz1: rxe_newlink: already configured on syz_tun
[  556.897307][T29714] siw: device registration error -23
[  556.936746][T29720] loop9: detected capacity change from 0 to 2048
[  556.981237][ T3313] Alternate GPT is invalid, using primary GPT.
[  556.987612][ T3313]  loop9: p1 p2 p3
[  556.991486][ T3313] loop9: partition table partially beyond EOD, truncated
[  557.018260][T29727] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  557.025973][T29720] Alternate GPT is invalid, using primary GPT.
[  557.032555][T29720]  loop9: p1 p2 p3
[  557.036485][T29720] loop9: partition table partially beyond EOD, truncated
[  557.091314][T19277] udevd[19277]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  557.103199][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  557.113649][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  557.208973][T29738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  557.239510][T29741] __nla_validate_parse: 21 callbacks suppressed
[  557.239532][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8463'.
[  557.258190][T29741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8463'.
[  557.267174][T29741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8463'.
[  557.303204][T29741] netlink: 'syz.0.8463': attribute type 10 has an invalid length.
[  557.317318][T29750] loop3: detected capacity change from 0 to 512
[  557.330319][T29750] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  557.343925][T29750] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  557.346019][ T3314] udevd[3314]: incorrect jbd checksum on /dev/loop3
[  557.365366][T29741] syz1: rxe_newlink: already configured on syz_tun
[  557.404904][ T3314] udevd[3314]: incorrect jbd checksum on /dev/loop3
[  557.450247][T29757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8468'.
[  557.508795][T29757] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8468'.
[  557.860572][T29796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8482'.
[  557.869793][T29796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8482'.
[  557.895647][T29796] netlink: 'syz.9.8482': attribute type 10 has an invalid length.
[  558.006115][T29796] rdma_rxe: rxe_newlink: failed to add syz_tun
[  558.052810][T29804] siw: device registration error -23
[  558.265787][T29816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8489'.
[  558.327079][T29816] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8489'.
[  558.485832][T29822] loop5: detected capacity change from 0 to 1024
[  558.496751][T29822] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  558.508927][T29822] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.8491: Invalid block bitmap block 0 in block_group 0
[  558.529597][T29822] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.8491: Failed to acquire dquot type 0
[  558.560664][T29822] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.8491: Freeing blocks not in datazone - block = 0, count = 4096
[  558.602024][T29827] tunl0: entered promiscuous mode
[  558.610010][T29827] syz_tun: left allmulticast mode
[  558.615316][T29827] syz_tun: left promiscuous mode
[  558.620647][T29827] bridge0: port 3(syz_tun) entered disabled state
[  558.627935][T29822] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.8491: Invalid inode bitmap blk 0 in block_group 0
[  558.641403][T29827] bridge_slave_1: left allmulticast mode
[  558.647232][T29827] bridge_slave_1: left promiscuous mode
[  558.653167][T29827] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.660726][T29822] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  558.660834][ T7314] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0
[  558.681869][T29822] EXT4-fs (loop5): 1 orphan inode deleted
[  558.703751][T29827] bridge_slave_0: left allmulticast mode
[  558.709522][T29827] bridge_slave_0: left promiscuous mode
[  558.710799][T29830] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  558.715410][T29827] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.730180][T29822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.745434][T29827] bond0: (slave bridge0): Releasing backup interface
[  558.751543][T29830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8494'.
[  558.770811][T29832] siw: device registration error -23
[  558.814944][T29037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.860527][T29836] loop5: detected capacity change from 0 to 256
[  558.867589][T29836] vfat: Bad value for 'uni_xlate'
[  558.998099][T29842] siw: device registration error -23
[  559.070741][T29850] loop3: detected capacity change from 0 to 256
[  559.080147][T29850] vfat: Bad value for 'uni_xlate'
[  559.193351][T29861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  559.246151][T29861] loop9: detected capacity change from 0 to 512
[  559.255493][T29861] EXT4-fs warning (device loop9): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  559.269074][T29861] EXT4-fs (loop9): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  559.281353][ T3314] udevd[3314]: incorrect jbd checksum on /dev/loop9
[  559.542390][T29878] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  559.552710][T29876] siw: device registration error -23
[  559.755025][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  559.755132][   T29] audit: type=1326 audit(1768980927.427:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  559.854134][   T29] audit: type=1326 audit(1768980927.457:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f197c57b58e code=0x7ffc0000
[  559.878183][   T29] audit: type=1326 audit(1768980927.457:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f197c57b58e code=0x7ffc0000
[  559.902365][   T29] audit: type=1326 audit(1768980927.457:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  559.926309][   T29] audit: type=1326 audit(1768980927.457:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  559.950629][   T29] audit: type=1326 audit(1768980927.457:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  559.974619][   T29] audit: type=1326 audit(1768980927.457:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29881 comm="syz.9.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  560.013320][T29885] netlink: 'syz.0.8515': attribute type 10 has an invalid length.
[  560.028528][T29885] syz1: rxe_newlink: already configured on syz_tun
[  560.092054][T29889] loop4: detected capacity change from 0 to 256
[  560.121467][T29892] vfat: Bad value for 'uni_xlate'
[  560.154001][T29889] vfat: Bad value for 'uni_xlate'
[  560.184688][   T29] audit: type=1400 audit(1768980927.857:5101): avc:  denied  { remount } for  pid=29894 comm="syz.0.8519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  560.219447][T29896] vfat: Bad value for 'uni_xlate'
[  560.402621][   T29] audit: type=1326 audit(1768980928.077:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  560.495969][   T29] audit: type=1326 audit(1768980928.077:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.4.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c900b58e code=0x7ffc0000
[  560.521497][T29917] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  560.717490][ T3408] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0
[  560.731074][ T3408] hid-generic 0000:0000:0000.0026: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  561.239875][T29938] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  561.328323][T29941] set_capacity_and_notify: 2 callbacks suppressed
[  561.328404][T29941] loop5: detected capacity change from 0 to 256
[  561.501625][T29941] vfat: Bad value for 'uni_xlate'
[  561.720327][T29947] loop4: detected capacity change from 0 to 128
[  561.767594][T29946] loop4: detected capacity change from 0 to 512
[  561.777220][T29946] EXT4-fs: Ignoring removed nobh option
[  561.783035][T29946] ext4: Unknown parameter 'grpquota..'
[  562.098242][T29970] bond1: option mode: unable to set because the bond device has slaves
[  562.108889][T29970] netlink: 'syz.9.8547': attribute type 10 has an invalid length.
[  562.118959][T29970] rdma_rxe: rxe_newlink: failed to add syz_tun
[  562.164079][ T3415] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  562.177511][ T3415] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  562.253657][T29980] bridge_slave_0: left allmulticast mode
[  562.259663][T29980] bridge_slave_0: left promiscuous mode
[  562.265596][T29980] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.497739][T29992] lo speed is unknown, defaulting to 1000
[  562.661258][T29997] loop5: detected capacity change from 0 to 256
[  562.698559][T29997] loop5: detected capacity change from 0 to 512
[  562.707602][T29997] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  562.733874][T29997] EXT4-fs (loop5): 1 truncate cleaned up
[  562.749090][T29997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.793234][T29997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.513553][T30042] siw: device registration error -23
[  563.542499][T30044] loop3: detected capacity change from 0 to 512
[  563.653489][T30047] loop9: detected capacity change from 0 to 2048
[  563.739612][ T3314]  loop9: p1 p2
[  563.746095][T30047]  loop9: p1 p2
[  563.763930][ T3009]  loop9: p1 p2
[  563.811889][T30068] loop3: detected capacity change from 0 to 256
[  563.842037][T30071] __nla_validate_parse: 9 callbacks suppressed
[  563.842055][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8567'.
[  563.883428][T30068] loop3: detected capacity change from 0 to 512
[  563.895997][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  563.908640][T19277] udevd[19277]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  563.909371][T30071] bond1: option mode: unable to set because the bond device has slaves
[  563.921988][T30068] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  563.945528][T19277] udevd[19277]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  563.959515][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  563.984130][T30068] EXT4-fs (loop3): 1 truncate cleaned up
[  563.995046][T30068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.007463][T30078] loop5: detected capacity change from 0 to 256
[  564.015021][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8567'.
[  564.024186][T30071] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8567'.
[  564.066915][T30078] vfat: Bad value for 'uni_xlate'
[  564.103992][T30080] netlink: 'syz.9.8567': attribute type 10 has an invalid length.
[  564.126531][T30068] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.126641][T30071] rdma_rxe: rxe_newlink: failed to add syz_tun
[  564.155550][T30081] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8569'.
[  564.164783][T30081] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8569'.
[  564.173807][T30081] netlink: 'syz.4.8569': attribute type 6 has an invalid length.
[  564.181584][T30081] netlink: 'syz.4.8569': attribute type 5 has an invalid length.
[  564.189370][T30081] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8569'.
[  564.530343][T30117] veth1_to_bond: entered allmulticast mode
[  564.566235][T30117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.585556][T30117] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  564.641698][T30117] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  564.665845][T30122] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  564.681108][T30117] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[  564.693709][T30117] EXT4-fs (loop5): This should not happen!! Data will be lost
[  564.693709][T30117] 
[  564.703667][T30117] EXT4-fs (loop5): Total free blocks count 0
[  564.709847][T30117] EXT4-fs (loop5): Free/Dirty block details
[  564.715780][T30117] EXT4-fs (loop5): free_blocks=65280
[  564.721286][T30117] EXT4-fs (loop5): dirty_blocks=31
[  564.726616][T30117] EXT4-fs (loop5): Block reservation details
[  564.732788][T30117] EXT4-fs (loop5): i_reserved_data_blocks=31
[  564.740042][T30122] EXT4-fs (loop4): 1 truncate cleaned up
[  564.740817][T30117] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  564.758553][T30122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.787642][T30116] veth1_to_bond: left allmulticast mode
[  564.823373][T30122] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.993914][ T3408] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  565.017889][ T3408] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  565.162265][T30134] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8584'.
[  565.171999][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8584'.
[  565.181074][T30134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8584'.
[  565.192463][T30134] netlink: 'syz.5.8584': attribute type 10 has an invalid length.
[  565.200662][T30134] bridge0: port 3(syz_tun) entered disabled state
[  565.207625][T30134] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.214903][T30134] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.240313][T30134] rdma_rxe: rxe_newlink: failed to add syz_tun
[  565.586835][T30141] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8586'.
[  565.818042][T20714] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000006f)
[  565.826181][T20714] FAT-fs (loop3): Filesystem has been set read-only
[  565.836309][T20714] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000006f)
[  565.988433][   T29] kauditd_printk_skb: 64 callbacks suppressed
[  565.988448][   T29] audit: type=1326 audit(1768980933.657:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  566.052388][T29640]  (unregistering): left promiscuous mode
[  566.058376][T29640] bridge0: port 3() entered disabled state
[  566.145779][   T29] audit: type=1326 audit(1768980933.697:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  566.170354][   T29] audit: type=1326 audit(1768980933.697:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c900b58e code=0x7ffc0000
[  566.194254][   T29] audit: type=1326 audit(1768980933.697:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c900b58e code=0x7ffc0000
[  566.218245][   T29] audit: type=1326 audit(1768980933.697:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  566.242485][   T29] audit: type=1326 audit(1768980933.697:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  566.266380][   T29] audit: type=1326 audit(1768980933.697:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  566.290452][   T29] audit: type=1326 audit(1768980933.697:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30151 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  566.374868][ T7332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.470995][ T7332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.546986][T30163] netlink: 'syz.4.8596': attribute type 1 has an invalid length.
[  566.563073][T30166] set_capacity_and_notify: 5 callbacks suppressed
[  566.563089][T30166] loop5: detected capacity change from 0 to 512
[  566.630564][ T7332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.692832][T30163] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  566.742910][ T7332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.898731][T30187] siw: device registration error -23
[  566.944310][   T29] audit: type=1326 audit(1768980934.617:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30190 comm="syz.5.8603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  567.002999][T30168] lo speed is unknown, defaulting to 1000
[  567.009944][ T7332] bridge_slave_1: left allmulticast mode
[  567.015913][ T7332] bridge_slave_1: left promiscuous mode
[  567.021976][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.035560][   T29] audit: type=1326 audit(1768980934.617:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30190 comm="syz.5.8603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4c228b58e code=0x7ffc0000
[  567.059871][ T7332] bridge_slave_0: left allmulticast mode
[  567.065605][ T7332] bridge_slave_0: left promiscuous mode
[  567.071485][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.131036][T30195] loop5: detected capacity change from 0 to 256
[  567.172141][T30195] loop5: detected capacity change from 0 to 512
[  567.199140][T30195] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  567.235761][T30195] EXT4-fs (loop5): 1 truncate cleaned up
[  567.242202][T30195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  567.371081][ T7332] bond1 (unregistering): Released all slaves
[  567.410566][T30204] loop4: detected capacity change from 0 to 512
[  567.411170][ T7332] bond2 (unregistering): Released all slaves
[  567.455016][ T7332] bond3 (unregistering): Released all slaves
[  567.476981][ T7332] bond4 (unregistering): Released all slaves
[  567.523357][T30195] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.585512][T30207] FAULT_INJECTION: forcing a failure.
[  567.585512][T30207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  567.598930][T30207] CPU: 0 UID: 0 PID: 30207 Comm: syz.5.8610 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  567.598965][T30207] Tainted: [W]=WARN
[  567.598972][T30207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  567.598985][T30207] Call Trace:
[  567.598993][T30207]  <TASK>
[  567.599003][T30207]  __dump_stack+0x1d/0x30
[  567.599070][T30207]  dump_stack_lvl+0x95/0xd0
[  567.599099][T30207]  dump_stack+0x15/0x1b
[  567.599124][T30207]  should_fail_ex+0x263/0x280
[  567.599146][T30207]  should_fail+0xb/0x20
[  567.599163][T30207]  should_fail_usercopy+0x1a/0x20
[  567.599276][T30207]  _copy_to_user+0x20/0xa0
[  567.599310][T30207]  simple_read_from_buffer+0xb5/0x130
[  567.599397][T30207]  proc_fail_nth_read+0x10e/0x150
[  567.599431][T30207]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  567.599458][T30207]  vfs_read+0x1ab/0x7f0
[  567.599499][T30207]  ? _copy_from_user+0x3b/0xb0
[  567.599552][T30207]  ? do_fcntl+0x67e/0xf80
[  567.599678][T30207]  ksys_read+0xdc/0x1a0
[  567.599717][T30207]  __x64_sys_read+0x40/0x50
[  567.599797][T30207]  x64_sys_call+0x2889/0x3000
[  567.599881][T30207]  do_syscall_64+0xc0/0x2a0
[  567.599969][T30207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.599999][T30207] RIP: 0033:0x7fd4c228b58e
[  567.600021][T30207] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  567.600077][T30207] RSP: 002b:00007fd4c0d26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  567.600132][T30207] RAX: ffffffffffffffda RBX: 00007fd4c0d276c0 RCX: 00007fd4c228b58e
[  567.600147][T30207] RDX: 000000000000000f RSI: 00007fd4c0d270a0 RDI: 0000000000000004
[  567.600241][T30207] RBP: 00007fd4c0d27090 R08: 0000000000000000 R09: 0000000000000000
[  567.600256][T30207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.600269][T30207] R13: 00007fd4c2546038 R14: 00007fd4c2545fa0 R15: 00007ffc6c643b08
[  567.600298][T30207]  </TASK>
[  567.885357][T30218] loop5: detected capacity change from 0 to 512
[  567.900801][T30218] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  567.910152][T30218] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  567.990073][T30218] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  568.039605][T30218] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  568.049742][T30218] System zones: 0-2, 18-18, 34-35
[  568.065681][T30218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  568.069410][ T7332] hsr_slave_0: left promiscuous mode
[  568.088731][ T7332] hsr_slave_1: left promiscuous mode
[  568.094608][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.102213][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.112825][ T7332] veth1_macvtap: left promiscuous mode
[  568.118803][ T7332] veth0_macvtap: left promiscuous mode
[  568.124542][ T7332] veth1_vlan: left promiscuous mode
[  568.132566][T30231] loop4: detected capacity change from 0 to 512
[  568.139616][T30218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.148727][ T7332] veth0_vlan: left promiscuous mode
[  568.209727][T30231] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  568.231073][T30218] loop5: detected capacity change from 0 to 128
[  568.238039][T30218] EXT4-fs (loop5): unable to read superblock
[  568.359925][ T7332] team0 (unregistering): Port device team_slave_1 removed
[  568.389918][ T7332] team0 (unregistering): Port device team_slave_0 removed
[  568.431367][T30240] FAULT_INJECTION: forcing a failure.
[  568.431367][T30240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  568.444885][T30240] CPU: 0 UID: 0 PID: 30240 Comm: syz.5.8615 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  568.444967][T30240] Tainted: [W]=WARN
[  568.444975][T30240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  568.444988][T30240] Call Trace:
[  568.444998][T30240]  <TASK>
[  568.445014][T30240]  __dump_stack+0x1d/0x30
[  568.445093][T30240]  dump_stack_lvl+0x95/0xd0
[  568.445116][T30240]  dump_stack+0x15/0x1b
[  568.445175][T30240]  should_fail_ex+0x263/0x280
[  568.445247][T30240]  should_fail+0xb/0x20
[  568.445267][T30240]  should_fail_usercopy+0x1a/0x20
[  568.445312][T30240]  _copy_to_user+0x20/0xa0
[  568.445425][T30240]  simple_read_from_buffer+0xb5/0x130
[  568.445473][T30240]  proc_fail_nth_read+0x10e/0x150
[  568.445502][T30240]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  568.445609][T30240]  vfs_read+0x1ab/0x7f0
[  568.445652][T30240]  ? inet_dgram_connect+0x125/0x1c0
[  568.445756][T30240]  ? __rcu_read_unlock+0x4e/0x70
[  568.445777][T30240]  ? __fget_files+0x184/0x1c0
[  568.445800][T30240]  ? mutex_lock+0x57/0x90
[  568.445828][T30240]  ksys_read+0xdc/0x1a0
[  568.445876][T30240]  __x64_sys_read+0x40/0x50
[  568.445926][T30240]  x64_sys_call+0x2889/0x3000
[  568.446023][T30240]  do_syscall_64+0xc0/0x2a0
[  568.446065][T30240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.446160][T30240] RIP: 0033:0x7fd4c228b58e
[  568.446177][T30240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  568.446202][T30240] RSP: 002b:00007fd4c0ce4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  568.446229][T30240] RAX: ffffffffffffffda RBX: 00007fd4c0ce56c0 RCX: 00007fd4c228b58e
[  568.446249][T30240] RDX: 000000000000000f RSI: 00007fd4c0ce50a0 RDI: 0000000000000005
[  568.446285][T30240] RBP: 00007fd4c0ce5090 R08: 0000000000000000 R09: 0000000000000000
[  568.446299][T30240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.446317][T30240] R13: 00007fd4c2546218 R14: 00007fd4c2546180 R15: 00007ffc6c643b08
[  568.446344][T30240]  </TASK>
[  568.719451][T30168] chnl_net:caif_netlink_parms(): no params data found
[  568.851423][T30253] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8617'.
[  568.915772][T30168] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.923488][T30168] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.973003][T30263] loop5: detected capacity change from 0 to 512
[  568.981643][T30168] bridge_slave_0: entered allmulticast mode
[  568.997116][T30168] bridge_slave_0: entered promiscuous mode
[  569.015589][T30168] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.022747][T30168] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.059358][T30168] bridge_slave_1: entered allmulticast mode
[  569.078614][T30168] bridge_slave_1: entered promiscuous mode
[  569.125261][T30168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.163196][T30168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.208891][T30272] FAULT_INJECTION: forcing a failure.
[  569.208891][T30272] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  569.222649][T30272] CPU: 0 UID: 0 PID: 30272 Comm: syz.9.8621 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  569.222771][T30272] Tainted: [W]=WARN
[  569.222779][T30272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  569.222792][T30272] Call Trace:
[  569.222800][T30272]  <TASK>
[  569.222809][T30272]  __dump_stack+0x1d/0x30
[  569.222843][T30272]  dump_stack_lvl+0x95/0xd0
[  569.222871][T30272]  dump_stack+0x15/0x1b
[  569.222961][T30272]  should_fail_ex+0x263/0x280
[  569.222989][T30272]  should_fail_alloc_page+0xf2/0x100
[  569.223020][T30272]  __alloc_frozen_pages_noprof+0x108/0x350
[  569.223088][T30272]  alloc_pages_mpol+0xb3/0x260
[  569.223129][T30272]  vma_alloc_folio_noprof+0x1a9/0x300
[  569.223189][T30272]  do_wp_page+0xf6d/0x2560
[  569.223221][T30272]  ? css_rstat_updated+0xbb/0x280
[  569.223265][T30272]  ? __rcu_read_lock+0x36/0x50
[  569.223292][T30272]  handle_mm_fault+0x8c7/0x3030
[  569.223358][T30272]  ? mt_find+0x291/0x3b0
[  569.223404][T30272]  do_user_addr_fault+0x3fd/0x1050
[  569.223526][T30272]  exc_page_fault+0x62/0xa0
[  569.223628][T30272]  asm_exc_page_fault+0x26/0x30
[  569.223654][T30272] RIP: 0010:__put_user_4+0xd/0x20
[  569.223687][T30272] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 9d 01 00 90 90 90 90 90 90 90 90 90 90
[  569.223715][T30272] RSP: 0018:ffffc90001fd3d08 EFLAGS: 00050206
[  569.223786][T30272] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000002000
[  569.223802][T30272] RDX: ffff888103484200 RSI: 00000000fffffff2 RDI: 0000000000000000
[  569.223821][T30272] RBP: ffffc90001fd3eb0 R08: 0001c90001fd3cc3 R09: 0000000000000000
[  569.223841][T30272] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  569.223858][T30272] R13: 0000000000000800 R14: 0000000000000000 R15: 00000000fffffff2
[  569.223917][T30272]  __se_sys_move_pages+0xaa8/0x1420
[  569.223949][T30272]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  569.223986][T30272]  ? __fget_files+0x184/0x1c0
[  569.224015][T30272]  ? mutex_lock+0x57/0x90
[  569.224105][T30272]  ? fput+0x8f/0xc0
[  569.224139][T30272]  ? ksys_write+0x194/0x1a0
[  569.224160][T30272]  __x64_sys_move_pages+0x78/0x90
[  569.224192][T30272]  x64_sys_call+0x27c3/0x3000
[  569.224257][T30272]  do_syscall_64+0xc0/0x2a0
[  569.224289][T30272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.224337][T30272] RIP: 0033:0x7f197c5bacb9
[  569.224354][T30272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.224380][T30272] RSP: 002b:00007f197b017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[  569.224407][T30272] RAX: ffffffffffffffda RBX: 00007f197c835fa0 RCX: 00007f197c5bacb9
[  569.224434][T30272] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000
[  569.224509][T30272] RBP: 00007f197b017090 R08: 0000200000000000 R09: 0000000000000000
[  569.224525][T30272] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001
[  569.224539][T30272] R13: 00007f197c836038 R14: 00007f197c835fa0 R15: 00007ffe3fd68108
[  569.224559][T30272]  </TASK>
[  569.228927][T30271] loop5: detected capacity change from 0 to 512
[  569.294364][T30168] team0: Port device team_slave_0 added
[  569.558369][T30271] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  569.597061][T30284] loop9: detected capacity change from 0 to 256
[  569.624795][T30271] netlink: 'syz.5.8620': attribute type 4 has an invalid length.
[  569.654514][T30284] vfat: Bad value for 'uni_xlate'
[  569.677895][T30168] team0: Port device team_slave_1 added
[  569.689512][T30271] netlink: 'syz.5.8620': attribute type 4 has an invalid length.
[  569.755637][T30168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.763256][T30168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  569.789435][T30168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.800738][T29037] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  569.850032][T30168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.857179][T30168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  569.883724][T30168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.958167][T30300] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8625'.
[  570.009007][T30307] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8625'.
[  570.018705][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8625'.
[  570.079633][T30300] netlink: 'syz.9.8625': attribute type 10 has an invalid length.
[  570.092564][T30168] hsr_slave_0: entered promiscuous mode
[  570.098810][T30168] hsr_slave_1: entered promiscuous mode
[  570.110483][T30168] debugfs: 'hsr0' already exists in 'hsr'
[  570.116280][T30168] Cannot create hsr debugfs directory
[  570.123172][T30300] rdma_rxe: rxe_newlink: failed to add syz_tun
[  570.545240][T30328] vfat: Bad value for 'uni_xlate'
[  570.745376][T30168] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  570.752791][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119ecc600: rx timeout, send abort
[  570.830214][T30168] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  570.855848][T30168] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  570.887399][T30168] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  570.941700][T30344] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  570.997850][T30168] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.005668][T30344] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.8631: Invalid block bitmap block 0 in block_group 0
[  571.031628][T30344] __quota_error: 13 callbacks suppressed
[  571.031649][T30344] Quota error (device loop5): write_blk: dquota write failed
[  571.045060][T30344] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  571.066682][T30168] 8021q: adding VLAN 0 to HW filter on device team0
[  571.097359][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.104698][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.106156][T30344] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.8631: Failed to acquire dquot type 0
[  571.157484][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.164722][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state
[  571.173626][T30344] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.8631: Freeing blocks not in datazone - block = 0, count = 4096
[  571.238211][T30344] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.8631: Invalid inode bitmap blk 0 in block_group 0
[  571.251405][  T334] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7
[  571.252908][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119ecc600: abort rx timeout. Force session deactivation
[  571.260761][  T334] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0
[  571.309683][T30344] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  571.339672][T30344] EXT4-fs (loop5): 1 orphan inode deleted
[  571.350185][T30344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  571.400663][T29037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.415862][T30168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.515291][T30322] syz.9.8628 (30322) used greatest stack depth: 6024 bytes left
[  571.581877][T30168] veth0_vlan: entered promiscuous mode
[  571.601835][T30390] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8635'.
[  571.615454][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8635'.
[  571.625512][T30390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8635'.
[  571.640863][T30168] veth1_vlan: entered promiscuous mode
[  571.671090][T30392] netlink: 'syz.9.8635': attribute type 10 has an invalid length.
[  571.723574][T30355] syzkaller0: entered promiscuous mode
[  571.729307][T30355] syzkaller0: entered allmulticast mode
[  571.750585][T30392] rdma_rxe: rxe_newlink: failed to add syz_tun
[  571.791430][   T29] audit: type=1326 audit(1768980939.457:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30397 comm="syz.9.8636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f197c5bacb9 code=0x0
[  571.832654][T30168] veth0_macvtap: entered promiscuous mode
[  571.855340][T30168] veth1_macvtap: entered promiscuous mode
[  571.884987][T30168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.903122][T30168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.963635][ T7314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.007247][ T7314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.050232][ T7314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.063915][T30411] set_capacity_and_notify: 3 callbacks suppressed
[  572.063939][T30411] loop5: detected capacity change from 0 to 512
[  572.089732][ T7314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.099949][T30411] EXT4-fs (loop5): Unsupported encryption level 255
[  572.113557][T30413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8594'.
[  572.218114][T30420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8594'.
[  572.227458][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8594'.
[  572.256514][T30413] 8021q: adding VLAN 0 to HW filter on device bond1
[  572.274573][T30422] netlink: 'syz.3.8594': attribute type 10 has an invalid length.
[  572.291714][T30420] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.304610][T30420] bond1: (slave bond0): Enslaving as an active interface with an up link
[  572.320104][T30422] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.327961][T30422] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.349832][T30422] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.357319][T30422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.364872][T30422] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.372182][T30422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.383909][T30422] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  572.406564][T30420] rdma_rxe: rxe_newlink: failed to add syz_tun
[  572.413351][T30413] bridge0: port 3(syz_tun) entered blocking state
[  572.419920][T30413] bridge0: port 3(syz_tun) entered disabled state
[  572.428205][T30413] syz_tun: entered allmulticast mode
[  572.435566][T30413] syz_tun: entered promiscuous mode
[  572.467054][T30413] bridge0: port 3(syz_tun) entered blocking state
[  572.473779][T30413] bridge0: port 3(syz_tun) entered forwarding state
[  572.579496][T30430] siw: device registration error -23
[  572.728771][T30436] FAULT_INJECTION: forcing a failure.
[  572.728771][T30436] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.742155][T30436] CPU: 0 UID: 0 PID: 30436 Comm: syz.3.8641 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  572.742254][T30436] Tainted: [W]=WARN
[  572.742264][T30436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  572.742281][T30436] Call Trace:
[  572.742289][T30436]  <TASK>
[  572.742297][T30436]  __dump_stack+0x1d/0x30
[  572.742323][T30436]  dump_stack_lvl+0x95/0xd0
[  572.742346][T30436]  dump_stack+0x15/0x1b
[  572.742437][T30436]  should_fail_ex+0x263/0x280
[  572.742465][T30436]  should_fail+0xb/0x20
[  572.742485][T30436]  should_fail_usercopy+0x1a/0x20
[  572.742526][T30436]  _copy_from_user+0x1c/0xb0
[  572.742554][T30436]  kstrtouint_from_user+0x69/0xf0
[  572.742598][T30436]  ? 0xffffffff81000000
[  572.742617][T30436]  ? selinux_file_permission+0x1e1/0x320
[  572.742657][T30436]  proc_fail_nth_write+0x50/0x160
[  572.742695][T30436]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  572.742779][T30436]  vfs_write+0x269/0x9f0
[  572.742823][T30436]  ? __rcu_read_unlock+0x4e/0x70
[  572.742850][T30436]  ? __fget_files+0x184/0x1c0
[  572.742907][T30436]  ? mutex_lock+0x57/0x90
[  572.743012][T30436]  ksys_write+0xdc/0x1a0
[  572.743037][T30436]  __x64_sys_write+0x40/0x50
[  572.743061][T30436]  x64_sys_call+0x2847/0x3000
[  572.743152][T30436]  do_syscall_64+0xc0/0x2a0
[  572.743192][T30436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.743260][T30436] RIP: 0033:0x7f39d3d4b58e
[  572.743281][T30436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  572.743307][T30436] RSP: 002b:00007f39d27e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  572.743332][T30436] RAX: ffffffffffffffda RBX: 00007f39d27e76c0 RCX: 00007f39d3d4b58e
[  572.743347][T30436] RDX: 0000000000000001 RSI: 00007f39d27e70a0 RDI: 0000000000000003
[  572.743415][T30436] RBP: 00007f39d27e7090 R08: 0000000000000000 R09: 0000000000000000
[  572.743440][T30436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.743457][T30436] R13: 00007f39d4006038 R14: 00007f39d4005fa0 R15: 00007fff09260148
[  572.743483][T30436]  </TASK>
[  573.024232][T30445] loop3: detected capacity change from 0 to 256
[  573.031053][T30445] vfat: Bad value for 'uni_xlate'
[  573.523024][T30477] loop3: detected capacity change from 0 to 256
[  573.694610][T30474] loop3: detected capacity change from 0 to 512
[  573.778169][T30474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  573.879989][T30474] EXT4-fs (loop3): 1 truncate cleaned up
[  573.935883][T30474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.161409][T30474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.252338][T30484] loop3: detected capacity change from 0 to 256
[  574.280060][T30484] loop3: detected capacity change from 0 to 512
[  574.303786][T30484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  574.331842][T30489] loop5: detected capacity change from 0 to 1024
[  574.349839][T30484] EXT4-fs (loop3): 1 truncate cleaned up
[  574.356538][T30489] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  574.379784][T30484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.394181][T30489] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.8650: Invalid block bitmap block 0 in block_group 0
[  574.444359][T30496] loop9: detected capacity change from 0 to 512
[  574.452139][T30496] EXT4-fs: Ignoring removed nobh option
[  574.458453][T30496] EXT4-fs: old and new quota format mixing
[  574.472124][T30489] Quota error (device loop5): write_blk: dquota write failed
[  574.479631][T30489] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  574.491469][T30489] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.8650: Failed to acquire dquot type 0
[  574.538937][T30489] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.8650: Freeing blocks not in datazone - block = 0, count = 4096
[  574.552757][T30489] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.8650: Invalid inode bitmap blk 0 in block_group 0
[  574.566723][T30484] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.576715][ T7331] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7
[  574.586057][ T7331] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:35: Failed to release dquot type 0
[  574.638129][T30489] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  574.673771][T30489] EXT4-fs (loop5): 1 orphan inode deleted
[  574.684954][T30489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.697436][T30504] __nla_validate_parse: 1 callbacks suppressed
[  574.697490][T30504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8655'.
[  574.748277][T29037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.768172][T30504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8655'.
[  574.777334][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8655'.
[  574.803705][T30504] netlink: 'syz.3.8655': attribute type 10 has an invalid length.
[  574.810126][ T3428] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0
[  574.825842][ T3428] hid-generic 0000:0000:0000.0029: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  574.836697][T30510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8657'.
[  574.853434][T30504] bridge0: port 3(syz_tun) entered disabled state
[  574.860407][T30504] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.867679][T30504] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.892009][T30504] rdma_rxe: rxe_newlink: failed to add syz_tun
[  575.507828][ T7335] smc: removing ib device syz1
[  575.521239][ T3490] syz1: Port: 1 Link DOWN
[  575.554454][T30534] loop5: detected capacity change from 0 to 512
[  575.573131][T30537] loop3: detected capacity change from 0 to 256
[  575.608553][T30534] FAULT_INJECTION: forcing a failure.
[  575.608553][T30534] name failslab, interval 1, probability 0, space 0, times 0
[  575.621563][T30534] CPU: 0 UID: 0 PID: 30534 Comm: syz.5.8664 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  575.621660][T30534] Tainted: [W]=WARN
[  575.621668][T30534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  575.621682][T30534] Call Trace:
[  575.621690][T30534]  <TASK>
[  575.621699][T30534]  __dump_stack+0x1d/0x30
[  575.621801][T30534]  dump_stack_lvl+0x95/0xd0
[  575.621825][T30534]  dump_stack+0x15/0x1b
[  575.621847][T30534]  should_fail_ex+0x263/0x280
[  575.621870][T30534]  should_failslab+0x8c/0xb0
[  575.621934][T30534]  kmem_cache_alloc_noprof+0x68/0x490
[  575.621957][T30534]  ? getname_flags+0x7f/0x3b0
[  575.621983][T30534]  getname_flags+0x7f/0x3b0
[  575.622008][T30534]  do_sys_openat2+0x60/0x150
[  575.622062][T30534]  __x64_sys_openat+0xf2/0x120
[  575.622162][T30534]  x64_sys_call+0x2b07/0x3000
[  575.622190][T30534]  do_syscall_64+0xc0/0x2a0
[  575.622221][T30534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.622294][T30534] RIP: 0033:0x7fd4c22cacb9
[  575.622312][T30534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.622334][T30534] RSP: 002b:00007fd4c0d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  575.622421][T30534] RAX: ffffffffffffffda RBX: 00007fd4c2545fa0 RCX: 00007fd4c22cacb9
[  575.622515][T30534] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  575.622530][T30534] RBP: 00007fd4c0d27090 R08: 0000000000000000 R09: 0000000000000000
[  575.622544][T30534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.622558][T30534] R13: 00007fd4c2546038 R14: 00007fd4c2545fa0 R15: 00007ffc6c643b08
[  575.622579][T30534]  </TASK>
[  575.830433][T30537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  575.885394][   T29] audit: type=1326 audit(1768980943.547:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30543 comm="syz.4.8666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8c904acb9 code=0x0
[  575.919136][T30537] EXT4-fs (loop3): 1 truncate cleaned up
[  575.933139][T30537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.955762][T30532] lo speed is unknown, defaulting to 1000
[  575.985243][T30551] vfat: Bad value for 'uni_xlate'
[  576.046650][T30537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.087547][T30558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8669'.
[  576.110647][T30558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8669'.
[  576.119942][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8669'.
[  576.171536][T30532] chnl_net:caif_netlink_parms(): no params data found
[  576.188781][T30562] netlink: 'syz.3.8669': attribute type 10 has an invalid length.
[  576.212228][T30558] rdma_rxe: rxe_newlink: failed to add syz_tun
[  576.229392][T30561] Invalid logical block size (4095)
[  576.322629][ T7335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.362017][T30532] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.369391][T30532] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.392572][T30532] bridge_slave_0: entered allmulticast mode
[  576.417796][T30532] bridge_slave_0: entered promiscuous mode
[  576.431217][T30575] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  576.437003][T30532] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.438738][T30575] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  576.446161][T30532] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.453766][   T29] audit: type=1400 audit(1768980944.107:5193): avc:  denied  { write } for  pid=30574 comm="syz.9.8675" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  576.461761][ T3314]  loop3: p3 < > p4 < >
[  576.489081][ T3314] loop3: partition table partially beyond EOD, truncated
[  576.518497][T30575] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3
[  576.527247][T30532] bridge_slave_1: entered allmulticast mode
[  576.538028][T30532] bridge_slave_1: entered promiscuous mode
[  576.557535][ T3314] loop3: p3 start 4284289 is beyond EOD, truncated
[  576.576324][ T7335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.588237][T30567]  loop3: p3 < > p4 < >
[  576.592621][T30567] loop3: partition table partially beyond EOD, truncated
[  576.608892][T30567] loop3: p3 start 4284289 is beyond EOD, truncated
[  576.617354][T30532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.650827][T30532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.662758][ T7335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.730380][T30532] team0: Port device team_slave_0 added
[  576.746813][ T7335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.770496][T30532] team0: Port device team_slave_1 added
[  576.774256][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  576.805175][T30532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.812719][T30532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.839856][T30532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.879605][T30587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  576.914733][T30587] EXT4-fs (loop4): 1 truncate cleaned up
[  576.934565][T30532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.942430][T30532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.953340][T30587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.969460][T30532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  576.983939][T30592] vfat: Bad value for 'uni_xlate'
[  577.153037][ T7335] bond1 (unregistering): (slave bond0): Releasing backup interface
[  577.164471][ T7335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.191051][ T7335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.201625][ T7335] bond0 (unregistering): Released all slaves
[  577.220733][ T7335] bond1 (unregistering): Released all slaves
[  577.255978][T30587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.287568][T30598] set_capacity_and_notify: 8 callbacks suppressed
[  577.287590][T30598] loop3: detected capacity change from 0 to 8192
[  577.306501][T30532] hsr_slave_0: entered promiscuous mode
[  577.306902][T30600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8682'.
[  577.320846][T30532] hsr_slave_1: entered promiscuous mode
[  577.333578][T30532] debugfs: 'hsr0' already exists in 'hsr'
[  577.339536][T30532] Cannot create hsr debugfs directory
[  577.346603][T30600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8682'.
[  577.355617][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8682'.
[  577.364966][ T7335] hsr_slave_0: left promiscuous mode
[  577.391153][ T7335] hsr_slave_1: left promiscuous mode
[  577.396901][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.400070][T30601] netlink: 'syz.4.8682': attribute type 10 has an invalid length.
[  577.404532][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.463061][ T7335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  577.471213][ T7335] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.503131][ T7335] veth1_macvtap: left promiscuous mode
[  577.508828][ T7335] veth0_macvtap: left promiscuous mode
[  577.529318][ T7335] veth1_vlan: left promiscuous mode
[  577.535014][ T7335] veth0_vlan: left promiscuous mode
[  577.546535][T30608] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  577.679255][   T29] audit: type=1326 audit(1768980945.327:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30614 comm="syz.3.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3d8acb9 code=0x7ffc0000
[  577.703296][   T29] audit: type=1326 audit(1768980945.327:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30614 comm="syz.3.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d3d4b58e code=0x7ffc0000
[  577.727518][   T29] audit: type=1326 audit(1768980945.327:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30614 comm="syz.3.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d3d4b58e code=0x7ffc0000
[  577.752047][   T29] audit: type=1326 audit(1768980945.327:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30614 comm="syz.3.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3d8acb9 code=0x7ffc0000
[  577.776358][   T29] audit: type=1326 audit(1768980945.337:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30614 comm="syz.3.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f39d3d8acb9 code=0x7ffc0000
[  577.800924][   T29] audit: type=1326 audit(1768980945.337:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30614 comm="syz.3.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d3d8acb9 code=0x7ffc0000
[  577.903481][   T29] audit: type=1326 audit(1768980945.527:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30618 comm="syz.3.8687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39d3d8acb9 code=0x0
[  578.039778][ T7335] team0 (unregistering): Port device team_slave_1 removed
[  578.060464][ T7335] team0 (unregistering): Port device team_slave_0 removed
[  578.130183][T30606] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  578.160187][T30606] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28
[  578.333237][T30606] infiniband syz1: set active
[  578.338152][T30606] infiniband syz1: added syz_tun
[  578.367898][T30606] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  578.368099][T30606] infiniband syz1: Couldn't open port 1
[  578.423669][T30606] RDS/IB: syz1: added
[  578.427996][T30606] smc: adding ib device syz1 with port count 1
[  578.451010][T30606] smc:    ib device syz1 port 1 has no pnetid
[  578.758446][T30647] loop5: detected capacity change from 0 to 256
[  578.778480][T30532] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  578.790892][T30647] loop5: detected capacity change from 0 to 512
[  578.830137][T30647] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  578.869462][T30532] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  578.881514][T30532] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  578.902115][T30647] EXT4-fs (loop5): 1 truncate cleaned up
[  578.908313][T30647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  578.930795][T30532] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  578.962627][T30647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.122867][T30532] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.202722][T30532] 8021q: adding VLAN 0 to HW filter on device team0
[  579.221425][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.228786][ T7314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.270393][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.277727][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.561969][T30532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.582812][   T29] audit: type=1326 audit(1768980947.257:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.9.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  579.672387][   T29] audit: type=1326 audit(1768980947.257:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30698 comm="syz.9.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f197c57b58e code=0x7ffc0000
[  579.905895][T30532] veth0_vlan: entered promiscuous mode
[  579.938209][T30532] veth1_vlan: entered promiscuous mode
[  579.968656][T30736] netlink: 'syz.3.8698': attribute type 29 has an invalid length.
[  579.990750][T30532] veth0_macvtap: entered promiscuous mode
[  580.009374][T30740] loop4: detected capacity change from 0 to 256
[  580.017552][T30532] veth1_macvtap: entered promiscuous mode
[  580.057756][T30532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.066853][T30740] loop4: detected capacity change from 0 to 2048
[  580.083785][T30532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.109012][ T7335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.129609][ T3314]  loop4: p3 < > p4 < >
[  580.134065][ T3314] loop4: partition table partially beyond EOD, truncated
[  580.142298][T30746] __nla_validate_parse: 2 callbacks suppressed
[  580.142319][T30746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8700'.
[  580.158218][ T7331] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.168416][ T3314] loop4: p3 start 4284289 is beyond EOD, truncated
[  580.181965][ T7331] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.207946][T30740]  loop4: p3 < > p4 < >
[  580.212287][T30740] loop4: partition table partially beyond EOD, truncated
[  580.219419][ T7331] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.249802][T30740] loop4: p3 start 4284289 is beyond EOD, truncated
[  580.318173][T30754] siw: device registration error -23
[  580.337822][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  580.367671][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  580.448292][T30766] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8703'.
[  580.460036][T30761] bond2: option fail_over_mac: invalid value (15)
[  580.471799][T30761] bond2 (unregistering): Released all slaves
[  580.483158][T30715] loop9: detected capacity change from 0 to 2048
[  580.497407][T30766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8703'.
[  580.506631][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8703'.
[  580.542063][T30715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  580.579650][T30766] netlink: 'syz.7.8703': attribute type 10 has an invalid length.
[  580.587682][T30766] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.594885][T30766] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.650998][T30766] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.658266][T30766] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.665664][T30766] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.673205][T30766] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.721531][T30782] rdma_rxe: rxe_newlink: failed to add syz_tun
[  580.744396][T30766] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  580.789323][T30775] bridge0: port 3(syz_tun) entered blocking state
[  580.796018][T30775] bridge0: port 3(syz_tun) entered disabled state
[  580.826413][T30781] loop5: detected capacity change from 0 to 8192
[  580.829886][T30775] syz_tun: entered allmulticast mode
[  580.839095][T30775] syz_tun: entered promiscuous mode
[  580.848294][T30775] bridge0: port 3(syz_tun) entered blocking state
[  580.855051][T30775] bridge0: port 3(syz_tun) entered forwarding state
[  580.884772][T26369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.938958][T30787] netlink: 136 bytes leftover after parsing attributes in process `syz.9.8705'.
[  580.948452][T30787] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  581.007862][T30794] FAULT_INJECTION: forcing a failure.
[  581.007862][T30794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  581.021147][T30794] CPU: 0 UID: 0 PID: 30794 Comm: syz.9.8709 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  581.021191][T30794] Tainted: [W]=WARN
[  581.021200][T30794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  581.021217][T30794] Call Trace:
[  581.021227][T30794]  <TASK>
[  581.021237][T30794]  __dump_stack+0x1d/0x30
[  581.021342][T30794]  dump_stack_lvl+0x95/0xd0
[  581.021372][T30794]  dump_stack+0x15/0x1b
[  581.021400][T30794]  should_fail_ex+0x263/0x280
[  581.021429][T30794]  should_fail+0xb/0x20
[  581.021516][T30794]  should_fail_usercopy+0x1a/0x20
[  581.021583][T30794]  _copy_from_user+0x1c/0xb0
[  581.021619][T30794]  __sys_connect+0xd0/0x2a0
[  581.021652][T30794]  __x64_sys_connect+0x3f/0x50
[  581.021692][T30794]  x64_sys_call+0x2e09/0x3000
[  581.021726][T30794]  do_syscall_64+0xc0/0x2a0
[  581.021767][T30794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.021797][T30794] RIP: 0033:0x7f197c5bacb9
[  581.021816][T30794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.021839][T30794] RSP: 002b:00007f197b017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  581.021865][T30794] RAX: ffffffffffffffda RBX: 00007f197c835fa0 RCX: 00007f197c5bacb9
[  581.021937][T30794] RDX: 000000000000001c RSI: 0000200000008900 RDI: 0000000000000003
[  581.021951][T30794] RBP: 00007f197b017090 R08: 0000000000000000 R09: 0000000000000000
[  581.021964][T30794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.021976][T30794] R13: 00007f197c836038 R14: 00007f197c835fa0 R15: 00007ffe3fd68108
[  581.021997][T30794]  </TASK>
[  581.281794][T30798] loop9: detected capacity change from 0 to 256
[  581.294328][T30798] loop9: detected capacity change from 0 to 512
[  581.441132][T30798] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  581.460189][T30798] EXT4-fs (loop9): 1 truncate cleaned up
[  581.483726][T30798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  581.559644][T30811] loop5: detected capacity change from 0 to 512
[  581.581480][T30798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.641530][T30820] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  581.650711][T30821] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  581.788369][T30833] veth2: entered promiscuous mode
[  581.793602][T30833] veth2: entered allmulticast mode
[  581.806706][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  581.806724][   T29] audit: type=1326 audit(1768980949.477:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  581.898885][   T29] audit: type=1326 audit(1768980949.477:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  581.923065][   T29] audit: type=1326 audit(1768980949.477:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4c228b58e code=0x7ffc0000
[  581.938030][T30840] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8718'.
[  581.947809][   T29] audit: type=1326 audit(1768980949.477:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4c228b58e code=0x7ffc0000
[  581.980780][   T29] audit: type=1326 audit(1768980949.477:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  581.991651][T30840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8718'.
[  582.005117][   T29] audit: type=1326 audit(1768980949.477:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  582.013827][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8718'.
[  582.046719][   T29] audit: type=1326 audit(1768980949.487:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  582.070264][   T29] audit: type=1326 audit(1768980949.487:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  582.070827][T30843] netlink: 'syz.7.8718': attribute type 10 has an invalid length.
[  582.094378][   T29] audit: type=1326 audit(1768980949.547:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30832 comm="syz.5.8717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c22cacb9 code=0x7ffc0000
[  582.129430][T30843] bridge0: port 3(syz_tun) entered disabled state
[  582.136157][T30843] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.143689][T30843] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.194726][T30840] rdma_rxe: rxe_newlink: failed to add syz_tun
[  582.209625][T30842] EXT4-fs: Ignoring removed orlov option
[  582.252010][T30842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  582.483674][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.563742][   T29] audit: type=1326 audit(1768980950.237:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30876 comm="syz.3.8722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39d3d8acb9 code=0x0
[  582.707469][T30850] set_capacity_and_notify: 1 callbacks suppressed
[  582.707494][T30850] loop5: detected capacity change from 0 to 128
[  582.912939][T30905] siw: device registration error -23
[  582.967432][T30911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8726'.
[  582.985522][T30912] loop4: detected capacity change from 0 to 256
[  582.991751][T30911] bond1: option mode: unable to set because the bond device has slaves
[  583.046754][T30917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8726'.
[  583.052798][T30916] loop9: detected capacity change from 0 to 1024
[  583.068388][T30912] loop4: detected capacity change from 0 to 2048
[  583.085619][T30916] EXT4-fs: Ignoring removed oldalloc option
[  583.099866][T30911] netlink: 'syz.5.8726': attribute type 10 has an invalid length.
[  583.119709][ T3314]  loop4: p3 < > p4 < >
[  583.124020][ T3314] loop4: partition table partially beyond EOD, truncated
[  583.134489][T30916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.148260][T30911] rdma_rxe: rxe_newlink: failed to add syz_tun
[  583.169675][ T3314] loop4: p3 start 4284289 is beyond EOD, truncated
[  583.204528][T30916] EXT4-fs warning (device loop9): ext4_empty_dir:3097: inode #11: comm syz.9.8728: directory missing '..'
[  583.219637][T30912]  loop4: p3 < > p4 < >
[  583.223922][T30912] loop4: partition table partially beyond EOD, truncated
[  583.252661][T30912] loop4: p3 start 4284289 is beyond EOD, truncated
[  583.278110][T30916] syz_tun: left promiscuous mode
[  583.283395][T30916] bridge0: port 3(syz_tun) entered disabled state
[  583.340350][T30916] bridge_slave_1: left allmulticast mode
[  583.346325][T30916] bridge_slave_1: left promiscuous mode
[  583.352277][T30916] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.398513][T30916] bond0: (slave bridge0): Releasing backup interface
[  583.513359][T30943] loop5: detected capacity change from 0 to 512
[  583.676344][T26369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.713725][T30949] Invalid option length (0) for dns_resolver key
[  583.755469][T30959] loop5: detected capacity change from 0 to 1024
[  583.781854][T30961] loop9: detected capacity change from 0 to 1024
[  583.801812][T30961] EXT4-fs: inline encryption not supported
[  583.833822][T30961] EXT4-fs (loop9): orphan cleanup on readonly fs
[  583.882893][T30969] loop3: detected capacity change from 0 to 1024
[  583.894178][T30965] siw: device registration error -23
[  583.919730][T30961] EXT4-fs (loop9): 1 truncate cleaned up
[  583.959881][T30961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  583.980321][T30969] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  584.007638][T30969] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.8739: Invalid block bitmap block 0 in block_group 0
[  584.022492][T30969] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.8739: Failed to acquire dquot type 0
[  584.066209][T30961] FAULT_INJECTION: forcing a failure.
[  584.066209][T30961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  584.079872][T30961] CPU: 0 UID: 0 PID: 30961 Comm: syz.9.8736 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  584.079937][T30961] Tainted: [W]=WARN
[  584.079946][T30961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  584.079964][T30961] Call Trace:
[  584.079973][T30961]  <TASK>
[  584.079983][T30961]  __dump_stack+0x1d/0x30
[  584.080068][T30961]  dump_stack_lvl+0x95/0xd0
[  584.080092][T30961]  dump_stack+0x15/0x1b
[  584.080112][T30961]  should_fail_ex+0x263/0x280
[  584.080140][T30961]  should_fail+0xb/0x20
[  584.080183][T30961]  should_fail_usercopy+0x1a/0x20
[  584.080244][T30961]  _copy_to_user+0x20/0xa0
[  584.080275][T30961]  simple_read_from_buffer+0xb5/0x130
[  584.080379][T30961]  proc_fail_nth_read+0x10e/0x150
[  584.080409][T30961]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  584.080442][T30961]  vfs_read+0x1ab/0x7f0
[  584.080559][T30961]  ? __rcu_read_unlock+0x4e/0x70
[  584.080580][T30961]  ? __fget_files+0x184/0x1c0
[  584.080602][T30961]  ? mutex_lock+0x57/0x90
[  584.080702][T30961]  ksys_read+0xdc/0x1a0
[  584.080745][T30961]  __x64_sys_read+0x40/0x50
[  584.080782][T30961]  x64_sys_call+0x2889/0x3000
[  584.080854][T30961]  do_syscall_64+0xc0/0x2a0
[  584.080889][T30961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.080971][T30961] RIP: 0033:0x7f197c57b58e
[  584.080992][T30961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  584.081018][T30961] RSP: 002b:00007f197b016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  584.081112][T30961] RAX: ffffffffffffffda RBX: 00007f197b0176c0 RCX: 00007f197c57b58e
[  584.081127][T30961] RDX: 000000000000000f RSI: 00007f197b0170a0 RDI: 0000000000000004
[  584.081140][T30961] RBP: 00007f197b017090 R08: 0000000000000000 R09: 0000000000000000
[  584.081153][T30961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  584.081166][T30961] R13: 00007f197c836038 R14: 00007f197c835fa0 R15: 00007ffe3fd68108
[  584.081192][T30961]  </TASK>
[  584.284703][T30969] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.8739: Freeing blocks not in datazone - block = 0, count = 4096
[  584.301646][T30969] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.8739: Invalid inode bitmap blk 0 in block_group 0
[  584.331937][T26369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.362138][  T312] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0
[  584.371714][T30969] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  584.408243][T30969] EXT4-fs (loop3): 1 orphan inode deleted
[  584.437260][T30969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  584.505124][T31004] loop7: detected capacity change from 0 to 1024
[  584.514457][T31004] EXT4-fs: inline encryption not supported
[  584.514842][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.549713][T31004] EXT4-fs (loop7): orphan cleanup on readonly fs
[  584.584180][T31004] EXT4-fs (loop7): 1 truncate cleaned up
[  584.606022][T31004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  584.613233][T31018] loop5: detected capacity change from 0 to 512
[  584.666556][T30532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.954079][T31039] EXT4-fs: Ignoring removed nomblk_io_submit option
[  584.990887][T31039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  585.045786][T31039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.090004][T31039] 9p: Bad value for 'rfdno'
[  585.119486][T31039] SELinux: failed to load policy
[  585.142265][T29037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.151794][T31052] __nla_validate_parse: 4 callbacks suppressed
[  585.151815][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8754'.
[  585.166963][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8754'.
[  585.201368][T31052] netlink: 'syz.7.8754': attribute type 10 has an invalid length.
[  585.252274][T31060] rdma_rxe: rxe_newlink: failed to add syz_tun
[  585.268845][T31062] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  585.300266][T31065] FAULT_INJECTION: forcing a failure.
[  585.300266][T31065] name failslab, interval 1, probability 0, space 0, times 0
[  585.313724][T31065] CPU: 0 UID: 0 PID: 31065 Comm: syz.7.8757 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  585.313762][T31065] Tainted: [W]=WARN
[  585.313772][T31065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  585.313790][T31065] Call Trace:
[  585.313798][T31065]  <TASK>
[  585.313883][T31065]  __dump_stack+0x1d/0x30
[  585.313915][T31065]  dump_stack_lvl+0x95/0xd0
[  585.313945][T31065]  dump_stack+0x15/0x1b
[  585.313966][T31065]  should_fail_ex+0x263/0x280
[  585.314024][T31065]  should_failslab+0x8c/0xb0
[  585.314053][T31065]  kmem_cache_alloc_noprof+0x68/0x490
[  585.314080][T31065]  ? skb_clone+0x151/0x1f0
[  585.314112][T31065]  skb_clone+0x151/0x1f0
[  585.314198][T31065]  __netlink_deliver_tap+0x2c9/0x500
[  585.314240][T31065]  netlink_unicast+0x66b/0x690
[  585.314328][T31065]  netlink_sendmsg+0x5c8/0x6f0
[  585.314364][T31065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  585.314426][T31065]  __sock_sendmsg+0x145/0x170
[  585.314490][T31065]  ____sys_sendmsg+0x31e/0x4a0
[  585.314533][T31065]  ___sys_sendmsg+0x195/0x1e0
[  585.314616][T31065]  __x64_sys_sendmsg+0xd4/0x160
[  585.314644][T31065]  x64_sys_call+0x17ba/0x3000
[  585.314672][T31065]  do_syscall_64+0xc0/0x2a0
[  585.314737][T31065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.314768][T31065] RIP: 0033:0x7f90965dacb9
[  585.314785][T31065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.314809][T31065] RSP: 002b:00007f9095037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  585.314843][T31065] RAX: ffffffffffffffda RBX: 00007f9096855fa0 RCX: 00007f90965dacb9
[  585.314857][T31065] RDX: 0000000004000800 RSI: 0000200000000040 RDI: 0000000000000003
[  585.314871][T31065] RBP: 00007f9095037090 R08: 0000000000000000 R09: 0000000000000000
[  585.314889][T31065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  585.314907][T31065] R13: 00007f9096856038 R14: 00007f9096855fa0 R15: 00007ffc81dbfa28
[  585.314951][T31065]  </TASK>
[  585.530809][T31065] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8757'.
[  585.554570][T31062] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.8756: Invalid block bitmap block 0 in block_group 0
[  585.599520][T31062] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.8756: Failed to acquire dquot type 0
[  585.640023][T31062] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.8756: Freeing blocks not in datazone - block = 0, count = 4096
[  585.684317][T31062] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.8756: Invalid inode bitmap blk 0 in block_group 0
[  585.699506][ T7336] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 0
[  585.732513][T31062] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  585.779577][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8761'.
[  585.791470][T31062] EXT4-fs (loop5): 1 orphan inode deleted
[  585.798023][T31062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.813041][T31079] bond1: option mode: unable to set because the bond device has slaves
[  585.875859][T31089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8761'.
[  585.885178][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8761'.
[  585.910137][T31079] netlink: 'syz.9.8761': attribute type 10 has an invalid length.
[  585.910795][T31079] rdma_rxe: rxe_newlink: failed to add syz_tun
[  585.959178][T31097] netlink: 10 bytes leftover after parsing attributes in process `syz.9.8765'.
[  585.966288][T31097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8765'.
[  586.019373][T31103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  586.031000][T31103] EXT4-fs (loop3): 1 truncate cleaned up
[  586.031514][T31103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  586.138099][T31111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  586.150605][T31103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.160211][T31111] EXT4-fs (loop4): 1 truncate cleaned up
[  586.170105][T31111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  586.190154][T31115] netlink: 52 bytes leftover after parsing attributes in process `syz.9.8771'.
[  586.210993][T29037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.237910][T31119] bpf: Bad value for 'gid'
[  586.300193][T31111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.326690][T31127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8775'.
[  586.346388][T31127] bond1: option mode: unable to set because the bond device has slaves
[  586.397963][T31127] netlink: 'syz.3.8775': attribute type 10 has an invalid length.
[  586.445164][T31127] rdma_rxe: rxe_newlink: failed to add syz_tun
[  586.495225][T31145] netlink: 'syz.3.8781': attribute type 30 has an invalid length.
[  586.503255][T31145] netlink: 'syz.3.8781': attribute type 29 has an invalid length.
[  586.524548][T31147] veth3: entered promiscuous mode
[  586.649584][T31155] lo speed is unknown, defaulting to 1000
[  586.694826][T31160] EXT4-fs: Ignoring removed nomblk_io_submit option
[  586.705596][T31160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  586.715218][T31162] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  586.728691][T31160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.744195][T31160] 9p: Bad value for 'rfdno'
[  586.749511][T31162] EXT4-fs (loop7): 1 truncate cleaned up
[  586.769767][T31162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  586.808120][T31160] SELinux: failed to load policy
[  586.828028][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.874777][T31162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.037246][T31180] bond1: option mode: unable to set because the bond device has slaves
[  587.049112][T31179] siw: device registration error -23
[  587.060658][T31180] netlink: 'syz.5.8792': attribute type 10 has an invalid length.
[  587.069285][T31182] vfat: Bad value for 'uni_xlate'
[  587.105081][T31180] rdma_rxe: rxe_newlink: failed to add syz_tun
[  587.217018][T31195] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.8799: inode has both inline data and extents flags
[  587.236963][T31195] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.8799: couldn't read orphan inode 15 (err -117)
[  587.270085][T31195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.347514][T30532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.360870][ T3429] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  587.373605][ T3429] hid-generic 0000:0000:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  587.461360][T31209] IPVS: Scheduler module ip_vs_ not found
[  587.513203][T31198] syzkaller0: entered promiscuous mode
[  587.518772][T31198] syzkaller0: entered allmulticast mode
[  587.567237][T31217] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  587.574832][T31217] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  587.582590][T31217] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3
[  587.604245][T31205] syzkaller0: entered promiscuous mode
[  587.610073][T31205] syzkaller0: entered allmulticast mode
[  587.632732][T31219] FAULT_INJECTION: forcing a failure.
[  587.632732][T31219] name failslab, interval 1, probability 0, space 0, times 0
[  587.646086][T31219] CPU: 1 UID: 0 PID: 31219 Comm: syz.7.8806 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  587.646221][T31219] Tainted: [W]=WARN
[  587.646229][T31219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  587.646243][T31219] Call Trace:
[  587.646251][T31219]  <TASK>
[  587.646337][T31219]  __dump_stack+0x1d/0x30
[  587.646362][T31219]  dump_stack_lvl+0x95/0xd0
[  587.646389][T31219]  dump_stack+0x15/0x1b
[  587.646486][T31219]  should_fail_ex+0x263/0x280
[  587.646508][T31219]  should_failslab+0x8c/0xb0
[  587.646679][T31219]  kmem_cache_alloc_noprof+0x68/0x490
[  587.646707][T31219]  ? getname_flags+0x7f/0x3b0
[  587.646737][T31219]  getname_flags+0x7f/0x3b0
[  587.646837][T31219]  do_sys_openat2+0x60/0x150
[  587.646868][T31219]  __x64_sys_creat+0x65/0x90
[  587.646936][T31219]  x64_sys_call+0x2f1c/0x3000
[  587.646971][T31219]  do_syscall_64+0xc0/0x2a0
[  587.647018][T31219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.647042][T31219] RIP: 0033:0x7f90965dacb9
[  587.647121][T31219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.647142][T31219] RSP: 002b:00007f9095037028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  587.647163][T31219] RAX: ffffffffffffffda RBX: 00007f9096855fa0 RCX: 00007f90965dacb9
[  587.647178][T31219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  587.647192][T31219] RBP: 00007f9095037090 R08: 0000000000000000 R09: 0000000000000000
[  587.647250][T31219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.647264][T31219] R13: 00007f9096856038 R14: 00007f9096855fa0 R15: 00007ffc81dbfa28
[  587.647311][T31219]  </TASK>
[  587.827689][T31222] set_capacity_and_notify: 9 callbacks suppressed
[  587.827785][T31222] loop4: detected capacity change from 0 to 136
[  587.843085][T31222] Attempt to read inode for relocated directory
[  587.854001][T31222] FAULT_INJECTION: forcing a failure.
[  587.854001][T31222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.867405][T31222] CPU: 0 UID: 0 PID: 31222 Comm: syz.4.8807 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  587.867448][T31222] Tainted: [W]=WARN
[  587.867458][T31222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  587.867475][T31222] Call Trace:
[  587.867485][T31222]  <TASK>
[  587.867495][T31222]  __dump_stack+0x1d/0x30
[  587.867532][T31222]  dump_stack_lvl+0x95/0xd0
[  587.867566][T31222]  dump_stack+0x15/0x1b
[  587.867593][T31222]  should_fail_ex+0x263/0x280
[  587.867629][T31222]  should_fail+0xb/0x20
[  587.867650][T31222]  should_fail_usercopy+0x1a/0x20
[  587.867675][T31222]  _copy_to_user+0x20/0xa0
[  587.867702][T31222]  simple_read_from_buffer+0xb5/0x130
[  587.867794][T31222]  proc_fail_nth_read+0x10e/0x150
[  587.867831][T31222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  587.867897][T31222]  vfs_read+0x1ab/0x7f0
[  587.868016][T31222]  ? __rcu_read_unlock+0x4e/0x70
[  587.868042][T31222]  ? __fget_files+0x184/0x1c0
[  587.868075][T31222]  ? mutex_lock+0x57/0x90
[  587.868103][T31222]  ksys_read+0xdc/0x1a0
[  587.868222][T31222]  __x64_sys_read+0x40/0x50
[  587.868265][T31222]  x64_sys_call+0x2889/0x3000
[  587.868294][T31222]  do_syscall_64+0xc0/0x2a0
[  587.868353][T31222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.868383][T31222] RIP: 0033:0x7fe8c900b58e
[  587.868403][T31222] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  587.868435][T31222] RSP: 002b:00007fe8c7aa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  587.868498][T31222] RAX: ffffffffffffffda RBX: 00007fe8c7aa76c0 RCX: 00007fe8c900b58e
[  587.868518][T31222] RDX: 000000000000000f RSI: 00007fe8c7aa70a0 RDI: 0000000000000004
[  587.868535][T31222] RBP: 00007fe8c7aa7090 R08: 0000000000000000 R09: 0000000000000000
[  587.868553][T31222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.868569][T31222] R13: 00007fe8c92c6038 R14: 00007fe8c92c5fa0 R15: 00007ffef7ffed08
[  587.868596][T31222]  </TASK>
[  588.113802][T31226] loop4: detected capacity change from 0 to 512
[  588.185381][T31229] lo speed is unknown, defaulting to 1000
[  588.304073][   T29] kauditd_printk_skb: 92 callbacks suppressed
[  588.304094][   T29] audit: type=1326 audit(1768980955.977:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.310826][T31241] loop7: detected capacity change from 0 to 8192
[  588.354321][   T29] audit: type=1326 audit(1768980955.977:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.378433][   T29] audit: type=1326 audit(1768980955.977:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c900b58e code=0x7ffc0000
[  588.403304][   T29] audit: type=1326 audit(1768980955.977:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c900b58e code=0x7ffc0000
[  588.427040][   T29] audit: type=1326 audit(1768980955.977:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.450735][   T29] audit: type=1326 audit(1768980955.977:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.474814][   T29] audit: type=1326 audit(1768980955.977:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.499532][   T29] audit: type=1326 audit(1768980955.977:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.523778][   T29] audit: type=1326 audit(1768980955.977:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31238 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c904acb9 code=0x7ffc0000
[  588.579764][ T3314]  loop7: p1[EZD] p2 p3 p4
[  588.598780][ T3314] loop7: p3 start 117772289 is beyond EOD, truncated
[  588.605706][ T3314] loop7: p4 size 262144 extends beyond EOD, truncated
[  588.631739][T31246] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  588.640253][T31246] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  588.698715][T31246] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3
[  588.713647][T31241]  loop7: p1[EZD] p2 p3 p4
[  588.723277][T31241] loop7: p3 start 117772289 is beyond EOD, truncated
[  588.730336][T31241] loop7: p4 size 262144 extends beyond EOD, truncated
[  589.481262][T31265] loop3: detected capacity change from 0 to 512
[  589.626529][   T29] audit: type=1326 audit(1768980957.297:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31269 comm="syz.9.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197c5bacb9 code=0x7ffc0000
[  589.705063][T31276] bond1: option mode: unable to set because the bond device has slaves
[  589.722192][T31276] netlink: 'syz.5.8830': attribute type 10 has an invalid length.
[  589.738321][T19277] udevd[19277]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  589.743792][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  589.760115][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  589.781100][T31276] rdma_rxe: rxe_newlink: failed to add syz_tun
[  589.929289][    C1] ==================================================================
[  589.937894][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  589.945237][    C1] 
[  589.947596][    C1] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 0:
[  589.956295][    C1]  wq_worker_tick+0x60/0x230
[  589.960937][    C1]  sched_tick+0xd7/0x210
[  589.965405][    C1]  update_process_times+0x15e/0x190
[  589.971361][    C1]  tick_nohz_handler+0x275/0x3d0
[  589.976778][    C1]  __hrtimer_run_queues+0x20f/0x590
[  589.982410][    C1]  hrtimer_interrupt+0x21a/0x460
[  589.988116][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  589.994586][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  590.000550][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  590.006585][    C1]  _raw_spin_unlock_irqrestore+0x1a/0x30
[  590.012384][    C1]  srcu_gp_start_if_needed+0x255/0x950
[  590.018073][    C1]  __synchronize_srcu+0x11d/0x160
[  590.023147][    C1]  synchronize_srcu+0x1bc/0x1d0
[  590.028050][    C1]  fsnotify_mark_destroy_workfn+0xd1/0x1f0
[  590.034100][    C1]  process_scheduled_works+0x4cd/0x9d0
[  590.039690][    C1]  worker_thread+0x581/0x770
[  590.044419][    C1]  kthread+0x488/0x510
[  590.048630][    C1]  ret_from_fork+0x148/0x280
[  590.053362][    C1]  ret_from_fork_asm+0x1a/0x30
[  590.058268][    C1] 
[  590.060812][    C1] read-write to 0xffff888100073ab8 of 8 bytes by interrupt on cpu 1:
[  590.069182][    C1]  wq_worker_tick+0x60/0x230
[  590.073935][    C1]  sched_tick+0xd7/0x210
[  590.078319][    C1]  update_process_times+0x15e/0x190
[  590.083631][    C1]  tick_nohz_handler+0x275/0x3d0
[  590.088708][    C1]  __hrtimer_run_queues+0x20f/0x590
[  590.093951][    C1]  hrtimer_interrupt+0x21a/0x460
[  590.098940][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1d0
[  590.105230][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  590.111098][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  590.117577][    C1]  bpf_map_area_free+0x0/0x20
[  590.122388][    C1]  prealloc_destroy+0x141/0x1a0
[  590.127281][    C1]  htab_map_free+0x4c9/0x590
[  590.132177][    C1]  bpf_map_free+0x113/0x220
[  590.136834][    C1]  bpf_map_free_deferred+0x8c/0x100
[  590.142295][    C1]  process_scheduled_works+0x4cd/0x9d0
[  590.147987][    C1]  worker_thread+0x581/0x770
[  590.152796][    C1]  kthread+0x488/0x510
[  590.156908][    C1]  ret_from_fork+0x148/0x280
[  590.161677][    C1]  ret_from_fork_asm+0x1a/0x30
[  590.166494][    C1] 
[  590.168856][    C1] value changed: 0x0000000000273710 -> 0x0000000000275e20
[  590.176092][    C1] 
[  590.178448][    C1] Reported by Kernel Concurrency Sanitizer on:
[  590.184646][    C1] CPU: 1 UID: 0 PID: 312 Comm: kworker/u8:5 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  590.196755][    C1] Tainted: [W]=WARN
[  590.200690][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  590.210784][    C1] Workqueue: events_unbound bpf_map_free_deferred
[  590.217449][    C1] ==================================================================
[  590.228123][T31299] loop4: detected capacity change from 0 to 512
[  590.248188][T31285] loop3: detected capacity change from 0 to 8192
[  590.302099][T31285] netlink: 'syz.3.8832': attribute type 10 has an invalid length.
[  590.319451][T31285] bond0: (slave netdevsim1): Enslaving as an active interface with an up link