last executing test programs:

7m53.441581078s ago: executing program 3 (id=698):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', 0x0})
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000200), 0x0}, 0x20)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x4e26, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="a90500000000746400010000579f000000e5c09a", 0x14}], 0x1}}], 0x1, 0x4000814)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1c00}, &(0x7f0000000280)=0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x382aecc51a6ac646}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c7b8000", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf252500000005002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000044)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4)
io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x2, 0x2, 0x26d})
eventfd2(0xff, 0x80800)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x47ba, 0x0, 0x28, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r9, &(0x7f0000000540)}, 0x20)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)
getdents64(r2, 0x0, 0x22)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)

7m51.965025387s ago: executing program 3 (id=720):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf252e00000005002b00010000000c0005000200aaaaaaaaaaaa05002e00030000000a0001007770616e33000000060006000300090005002b0003000000060004000000000008000200", @ANYRES32, @ANYBLOB="0c002d000203aaaaaaaaaa"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)

7m51.935051971s ago: executing program 3 (id=721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef288563"], 0xffdd)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd)

7m51.667015966s ago: executing program 3 (id=723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x44010)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x8, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/16, 0x2}, 0x20)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800041, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x37f, &(0x7f0000000c40)="$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")
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000300)={0x3e57, 0xd, [{0x9}, {0x9}, {0xa, 0x1}, {0x9, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0xa, 0x1}, {0xf, 0x1}]})
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0)
write$binfmt_register(r2, &(0x7f0000002dc0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '$&)&*-%-\')]', 0x3a, '\xff\xff', 0x3a, './file0'}, 0x34)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/24, 0x18})
close(0x3)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r7)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r8, 0x1, 0x70bd2c, 0x259bdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./cgroup/../file0\x00', 0x0, 0x18}, 0x18)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x401}, 0x1c)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x4, 0x0, 0x381, 0x5, 0x4000000000004, 0x9e25, 0xffffffffffffffff}, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)

7m50.552016688s ago: executing program 3 (id=735):
r0 = msgget$private(0x0, 0x80)
msgrcv(r0, 0x0, 0x0, 0x0, 0x2000)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb2100, 0x104)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004)
msgctl$IPC_SET(r0, 0x1, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_setup(0x60, &(0x7f0000000200)=<r6=>0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x140, 0x3d, 0x400, 0x70bd29, 0x25dfdbfd, {0x12}, [@nested={0x50, 0x13, 0x0, 0x1, [@typed={0x4, 0x76}, @nested={0x4, 0x5f}, @nested={0x4, 0x11}, @nested={0x4, 0x83}, @generic="1791e75154b8bea04b761c926abdf0f900456a2020014b1e4b55b22f57a3823ca5958bd4d9fd51e0462e316df2ebeeaecc03b78e04d82fe9a73c1ed9"]}, @nested={0x3f, 0xc0, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x4, 0x8}, @generic="46dc4e628fd9e9c11a", @nested={0x4, 0xf2}, @generic="a1b60b3414c667e3a483b3f967a3ad5247edf5ab80d1062603c8ca4c212778357c896b77d300"]}, @generic="213c7ddd5098ff58f50a742da4c8b05cba7518d0dc3e4dfd616fcd31cb97f8e3a8055ab038751713cd8d733efa00edc61ab74dbc1cd0c5f83ed3b2c868c16e0d9c2026ddaaf09f4e628c1ad2a1fc51c6c32069f2020063faed890177a8eab01122eebd2d5f7c2934384655437a0cf41ad1b07222fb3c30e2cb6a9e6e4d936e862bc54bca61f4144952c5b142273112380f9037a2e51084f80722"]}, 0x140}, 0x1, 0x0, 0x0, 0x84}, 0x851)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r7)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r8, 0x623, 0x70bd2b, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)
io_submit(r6, 0x1, &(0x7f0000000c80)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, r5, &(0x7f0000000b00), 0x0, 0x5}])

7m50.11998638s ago: executing program 3 (id=739):
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200019, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r4 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3e, 0x0, 0x0)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0)
getsockopt$MRT(r4, 0x0, 0xcf, 0x0, &(0x7f0000000380))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x31, 0x6}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x34}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

7m50.117767939s ago: executing program 32 (id=739):
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2200019, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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")
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r4 = socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x7, &(0x7f0000000840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3e, 0x0, 0x0)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0)
getsockopt$MRT(r4, 0x0, 0xcf, 0x0, &(0x7f0000000380))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x31, 0x6}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x34}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd')
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

6m43.35019612s ago: executing program 5 (id=1343):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000280)=ANY=[], 0x0)

6m43.299437289s ago: executing program 5 (id=1347):
unshare(0x28000600)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x7d1)

6m43.187831547s ago: executing program 5 (id=1349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0)
write(r7, &(0x7f00000020c0)='E', 0x1) (async, rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r11, @ANYBLOB="06000400fe000008"], 0x48}, 0x4, 0x700000000000000}, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r7, 0x0) (async, rerun: 32)
r12 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=<r13=>0x0, &(0x7f0000000280)=<r14=>0x0) (async)
r15 = socket(0x1d, 0x2, 0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x100})
io_uring_enter(r12, 0x4ce1, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1009, &(0x7f0000002500)=""/4105}, 0x94)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

6m42.875385823s ago: executing program 5 (id=1353):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x168)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x82101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x236f003, 0x3000000)

6m42.778886393s ago: executing program 5 (id=1356):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}, 0x1, 0x300}, 0x0)

6m41.655933144s ago: executing program 5 (id=1369):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000280)=ANY=[], 0x0)

6m41.649024472s ago: executing program 33 (id=1369):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000280)=ANY=[], 0x0)

6m15.573891049s ago: executing program 0 (id=1695):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
fcntl$notify(0xffffffffffffffff, 0x402, 0x24)
utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x100000) (fail_nth: 4)

6m14.291785227s ago: executing program 0 (id=1719):
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast2, @in=@empty, 0x800, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x2, 0xffffffffffffffff, 0x0, 0x0, 0x45f, 0xfffffffe, 0x1ff, 0x25}, {0x0, 0x4, 0x40000000, 0x6}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x2b}, 0x2, @in6=@empty, 0x3500, 0x1, 0x1, 0x0, 0x1ff, 0x9}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0)

6m14.037037595s ago: executing program 0 (id=1722):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="97fe0d2d1b4a88c43c64795c0b97acb594c78c45d3c0fcf72414e389d6442606f936af957b33a66221d64505fb08e9460072847e485d398b968e8bd8052001580de6bba6c98daff989cf8b0810e8dd6ab830397f9f0387feff818363953d1b1dfa4b990f6308c99f13e67ee743e66e55df6f5898ed085495f8a526a208234822d773b03120fe8246d5feed6b0540eacfce8c84710b1ef1e205", 0x99}, {&(0x7f0000000200)="1a295f2f19d9d24e4e85761551b4a50de0afd82891e497e92c5f12bc8e1f333915d2f2656b0be935ee865121aec01e9e9b1eaf09e13b26facbb317830a4ee1cea9ce105765977282818abbf164c37b77d7793226392b658381d9d7319e76e2abe999e22d893635dba7d5f1a55b47b4cf2a496a83", 0x74}, {0x0}, {&(0x7f00000002c0)="95f56dab6efdc112cef8f7b417aa6f4081de7c0c32a56e2562ceacb4a5bd1a7090ff0a89b55ff214fc1c7739a617cd7eea421a43e439983a0deff9141f903110e883f0b5ce4bf99c63012402eb9a9b847467537172651ac5fadfff290ef54d1c885272e328c8f7ffb5246b29ef1db1dbd4a3ff22ad4ef1579c5f8d812bee148341db", 0x82}, {0x0}, {0x0}], 0x6, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4f3d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x91f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)="cd547747518be305d563d22ef9617231a0918a4241a24d8f3b93e6202983d9d3639481b556e322590b6c3365489b56ffd8295cd2619a846ab1466da0b0afefd46f8cb6911340829fb1fd7eaf4e2e7c289f6bdc3d7d6784dea3b26ec1d8025478391d5075b44d", 0x66}, {&(0x7f00000006c0)="b6c9155aca5c266b3bf3c1041252b93a7663ef42441c713b0d462d7b99192a20557b82da6e1fed044d07d6725d940fb6be35ea83600a2a807950e63af3ec25ff8b17f5a929f90b6984e8a7afc6dc67b5f6c31f89d52612895538d2022f94e9161d06d011bd952c6fb7a12b424fa691ed774b29dfeb09f04faaf758a028ccae68a73a69d1a5f38fa90bafbc1f496f4e1e5135a46962aa5929706ccc0a9cb27a7a01b7b137762e1c0ec022f72de9d0c2cd3ca3bed5c1588437f3b1e8698a12c3a8801465b46c1d718c3a7d797fe0a9d717", 0xd0}, {&(0x7f00000007c0)="b759a2ff012922", 0x7}, {&(0x7f0000000800)="9c46c796ec69e28e6ddbc12d030984eca675b9eb64b11f637b782cd228fd0ec88c2423", 0x23}, {&(0x7f0000000840)="959a2604afd974834a6f5243ff6b4fc74e23747edffc7ee9b66a574c0cfcc998ce6f5185a9f2924951ea65293e4cb57c38049a5d3540a997d99da7a28220b15e02267593a1eaf00733800ffb686cef75a7c10382a65c15612f74db873ee8142515f951eef981bab938687bb11dd6f6754ff823ad51b124235565b6c55efd857e2316f24d1110ad571dcf85e7cfddd2092c", 0x91}, {&(0x7f0000000900)="f8cc4a0ac0f235a09fe7757fe9ba0bb8b3cc27322c2000ac26fff582a5aab7b7dce5330bd70f43b783f430d89015071e618edd5205d1a3c4068260e7e8a4ef05bf9f28983f2e5a4974ce7e999effb37f4c9df9bf98dcefdf0d61be8d4bc58ef304f57f4bd149e7544c8f67aab265abae7e2f0329dc3a3c4f3c6dbff7f9654a5dde3491ddf3f4ae5a2437dbda06911f7e1d9bb4e9079b3b79f238394b8e03107670ed0358260240", 0xa7}, {0x0}, {&(0x7f0000000a80)='N15', 0x3}, {&(0x7f0000000ac0)="a02f59ec761c885c2fa7b3540c2ace1e47fe77d034c528542f9395b795faabc889bae63ed7a33d61a4663b493695f4af84468e8902a2d8e6150a0597787476fca6f541bd383578ca62d49e23bca17b6c7356b2651d9c36a6f0e97195f2043d70bca788b3ccde37f00516238cda44a856264fdde7a413534a4df51b6bc31c6e48f292bcc81ddd9a6df2fa9ae38035858714491784a1c0ebf8428000e36a3781e78026449ef2d12a3e42b97f0fe11bd050ee17f656afcadd9a3d12977412c8fb2ad4ef29a9712f385d5a3d344f56c6b8c1bf5c", 0xd2}], 0x9}}], 0x2, 0x400a090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

6m14.003285489s ago: executing program 0 (id=1724):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
r5 = perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000a, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000d80)=[{{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000880)="5a276983556c84d023305eb7c28d0afbdd7bb22b4eea16ded41c57631874598faa120fda0da21439dda6219b846cafc8561a2ae529bd3fbf7294e6861637466fc907a080334472dcd9e52130b50a4865c009921d18299b016d9fd9b6a27e61f3c9", 0x61}, {&(0x7f0000000900)="f359aadb545654319901f9447a41000fa80555559506f6f2a7464e303bc737e9059cca126b32e03cea86629e249121c728908cc6a731915274f24de9cf8b6daf6955d69e85ec0a9db79a8b1b33e22565d0dac277f70a4b77c4cb", 0x5a}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000000100)="58b083d6", 0x4}, {&(0x7f0000000980)="d92366104bad9e76fc0b1dd2c8a7a383da28e1c7535045a3e156f9acd3fa7963e95ccd3b09ea4c0a86a3c933707a3ea12e28ca834656f1f26bb644aff50aa465a815b5aa714011ace46c340d5bfc141ae87d99e2615fe624d04808969028cb8dc3401a84baad67dbee3ce5c90a06cfefb817bd5489c82b3f6772f09d1cf03f7c3db8a6ee81f2b52ee6b5a8b01bb43d58e70208bf4f018648bae12abd78f98c32dfa02f2524621636e11aa2d3ed8347f90521c5ac12af129ccf116989c0d0facc4cac26cf20431cf9037af59846848bd2c35d950a53449a8a4199367f0f79836bf1ef2b4fc8efe8928d0e", 0xea}, {&(0x7f0000000a80)="e6a97a1fe840ba76fdfaba22db17bfddecc2022ce7d1a2faefd73babbd6e1f6f92600fbccb72e28a3530912a179798c314d3f744f65b09c57ab8db00f05ff494ca2b49e24cfc5de419fefe1fc0af7ff509ec87ebdc2cf7d6d9c96bc95238efdeb06c8bafdbceed0d2a6a3debf1ebfbcf38017c8db01a07cbee000b9790db25172bd406ccde9d672708a53541428b7cf4a21dccb9ca4150a0db0180953f98acd7e4b1b3ba5a4413a918dbb6514b654fcbdefd4a0d061bba7c090da8dc2483b876c430ab0dde4e69", 0xc7}, {&(0x7f0000000b80)="94cdc4f9a2d47ac998a66d05b7a674a6eb0918e23b9b8890af99b9b37d4709a4d2368ab1bd4ea0451915dc2d31bbe32eb04c855b191e9e40b8b9ae7ff71d5de1d37f26d883be66a5335a74831a988c54281a2909388d89622a26ddfe6ffa582b5666e47a444b568db29a29a3134c9c3ea9a039530b08b0efb75e90595cfae2f6db84789b5c0657e4245cebb1b74a93a8bb82f33904f870ae91ec0975f101c714cdc379d50f233e9b46af15eb1a9baca1674908c4b3a273bcdba46e776e581092e261903dae20908ebe639a19a65174132bd80a76fbf6", 0xd6}], 0x8, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x24, 0x1, 0x1, [r5, r1, r0, r3, r6]}}], 0x60, 0x4000004}}], 0x1, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES16=r10], 0x4)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c)

6m13.12716136s ago: executing program 0 (id=1729):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

6m11.567618241s ago: executing program 0 (id=1740):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m11.567441532s ago: executing program 34 (id=1740):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m29.85214699s ago: executing program 7 (id=3552):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4044014)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)}, 0x40000000)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x8, 0x5, 0x4)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@nobh}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4008040)

2m27.888644039s ago: executing program 7 (id=3561):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x16}, 0xfffffffffffffe32)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fbbfaae60080000000000001000000000000000000007efff10000400000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000008000", [0x8000000000008, 0xffffffff9673e35d]}}) (fail_nth: 2)

2m27.673942336s ago: executing program 7 (id=3564):
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x84000)
mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0)
flock(0xffffffffffffffff, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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")
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x4510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x8, 0x1, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000006c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000b80)={<r3=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r3, 0xe}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100040000000100b300090000004c0003"], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x40040)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="00082abd7000ffdbdf25040000000c000380060007004e210000480002800800000000000000000000000000000005000d000000000008000800ff0f0000080005000101000008000700410500000802060006000000080005002300000008000400810000002c000380080003000400000008000322020000000600070005000000000008000100020000000400028008000400000000000c00018008000500030000000800050001050000080004004f0a00"/192], 0xcc}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000080000000000140000000c0000"], 0x20}}, 0x0)

2m27.01067901s ago: executing program 7 (id=3570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5000000010000d042abd7000007b81c7a82aa9992d00000000000000d2c5d6ddfdad5481222ab66155bd6ac2ef5d55b625d1c8afb4fa975b3ca1faedce53350ac0cd38a76dc1cdfac1dfe4e1d2eda89d661791e8fb24e40175d388ef041abff833abe6e7fba2827908b464839eeb818e714474e72cab001a39c14ea4cf17d737aefb8c2f5e93f2a5353eda5389bb7e9210660e4de5636a8f", @ANYRES32=0x0, @ANYBLOB="00000000100000001c0012800c0001006d6163766c616e000c000280080009000e000000140035006d6163766c616e300000000000000000"], 0x50}}, 0x8000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x78}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
unshare(0x60000600)
sync()
sync()
sync()
sync()
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = getpgrp(0x0)
sendmsg$AUDIT_SET(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x1, r7, 0xfffff346, 0x427cbe3d, 0x10, 0x5, 0x0, 0x4, 0x5}, ["", "", "", "", "", ""]}, 0x3c}}, 0x20040090)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0d000010", @ANYRES16=r8, @ANYBLOB="050625bd700001dcdf251100000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040)
write$tun(r3, 0x0, 0x2e)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r5, 0x20, &(0x7f0000000080)={&(0x7f0000000200)=""/223, 0xdf, 0x0, &(0x7f0000000300)=""/169, 0xa9}}, 0x10)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)

2m26.418526769s ago: executing program 7 (id=3573):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
copy_file_range(r1, 0x0, r1, 0x0, 0x3e1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00"/20], 0x20}, 0x4008898)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1)

2m25.759890305s ago: executing program 7 (id=3580):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000140)={[{@nodiscard}, {@errors_remount}]}, 0x3, 0x521, &(0x7f0000001280)="$eJzs3c1vG2kZAPDHzsembZZ0F4R2F4mttEjlQ7XzIbQJICFOwKESYiUuIJWQeEOJU0exs2zCSqRw64EDEgKp4sCdv4ALPVFVQpxBHLhwqlpBCVJBRRrksSd1Ejt1RWyXzO8nuZ7xuH6e18nz5vU7M54AcutS859CxHRE/CEiZlqrh59wqXW3/+iDleatEEnyzt8K6fOa69lTs/93ISL2ImIqIr7+5YjvFI7Hre/sri9Xq5Wt9nq5sbFZru/sXrm+sbxWWavcmFt8e2lpcXZhfunU2nrrJ9+7dfU3X5389eMfP7j709/9tpnWdHtbZztOU6vpE/FKx2PjEfGFQQQbgbF2e861Vi+OOh+eT/Pn9+GIeCut/5kYS3+a/Xky0MyAQUuSJPlP8lKvzXsJcGYV0zFwoViKiNZysVgqtcbwH4nzxWqt3vjMu7XtG6utsfLFmCi+e71amW1/VrgYE4Xm+lx78Jetzx9ZX4hIx8A/+EurYymt1KqrQ+zngOMuHKn/f4616h/Iif4/8gNnjfqHfLo/qf4hz9Q/5Jf6h/xS/5Bf6h/yS/1Dfql/yK/O+m+fyBUvjygXYLhO+vs/OcQ8gKH62tWrzVuSnf+++t7O9nrtvSurlfp6aWN7pbRS29osrdVqa9VKaaW28azXq9Zqm3Ofje33y41KvVGu7+xe26ht32hcS8/rv1aZGEqrgH688uadPxUiYu9z59JbdPzJV6twtiVJIUZ9DjIwGmOj7oCAkbHrD/LrOT7j9/ySMOD/W5ev6D0wdaHnpi/G5kDSAYageNLGJ/eGlwgwdJdft/8P8sr8P+SX+X/Ir2eM8Q0PIAdOmv+P9rX8uup3/v/x8+UDDN6J8//AmTbd5fpfSZL88OWOa3fNRsSHIuKPYxMvZdf6As6C4v1Ce/x/eeYT00e3Thb+lc4BTEbE92+/8/P3lxuNrbnm438/eLzxi/bj86PIH+jt8AxfVqdZHQMA+bX/6IOV7DbMuA+/1DoI4Xj88fbc5FQ6gjm/Xzh0rELhlI5d2LsZEa91i19oX++8tefj/P7Ysfivtu8LrZdI8x1Pr5s+nPivd8T/eEf8N/7ndwXy4U6z/5ntVn/FtKbjoP4O9z/Tp3R8dNb/Zcdcd8bP+r+xHv3fm33G+O4vf9Rt9256sPfDmxFvdO1/s3hTaayj8Zu5Xe4z/oNvfeOjvbYlv2q9Trf4meZSubGxWa7v7F65nmWx+PbS0uLswvxSOZ2jLmcz1cd9/rXf3+0Vv9n+th7t//Ox9p9r5/SpPtv/74/d++alE+J/8q3uv3+vpvdH3v8kOcjh033G/8f8X78dPfb1NeOv9nj/i93iR7Y1YqHP+PWffcW5wwDwAqnv7K4vV6uVrS4LE703Wcj5QjFeiDSeLtyOiBcgjYEujMfxTcnMgII+q+fYG04HBQzM06IfdSYAAAAAAAAAAABAv3od/XvnFA8nHnUbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOgv8GAAD//+nh0o8=")
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0xfffffffe, 0x3}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x20000, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c}, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0x2, 0x1})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r6, 0x1)
recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0)
io_uring_enter(r3, 0xfd0, 0x4c1, 0x17, 0x0, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r11, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x40, @empty, 0x7}}, 0x8, 0x6b, 0xf, 0x5, 0x99b}, &(0x7f0000000000)=0x98)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1c, 0x2a, [@mic={0x8c, 0x10, {0x132, "d3a08cd11ba3", @short="2a8232565d382957"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xcc, 0xb6, 0x8}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d0a0c286225f"}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4851}, 0x10004)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, 0x1411, 0x105, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r13, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="000307bd70000a5fb861fbdbdf2501000000"], 0x14}}, 0x48804)
ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000440)={0x400, 0x80000001})

2m25.701101273s ago: executing program 35 (id=3580):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000140)={[{@nodiscard}, {@errors_remount}]}, 0x3, 0x521, &(0x7f0000001280)="$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")
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x17, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0xfffffffe, 0x3}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x20000, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000200), 0x0, 0x0, 0x0}, 0x58)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c}, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0x2, 0x1})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r6, 0x1)
recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0)
io_uring_enter(r3, 0xfd0, 0x4c1, 0x17, 0x0, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r11, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x40, @empty, 0x7}}, 0x8, 0x6b, 0xf, 0x5, 0x99b}, &(0x7f0000000000)=0x98)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1c, 0x2a, [@mic={0x8c, 0x10, {0x132, "d3a08cd11ba3", @short="2a8232565d382957"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xcc, 0xb6, 0x8}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d0a0c286225f"}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4851}, 0x10004)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, 0x1411, 0x105, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r13, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="000307bd70000a5fb861fbdbdf2501000000"], 0x14}}, 0x48804)
ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000440)={0x400, 0x80000001})

5.794194572s ago: executing program 4 (id=4471):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x3}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x8000000, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x1, 0x0, @void}}}}}}}}, 0x32)

5.502411703s ago: executing program 4 (id=4474):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009"], 0x24}}, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
io_uring_setup(0x5, &(0x7f0000000280)={0x0, 0xc397, 0x1000, 0x3, 0x8d, 0x0, r1})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x353, @time={0xd5}})
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000003c0)={@multicast1, @empty}, 0x8)

4.935798827s ago: executing program 4 (id=4475):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)

4.832056756s ago: executing program 4 (id=4477):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9})
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="191c1d1d88b94e420568b7ac19e3cad78d8d976363dbbeba7844e374cf88e29c67aa654387050b50af670a05471092f109ea0a94bb241a6b8bd9913cddafbe3c54fc4b4b3ad0636aebef0b7246f13be4c9180a3dd60df9869f1a0298a7f5ee5b5ca7186d46399bd896099d18871002187d634e3fffed362f0f4f8de8295fd972494d9e7f7aaed847604116aa6068", @ANYBLOB="010025bd7000ffdbdf252e00000005002b00010000000c0005000200aaaaaaaaaaaa05002e00030000000a0001007770616e33000000060006000300090005002b0003000000060004000000000008000200", @ANYRES32, @ANYBLOB="0c002d000203aaaaaaaaaaaa0a0001"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x65, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62)
write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

3.930428282s ago: executing program 4 (id=4481):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001200576d10000000a100000007000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001d00ca0e000040ccb2ea43b13dbdf48b6a40e22861a7a489fc3e4d354f3ea5e129d4ba030a98a0c91aeb85da3f711f33df083b1aa5e8c7b3bd2e10e8ff825955aac169f04aa13aea4c12674c73f8b47eb4febda67dda58eb370f6e344ff256f98f0011c398fad40cec858df062bfe1a64e3c05dc82ca708cb1be1323ef102649987f1c184f29148dc9786dc2d8a57e2a33cca6a0165715073a066dde1564b661de5596b3aace7430c5bbecdb02d2df4540e1f25be5d653fe9deb9d36efe01eccac5ac56b8cb9d2c606cf1be9955426431812bb268eec6b6738730ca7253dcb"], 0x28}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff8000}]})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==")
r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
mq_notify(r2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x81, 0xffffffff, &(0x7f0000000040)=0x1)

2.384803416s ago: executing program 8 (id=4486):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xa8, 0x80c2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38000000490001002cbde3d5d6907a13a0b7e07ded30f417c39d7000fddbdf250a00200048accc537077a5d12392431000000000000000d8dc67fd8af9c4e0c852818a17b5e2d9e17e039c7d6e1426bff8a1ca5ce23d3aac003815849dd3a5", @ANYBLOB="487a7d61272a56a4f619f8aec7ddf68258db7179f58707a3b7576da5c509df651a3f9684dd7b0a87eb71fb8db090bb4b1218155aa3d44e69f500967bd563fa8415382ee5befe701c1c1aa9acfb4336b8239faf76473eb7a71c9ce110990e2e652a2dcd220b93180ec6da007c0398323e03391d4d4fc52bb92fd1fbc17e1fbc", @ANYBLOB="f9ffffff14000100200100000000000000000000000000020800020004000000"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000140003050000000000000000021800fe3d31b6fbe4409d30f81f381515a87f4f1ee5246785d9cfaf", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a01040000000000000000070004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c6f6164000c00028008000240000000040800034000000002080002400000008408000140000000000900020073797a3000000000140000001100010000000000000000000100eb09"], 0xa8}, 0x1, 0x0, 0x0, 0xc890}, 0x24000000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r10 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=<r11=>0x0, &(0x7f0000000100)=<r12=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0x488d0)
syz_io_uring_submit(r11, r12, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r14, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r10, 0x46f3, 0x0, 0x1, 0x0, 0xfe17)
set_mempolicy(0x6005, 0x0, 0x4)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7, 0x1, 0x9b, 0x0, 0x81})
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0)

1.442123114s ago: executing program 6 (id=4488):
capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0})

1.37515741s ago: executing program 8 (id=4489):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r1 = socket$igmp(0x2, 0x3, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
getgroups(0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0xffffffff, 0x1, 0x4, 0x4}, 0x3c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x7a, 0x160341)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xd, 0x0, 0xfc, 0x80, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10c010, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x2b, 0x7, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x21, &(0x7f0000000200), 0x10)
close(r4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x1c)
socket$kcm(0x10, 0x2, 0x10)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x80, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r5 = socket(0x1, 0x0, 0x401)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x4, 0x0, 0x5e, 0x1], 0x0, 0x1}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0xffffff00, 'pimreg\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x2, 0x4}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x2, 0x2, 0x3ff, 0x7, 0x0, 0x800]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

1.37436356s ago: executing program 6 (id=4491):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a4", 0x1}], 0x1}, 0x8040)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x4004743c, 0x0)

1.255850676s ago: executing program 1 (id=4493):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)

1.201957745s ago: executing program 6 (id=4494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)

1.195165203s ago: executing program 1 (id=4495):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2}]})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000004f00b19a42cfdc7a660f8f07017a6b4aab08756d046299e2"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"})
r3 = syz_open_pts(r2, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
close(0x4)
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x3}, 0x2c)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x6, 0x77}, {@remote, 0x4e20, 0x1, 0x2, 0x2}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x805, 0x7c4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x89c4c63c74665b14, 0x8c1, 0x5}, &(0x7f0000000080)=0x10)
getsockopt$bt_hci(r7, 0x84, 0x1, &(0x7f0000000080)=""/4066, &(0x7f0000001100)=0xfe2)

1.111903206s ago: executing program 6 (id=4496):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xf}]}}]}, 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x0, 0x386561e9, 0x0, 0x1000000}, [@TCA_NETEM_DELAY_DIST={0x1c, 0xd, "85def352b66e12df5d9ed740a78f78d47a2f9b7d150eeff1"}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000540)={'erspan0\x00', <r11=>0x0, 0x7, 0x700, 0x8, 0x65, {{0x30, 0x4, 0x0, 0x2, 0xc0, 0x68, 0x0, 0x1, 0x47c88ddb3cbbeb8c, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x40, [@empty, @private=0xa010101]}, @timestamp_addr={0x44, 0x2c, 0x78, 0x1, 0x3, [{@local, 0x3}, {@private=0xa010101, 0x1}, {@multicast1, 0x80}, {@rand_addr=0x64010100, 0x7712}, {@multicast2, 0xfff}]}, @rr={0x7, 0x23, 0x35, [@rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, @multicast1, @local, @private=0xa010102]}, @timestamp_addr={0x44, 0x3c, 0x34, 0x1, 0x5, [{@loopback, 0xfffffb96}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@loopback, 0x3}, {@private=0xa010100, 0x6}, {@local, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @lsrr={0x83, 0x7, 0xf6, [@local]}, @ssrr={0x89, 0xb, 0xe1, [@multicast2, @empty]}, @noop]}}}}})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r14], 0x50}}, 0x2)
r15 = socket$packet(0x11, 0x3, 0x300)
r16 = socket$nl_route(0x10, 0x3, 0x0)
r17 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r18, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r15, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r18, 0x1, 0x4, 0x6, @multicast}, 0x14)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x1e4, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x240000c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)

907.152814ms ago: executing program 2 (id=4497):
syz_io_uring_setup(0xc79, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x3, 0x3e0}, &(0x7f00000000c0), 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x87)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000002000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004001)

860.661695ms ago: executing program 6 (id=4498):
syz_io_uring_setup(0xc79, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x3, 0x3e0}, &(0x7f00000000c0), 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x87)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000002000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004001)

743.859811ms ago: executing program 2 (id=4499):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
timerfd_create(0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x2000})

709.035864ms ago: executing program 2 (id=4500):
syz_io_uring_setup(0xc79, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x3, 0x3e0}, &(0x7f00000000c0), 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x87)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000002000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004001)

637.227639ms ago: executing program 6 (id=4501):
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x21820, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0x5e, 0x3d}, 0x0, 0x0, 0x800003, 0x6, 0x3ff, 0xb, 0xffff, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = socket$inet6(0xa, 0x805, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000001680)={0x28, 0x0, 0x2711, @hyper}, 0xd)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a010400000000000000000a00000514000480100001800b0001006c6f6f6b757000000900010073797a31000000000900020073797a3200000000090007"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673000000000000000000000000000060006004e200000"], 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80088, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0xfffffffffffffffe, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x1e, &(0x7f0000b4bffc)=0x1, 0x4)
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840)
syz_usb_disconnect(r6)
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r6, 0x5509, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

538.851459ms ago: executing program 8 (id=4502):
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b0001006272696467650000"], 0x48}}, 0x4084)
r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
timer_create(0x2, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9292, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket(0x9, 0x6, 0x1)
r2 = syz_open_procfs(0x0, 0x0)
pread64(r2, &(0x7f0000000000)=""/25, 0x19, 0xb6)

537.860989ms ago: executing program 2 (id=4503):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300), &(0x7f0000000580))
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x81810, r0, 0xbf518000)
r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0), &(0x7f0000000900))
io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x14, r1}, 0x18)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f00000000c0)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000940)={r4, 0x3, 0x1, [0x7fffffffffffffff, 0x7, 0xffffffffffffffff, 0x6, 0x7d], [0xf, 0x3, 0x4, 0x81cc, 0x0, 0xffff, 0x1, 0xd0, 0x3, 0xde6e, 0xff, 0x3, 0x9, 0x8, 0x10001, 0x401, 0x88, 0x81, 0x8, 0x5, 0x200, 0xe2, 0xeb7, 0x73, 0x9, 0xbc5, 0x8000000000000000, 0x8, 0x2, 0x9, 0x8, 0x8001, 0x80, 0x4, 0x8, 0xfffffffffffffeff, 0x7, 0x80000000, 0x2, 0x9, 0x67, 0xd4a9, 0xae, 0xfffffffffffffbff, 0x0, 0x5, 0x70, 0x6, 0x5, 0x5, 0x1, 0xfffffffffffffff8, 0x7, 0xe3, 0x0, 0x1, 0x7ff, 0x9, 0x81, 0xfffffffffffffff7, 0x10, 0x80000001, 0x600000, 0x8000, 0x7, 0xa, 0xffffffffffffffff, 0x5, 0x0, 0x13, 0xcf3, 0x5, 0x6, 0x1, 0xffffffffffff7fff, 0x1, 0x2, 0x3, 0x341, 0x7, 0x1, 0x6, 0x2, 0x2, 0x5f8, 0x10001, 0x6, 0x0, 0x100, 0x0, 0x1, 0x4, 0xd47d, 0x8, 0x1, 0x5, 0x401, 0x0, 0xb9, 0x31b, 0x3, 0xff, 0xf149, 0x3, 0xb, 0x7, 0x4cd, 0xffffffffffffffff, 0x80000001, 0x0, 0x9, 0x7, 0x6, 0x10000, 0x231, 0x6, 0x3, 0x2, 0x8, 0x1, 0x8001]})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r0}, {@val={r4}, @max}})

475.998756ms ago: executing program 2 (id=4504):
unshare(0x6a000200)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x7fff, 0x12)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
write$UHID_INPUT(r2, 0x0, 0x0)
r3 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0xa)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x10}], 0x1, 0x0, 0x0, 0x5800}, 0x500)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm")
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@empty}, {@local}]}, @ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000001300))

475.830316ms ago: executing program 8 (id=4505):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)

472.118626ms ago: executing program 8 (id=4506):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x1, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
open_by_handle_at(r3, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x81, 0x5, 0x4, 0x1, 0x91b8, 0xfff}}, 0x600800) (async, rerun: 32)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095546951103807f2e535643d2c30539ca0379b82d7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r6, &(0x7f0000000100), 0x0}, 0x20)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async)
close(r7) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) (rerun: 32)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r9}, 0x38) (async, rerun: 32)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000140)={0x401, 0x2, 'client0\x00', 0x4, "27abe4049e8446fb", "fcf80ac36c95c73d998e32e4608d6007df1f82b4f55857494afda1afc1de5f47", 0xffffff36, 0x2}) (rerun: 32)

320.422195ms ago: executing program 1 (id=4507):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x2000c800)

268.042594ms ago: executing program 8 (id=4508):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = getpgid(0xffffffffffffffff)
ptrace$setsig(0x4203, r0, 0x4280, &(0x7f0000000100)={0x1a, 0x8, 0xffffffff})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x8}, 0x4580, 0x6000000, 0x2, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x48d4, 0xc000, 0x5, 0x40c1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

248.34292ms ago: executing program 1 (id=4509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x440200, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047441, 0x0)

202.829871ms ago: executing program 1 (id=4510):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
listen(0xffffffffffffffff, 0xf)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x3, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={r6, 0x48, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, @in6={0xa, 0x4e23, 0x4, @private1, 0xb7}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200050085000000a600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$unix(0x1, 0x1, 0x0)

196.900439ms ago: executing program 2 (id=4511):
syz_io_uring_setup(0xc79, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x3, 0x3e0}, &(0x7f00000000c0), 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x87)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
shutdown(r0, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000002000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004001)

62.399272ms ago: executing program 4 (id=4512):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8)
r2 = socket(0x10, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000100)="ca122792065faa843968c1c4bec3081b813694a951e37d0634240afb690265e0d98b079cff6b18e23bc42660980d729366b76913eba93820466360d5521d9ec8560e34c9483ddc83d778c09da2ec", 0x4e, 0x40000, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x1d, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x401400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PBURST={0x0, 0x7, 0x1a7d}]}}]}, 0x60}}, 0x44080)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r1}}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@block={'block', 0x3d, 0x200}}, {@nocompress}, {@hide}, {@gid}, {@unhide}, {@utf8}], [{@dont_hash}, {@audit}]}, 0x1, 0x56c, &(0x7f0000000580)="$eJzs3V1v01gawPHHfdmWrIRWywqhqsCh7EpFKsFJICjiyuucpAcSO7Id1F6hiqaoIoUVZaVtbxZu2BfNfAhu50PMN0JzPVeM/BL6lpdCX4I6/180cxz7yTnPcYMfuY0dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrlV2y5Y0jBee0UN5lYDv7n3NHv1kRVy50AzZFwRK/5PZmflWrrq2l/2Nl+N/7cg8+mzeZmNm1nZ/ePVPz26MjXRe/2QhM/F9s7uy7Vut/Nm3Imcoeszg7fVtWdC3zSdulYm9FWlXLbvLddCVTMNHa6GkW4qN9BO5Adq0b2jCpVKSen8qt/26lWnoXsrH94t2nZZPc63tBOEvnfvcT50l02jYbx6EhNvjmMexm/EJyZSkXaaSm1sdjulUROIgwrHCSoOjbgkInaxWCgUi4Xyg8qDh7Y9VTy8wj5EjkSM/02L8TrFozdwMhNZ/ZeGGPGkLSui+j5cqUogvjQHbM/06v/f7umh4+6v/70qf21v85wk9f9G+uzGoPo/IJd9+bwbHHEaj23ZkV15KWvSla505M2Q2CtZSmeb0fk+6qLFEyOh+GKkKU6yRmVrlFSkLGWx5ZksS01CUVITIw3REsqqhBKJTt5RrgSixZFIfAlEyaK4ckeUFKQiFSmJEi15WRVf2uJJXariJL1syGay30uirEE5ZkH///Xz50Ehud7bpSPFIbM9Usyp/1BqpvcP+3hOesgGTs3nXv0HAAAAAAAXlpX89j0+/5+W68lSzTS0Pe60AAAAAADAKUr+8j8fN9Px0nWxOP8HAAAAAOCisZJr7CwRycnNdGlDrOSaKn4JAAAAAADABZH8/f9G3CT3QLkp1pd7qnD+DwAAAADABfHfkffYD1sz1s+/SBBMW+9bK3+1tpw4ztmajJsZmTzcY1Sbsy5nnSRNOW2mplw9b82mQV9ugvkpazZG5WH1S+CdyPETuDIlP8itNObWetqu97ako+RqpqHzrt94VBDHuTwR6ZXon682/yXJ9P/nNS9bsrHZ7eSfv+6uJ7m8j3t5v5XdQPHIfRSH5PI2ud9Ccs1F3xlPJxdiZOPm0nHt/fOfSF8+8RVjfpCFNGYhu+Nt7uD8Z+MxC/m92U/L/tlnWRROOPMPcjuNub14O236ZFHMD/oZZFkU92fxTfviGFmURmVROmEWADAuGyOqkHW08H/DUe7bqrt8ZXX/IItpzOJccmCdmutzRLdHHdHtE1a3n458B9KgGhuP++OhqvoxfsHHgeOGjaIV78LJt1v/kKvbO7t3N7fWXnRedF4Vi6Wyfd+2HxRlOplG1lB7AAB99P+OnbS2p/V/5LfwWPdHnFX/+ctHCvLyXF5LV9ZlKbnaIPnEQd9ec/s+hrA04qw1l5TJOLYgS0PO6v6QXOXQ67c4NPZgDqWz/jEAAHCuFkbU4YP1/1Lf+r804rz7YC0ffna8F1s4710BAMDvhg4+WbnoP1YQmNazQqVScKJlrQLffaICU61rZbxIB+6y49W1agV+5Lt+I154aqo6VGG71fKDSNX8QLX80Kwk3/yusq9+D3XT8SLjhq2GdkKtXN+LHDdSVRO6qtX+e8OEyzpIXhy2tGtqxnUi43sq9NuBq/NKhVrvCzRV7UWmZuJFT7UC03SCVfXUb7SbWlV16AamFflph72xjFfzg2bSbX7cOxsAgO/E9s7uy7Vut/PmDBfGPUcAAHAQVRoAAAAAAAAAAAAAAAAAAAAAgO/feVz/x0K/hcnvI43TWOjdCvq0OpzJ+hvfvC7J+PfqmBdGHjr+faYHJgBn7rcAAAD//yuwSsc=")

0s ago: executing program 1 (id=4513):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==")
socket$netlink(0x10, 0x3, 0xb)
socket(0x10, 0x803, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = getpid()
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3})
r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read(r2, &(0x7f0000000740)=""/377, 0x179)
r3 = socket(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r4, r5, 0x0, 0x24002de8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x804)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x200484, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f0000001c00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
lseek(r7, 0x2f, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000180))
ioctl$RNDCLEARPOOL(r7, 0x5206, &(0x7f0000000240)=0x7)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r8 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f00000003c0), 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r9=>0x0})
bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r9}, 0x10)

kernel console output (not intermixed with test programs):

XT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  563.141699][T17214] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4030: bad orphan inode 131083
[  563.186098][T17214] loop4: lost filesystem error report for type 5 error -117
[  563.186742][T17214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  563.316981][T17214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.406830][T17231] loop2: detected capacity change from 0 to 2048
[  563.441367][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.479969][T17231]  loop2: p1 < > p3 p4 < >
[  563.542694][T17231] loop2: p3 size 861184 extends beyond EOD, truncated
[  563.578316][T17235] lo speed is unknown, defaulting to 1000
[  563.594939][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.608012][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.793755][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  563.919742][T17245] xt_CT: You must specify a L4 protocol and not use inversions on it
[  563.950766][T17246] netlink: 'syz.1.4037': attribute type 32 has an invalid length.
[  563.962845][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  563.975485][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4037'.
[  564.064999][T17246] bond1: option coupled_control: invalid value (77)
[  564.309444][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  564.760839][T17246] bond1 (unregistering): Released all slaves
[  564.810936][T17250] loop6: detected capacity change from 0 to 1024
[  564.836732][T17250] EXT4-fs: Ignoring removed nobh option
[  564.899001][T17250] EXT4-fs: Ignoring removed nomblk_io_submit option
[  564.911893][T17254] loop4: detected capacity change from 0 to 512
[  564.930058][T17250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.977381][T17254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.993949][T17261] loop1: detected capacity change from 0 to 512
[  565.007624][T17261] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  565.040704][T17254] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  565.088422][T17261] EXT4-fs (loop1): 1 orphan inode deleted
[  565.097131][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.118369][T17261] EXT4-fs (loop1): 1 truncate cleaned up
[  565.124553][T17261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.149133][T17254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4042'.
[  565.158390][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'.
[  565.187776][T17254] EXT4-fs (loop4): shut down requested (0)
[  565.221863][   T40] Bluetooth: hci0: Frame reassembly failed (-84)
[  565.253383][T17269] FAULT_INJECTION: forcing a failure.
[  565.253383][T17269] name failslab, interval 1, probability 0, space 0, times 0
[  565.288598][T17269] CPU: 0 UID: 0 PID: 17269 Comm: syz.8.4045 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  565.288697][T17269] Tainted: [W]=WARN
[  565.288706][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  565.288722][T17269] Call Trace:
[  565.288748][T17269]  <TASK>
[  565.288757][T17269]  __dump_stack+0x1d/0x30
[  565.288785][T17269]  dump_stack_lvl+0x95/0xd0
[  565.288868][T17269]  dump_stack+0x15/0x1b
[  565.288953][T17269]  should_fail_ex+0x263/0x280
[  565.289002][T17269]  should_failslab+0x8c/0xb0
[  565.289027][T17269]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  565.289050][T17269]  ? __alloc_skb+0x2d6/0x690
[  565.289088][T17269]  __alloc_skb+0x2d6/0x690
[  565.289115][T17269]  ? __alloc_skb+0x200/0x690
[  565.289141][T17269]  netlink_alloc_large_skb+0xbf/0xf0
[  565.289205][T17269]  netlink_sendmsg+0x40c/0x6f0
[  565.289235][T17269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  565.289265][T17269]  ____sys_sendmsg+0x5af/0x600
[  565.289359][T17269]  ___sys_sendmsg+0x195/0x1e0
[  565.289404][T17269]  __x64_sys_sendmsg+0xd4/0x160
[  565.289439][T17269]  x64_sys_call+0x194c/0x3020
[  565.289482][T17269]  do_syscall_64+0x12c/0x370
[  565.289507][T17269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.289533][T17269] RIP: 0033:0x7fd3509fc799
[  565.289593][T17269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.289611][T17269] RSP: 002b:00007fd34f44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  565.289631][T17269] RAX: ffffffffffffffda RBX: 00007fd350c75fa0 RCX: 00007fd3509fc799
[  565.289647][T17269] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003
[  565.289663][T17269] RBP: 00007fd34f44f090 R08: 0000000000000000 R09: 0000000000000000
[  565.289685][T17269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.289797][T17269] R13: 00007fd350c76038 R14: 00007fd350c75fa0 R15: 00007ffd5d2c08a8
[  565.289819][T17269]  </TASK>
[  565.641763][T17275] loop6: detected capacity change from 0 to 128
[  565.650714][T17276] loop2: detected capacity change from 0 to 512
[  565.667383][T17276] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4046: invalid indirect mapped block 256 (level 2)
[  565.719429][T17276] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  565.719827][T17276] EXT4-fs (loop2): 2 truncates cleaned up
[  565.729363][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  565.729385][    C0] EXT4-fs (loop2): initial error at time 1772514628: ext4_free_branches:1023: inode 11
[  565.729426][    C0] EXT4-fs (loop2): last error at time 1772514628: ext4_free_branches:1023: inode 11
[  565.791666][T17276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.884487][T17284] loop8: detected capacity change from 0 to 512
[  565.903640][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.945691][T17287] loop6: detected capacity change from 0 to 512
[  565.967500][T17284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.017684][T17287] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4052: invalid indirect mapped block 256 (level 2)
[  566.042316][T17284] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  566.054534][T17287] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  566.054838][T17287] EXT4-fs (loop6): 2 truncates cleaned up
[  566.064040][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  566.064061][    C0] EXT4-fs (loop6): initial error at time 1772514628: ext4_free_branches:1023: inode 11
[  566.064105][    C0] EXT4-fs (loop6): last error at time 1772514628: ext4_free_branches:1023: inode 11
[  566.161396][T17287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.276313][T17295] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4046'.
[  566.620452][T17311] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4052'.
[  566.708173][T17310] loop1: detected capacity change from 0 to 32768
[  566.852700][   T28] audit: type=1400 audit(1772514629.526:5079): avc:  denied  { ioctl } for  pid=17317 comm="syz.1.4058" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  567.278313][ T3555] Bluetooth: hci0: command 0x1003 tx timeout
[  567.284419][T13501] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  567.302457][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.059366][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.068641][T17257] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  568.377263][ T6994] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  568.456429][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.490229][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.049979][T17358] loop6: detected capacity change from 0 to 512
[  569.092185][T17358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  569.142548][T17358] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.168902][T17372] loop4: detected capacity change from 0 to 512
[  569.226887][T17372] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4076: invalid indirect mapped block 256 (level 2)
[  569.259839][T17358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4071'.
[  569.260453][T17372] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  569.270723][T17372] EXT4-fs (loop4): 2 truncates cleaned up
[  569.279958][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  569.279981][    C1] EXT4-fs (loop4): initial error at time 1772514631: ext4_free_branches:1023: inode 11
[  569.280020][    C1] EXT4-fs (loop4): last error at time 1772514631: ext4_free_branches:1023: inode 11
[  569.283635][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4071'.
[  569.288632][T17372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  569.383498][T17358] EXT4-fs (loop6): shut down requested (0)
[  569.391418][  T316] Bluetooth: hci0: Frame reassembly failed (-84)
[  569.396956][T17386] FAULT_INJECTION: forcing a failure.
[  569.396956][T17386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.429094][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.8.4080 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  569.429134][T17386] Tainted: [W]=WARN
[  569.429141][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  569.429185][T17386] Call Trace:
[  569.429197][T17386]  <TASK>
[  569.429204][T17386]  __dump_stack+0x1d/0x30
[  569.429345][T17386]  dump_stack_lvl+0x95/0xd0
[  569.429367][T17386]  dump_stack+0x15/0x1b
[  569.429461][T17386]  should_fail_ex+0x263/0x280
[  569.429550][T17386]  should_fail+0xb/0x20
[  569.429572][T17386]  should_fail_usercopy+0x1a/0x20
[  569.429600][T17386]  _copy_from_user+0x1c/0xb0
[  569.429669][T17386]  ___sys_recvmsg+0xaa/0x3b0
[  569.429708][T17386]  do_recvmmsg+0x1ef/0x560
[  569.429769][T17386]  ? fput+0x8f/0xc0
[  569.429795][T17386]  __x64_sys_recvmmsg+0xe5/0x170
[  569.429842][T17386]  x64_sys_call+0x80f/0x3020
[  569.429945][T17386]  do_syscall_64+0x12c/0x370
[  569.429966][T17386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.429988][T17386] RIP: 0033:0x7fd3509fc799
[  569.430007][T17386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.430088][T17386] RSP: 002b:00007fd34f42e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  569.430112][T17386] RAX: ffffffffffffffda RBX: 00007fd350c76090 RCX: 00007fd3509fc799
[  569.430128][T17386] RDX: 0000000000000001 RSI: 0000200000001480 RDI: 0000000000000003
[  569.430141][T17386] RBP: 00007fd34f42e090 R08: 0000000000000000 R09: 0000000000000000
[  569.430153][T17386] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  569.430166][T17386] R13: 00007fd350c76128 R14: 00007fd350c76090 R15: 00007ffd5d2c08a8
[  569.430184][T17386]  </TASK>
[  569.646936][T17394] loop2: detected capacity change from 0 to 1024
[  569.660997][T17394] EXT4-fs: Ignoring removed nobh option
[  569.670215][T17394] EXT4-fs: Ignoring removed nomblk_io_submit option
[  569.711267][T17394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  569.742514][T17392] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4076'.
[  569.842364][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.872653][T17412] lo speed is unknown, defaulting to 1000
[  569.908490][T17417] loop8: detected capacity change from 0 to 2048
[  569.959976][T17416] lo speed is unknown, defaulting to 1000
[  569.977940][T17417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.024241][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.040365][T17419] netlink: 'syz.2.4089': attribute type 32 has an invalid length.
[  570.061501][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'.
[  570.101536][T17419] bond1: option coupled_control: invalid value (77)
[  570.134081][T17419] bond1 (unregistering): Released all slaves
[  570.674129][T17432] loop2: detected capacity change from 0 to 32768
[  570.740285][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.806876][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4095'.
[  570.836149][T17441] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4095'.
[  570.844631][T17443] loop2: detected capacity change from 0 to 1024
[  570.862878][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4095'.
[  570.876959][T17435] loop1: detected capacity change from 0 to 32768
[  570.888807][T17441] loop4: detected capacity change from 0 to 512
[  570.893504][T17443] EXT4-fs: Ignoring removed nobh option
[  570.902051][T17443] EXT4-fs: Ignoring removed nomblk_io_submit option
[  570.908425][T17441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  570.938283][T17441] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4095: bad orphan inode 131083
[  570.953566][T17443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.959421][T17441] loop4: lost filesystem error report for type 5 error -117
[  570.965987][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  570.979754][    C0] EXT4-fs (loop4): initial error at time 1772514633: ext4_orphan_get:1417
[  570.988312][    C0] EXT4-fs (loop4): last error at time 1772514633: ext4_orphan_get:1417
[  571.000462][T17441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.085527][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.155883][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.170882][T17459] lo speed is unknown, defaulting to 1000
[  571.177142][T17457] lo speed is unknown, defaulting to 1000
[  571.225224][T17460] loop4: detected capacity change from 0 to 2048
[  571.293203][T17460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.307880][T17459] netlink: 'syz.1.4101': attribute type 32 has an invalid length.
[  571.315781][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4101'.
[  571.331117][   T28] audit: type=1400 audit(1772514633.996:5080): avc:  denied  { create } for  pid=17470 comm="syz.8.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  571.382996][T17459] bond0: option coupled_control: invalid value (77)
[  571.394411][T17476] loop8: detected capacity change from 0 to 512
[  571.413516][T17459] bond0 (unregistering): Released all slaves
[  571.420389][ T6994] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  571.431654][T17476] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4105: invalid indirect mapped block 256 (level 2)
[  571.446356][T17476] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  571.453922][T17476] EXT4-fs (loop8): 2 truncates cleaned up
[  571.465976][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  571.469722][T17476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  571.475463][    C1] EXT4-fs (loop8): initial error at time 1772514634: ext4_free_branches:1023: inode 11
[  571.497556][    C1] EXT4-fs (loop8): last error at time 1772514634: ext4_free_branches:1023: inode 11
[  571.533443][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.553803][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.678380][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4110'.
[  571.687608][T17489] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4110'.
[  571.718214][T17489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  571.777414][T17489] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4110: bad orphan inode 131083
[  571.799466][T17489] loop2: lost filesystem error report for type 5 error -117
[  571.810253][T17489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.916686][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.997726][T17506] FAT-fs (loop2): Directory bread(block 32) failed
[  572.004278][T17506] FAT-fs (loop2): Directory bread(block 33) failed
[  572.026570][T17506] FAT-fs (loop2): Directory bread(block 34) failed
[  572.028634][T17512] lo speed is unknown, defaulting to 1000
[  572.039153][T17506] FAT-fs (loop2): Directory bread(block 35) failed
[  572.055860][T17506] FAT-fs (loop2): Directory bread(block 36) failed
[  572.066703][T17506] FAT-fs (loop2): Directory bread(block 37) failed
[  572.116120][T17506] FAT-fs (loop2): Directory bread(block 38) failed
[  572.122747][T17506] FAT-fs (loop2): Directory bread(block 39) failed
[  572.129721][T17506] FAT-fs (loop2): Directory bread(block 40) failed
[  572.136526][T17506] FAT-fs (loop2): Directory bread(block 41) failed
[  572.257952][T17518] lo speed is unknown, defaulting to 1000
[  572.290356][T17514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  572.342020][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.495922][T17518] netlink: 'syz.6.4118': attribute type 32 has an invalid length.
[  572.904119][T17518] bond0: option coupled_control: invalid value (77)
[  572.918655][T17518] bond0 (unregistering): Released all slaves
[  572.956442][T17537] FAULT_INJECTION: forcing a failure.
[  572.956442][T17537] name failslab, interval 1, probability 0, space 0, times 0
[  572.969903][T17537] CPU: 0 UID: 0 PID: 17537 Comm: syz.2.4124 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  572.969935][T17537] Tainted: [W]=WARN
[  572.969941][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  572.969956][T17537] Call Trace:
[  572.969980][T17537]  <TASK>
[  572.969990][T17537]  __dump_stack+0x1d/0x30
[  572.970057][T17537]  dump_stack_lvl+0x95/0xd0
[  572.970081][T17537]  dump_stack+0x15/0x1b
[  572.970102][T17537]  should_fail_ex+0x263/0x280
[  572.970124][T17537]  should_failslab+0x8c/0xb0
[  572.970164][T17537]  kmem_cache_alloc_noprof+0x66/0x400
[  572.970190][T17537]  ? radix_tree_node_alloc+0x8a/0x1f0
[  572.970223][T17537]  radix_tree_node_alloc+0x8a/0x1f0
[  572.970255][T17537]  idr_get_free+0x1fa/0x550
[  572.970352][T17537]  idr_alloc_u32+0xf2/0x1a0
[  572.970374][T17537]  ? __pfx_loop_control_ioctl+0x10/0x10
[  572.970433][T17537]  idr_alloc+0x6e/0xd0
[  572.970452][T17537]  loop_add+0x14f/0x580
[  572.970479][T17537]  ? __pfx_loop_control_ioctl+0x10/0x10
[  572.970503][T17537]  loop_control_ioctl+0xd0/0x3f0
[  572.970661][T17537]  ? __pfx_loop_control_ioctl+0x10/0x10
[  572.970691][T17537]  __se_sys_ioctl+0xce/0x140
[  572.970753][T17537]  __x64_sys_ioctl+0x43/0x50
[  572.970958][T17537]  x64_sys_call+0x1563/0x3020
[  572.970985][T17537]  do_syscall_64+0x12c/0x370
[  572.971006][T17537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.971063][T17537] RIP: 0033:0x7f22dbfdc799
[  572.971082][T17537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.971101][T17537] RSP: 002b:00007f22daa2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  572.971122][T17537] RAX: ffffffffffffffda RBX: 00007f22dc255fa0 RCX: 00007f22dbfdc799
[  572.971140][T17537] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000005
[  572.971157][T17537] RBP: 00007f22daa2f090 R08: 0000000000000000 R09: 0000000000000000
[  572.971233][T17537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.971256][T17537] R13: 00007f22dc256038 R14: 00007f22dc255fa0 R15: 00007fffc1425368
[  572.971279][T17537]  </TASK>
[  573.370081][T17541] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  573.403176][T17541] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4125: bad orphan inode 131083
[  573.439284][T17546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  573.496161][T17541] loop4: lost filesystem error report for type 5 error -117
[  573.496929][T17541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  573.525473][T17558] lo speed is unknown, defaulting to 1000
[  573.535294][T17546] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  573.578428][T17546] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4127: bg 0: block 112: padding at end of block bitmap is not set
[  573.687697][T17559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  573.736347][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.746864][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.763089][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.799280][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  573.799312][   T28] audit: type=1326 audit(1772514636.476:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17565 comm="syz.8.4131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3509fc799 code=0x0
[  573.927594][T17571] tc_dump_action: action bad kind
[  573.992506][T17578] xt_hashlimit: size too large, truncated to 1048576
[  574.015398][T17580] FAULT_INJECTION: forcing a failure.
[  574.015398][T17580] name failslab, interval 1, probability 0, space 0, times 0
[  574.048470][T17580] CPU: 0 UID: 0 PID: 17580 Comm: syz.4.4136 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  574.048502][T17580] Tainted: [W]=WARN
[  574.048509][T17580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  574.048520][T17580] Call Trace:
[  574.048527][T17580]  <TASK>
[  574.048537][T17580]  __dump_stack+0x1d/0x30
[  574.048567][T17580]  dump_stack_lvl+0x95/0xd0
[  574.048593][T17580]  dump_stack+0x15/0x1b
[  574.048618][T17580]  should_fail_ex+0x263/0x280
[  574.048646][T17580]  should_failslab+0x8c/0xb0
[  574.048671][T17580]  kmem_cache_alloc_noprof+0x66/0x400
[  574.048696][T17580]  ? vm_area_alloc+0x2c/0xb0
[  574.048721][T17580]  vm_area_alloc+0x2c/0xb0
[  574.048741][T17580]  mmap_region+0x11ce/0x2050
[  574.048781][T17580]  do_mmap+0x9b2/0xbd0
[  574.048809][T17580]  vm_mmap_pgoff+0x183/0x2d0
[  574.048836][T17580]  ksys_mmap_pgoff+0xc1/0x310
[  574.048861][T17580]  ? __x64_sys_mmap+0x49/0x70
[  574.048898][T17580]  x64_sys_call+0x14df/0x3020
[  574.048927][T17580]  do_syscall_64+0x12c/0x370
[  574.048948][T17580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.048973][T17580] RIP: 0033:0x7fa66977c502
[  574.048992][T17580] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  574.049013][T17580] RSP: 002b:00007fa6681d6df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  574.049036][T17580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa66977c502
[  574.049053][T17580] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  574.049069][T17580] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  574.049085][T17580] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  574.049100][T17580] R13: 00007fa6681d6ee0 R14: 00007fa6681d6ea0 R15: 0000200000000180
[  574.049122][T17580]  </TASK>
[  574.359669][T17588] set_capacity_and_notify: 6 callbacks suppressed
[  574.359693][T17588] loop4: detected capacity change from 0 to 128
[  574.395087][T17588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  574.406169][T17588] System zones: 1-3, 19-19, 35-36
[  574.429707][T17588] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  574.452940][T17588] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  574.508465][T17588] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1768304430 (only 1 groups)
[  574.560840][T17581] __nla_validate_parse: 7 callbacks suppressed
[  574.560904][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4134'.
[  574.587196][T13729] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  574.604630][T17598] loop2: detected capacity change from 0 to 512
[  574.615215][T17598] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4141: invalid indirect mapped block 256 (level 2)
[  574.690991][T17598] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.691480][T17598] EXT4-fs (loop2): 2 truncates cleaned up
[  574.700695][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  574.700713][    C0] EXT4-fs (loop2): initial error at time 1772514637: ext4_free_branches:1023: inode 11
[  574.700739][    C0] EXT4-fs (loop2): last error at time 1772514637: ext4_free_branches:1023: inode 11
[  574.733828][   T28] audit: type=1400 audit(1772514637.366:5082): avc:  denied  { shutdown } for  pid=17605 comm="syz.8.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  574.743864][T17598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.802043][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4144'.
[  574.826219][T17610] lo speed is unknown, defaulting to 1000
[  574.832115][T17612] netlink: 312 bytes leftover after parsing attributes in process `syz.6.4144'.
[  574.843894][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4145'.
[  574.877698][T17621] loop6: detected capacity change from 0 to 512
[  574.885302][T17621] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  574.898144][T17616] loop8: detected capacity change from 0 to 2048
[  574.971363][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4144'.
[  575.032098][T17621] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.4144: bad orphan inode 131083
[  575.066043][T17621] loop6: lost filesystem error report for type 5 error -117
[  575.067492][T17616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.090366][T17621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.127339][T17621] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.221673][T17625] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4141'.
[  575.403750][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.839958][T17637] loop8: detected capacity change from 0 to 164
[  576.021044][   T28] audit: type=1326 audit(1772514638.696:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.4.4152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x0
[  576.085703][T17648] loop8: detected capacity change from 0 to 128
[  576.122719][T17648] FAT-fs (loop8): Directory bread(block 32) failed
[  576.136712][T17648] FAT-fs (loop8): Directory bread(block 33) failed
[  576.153420][T17648] FAT-fs (loop8): Directory bread(block 34) failed
[  576.163497][T17648] FAT-fs (loop8): Directory bread(block 35) failed
[  576.183731][T17648] FAT-fs (loop8): Directory bread(block 36) failed
[  576.193869][T17648] FAT-fs (loop8): Directory bread(block 37) failed
[  576.206082][T17648] FAT-fs (loop8): Directory bread(block 38) failed
[  576.212646][T17648] FAT-fs (loop8): Directory bread(block 39) failed
[  576.236068][T17648] FAT-fs (loop8): Directory bread(block 40) failed
[  576.252941][T17648] FAT-fs (loop8): Directory bread(block 41) failed
[  576.534197][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4154'.
[  576.771008][T17659] loop8: detected capacity change from 0 to 512
[  576.794210][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.804507][T17659] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  576.847514][ T7409] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  576.908919][T17665] program syz.8.4158 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  576.930714][T17667] loop2: detected capacity change from 0 to 512
[  576.950102][T17669] loop4: detected capacity change from 0 to 128
[  576.960846][T17667] EXT4-fs: Ignoring removed oldalloc option
[  576.983425][T17667] EXT4-fs (loop2): 1 truncate cleaned up
[  576.984176][T17669] FAT-fs (loop4): Directory bread(block 32) failed
[  576.991690][T17667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  577.026062][T17669] FAT-fs (loop4): Directory bread(block 33) failed
[  577.046268][   T28] audit: type=1400 audit(1772514639.726:5084): avc:  denied  { link } for  pid=17666 comm="syz.2.4160" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  577.046270][T17667] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.4160: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  577.053840][T17667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4160'.
[  577.106078][T17669] FAT-fs (loop4): Directory bread(block 34) failed
[  577.112637][T17669] FAT-fs (loop4): Directory bread(block 35) failed
[  577.156088][T17669] FAT-fs (loop4): Directory bread(block 36) failed
[  577.162683][T17669] FAT-fs (loop4): Directory bread(block 37) failed
[  577.176827][T17669] FAT-fs (loop4): Directory bread(block 38) failed
[  577.183381][T17669] FAT-fs (loop4): Directory bread(block 39) failed
[  577.207202][T17669] FAT-fs (loop4): Directory bread(block 40) failed
[  577.213811][T17669] FAT-fs (loop4): Directory bread(block 41) failed
[  577.220451][T17667] usb usb1: usbfs: process 17667 (syz.2.4160) did not claim interface 0 before use
[  577.280156][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.429960][T17684] siw: device registration error -23
[  577.512911][T17682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4165'.
[  577.838714][   T28] audit: type=1326 audit(1772514640.516:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.8.4169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3509fc799 code=0x0
[  577.874522][T17687] loop2: detected capacity change from 0 to 8192
[  577.903914][T17691] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4167: invalid indirect mapped block 256 (level 2)
[  577.961988][T17691] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  577.965997][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  577.976295][T17695] IPVS: sh: FWM 3 0x00000003 - no destination available
[  577.981650][    C0] EXT4-fs (loop6): initial error at time 1772514640: ext4_free_branches:1023: inode 11
[  577.998368][    C0] EXT4-fs (loop6): last error at time 1772514640: ext4_free_branches:1023: inode 11
[  578.026162][T17691] EXT4-fs (loop6): 2 truncates cleaned up
[  578.048969][T17691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  578.059496][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  578.418681][T17715] FAT-fs (loop1): Directory bread(block 32) failed
[  578.430229][T17715] FAT-fs (loop1): Directory bread(block 33) failed
[  578.463514][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4177'.
[  578.476061][T17715] FAT-fs (loop1): Directory bread(block 34) failed
[  578.494056][T17715] FAT-fs (loop1): Directory bread(block 35) failed
[  578.546648][T17715] FAT-fs (loop1): Directory bread(block 36) failed
[  578.576664][T17715] FAT-fs (loop1): Directory bread(block 37) failed
[  578.588198][T17715] FAT-fs (loop1): Directory bread(block 38) failed
[  578.605146][T17715] FAT-fs (loop1): Directory bread(block 39) failed
[  578.626952][T17715] FAT-fs (loop1): Directory bread(block 40) failed
[  578.659355][T17715] FAT-fs (loop1): Directory bread(block 41) failed
[  578.889631][   T28] audit: type=1400 audit(1772514641.566:5086): avc:  denied  { unmount } for  pid=13478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  579.078001][T17750] FAULT_INJECTION: forcing a failure.
[  579.078001][T17750] name failslab, interval 1, probability 0, space 0, times 0
[  579.106023][T17750] CPU: 0 UID: 0 PID: 17750 Comm: syz.1.4189 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  579.106166][T17750] Tainted: [W]=WARN
[  579.106176][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  579.106189][T17750] Call Trace:
[  579.106197][T17750]  <TASK>
[  579.106205][T17750]  __dump_stack+0x1d/0x30
[  579.106231][T17750]  dump_stack_lvl+0x95/0xd0
[  579.106256][T17750]  dump_stack+0x15/0x1b
[  579.106349][T17750]  should_fail_ex+0x263/0x280
[  579.106377][T17750]  should_failslab+0x8c/0xb0
[  579.106403][T17750]  __kmalloc_noprof+0xb8/0x4e0
[  579.106431][T17750]  ? kernfs_fop_write_iter+0xe2/0x300
[  579.106480][T17750]  kernfs_fop_write_iter+0xe2/0x300
[  579.106525][T17750]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  579.106559][T17750]  vfs_write+0x5a6/0x9f0
[  579.106642][T17750]  ksys_write+0xdc/0x1a0
[  579.106719][T17750]  __x64_sys_write+0x40/0x50
[  579.106739][T17750]  x64_sys_call+0x27e1/0x3020
[  579.106777][T17750]  do_syscall_64+0x12c/0x370
[  579.106798][T17750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.106859][T17750] RIP: 0033:0x7f479408c799
[  579.106875][T17750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.106893][T17750] RSP: 002b:00007f4792ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  579.106919][T17750] RAX: ffffffffffffffda RBX: 00007f4794305fa0 RCX: 00007f479408c799
[  579.106993][T17750] RDX: 000000000000000b RSI: 0000200000002fc0 RDI: 0000000000000003
[  579.107007][T17750] RBP: 00007f4792ae7090 R08: 0000000000000000 R09: 0000000000000000
[  579.107021][T17750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.107048][T17750] R13: 00007f4794306038 R14: 00007f4794305fa0 R15: 00007ffd6bbaf668
[  579.107066][T17750]  </TASK>
[  579.340469][T17753] FAT-fs (loop2): Directory bread(block 64) failed
[  579.347721][T17753] FAT-fs (loop2): Directory bread(block 65) failed
[  579.354269][T17753] FAT-fs (loop2): Directory bread(block 66) failed
[  579.360923][T17753] FAT-fs (loop2): Directory bread(block 67) failed
[  579.367551][T17753] FAT-fs (loop2): Directory bread(block 68) failed
[  579.374109][T17753] FAT-fs (loop2): Directory bread(block 69) failed
[  579.381241][T17753] FAT-fs (loop2): Directory bread(block 70) failed
[  579.387787][T17753] FAT-fs (loop2): Directory bread(block 71) failed
[  579.388958][T17752] set_capacity_and_notify: 4 callbacks suppressed
[  579.389024][T17752] loop1: detected capacity change from 0 to 128
[  579.394314][T17753] FAT-fs (loop2): Directory bread(block 72) failed
[  579.394338][T17753] FAT-fs (loop2): Directory bread(block 73) failed
[  579.659356][   T28] audit: type=1326 audit(1772514642.106:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.683501][   T28] audit: type=1326 audit(1772514642.106:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.708065][   T28] audit: type=1326 audit(1772514642.106:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.731730][   T28] audit: type=1326 audit(1772514642.106:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.756534][T17756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=17756 comm=syz.1.4190
[  579.769381][T17756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=17756 comm=syz.1.4190
[  579.788814][T17757] __nla_validate_parse: 4 callbacks suppressed
[  579.788831][T17757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4191'.
[  579.793463][   T28] audit: type=1326 audit(1772514642.106:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.829125][   T28] audit: type=1326 audit(1772514642.106:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.919493][T17760] loop1: detected capacity change from 0 to 512
[  579.929151][   T28] audit: type=1326 audit(1772514642.106:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.968551][T17760] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  579.975997][   T28] audit: type=1326 audit(1772514642.106:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  579.991732][T17760] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  580.000615][   T28] audit: type=1326 audit(1772514642.106:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22dbfdc799 code=0x7ffc0000
[  580.176040][T17760] System zones: 0-1, 15-15, 18-18, 34-34
[  580.182051][T17760] EXT4-fs (loop1): orphan cleanup on readonly fs
[  580.191868][T17760] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  580.233623][T17760] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  580.254934][T17760] EXT4-fs (loop1): 1 truncate cleaned up
[  580.264246][T17760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  580.367507][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.389314][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.841615][T17778] loop4: detected capacity change from 0 to 1024
[  580.864169][T17778] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  580.902593][T17778] EXT4-fs (loop4): group descriptors corrupted!
[  580.935664][T17778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4197'.
[  581.226033][T17782] loop4: detected capacity change from 0 to 512
[  581.241602][T17782] EXT4-fs: Ignoring removed nobh option
[  581.427859][T17782] EXT4-fs (loop4): 1 orphan inode deleted
[  581.451229][T17782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  581.872258][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.904450][T17792] FAULT_INJECTION: forcing a failure.
[  581.904450][T17792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  581.950601][T17792] CPU: 0 UID: 0 PID: 17792 Comm: syz.4.4202 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  581.950639][T17792] Tainted: [W]=WARN
[  581.950648][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  581.950661][T17792] Call Trace:
[  581.950669][T17792]  <TASK>
[  581.950679][T17792]  __dump_stack+0x1d/0x30
[  581.950792][T17792]  dump_stack_lvl+0x95/0xd0
[  581.950817][T17792]  dump_stack+0x15/0x1b
[  581.950918][T17792]  should_fail_ex+0x263/0x280
[  581.950946][T17792]  should_fail+0xb/0x20
[  581.950969][T17792]  should_fail_usercopy+0x1a/0x20
[  581.950992][T17792]  _copy_from_user+0x1c/0xb0
[  581.951084][T17792]  __sys_bpf+0x183/0x7e0
[  581.951109][T17792]  __x64_sys_bpf+0x41/0x50
[  581.951217][T17792]  x64_sys_call+0x10cb/0x3020
[  581.951247][T17792]  do_syscall_64+0x12c/0x370
[  581.951315][T17792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.951392][T17792] RIP: 0033:0x7fa66977c799
[  581.951450][T17792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.951472][T17792] RSP: 002b:00007fa6681d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  581.951506][T17792] RAX: ffffffffffffffda RBX: 00007fa6699f5fa0 RCX: 00007fa66977c799
[  581.951523][T17792] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  581.951538][T17792] RBP: 00007fa6681d7090 R08: 0000000000000000 R09: 0000000000000000
[  581.951552][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.951568][T17792] R13: 00007fa6699f6038 R14: 00007fa6699f5fa0 R15: 00007ffeca604588
[  581.951589][T17792]  </TASK>
[  582.147104][T17790] loop1: detected capacity change from 0 to 8192
[  582.203016][ T3543]  loop1: p1 < > p2 p4 < p5 >
[  582.211274][ T3543] loop1: partition table partially beyond EOD, truncated
[  582.240149][ T3543] loop1: p1 start 134217728 is beyond EOD, truncated
[  582.262710][ T3543] loop1: p2 size 591360 extends beyond EOD, truncated
[  582.307704][ T3543] loop1: p5 size 591360 extends beyond EOD, truncated
[  582.355009][T17804] loop6: detected capacity change from 0 to 512
[  582.369398][T17804] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4206: invalid indirect mapped block 256 (level 2)
[  582.386864][T17790]  loop1: p1 < > p2 p4 < p5 >
[  582.391563][T17790] loop1: partition table partially beyond EOD, truncated
[  582.413501][T17804] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  582.415981][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  582.431579][    C0] EXT4-fs (loop6): initial error at time 1772514645: ext4_free_branches:1023: inode 11
[  582.441290][    C0] EXT4-fs (loop6): last error at time 1772514645: ext4_free_branches:1023: inode 11
[  582.460373][T17804] EXT4-fs (loop6): 2 truncates cleaned up
[  582.525696][T17790] loop1: p1 start 134217728 is beyond EOD, truncated
[  582.556108][T17790] loop1: p2 size 591360 extends beyond EOD, truncated
[  582.588834][T17790] loop1: p5 size 591360 extends beyond EOD, truncated
[  582.755781][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4200'.
[  582.822800][T17790] lo speed is unknown, defaulting to 1000
[  582.838119][T17811] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4206'.
[  583.448593][T17825] batadv_slave_1: entered promiscuous mode
[  583.495165][T17825] batadv_slave_1: left promiscuous mode
[  584.065759][T17833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4212'.
[  584.456820][T17806] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  584.630541][T17847] FAULT_INJECTION: forcing a failure.
[  584.630541][T17847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  584.680455][T17847] CPU: 0 UID: 0 PID: 17847 Comm: syz.4.4216 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  584.680624][T17847] Tainted: [W]=WARN
[  584.680630][T17847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  584.680713][T17847] Call Trace:
[  584.680721][T17847]  <TASK>
[  584.680729][T17847]  __dump_stack+0x1d/0x30
[  584.680783][T17847]  dump_stack_lvl+0x95/0xd0
[  584.680811][T17847]  dump_stack+0x15/0x1b
[  584.680837][T17847]  should_fail_ex+0x263/0x280
[  584.680912][T17847]  should_fail+0xb/0x20
[  584.680935][T17847]  should_fail_usercopy+0x1a/0x20
[  584.680964][T17847]  _copy_from_user+0x1c/0xb0
[  584.680989][T17847]  __sys_bpf+0x183/0x7e0
[  584.681051][T17847]  __x64_sys_bpf+0x41/0x50
[  584.681082][T17847]  x64_sys_call+0x10cb/0x3020
[  584.681113][T17847]  do_syscall_64+0x12c/0x370
[  584.681137][T17847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.681204][T17847] RIP: 0033:0x7fa66977c799
[  584.681241][T17847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.681261][T17847] RSP: 002b:00007fa6681d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  584.681284][T17847] RAX: ffffffffffffffda RBX: 00007fa6699f5fa0 RCX: 00007fa66977c799
[  584.681301][T17847] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  584.681317][T17847] RBP: 00007fa6681d7090 R08: 0000000000000000 R09: 0000000000000000
[  584.681330][T17847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  584.681443][T17847] R13: 00007fa6699f6038 R14: 00007fa6699f5fa0 R15: 00007ffeca604588
[  584.681461][T17847]  </TASK>
[  584.914478][T17852] loop8: detected capacity change from 0 to 128
[  584.949443][   T28] kauditd_printk_skb: 65 callbacks suppressed
[  584.949463][   T28] audit: type=1326 audit(1772514647.626:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.1.4220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f479408c799 code=0x0
[  585.086683][T17852] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  585.095835][T17860] IPVS: sh: FWM 3 0x00000003 - no destination available
[  585.105264][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  586.561203][T17871] loop1: detected capacity change from 0 to 512
[  586.593731][T17871] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  586.631101][T17871] tc_dump_action: action bad kind
[  587.522402][T17880] siw: device registration error -23
[  587.924373][T17897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.944074][T17897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.057302][T17883] loop6: detected capacity change from 0 to 32768
[  588.132471][T17900] loop8: detected capacity change from 0 to 512
[  588.167703][T17900] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4231: invalid indirect mapped block 256 (level 2)
[  588.181368][T17900] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  588.181778][T17900] EXT4-fs (loop8): 2 truncates cleaned up
[  588.190928][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  588.190948][    C1] EXT4-fs (loop8): initial error at time 1772514650: ext4_free_branches:1023: inode 11
[  588.190988][    C1] EXT4-fs (loop8): last error at time 1772514650: ext4_free_branches:1023: inode 11
[  588.236032][   T28] audit: type=1326 audit(1772514650.906:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17902 comm="syz.4.4232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x0
[  588.481276][T17910] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4231'.
[  588.752652][T17923] loop2: detected capacity change from 0 to 128
[  588.934816][T17923] EXT4-fs mount: 5 callbacks suppressed
[  588.934837][T17923] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  588.975037][T17923] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.262205][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.263973][T17935] lo speed is unknown, defaulting to 1000
[  589.598723][   T28] audit: type=1400 audit(1772514652.246:5162): avc:  denied  { bind } for  pid=17934 comm="syz.4.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  589.625248][T17937] lo speed is unknown, defaulting to 1000
[  589.964779][T17949] loop8: detected capacity change from 0 to 512
[  589.981377][T17950] loop6: detected capacity change from 0 to 512
[  589.997596][T17949] EXT4-fs (loop8): 1 orphan inode deleted
[  590.011643][T17949] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.053513][T17949] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.113327][T17950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.137787][T17956] FAULT_INJECTION: forcing a failure.
[  590.137787][T17956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.153105][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.183836][T17956] CPU: 1 UID: 0 PID: 17956 Comm: syz.4.4245 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  590.183869][T17956] Tainted: [W]=WARN
[  590.183877][T17956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  590.183965][T17956] Call Trace:
[  590.183972][T17956]  <TASK>
[  590.183982][T17956]  __dump_stack+0x1d/0x30
[  590.184069][T17956]  dump_stack_lvl+0x95/0xd0
[  590.184172][T17956]  dump_stack+0x15/0x1b
[  590.184261][T17956]  should_fail_ex+0x263/0x280
[  590.184352][T17956]  should_fail+0xb/0x20
[  590.184373][T17956]  should_fail_usercopy+0x1a/0x20
[  590.184399][T17956]  _copy_from_user+0x1c/0xb0
[  590.184431][T17956]  copy_clone_args_from_user+0x151/0x500
[  590.184493][T17956]  ? kstrtouint+0x76/0xc0
[  590.184520][T17956]  __se_sys_clone3+0x79/0x230
[  590.184550][T17956]  __x64_sys_clone3+0x31/0x40
[  590.184573][T17956]  x64_sys_call+0x580/0x3020
[  590.184631][T17956]  do_syscall_64+0x12c/0x370
[  590.184652][T17956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.184734][T17956] RIP: 0033:0x7fa66977c799
[  590.184754][T17956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.184776][T17956] RSP: 002b:00007fa6681d6ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  590.184800][T17956] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa66977c799
[  590.184814][T17956] RDX: 00007fa6681d6f10 RSI: 0000000000000058 RDI: 00007fa6681d6f10
[  590.184872][T17956] RBP: 00007fa6681d7090 R08: 0000000000000000 R09: 0000000000000058
[  590.184888][T17956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.184904][T17956] R13: 00007fa6699f6038 R14: 00007fa6699f5fa0 R15: 00007ffeca604588
[  590.184923][T17956]  </TASK>
[  590.372912][T17959] loop8: detected capacity change from 0 to 256
[  590.386053][T17950] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.426058][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'.
[  590.460942][T17963] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4247'.
[  590.471741][T17965] siw: device registration error -23
[  590.486512][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4247'.
[  590.509175][T17966] loop1: detected capacity change from 0 to 512
[  590.536395][T17966] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  590.609116][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4243'.
[  590.631729][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4243'.
[  590.653619][T17966] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4247: bad orphan inode 131083
[  590.674333][T17966] loop1: lost filesystem error report for type 5 error -117
[  590.675974][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  590.689818][    C1] EXT4-fs (loop1): initial error at time 1772514653: ext4_orphan_get:1417
[  590.698392][    C1] EXT4-fs (loop1): last error at time 1772514653: ext4_orphan_get:1417
[  590.708149][T17966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.720933][T17966] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.733724][T17971] EXT4-fs (loop6): shut down requested (0)
[  590.766223][  T316] Bluetooth: hci0: Frame reassembly failed (-84)
[  590.951026][T17976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.007198][T17976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.049260][T12890] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  591.704690][T17982] loop8: detected capacity change from 0 to 1024
[  591.726701][T17982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  591.761646][T17982] lo speed is unknown, defaulting to 1000
[  591.767511][   T28] audit: type=1400 audit(1772514654.426:5163): avc:  denied  { execute } for  pid=17981 comm="syz.8.4251" path="/116/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  592.113685][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.161562][T17990] loop8: detected capacity change from 0 to 512
[  592.202080][T17990] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4252: invalid indirect mapped block 256 (level 2)
[  592.217077][T17990] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  592.217572][T17990] EXT4-fs (loop8): 2 truncates cleaned up
[  592.227331][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  592.227356][    C1] EXT4-fs (loop8): initial error at time 1772514654: ext4_free_branches:1023: inode 11
[  592.227398][    C1] EXT4-fs (loop8): last error at time 1772514654: ext4_free_branches:1023: inode 11
[  592.259867][T17990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  592.456513][T17993] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4252'.
[  592.786295][T13501] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  592.861077][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.476868][T18013] lo speed is unknown, defaulting to 1000
[  593.709850][T18013] netlink: 'syz.1.4257': attribute type 32 has an invalid length.
[  593.731454][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4257'.
[  593.773163][T18013] bond0: option coupled_control: invalid value (77)
[  593.780055][T18022] loop6: detected capacity change from 0 to 128
[  593.834264][T18013] bond0 (unregistering): Released all slaves
[  593.845260][T18022] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  593.895343][T18022] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  593.913729][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.945225][T18026] siw: device registration error -23
[  594.061068][T18031] lo speed is unknown, defaulting to 1000
[  594.120898][T18032] loop2: detected capacity change from 0 to 512
[  594.209808][T18032] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  594.247903][T18032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  594.268474][T18031] loop8: detected capacity change from 0 to 2048
[  594.275133][T18032] System zones: 0-1, 15-15, 18-18, 34-34
[  594.299046][T18031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  594.325376][T18032] EXT4-fs (loop2): orphan cleanup on readonly fs
[  594.354532][T18032] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  594.368139][T18032] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  594.383441][T18032] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  594.391071][T18032] EXT4-fs (loop2): 1 truncate cleaned up
[  594.398288][T18032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  595.074299][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.099097][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.471870][   T28] audit: type=1400 audit(1772514658.146:5164): avc:  denied  { getopt } for  pid=18055 comm="syz.8.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  595.733852][   T28] audit: type=1400 audit(1772514658.406:5165): avc:  denied  { bind } for  pid=18055 comm="syz.8.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  595.822035][ T8030] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  595.905463][   T28] audit: type=1326 audit(1772514658.576:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x7ffc0000
[  595.934821][   T28] audit: type=1326 audit(1772514658.576:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x7ffc0000
[  595.960600][T18070] loop6: detected capacity change from 0 to 512
[  595.961601][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'.
[  595.981039][T18068] lo speed is unknown, defaulting to 1000
[  595.988023][T18061] loop4: detected capacity change from 0 to 512
[  595.994979][T18072] siw: device registration error -23
[  596.010683][T18070] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4272: invalid indirect mapped block 256 (level 2)
[  596.025584][   T28] audit: type=1326 audit(1772514658.576:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x7ffc0000
[  596.036210][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.049738][   T28] audit: type=1326 audit(1772514658.576:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x7ffc0000
[  596.073501][T18070] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  596.081209][   T28] audit: type=1326 audit(1772514658.606:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa66977c799 code=0x7ffc0000
[  596.103738][T18070] EXT4-fs (loop6): 2 truncates cleaned up
[  596.114235][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  596.114256][    C0] EXT4-fs (loop6): initial error at time 1772514658: ext4_free_branches:1023: inode 11
[  596.114302][    C0] EXT4-fs (loop6): last error at time 1772514658: ext4_free_branches:1023: inode 11
[  596.114566][   T28] audit: type=1326 audit(1772514658.606:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18060 comm="syz.4.4271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x7ffc0000
[  596.136831][T18061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.136955][T18061] ext4 filesystem being mounted at /230/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  596.196900][T18070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.210813][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.307736][T18080] lo speed is unknown, defaulting to 1000
[  596.399532][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.459595][T18089] loop2: detected capacity change from 0 to 2048
[  596.468771][T18080] netlink: 'syz.1.4275': attribute type 32 has an invalid length.
[  596.479705][T18081] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4272'.
[  596.495784][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4275'.
[  596.538524][T18089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  596.575332][T18080] bond0: option coupled_control: invalid value (77)
[  596.613989][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4276'.
[  596.627224][T18080] bond0 (unregistering): Released all slaves
[  596.665980][T18090] lo speed is unknown, defaulting to 1000
[  596.684529][T18089] lo speed is unknown, defaulting to 1000
[  596.742342][T18105] loop1: detected capacity change from 0 to 128
[  596.818345][T18109] FAULT_INJECTION: forcing a failure.
[  596.818345][T18109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  596.834776][T18105] FAT-fs (loop1): Directory bread(block 32) failed
[  596.842416][T18105] FAT-fs (loop1): Directory bread(block 33) failed
[  596.851502][T18105] FAT-fs (loop1): Directory bread(block 34) failed
[  596.856485][T18109] CPU: 0 UID: 0 PID: 18109 Comm: syz.8.4281 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  596.856537][T18109] Tainted: [W]=WARN
[  596.856575][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  596.856588][T18109] Call Trace:
[  596.856596][T18109]  <TASK>
[  596.856605][T18109]  __dump_stack+0x1d/0x30
[  596.856634][T18109]  dump_stack_lvl+0x95/0xd0
[  596.856776][T18109]  dump_stack+0x15/0x1b
[  596.856823][T18109]  should_fail_ex+0x263/0x280
[  596.856870][T18109]  should_fail+0xb/0x20
[  596.856910][T18109]  should_fail_usercopy+0x1a/0x20
[  596.856935][T18109]  _copy_from_user+0x1c/0xb0
[  596.856964][T18109]  do_ipv6_setsockopt+0x124/0x21d0
[  596.856989][T18109]  ? kstrtoull+0x111/0x140
[  596.857009][T18109]  ? __rcu_read_unlock+0x4e/0x70
[  596.857080][T18109]  ? avc_has_perm_noaudit+0xab/0x130
[  596.857107][T18109]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  596.857143][T18109]  ipv6_setsockopt+0x59/0x130
[  596.857197][T18109]  tcp_setsockopt+0x98/0xb0
[  596.857223][T18109]  sock_common_setsockopt+0x69/0x80
[  596.857246][T18109]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  596.857268][T18109]  __sys_setsockopt+0x184/0x200
[  596.857314][T18109]  __x64_sys_setsockopt+0x64/0x80
[  596.857341][T18109]  x64_sys_call+0x2327/0x3020
[  596.857378][T18109]  do_syscall_64+0x12c/0x370
[  596.857400][T18109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.857423][T18109] RIP: 0033:0x7fd3509fc799
[  596.857441][T18109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.857501][T18109] RSP: 002b:00007fd34f44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  596.857523][T18109] RAX: ffffffffffffffda RBX: 00007fd350c75fa0 RCX: 00007fd3509fc799
[  596.857539][T18109] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  596.857552][T18109] RBP: 00007fd34f44f090 R08: 0000000000000468 R09: 0000000000000000
[  596.857567][T18109] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001
[  596.857581][T18109] R13: 00007fd350c76038 R14: 00007fd350c75fa0 R15: 00007ffd5d2c08a8
[  596.857600][T18109]  </TASK>
[  596.898487][T18109] loop8: detected capacity change from 0 to 164
[  596.926003][T18105] FAT-fs (loop1): Directory bread(block 35) failed
[  596.996447][T18105] FAT-fs (loop1): Directory bread(block 36) failed
[  596.996474][T18105] FAT-fs (loop1): Directory bread(block 37) failed
[  596.996501][T18105] FAT-fs (loop1): Directory bread(block 38) failed
[  596.996520][T18105] FAT-fs (loop1): Directory bread(block 39) failed
[  596.996543][T18105] FAT-fs (loop1): Directory bread(block 40) failed
[  596.996605][T18105] FAT-fs (loop1): Directory bread(block 41) failed
[  597.180477][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'.
[  597.202950][T18114] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4282'.
[  597.223847][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'.
[  597.268888][T18114] loop1: detected capacity change from 0 to 512
[  597.313982][T18114] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  597.346220][T18114] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4282: bad orphan inode 131083
[  597.357032][T18114] loop1: lost filesystem error report for type 5 error -117
[  597.357314][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.357667][T18114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  597.390835][T18114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.683902][T18131] loop8: detected capacity change from 0 to 128
[  597.709856][T18131] FAT-fs (loop8): Directory bread(block 32) failed
[  597.736059][T18076] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  597.753118][T18131] FAT-fs (loop8): Directory bread(block 33) failed
[  597.779283][T18131] FAT-fs (loop8): Directory bread(block 34) failed
[  597.796012][T18131] FAT-fs (loop8): Directory bread(block 35) failed
[  597.803777][T18131] FAT-fs (loop8): Directory bread(block 36) failed
[  597.819680][T18131] FAT-fs (loop8): Directory bread(block 37) failed
[  597.836043][T18131] FAT-fs (loop8): Directory bread(block 38) failed
[  597.850417][T18131] FAT-fs (loop8): Directory bread(block 39) failed
[  597.867146][T18131] FAT-fs (loop8): Directory bread(block 40) failed
[  597.881823][T18131] FAT-fs (loop8): Directory bread(block 41) failed
[  598.149436][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.243515][T18142] lo speed is unknown, defaulting to 1000
[  598.301314][T18145] loop4: detected capacity change from 0 to 512
[  598.317382][T18147] siw: device registration error -23
[  598.384107][T18146] netlink: 'syz.8.4291': attribute type 32 has an invalid length.
[  598.392103][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4291'.
[  598.404523][T18145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.453271][T18145] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.467150][T18146] bond1: option coupled_control: invalid value (77)
[  598.491663][T18146] bond1 (unregistering): Released all slaves
[  599.400269][   T50] Bluetooth: hci0: Frame reassembly failed (-84)
[  599.664861][T18161] FAULT_INJECTION: forcing a failure.
[  599.664861][T18161] name failslab, interval 1, probability 0, space 0, times 0
[  599.691498][T18161] CPU: 1 UID: 0 PID: 18161 Comm: syz.1.4294 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  599.691539][T18161] Tainted: [W]=WARN
[  599.691548][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  599.691563][T18161] Call Trace:
[  599.691570][T18161]  <TASK>
[  599.691596][T18161]  __dump_stack+0x1d/0x30
[  599.691644][T18161]  dump_stack_lvl+0x95/0xd0
[  599.691716][T18161]  dump_stack+0x15/0x1b
[  599.691742][T18161]  should_fail_ex+0x263/0x280
[  599.691769][T18161]  should_failslab+0x8c/0xb0
[  599.691819][T18161]  kmem_cache_alloc_lru_noprof+0x6c/0x410
[  599.691840][T18161]  ? __d_alloc+0x37/0x340
[  599.691869][T18161]  __d_alloc+0x37/0x340
[  599.691960][T18161]  d_alloc_pseudo+0x1e/0x80
[  599.691985][T18161]  alloc_file_pseudo+0x91/0x190
[  599.692057][T18161]  __shmem_file_setup+0x1dd/0x210
[  599.692137][T18161]  shmem_file_setup+0x3b/0x50
[  599.692167][T18161]  memfd_alloc_file+0x4e/0x300
[  599.692257][T18161]  __se_sys_memfd_create+0x2e1/0x3b0
[  599.692296][T18161]  __x64_sys_memfd_create+0x31/0x40
[  599.692337][T18161]  x64_sys_call+0x1f22/0x3020
[  599.692433][T18161]  do_syscall_64+0x12c/0x370
[  599.692490][T18161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.692515][T18161] RIP: 0033:0x7f479408c799
[  599.692532][T18161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.692615][T18161] RSP: 002b:00007f4792ae6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  599.692667][T18161] RAX: ffffffffffffffda RBX: 0000000000000475 RCX: 00007f479408c799
[  599.692683][T18161] RDX: 00007f4792ae6ee0 RSI: 0000000000000000 RDI: 00007f4794122db9
[  599.692700][T18161] RBP: 0000200000000500 R08: 00000000ffffffff R09: 0000000000000000
[  599.692716][T18161] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0
[  599.692732][T18161] R13: 00007f4792ae6ee0 R14: 00007f4792ae6ea0 R15: 0000200000000000
[  599.692836][T18161]  </TASK>
[  599.891207][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4296'.
[  599.926118][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4298'.
[  601.153391][T18188] loop8: detected capacity change from 0 to 512
[  601.264238][T18194] loop6: detected capacity change from 0 to 128
[  601.283124][T18195] netlink: 'syz.8.4306': attribute type 12 has an invalid length.
[  601.283708][T18194] FAT-fs (loop6): Directory bread(block 32) failed
[  601.306150][T18194] FAT-fs (loop6): Directory bread(block 33) failed
[  601.313268][T18193] netlink: 'syz.8.4306': attribute type 12 has an invalid length.
[  601.323161][T18194] FAT-fs (loop6): Directory bread(block 34) failed
[  601.343095][T18194] FAT-fs (loop6): Directory bread(block 35) failed
[  601.350132][T18194] FAT-fs (loop6): Directory bread(block 36) failed
[  601.357128][T18194] FAT-fs (loop6): Directory bread(block 37) failed
[  601.390496][T18194] FAT-fs (loop6): Directory bread(block 38) failed
[  601.410592][T18194] FAT-fs (loop6): Directory bread(block 39) failed
[  601.417525][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  601.426083][T13501] Bluetooth: hci0: command 0x1003 tx timeout
[  601.436898][T18194] FAT-fs (loop6): Directory bread(block 40) failed
[  601.443500][T18194] FAT-fs (loop6): Directory bread(block 41) failed
[  601.496737][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.537164][T18208] syzkaller0: entered promiscuous mode
[  601.542777][T18208] syzkaller0: entered allmulticast mode
[  601.723392][   T28] kauditd_printk_skb: 88 callbacks suppressed
[  601.723410][   T28] audit: type=1400 audit(1772514664.396:5260): avc:  denied  { append } for  pid=18215 comm="syz.4.4314" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  601.840059][T18221] FAULT_INJECTION: forcing a failure.
[  601.840059][T18221] name failslab, interval 1, probability 0, space 0, times 0
[  601.976265][T18221] CPU: 1 UID: 0 PID: 18221 Comm: syz.4.4317 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  601.976354][T18221] Tainted: [W]=WARN
[  601.976361][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  601.976373][T18221] Call Trace:
[  601.976380][T18221]  <TASK>
[  601.976389][T18221]  __dump_stack+0x1d/0x30
[  601.976431][T18221]  dump_stack_lvl+0x95/0xd0
[  601.976455][T18221]  dump_stack+0x15/0x1b
[  601.976542][T18221]  should_fail_ex+0x263/0x280
[  601.976571][T18221]  should_failslab+0x8c/0xb0
[  601.976596][T18221]  kmem_cache_alloc_noprof+0x66/0x400
[  601.976622][T18221]  ? ep_insert+0x2cf/0xe00
[  601.976654][T18221]  ep_insert+0x2cf/0xe00
[  601.976733][T18221]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  601.976810][T18221]  ? do_epoll_ctl+0x297/0x8a0
[  601.976843][T18221]  do_epoll_ctl+0x686/0x8a0
[  601.976880][T18221]  __x64_sys_epoll_ctl+0xcb/0x100
[  601.976985][T18221]  x64_sys_call+0x2a8b/0x3020
[  601.977036][T18221]  do_syscall_64+0x12c/0x370
[  601.977133][T18221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.977154][T18221] RIP: 0033:0x7fa66977c799
[  601.977174][T18221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.977242][T18221] RSP: 002b:00007fa6681d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  601.977265][T18221] RAX: ffffffffffffffda RBX: 00007fa6699f5fa0 RCX: 00007fa66977c799
[  601.977279][T18221] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004
[  601.977291][T18221] RBP: 00007fa6681d7090 R08: 0000000000000000 R09: 0000000000000000
[  601.977317][T18221] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  601.977333][T18221] R13: 00007fa6699f6038 R14: 00007fa6699f5fa0 R15: 00007ffeca604588
[  601.977354][T18221]  </TASK>
[  602.392533][T18234] loop4: detected capacity change from 0 to 128
[  602.399431][T18233] loop8: detected capacity change from 0 to 512
[  602.429807][T18233] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.4319: corrupted in-inode xattr: e_value out of bounds
[  602.456497][T18233] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  602.460071][T18233] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4319: couldn't read orphan inode 15 (err -117)
[  602.469278][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  602.469299][    C1] EXT4-fs (loop8): initial error at time 1772514665: ext4_iget_extra_inode:5025: inode 15
[  602.469327][    C1] EXT4-fs (loop8): last error at time 1772514665: ext4_iget_extra_inode:5025: inode 15
[  602.512547][T18233] loop8: lost filesystem error report for type 5 error -117
[  602.523354][T18233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.550148][T18247] loop2: detected capacity change from 0 to 512
[  602.648598][   T50] kworker/u8:3 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0
[  602.671219][   T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  602.671311][   T50] Tainted: [W]=WARN
[  602.671320][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  602.671348][   T50] Workqueue: loop2 loop_workfn
[  602.671374][   T50] Call Trace:
[  602.671381][   T50]  <TASK>
[  602.671388][   T50]  __dump_stack+0x1d/0x30
[  602.671478][   T50]  dump_stack_lvl+0x95/0xd0
[  602.671507][   T50]  dump_stack+0x15/0x1b
[  602.671533][   T50]  dump_header+0x80/0x240
[  602.671560][   T50]  oom_kill_process+0x295/0x350
[  602.671661][   T50]  out_of_memory+0x97d/0xb80
[  602.671687][   T50]  try_charge_memcg+0x62e/0xa10
[  602.671747][   T50]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  602.671856][   T50]  __swap_cache_prepare_and_add+0x386/0x530
[  602.671924][   T50]  swap_cache_alloc_folio+0xa2/0x120
[  602.671950][   T50]  swap_cluster_readahead+0x26e/0x3d0
[  602.671991][   T50]  shmem_swapin_folio+0x951/0x1360
[  602.672135][   T50]  ? __rcu_read_unlock+0x4e/0x70
[  602.672163][   T50]  ? filemap_get_entry+0x392/0x3d0
[  602.672191][   T50]  shmem_get_folio_gfp+0x278/0xd60
[  602.672226][   T50]  shmem_write_begin+0xfc/0x1f0
[  602.672322][   T50]  generic_perform_write+0x183/0x490
[  602.672356][   T50]  shmem_file_write_iter+0xc5/0xf0
[  602.672392][   T50]  lo_rw_aio+0x67d/0x730
[  602.672464][   T50]  loop_process_work+0x56c/0xac0
[  602.672602][   T50]  ? __pfx_perf_event_switch_output+0x10/0x10
[  602.672628][   T50]  ? __perf_event_task_sched_in+0xa65/0xad0
[  602.672731][   T50]  ? perf_iterate_sb+0x629/0x650
[  602.672757][   T50]  ? __pfx_perf_event_switch_output+0x10/0x10
[  602.672790][   T50]  loop_workfn+0x31/0x40
[  602.672853][   T50]  process_scheduled_works+0x4de/0x9e0
[  602.672884][   T50]  worker_thread+0x581/0x770
[  602.672958][   T50]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  602.673000][   T50]  ? __pfx_worker_thread+0x10/0x10
[  602.673077][   T50]  kthread+0x22a/0x280
[  602.673097][   T50]  ? __pfx_kthread+0x10/0x10
[  602.673116][   T50]  ret_from_fork+0x150/0x360
[  602.673185][   T50]  ? __pfx_kthread+0x10/0x10
[  602.673203][   T50]  ret_from_fork_asm+0x1a/0x30
[  602.673235][   T50]  </TASK>
[  602.674919][   T50] memory: usage 307200kB, limit 307200kB, failcnt 37821
[  602.709620][T18246] FAULT_INJECTION: forcing a failure.
[  602.709620][T18246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.712097][   T50] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0
[  602.732253][T18246] CPU: 1 UID: 0 PID: 18246 Comm: syz.4.4323 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  602.732309][T18246] Tainted: [W]=WARN
[  602.732317][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  602.732329][T18246] Call Trace:
[  602.732336][T18246]  <TASK>
[  602.732344][T18246]  __dump_stack+0x1d/0x30
[  602.732372][T18246]  dump_stack_lvl+0x95/0xd0
[  602.732397][T18246]  dump_stack+0x15/0x1b
[  602.732440][T18246]  should_fail_ex+0x263/0x280
[  602.732464][T18246]  should_fail+0xb/0x20
[  602.732485][T18246]  should_fail_usercopy+0x1a/0x20
[  602.732528][T18246]  _copy_to_user+0x20/0xa0
[  602.732618][T18246]  simple_read_from_buffer+0xb5/0x130
[  602.732642][T18246]  proc_fail_nth_read+0x10e/0x150
[  602.732672][T18246]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  602.732776][T18246]  vfs_read+0x1ab/0x7f0
[  602.732806][T18246]  ? __rcu_read_unlock+0x4e/0x70
[  602.732839][T18246]  ? __fget_files+0x184/0x1c0
[  602.732863][T18246]  ? mutex_lock+0x57/0x90
[  602.732899][T18246]  ksys_read+0xdc/0x1a0
[  602.733001][T18246]  __x64_sys_read+0x40/0x50
[  602.733068][T18246]  x64_sys_call+0x2886/0x3020
[  602.733095][T18246]  do_syscall_64+0x12c/0x370
[  602.733116][T18246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.733206][T18246] RIP: 0033:0x7fa66973cfce
[  602.733224][T18246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  602.733249][T18246] RSP: 002b:00007fa6681b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  602.733272][T18246] RAX: ffffffffffffffda RBX: 00007fa6681b66c0 RCX: 00007fa66973cfce
[  602.733336][T18246] RDX: 000000000000000f RSI: 00007fa6681b60a0 RDI: 0000000000000006
[  602.733351][T18246] RBP: 00007fa6681b6090 R08: 0000000000000000 R09: 0000000000000000
[  602.733365][T18246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.733378][T18246] R13: 00007fa6699f6128 R14: 00007fa6699f6090 R15: 00007ffeca604588
[  602.733397][T18246]  </TASK>
[  603.119288][   T50] kmem: usage 804kB, limit 9007199254740988kB, failcnt 0
[  603.126837][   T50] Memory cgroup stats for /syz2:
[  603.127036][   T50] cache 8192
[  603.135323][   T50] rss 28672
[  603.139194][   T50] shmem 0
[  603.142146][   T50] mapped_file 0
[  603.145689][   T50] dirty 0
[  603.149168][   T50] writeback 0
[  603.152474][   T50] workingset_refault_anon 1421
[  603.165837][   T50] workingset_refault_file 18596
[  603.171394][   T50] swap 733184
[  603.174690][   T50] swapcached 47292416
[  603.178723][   T50] pgpgin 728558
[  603.182211][   T50] pgpgout 728545
[  603.185820][   T50] pgfault 538410
[  603.210390][   T50] pgmajfault 470
[  603.216335][   T50] inactive_anon 0
[  603.223127][   T50] active_anon 40960
[  603.227813][   T50] inactive_file 0
[  603.228634][T15467] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.231703][   T50] active_file 12288
[  603.252280][   T50] unevictable 0
[  603.256695][   T50] hierarchical_memory_limit 314572800
[  603.262161][   T50] hierarchical_memsw_limit 9223372036854771712
[  603.268744][   T50] total_cache 8192
[  603.329590][   T50] total_rss 28672
[  603.335317][   T50] total_shmem 0
[  603.349913][   T50] total_mapped_file 0
[  603.353974][   T50] total_dirty 0
[  603.357581][   T50] total_writeback 0
[  603.361524][   T50] total_workingset_refault_anon 1421
[  603.366869][   T50] total_workingset_refault_file 18596
[  603.372303][   T50] total_swap 733184
[  603.376186][   T50] total_swapcached 47292416
[  603.380720][   T50] total_pgpgin 728558
[  603.384798][   T50] total_pgpgout 728545
[  603.388917][   T50] total_pgfault 538410
[  603.392997][   T50] total_pgmajfault 470
[  603.397166][   T50] total_inactive_anon 0
[  603.453691][   T50] total_active_anon 40960
[  603.461247][   T50] total_inactive_file 0
[  603.465491][   T50] total_active_file 12288
[  603.473122][   T50] total_unevictable 0
[  603.501864][   T50] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4321,pid=18235,uid=0
[  603.517198][   T50] Memory cgroup out of memory: Killed process 18235 (syz.2.4321) total-vm:94160kB, anon-rss:1244kB, file-rss:21772kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  603.540038][T18247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.565781][T18247] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  603.648289][T18286] lo speed is unknown, defaulting to 1000
[  603.875992][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.522130][T18297] loop4: detected capacity change from 0 to 1024
[  604.573847][T18297] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  604.638644][T18297] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  604.705094][T18297] EXT4-fs (loop4): invalid journal inode
[  604.714611][T18297] EXT4-fs (loop4): can't get journal size
[  604.744456][T18297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  604.818690][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.863892][ T8030] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  604.916479][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  604.916515][ T8030] Tainted: [W]=WARN
[  604.916580][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  604.916642][ T8030] Call Trace:
[  604.916649][ T8030]  <TASK>
[  604.916657][ T8030]  __dump_stack+0x1d/0x30
[  604.916683][ T8030]  dump_stack_lvl+0x95/0xd0
[  604.916712][ T8030]  dump_stack+0x15/0x1b
[  604.916797][ T8030]  dump_header+0x80/0x240
[  604.916819][ T8030]  oom_kill_process+0x295/0x350
[  604.916841][ T8030]  out_of_memory+0x97d/0xb80
[  604.916863][ T8030]  try_charge_memcg+0x62e/0xa10
[  604.916906][ T8030]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  604.916942][ T8030]  __swap_cache_prepare_and_add+0x386/0x530
[  604.917055][ T8030]  swap_cache_alloc_folio+0xa2/0x120
[  604.917088][ T8030]  swap_cluster_readahead+0x26e/0x3d0
[  604.917118][ T8030]  swapin_readahead+0xde/0x840
[  604.917211][ T8030]  ? __rcu_read_unlock+0x4e/0x70
[  604.917235][ T8030]  ? __perf_event_task_sched_in+0xa65/0xad0
[  604.917260][ T8030]  ? __list_add_valid_or_report+0x38/0xe0
[  604.917297][ T8030]  ? __rcu_read_unlock+0x4e/0x70
[  604.917321][ T8030]  ? swap_cache_get_folio+0x26f/0x280
[  604.917426][ T8030]  do_swap_page+0x309/0x2210
[  604.917518][ T8030]  ? __schedule+0x93c/0xd40
[  604.917545][ T8030]  ? __rcu_read_lock+0x36/0x50
[  604.917606][ T8030]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  604.917634][ T8030]  handle_mm_fault+0xb40/0x3020
[  604.917664][ T8030]  ? vma_start_read+0x1c7/0x2c0
[  604.917695][ T8030]  do_user_addr_fault+0x62f/0x1050
[  604.917772][ T8030]  ? trace_page_fault_user+0x1f/0xe0
[  604.917803][ T8030]  exc_page_fault+0x62/0xa0
[  604.917852][ T8030]  asm_exc_page_fault+0x26/0x30
[  604.917875][ T8030] RIP: 0033:0x7fde89b87917
[  604.917895][ T8030] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  604.917957][ T8030] RSP: 002b:00007ffd934b5cd0 EFLAGS: 00010202
[  604.917979][ T8030] RAX: 0000000000000000 RBX: 000055557e817500 RCX: 00007fde89b87917
[  604.917996][ T8030] RDX: 00007ffd934b5d10 RSI: 0000000000000000 RDI: 0000000000000000
[  604.918010][ T8030] RBP: 00007ffd934b5d7c R08: 0000000000000000 R09: 0000000000000000
[  604.918031][ T8030] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  604.918048][ T8030] R13: 00000000000927c0 R14: 0000000000093a47 R15: 00007ffd934b5dd0
[  604.918070][ T8030]  </TASK>
[  604.918079][ T8030] memory: usage 307200kB, limit 307200kB, failcnt 10247
[  604.956506][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4343'.
[  605.079321][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4343'.
[  605.090247][T18299] loop2: detected capacity change from 0 to 32768
[  605.093789][ T8030] memory+swap: usage 258120kB, limit 9007199254740988kB, failcnt 0
[  605.207812][ T8030] kmem: usage 221380kB, limit 9007199254740988kB, failcnt 0
[  605.215175][ T8030] Memory cgroup stats for /syz6:
[  605.215342][ T8030] cache 0
[  605.248909][ T8030] rss 0
[  605.275447][ T8030] shmem 0
[  605.283254][ T8030] mapped_file 0
[  605.309791][ T8030] dirty 0
[  605.312801][ T8030] writeback 0
[  605.346194][ T8030] workingset_refault_anon 954
[  605.351175][ T8030] workingset_refault_file 3
[  605.355697][ T8030] swap 593920
[  605.386653][ T8030] swapcached 18436096
[  605.400946][ T8030] pgpgin 483209
[  605.404444][ T8030] pgpgout 483208
[  605.431211][ T8030] pgfault 381017
[  605.434801][ T8030] pgmajfault 322
[  605.456032][ T8030] inactive_anon 0
[  605.459871][ T8030] active_anon 0
[  605.466716][ T8030] inactive_file 0
[  605.475716][ T8030] active_file 4096
[  605.490594][ T8030] unevictable 0
[  605.504642][ T8030] hierarchical_memory_limit 314572800
[  605.520241][ T8030] hierarchical_memsw_limit 9223372036854771712
[  605.535999][ T8030] total_cache 0
[  605.544298][ T8030] total_rss 0
[  605.555397][ T8030] total_shmem 0
[  605.564764][ T8030] total_mapped_file 0
[  605.576751][ T8030] total_dirty 0
[  605.588084][ T8030] total_writeback 0
[  605.597712][ T8030] total_workingset_refault_anon 954
[  605.607753][T18319] FAULT_INJECTION: forcing a failure.
[  605.607753][T18319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.631046][T18319] CPU: 0 UID: 0 PID: 18319 Comm: syz.4.4346 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  605.631155][T18319] Tainted: [W]=WARN
[  605.631164][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  605.631178][T18319] Call Trace:
[  605.631185][T18319]  <TASK>
[  605.631195][T18319]  __dump_stack+0x1d/0x30
[  605.631224][T18319]  dump_stack_lvl+0x95/0xd0
[  605.631264][T18319]  dump_stack+0x15/0x1b
[  605.631284][T18319]  should_fail_ex+0x263/0x280
[  605.631397][T18319]  should_fail+0xb/0x20
[  605.631474][T18319]  should_fail_usercopy+0x1a/0x20
[  605.631504][T18319]  _copy_to_user+0x20/0xa0
[  605.631598][T18319]  simple_read_from_buffer+0xb5/0x130
[  605.631625][T18319]  proc_fail_nth_read+0x10e/0x150
[  605.631815][T18319]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  605.631844][T18319]  vfs_read+0x1ab/0x7f0
[  605.631883][T18319]  ? __rcu_read_unlock+0x4e/0x70
[  605.631909][T18319]  ? __fget_files+0x184/0x1c0
[  605.631990][T18319]  ? mutex_lock+0x57/0x90
[  605.632021][T18319]  ksys_read+0xdc/0x1a0
[  605.632053][T18319]  __x64_sys_read+0x40/0x50
[  605.632210][T18319]  x64_sys_call+0x2886/0x3020
[  605.632252][T18319]  do_syscall_64+0x12c/0x370
[  605.632353][T18319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.632376][T18319] RIP: 0033:0x7fa66973cfce
[  605.632535][T18319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  605.632556][T18319] RSP: 002b:00007fa6681d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  605.632580][T18319] RAX: ffffffffffffffda RBX: 00007fa6681d76c0 RCX: 00007fa66973cfce
[  605.632597][T18319] RDX: 000000000000000f RSI: 00007fa6681d70a0 RDI: 0000000000000004
[  605.632612][T18319] RBP: 00007fa6681d7090 R08: 0000000000000000 R09: 0000000000000000
[  605.632627][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.632720][T18319] R13: 00007fa6699f6038 R14: 00007fa6699f5fa0 R15: 00007ffeca604588
[  605.632744][T18319]  </TASK>
[  605.832570][ T8030] total_workingset_refault_file 3
[  605.846010][ T8030] total_swap 593920
[  605.855021][ T8030] total_swapcached 18436096
[  605.866182][ T8030] total_pgpgin 483209
[  605.873690][ T8030] total_pgpgout 483208
[  605.882340][ T8030] total_pgfault 381017
[  605.890736][ T8030] total_pgmajfault 322
[  605.899206][ T8030] total_inactive_anon 0
[  605.908992][ T8030] total_active_anon 0
[  605.922361][ T8030] total_inactive_file 0
[  605.935356][ T8030] total_active_file 4096
[  605.949078][ T8030] total_unevictable 0
[  605.959966][ T8030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4340,pid=18305,uid=0
[  605.975138][ T8030] Memory cgroup out of memory: Killed process 18305 (syz.6.4340) total-vm:94160kB, anon-rss:1232kB, file-rss:21512kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  605.999506][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4349'.
[  606.016597][T18332] netlink: 312 bytes leftover after parsing attributes in process `syz.8.4349'.
[  606.028762][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4349'.
[  606.051319][T18332] loop8: detected capacity change from 0 to 512
[  606.073234][T18332] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  606.126824][T18332] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4349: bad orphan inode 131083
[  606.152274][T18332] loop8: lost filesystem error report for type 5 error -117
[  606.153008][T18332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.176451][T18332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.332807][T18346] loop2: detected capacity change from 0 to 128
[  606.352175][T18346] FAT-fs (loop2): Directory bread(block 32) failed
[  606.370332][T18346] FAT-fs (loop2): Directory bread(block 33) failed
[  606.392326][T18346] FAT-fs (loop2): Directory bread(block 34) failed
[  606.405659][T18346] FAT-fs (loop2): Directory bread(block 35) failed
[  606.424484][T18346] FAT-fs (loop2): Directory bread(block 36) failed
[  606.436478][T18346] FAT-fs (loop2): Directory bread(block 37) failed
[  606.448681][T18346] FAT-fs (loop2): Directory bread(block 38) failed
[  606.459916][T18346] FAT-fs (loop2): Directory bread(block 39) failed
[  606.472062][T18346] FAT-fs (loop2): Directory bread(block 40) failed
[  606.484427][T18346] FAT-fs (loop2): Directory bread(block 41) failed
[  606.739162][T18353] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4357'.
[  606.791611][T18356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.849402][T18356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.204953][T18365] loop2: detected capacity change from 0 to 512
[  607.242342][T18365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.340875][T18365] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.345293][T18356] loop4: detected capacity change from 0 to 1024
[  607.471026][T18356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  607.489027][T18356] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  607.642387][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4362'.
[  607.669794][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4362'.
[  607.698840][   T30] Bluetooth: hci0: Frame reassembly failed (-84)
[  607.706617][T18364] EXT4-fs (loop2): shut down requested (0)
[  608.031646][T18382] loop1: detected capacity change from 0 to 128
[  608.074013][T18382] FAT-fs (loop1): Directory bread(block 32) failed
[  608.080723][T18382] FAT-fs (loop1): Directory bread(block 33) failed
[  608.087514][T18382] FAT-fs (loop1): Directory bread(block 34) failed
[  608.094121][T18382] FAT-fs (loop1): Directory bread(block 35) failed
[  608.101410][T18382] FAT-fs (loop1): Directory bread(block 36) failed
[  608.108096][T18382] FAT-fs (loop1): Directory bread(block 37) failed
[  608.114801][T18382] FAT-fs (loop1): Directory bread(block 38) failed
[  608.121579][T18382] FAT-fs (loop1): Directory bread(block 39) failed
[  608.128279][T18382] FAT-fs (loop1): Directory bread(block 40) failed
[  608.134797][T18382] FAT-fs (loop1): Directory bread(block 41) failed
[  608.233671][T18384] loop8: detected capacity change from 0 to 32768
[  608.234643][T18386] loop6: detected capacity change from 0 to 2048
[  608.266088][T18386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.278576][T18386] ext4 filesystem being mounted at /592/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  608.284979][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  608.370511][T18395] lo speed is unknown, defaulting to 1000
[  608.461411][T18400] lo speed is unknown, defaulting to 1000
[  608.506622][T18399] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4374'.
[  608.810667][T18416] netlink: 14808 bytes leftover after parsing attributes in process `syz.1.4379'.
[  608.870026][T18417] loop1: detected capacity change from 0 to 1024
[  608.878535][T18417] EXT4-fs: Ignoring removed orlov option
[  608.897698][T18417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.949783][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.052158][T18423] lo speed is unknown, defaulting to 1000
[  609.059276][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.200186][T18429] netlink: 'syz.1.4381': attribute type 32 has an invalid length.
[  609.260380][T18435] siw: device registration error -23
[  609.317330][T18429] bond1: option coupled_control: invalid value (77)
[  609.377700][T18429] bond1 (unregistering): Released all slaves
[  609.561656][   T28] audit: type=1400 audit(1772515696.233:5261): avc:  denied  { override_creds } for  pid=18448 comm="syz.1.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  609.736539][T13501] Bluetooth: hci0: command 0x1003 tx timeout
[  609.743559][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  609.762611][T18461] lo speed is unknown, defaulting to 1000
[  609.801255][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.821678][T18462] lo speed is unknown, defaulting to 1000
[  609.976498][T18469] lo speed is unknown, defaulting to 1000
[  610.295989][T18471] loop4: detected capacity change from 0 to 256
[  610.636310][T18470] lo speed is unknown, defaulting to 1000
[  610.695875][T18476] ieee802154 phy0 wpan0: encryption failed: -22
[  610.880285][T18490] lo speed is unknown, defaulting to 1000
[  610.988111][T18491] loop1: detected capacity change from 0 to 2048
[  611.047168][T18496] __nla_validate_parse: 6 callbacks suppressed
[  611.047186][T18496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4404'.
[  611.088705][T18491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.111016][T18496] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  611.125159][T18496] bridge1: entered promiscuous mode
[  611.130562][T18496] bridge1: entered allmulticast mode
[  611.158145][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4401'.
[  611.188266][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.260881][   T28] audit: type=1326 audit(1772516209.933:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18503 comm="syz.2.4407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x0
[  611.265384][T18504] loop4: detected capacity change from 0 to 512
[  611.344086][T18512] lo speed is unknown, defaulting to 1000
[  611.383720][T18504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  611.428707][T18516] lo speed is unknown, defaulting to 1000
[  611.468632][T18504] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  611.750018][T18502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4406'.
[  611.775538][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4406'.
[  611.800605][ T2518] Bluetooth: hci0: Frame reassembly failed (-84)
[  611.808569][T18502] EXT4-fs (loop4): shut down requested (0)
[  611.941972][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4410'.
[  612.150092][T18538] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4414'.
[  612.251164][T18538] netlink: 7 bytes leftover after parsing attributes in process `syz.8.4414'.
[  612.360334][T18542] loop2: detected capacity change from 0 to 256
[  612.390137][T18542] FAT-fs (loop2): Directory bread(block 64) failed
[  612.397243][T18542] FAT-fs (loop2): Directory bread(block 65) failed
[  612.403795][T18542] FAT-fs (loop2): Directory bread(block 66) failed
[  612.410393][T18542] FAT-fs (loop2): Directory bread(block 67) failed
[  612.417683][T18542] FAT-fs (loop2): Directory bread(block 68) failed
[  612.424278][T18542] FAT-fs (loop2): Directory bread(block 69) failed
[  612.431060][T18542] FAT-fs (loop2): Directory bread(block 70) failed
[  612.437633][T18542] FAT-fs (loop2): Directory bread(block 71) failed
[  612.444230][T18542] FAT-fs (loop2): Directory bread(block 72) failed
[  612.451455][T18542] FAT-fs (loop2): Directory bread(block 73) failed
[  612.515658][T18551] loop1: detected capacity change from 0 to 256
[  612.547073][T18551] FAT-fs (loop1): Directory bread(block 64) failed
[  612.553881][T18551] FAT-fs (loop1): Directory bread(block 65) failed
[  612.560643][T18551] FAT-fs (loop1): Directory bread(block 66) failed
[  612.567229][T18551] FAT-fs (loop1): Directory bread(block 67) failed
[  612.573776][T18551] FAT-fs (loop1): Directory bread(block 68) failed
[  612.580319][T18551] FAT-fs (loop1): Directory bread(block 69) failed
[  612.587382][T18551] FAT-fs (loop1): Directory bread(block 70) failed
[  612.593922][T18551] FAT-fs (loop1): Directory bread(block 71) failed
[  612.600560][T18551] FAT-fs (loop1): Directory bread(block 72) failed
[  612.607109][T18551] FAT-fs (loop1): Directory bread(block 73) failed
[  613.543599][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.320421][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  614.349431][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.365580][ T2518] bio_check_eod: 462 callbacks suppressed
[  614.365600][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.365600][ T2518] loop2: rw=1, sector=1192, nr_sectors = 576 limit=256
[  614.385902][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.385902][ T2518] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256
[  614.400727][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.407457][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.407457][ T2518] loop2: rw=1, sector=1960, nr_sectors = 8168 limit=256
[  614.411256][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4420'.
[  614.437541][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.437541][ T2518] loop2: rw=1, sector=10128, nr_sectors = 8192 limit=256
[  614.462402][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.462402][ T2518] loop2: rw=1, sector=18320, nr_sectors = 5912 limit=256
[  614.479582][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.479582][ T2518] loop2: rw=1, sector=24264, nr_sectors = 32 limit=256
[  614.479910][T18556] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4421'.
[  614.509166][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.509166][ T2518] loop2: rw=1, sector=24328, nr_sectors = 32 limit=256
[  614.515596][   T40] kworker/u8:2: attempt to access beyond end of device
[  614.515596][   T40] loop1: rw=1, sector=1192, nr_sectors = 576 limit=256
[  614.536107][ T2518] kworker/u8:7: attempt to access beyond end of device
[  614.536107][ T2518] loop2: rw=1, sector=24392, nr_sectors = 32 limit=256
[  614.538136][   T40] kworker/u8:2: attempt to access beyond end of device
[  614.538136][   T40] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256
[  614.587819][T18559] loop4: detected capacity change from 0 to 128
[  614.618114][   T28] audit: type=1326 audit(1772516469.277:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18560 comm="syz.8.4425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3509fc799 code=0x0
[  614.663406][T18559] FAT-fs (loop4): Directory bread(block 32) failed
[  614.672797][T18559] FAT-fs (loop4): Directory bread(block 33) failed
[  614.694463][T18559] FAT-fs (loop4): Directory bread(block 34) failed
[  614.704313][T18559] FAT-fs (loop4): Directory bread(block 35) failed
[  614.716764][T18559] FAT-fs (loop4): Directory bread(block 36) failed
[  614.728872][T18559] FAT-fs (loop4): Directory bread(block 37) failed
[  614.742218][T18559] FAT-fs (loop4): Directory bread(block 38) failed
[  614.757396][T18559] FAT-fs (loop4): Directory bread(block 39) failed
[  614.764526][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.788321][T18559] FAT-fs (loop4): Directory bread(block 40) failed
[  614.801438][T18559] FAT-fs (loop4): Directory bread(block 41) failed
[  614.808751][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.849920][T18564] lo speed is unknown, defaulting to 1000
[  614.859868][   T28] audit: type=1400 audit(1772516469.537:5264): avc:  denied  { bind } for  pid=18565 comm="syz.2.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  614.880625][   T28] audit: type=1400 audit(1772516469.537:5265): avc:  denied  { ioctl } for  pid=18565 comm="syz.2.4422" path="socket:[66923]" dev="sockfs" ino=66923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  614.925544][T18570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4422'.
[  614.935693][T18568] loop1: detected capacity change from 0 to 2048
[  614.953990][   T28] audit: type=1400 audit(1772516469.597:5266): avc:  denied  { connect } for  pid=18565 comm="syz.2.4422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  615.006876][T18568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.028599][T18577] siw: device registration error -23
[  615.031486][T18573] lo speed is unknown, defaulting to 1000
[  615.052205][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.191530][T18583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.200894][T18583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.210110][T18578] lo speed is unknown, defaulting to 1000
[  615.562588][T18589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.575256][T18589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.714927][T18597] loop6: detected capacity change from 0 to 512
[  615.763307][T18597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  615.894777][T18597] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.169969][T18601] xt_CT: No such helper "snmp_trap"
[  616.179596][T18597] __nla_validate_parse: 2 callbacks suppressed
[  616.179631][T18597] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4433'.
[  616.205708][T18597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4433'.
[  616.687318][T18609] lo speed is unknown, defaulting to 1000
[  616.759470][T18597] EXT4-fs (loop6): shut down requested (0)
[  616.765646][ T4122] Bluetooth: hci0: Frame reassembly failed (-84)
[  616.798047][T18609] netlink: 'syz.4.4436': attribute type 32 has an invalid length.
[  616.806194][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'.
[  616.821974][T18609] bond0: option coupled_control: invalid value (77)
[  616.850819][T18609] bond0 (unregistering): Released all slaves
[  616.940821][   T28] audit: type=1326 audit(1772516471.617:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18616 comm="syz.2.4439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22dbfdc799 code=0x0
[  617.080977][T18619] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4438'.
[  617.557535][T18628] siw: device registration error -23
[  617.850094][T18637] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4445'.
[  618.407839][T18644] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4446'.
[  618.706743][T18649] loop2: detected capacity change from 0 to 512
[  618.741327][T18649] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  618.750790][T18649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  618.763794][T18649] System zones: 0-1, 15-15, 18-18, 34-34
[  618.770381][T18649] EXT4-fs (loop2): orphan cleanup on readonly fs
[  618.776867][ T3555] Bluetooth: hci0: command 0x1003 tx timeout
[  618.783058][ T6994] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  618.785668][T18649] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  618.801896][T18649] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  618.817171][T18649] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  618.824336][T18649] EXT4-fs (loop2): 1 truncate cleaned up
[  618.831556][T18649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  618.885181][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.898212][ T8030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.976045][   T28] audit: type=1400 audit(1772516473.647:5268): avc:  denied  { ioctl } for  pid=18653 comm="syz.2.4450" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67131 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  619.211758][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'.
[  619.220835][T18661] netlink: 312 bytes leftover after parsing attributes in process `syz.8.4452'.
[  619.240652][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4452'.
[  619.321165][T18671] loop1: detected capacity change from 0 to 512
[  619.342934][T18661] loop8: detected capacity change from 0 to 512
[  619.351449][   T28] audit: type=1326 audit(1772516474.027:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18672 comm="syz.4.4455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x0
[  619.375587][T18661] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  619.404429][T18671] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  619.414459][T18661] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.4452: bad orphan inode 131083
[  619.449343][T18671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  619.458118][T18671] System zones: 0-1, 15-15, 18-18, 34-34
[  619.464288][T18661] loop8: lost filesystem error report for type 5 error -117
[  619.468535][T18661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.489499][T18671] EXT4-fs (loop1): orphan cleanup on readonly fs
[  619.498763][T18671] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  619.518908][T18661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.528705][T18671] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  619.545527][T18671] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  619.553260][T18671] EXT4-fs (loop1): 1 truncate cleaned up
[  619.560701][T18671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  619.655494][T18655] lo speed is unknown, defaulting to 1000
[  619.690367][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.807473][T18655] chnl_net:caif_netlink_parms(): no params data found
[  619.884714][T18655] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.892209][T18655] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.901126][T18655] bridge_slave_0: entered allmulticast mode
[  619.908850][T18655] bridge_slave_0: entered promiscuous mode
[  619.917037][T18655] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.924522][T18655] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.933014][T18655] bridge_slave_1: entered allmulticast mode
[  619.941934][T18655] bridge_slave_1: entered promiscuous mode
[  619.972850][T18655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.988374][T18655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.244053][T18688] siw: device registration error -23
[  620.250137][T18655] team0: Port device team_slave_0 added
[  620.260191][T18655] team0: Port device team_slave_1 added
[  620.277133][T18655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.284176][T18655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.311602][T18655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.358390][T18655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  620.387094][T18655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.444188][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  620.492111][T18655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  620.608657][T18655] hsr_slave_0: entered promiscuous mode
[  620.636692][T18655] hsr_slave_1: entered promiscuous mode
[  620.660476][T18655] debugfs: 'hsr0' already exists in 'hsr'
[  620.677522][T18655] Cannot create hsr debugfs directory
[  620.687077][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4460'.
[  620.721256][T18698] loop1: detected capacity change from 0 to 512
[  620.732703][T18698] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  620.779131][T18698] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.4460: bad orphan inode 131083
[  620.840348][T18703] loop4: detected capacity change from 0 to 512
[  620.861174][T18698] loop1: lost filesystem error report for type 5 error -117
[  620.865987][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  620.879774][    C0] EXT4-fs (loop1): initial error at time 1772516475: ext4_orphan_get:1417
[  620.888334][    C0] EXT4-fs (loop1): last error at time 1772516475: ext4_orphan_get:1417
[  620.901040][T18698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  620.935528][T18698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.955044][T18703] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  620.966308][T18703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  620.974325][T18703] System zones: 0-1, 15-15, 18-18, 34-34
[  621.002268][T18703] EXT4-fs (loop4): orphan cleanup on readonly fs
[  621.021646][T18703] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  621.055240][T18703] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  621.071294][T18703] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  621.100760][T18703] EXT4-fs (loop4): 1 truncate cleaned up
[  621.115895][T18707] loop2: detected capacity change from 0 to 2048
[  621.117112][   T28] audit: type=1400 audit(1772516475.777:5270): avc:  denied  { getopt } for  pid=18706 comm="syz.2.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  621.145623][T18703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  621.167047][T18655] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.186556][ T3304] Alternate GPT is invalid, using primary GPT.
[  621.192877][ T3304]  loop2: p1 p2 p3
[  621.207230][T18707] Alternate GPT is invalid, using primary GPT.
[  621.213695][T18707]  loop2: p1 p2 p3
[  621.238614][T18655] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.264469][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.345480][T18655] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.429227][T18655] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.526032][   T28] audit: type=1326 audit(1772516732.199:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18718 comm="syz.4.4466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa66977c799 code=0x0
[  621.561918][T18655] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  621.578258][T18655] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  621.596605][T18655] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  621.608659][T18655] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  621.688019][T18655] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.714434][T18655] 8021q: adding VLAN 0 to HW filter on device team0
[  621.732787][ T2518] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.739892][ T2518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.761854][T18655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  621.772541][T18655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  621.789737][ T2518] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.796963][ T2518] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.879516][T18655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.036784][T18739] loop2: detected capacity change from 0 to 128
[  622.157868][T18655] veth0_vlan: entered promiscuous mode
[  622.176437][T18655] veth1_vlan: entered promiscuous mode
[  622.194489][T18744] __nla_validate_parse: 2 callbacks suppressed
[  622.194520][T18744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4469'.
[  622.229488][T18655] veth0_macvtap: entered promiscuous mode
[  622.245708][T18655] veth1_macvtap: entered promiscuous mode
[  622.279461][T18655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.311017][T18655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.332352][  T316] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.351758][  T316] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.385487][  T316] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.401741][  T316] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.648499][T18758] loop6: detected capacity change from 0 to 128
[  622.851923][T18759] lo speed is unknown, defaulting to 1000
[  623.147373][T18758] FAT-fs (loop6): Directory bread(block 32) failed
[  623.154000][T18758] FAT-fs (loop6): Directory bread(block 33) failed
[  623.183650][T18758] FAT-fs (loop6): Directory bread(block 34) failed
[  623.190523][T18758] FAT-fs (loop6): Directory bread(block 35) failed
[  623.234345][T18758] FAT-fs (loop6): Directory bread(block 36) failed
[  623.245869][T18758] FAT-fs (loop6): Directory bread(block 37) failed
[  623.255165][T18758] FAT-fs (loop6): Directory bread(block 38) failed
[  623.262703][T18758] FAT-fs (loop6): Directory bread(block 39) failed
[  623.269791][T18758] FAT-fs (loop6): Directory bread(block 40) failed
[  623.277550][T18758] FAT-fs (loop6): Directory bread(block 41) failed
[  623.342808][T18772] loop4: detected capacity change from 0 to 256
[  623.358906][T18772] FAT-fs (loop4): Directory bread(block 64) failed
[  623.365524][T18772] FAT-fs (loop4): Directory bread(block 65) failed
[  623.372832][T18772] FAT-fs (loop4): Directory bread(block 66) failed
[  623.379499][T18772] FAT-fs (loop4): Directory bread(block 67) failed
[  623.386431][T18772] FAT-fs (loop4): Directory bread(block 68) failed
[  623.393035][T18772] FAT-fs (loop4): Directory bread(block 69) failed
[  623.400123][T18772] FAT-fs (loop4): Directory bread(block 70) failed
[  623.406682][T18772] FAT-fs (loop4): Directory bread(block 71) failed
[  623.413229][T18772] FAT-fs (loop4): Directory bread(block 72) failed
[  623.419783][T18772] FAT-fs (loop4): Directory bread(block 73) failed
[  623.725812][   T28] audit: type=1326 audit(1772516734.399:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18778 comm="syz.8.4480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3509fc799 code=0x0
[  624.227282][T18781] xt_CT: You must specify a L4 protocol and not use inversions on it
[  624.283081][   T50] bio_check_eod: 601 callbacks suppressed
[  624.283167][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.283167][   T50] loop4: rw=1, sector=1192, nr_sectors = 128 limit=256
[  624.317096][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.317096][   T50] loop4: rw=1, sector=1352, nr_sectors = 32 limit=256
[  624.331560][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.331560][   T50] loop4: rw=1, sector=1416, nr_sectors = 32 limit=256
[  624.372943][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.372943][   T50] loop4: rw=1, sector=1480, nr_sectors = 32 limit=256
[  624.554244][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.554244][   T50] loop4: rw=1, sector=1544, nr_sectors = 32 limit=256
[  624.568274][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.568274][   T50] loop4: rw=1, sector=1608, nr_sectors = 32 limit=256
[  624.801576][   T50] kworker/u8:3: attempt to access beyond end of device
[  624.801576][   T50] loop4: rw=1, sector=1672, nr_sectors = 32 limit=256
[  625.805278][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4486'.
[  626.016250][   T50] kworker/u8:3: attempt to access beyond end of device
[  626.016250][   T50] loop4: rw=1, sector=1736, nr_sectors = 32 limit=256
[  626.030867][   T50] kworker/u8:3: attempt to access beyond end of device
[  626.030867][   T50] loop4: rw=1, sector=1832, nr_sectors = 32 limit=256
[  626.048292][T18800] netlink: 'syz.8.4486': attribute type 5 has an invalid length.
[  626.057754][   T50] kworker/u8:3: attempt to access beyond end of device
[  626.057754][   T50] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256
[  626.346483][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'.
[  626.355775][T18803] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4481'.
[  626.369232][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'.
[  626.461856][T18805] loop4: detected capacity change from 0 to 512
[  626.470128][T18805] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  626.521698][T18805] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4481: bad orphan inode 131083
[  626.532323][T18805] loop4: lost filesystem error report for type 5 error -117
[  626.533629][T18805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.554656][T18805] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.807632][   T28] audit: type=1400 audit(1772516737.489:5273): avc:  denied  { name_bind } for  pid=18816 comm="syz.6.4491" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  626.810819][T18817] syz.6.4491 (18817) used obsolete PPPIOCDETACH ioctl
[  626.856351][T18818] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  626.930822][T18822] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4490'.
[  626.990150][   T28] audit: type=1326 audit(1772516737.669:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.1.4495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f479408c799 code=0x0
[  627.116059][   T28] audit: type=1400 audit(1772516737.789:5275): avc:  denied  { mount } for  pid=18828 comm="syz.6.4496" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  627.675448][T18850] lo speed is unknown, defaulting to 1000
[  627.740625][T18857] loop2: detected capacity change from 0 to 2048
[  627.774862][T18857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.798338][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4504'.
[  627.987012][T12890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.076467][T18870] ªªªªªª: renamed from vlan0 (while UP)
[  628.152157][T18877] loop1: detected capacity change from 0 to 512
[  628.174965][T18877] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  628.237240][T18877] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.4513: invalid indirect mapped block 4294967295 (level 0)
[  628.287642][T18877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  628.287833][T18877] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.4513: invalid indirect mapped block 4294967295 (level 1)
[  628.297559][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.297899][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  628.297918][    C0] EXT4-fs (loop1): initial error at time 1772516994: ext4_free_branches:1023: inode 16
[  628.297953][    C0] EXT4-fs (loop1): last error at time 1772516994: ext4_free_branches:1023: inode 16
[  628.347120][ T3400] ==================================================================
[  628.355208][ T3400] BUG: KCSAN: data-race in kick_pool / wq_worker_running
[  628.362233][ T3400] 
[  628.364551][ T3400] read-write to 0xffff888237d2a8a4 of 4 bytes by task 3599 on cpu 1:
[  628.372600][ T3400]  wq_worker_running+0x95/0x120
[  628.377546][ T3400]  schedule_timeout+0xca/0x180
[  628.382300][ T3400]  msleep+0x4f/0x90
[  628.386104][ T3400]  nsim_fib_event+0x491d/0x4d70
[  628.390965][ T3400]  nsim_fib_event_work+0x13d/0x210
[  628.396075][ T3400]  process_scheduled_works+0x4de/0x9e0
[  628.401577][ T3400]  worker_thread+0x581/0x770
[  628.406279][ T3400]  kthread+0x22a/0x280
[  628.410339][ T3400]  ret_from_fork+0x150/0x360
[  628.415018][ T3400]  ret_from_fork_asm+0x1a/0x30
[  628.419777][ T3400] 
[  628.422087][ T3400] read to 0xffff888237d2a8a4 of 4 bytes by task 3400 on cpu 0:
[  628.429623][ T3400]  kick_pool+0x49/0x2d0
[  628.433784][ T3400]  __queue_work+0x896/0xaf0
[  628.438301][ T3400]  queue_work_on+0xa9/0x140
[  628.442933][ T3400]  wg_packet_encrypt_worker+0xbdd/0xde0
[  628.448562][ T3400]  process_scheduled_works+0x4de/0x9e0
[  628.454034][ T3400]  worker_thread+0x581/0x770
[  628.458614][ T3400]  kthread+0x22a/0x280
[  628.462727][ T3400]  ret_from_fork+0x150/0x360
[  628.467312][ T3400]  ret_from_fork_asm+0x1a/0x30
[  628.472152][ T3400] 
[  628.474653][ T3400] value changed: 0x00000000 -> 0x00000001
[  628.480372][ T3400] 
[  628.482680][ T3400] Reported by Kernel Concurrency Sanitizer on:
[  628.488952][ T3400] CPU: 0 UID: 0 PID: 3400 Comm: kworker/0:4 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  628.499977][ T3400] Tainted: [W]=WARN
[  628.503767][ T3400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  628.513966][ T3400] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker
[  628.520492][ T3400] ==================================================================
[  628.532360][T18877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  628.571517][T18881] loop4: detected capacity change from 0 to 512
[  628.716328][T18877] EXT4-fs (loop1): 1 orphan inode deleted
[  628.758734][T18877] EXT4-fs (loop1): 1 truncate cleaned up
[  628.764972][T18877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.844561][T18877] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.4513: iget: bad extra_isize 46 (inode size 256)
[  628.888116][T18877] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.4513: iget: bad extra_isize 46 (inode size 256)
[  629.070685][T18881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.085193][T13478] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.108556][T18881] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  629.146140][T18881] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks
[  629.153621][T18881] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  629.206472][T13729] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.