last executing test programs:

17m1.921516768s ago: executing program 32 (id=271):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_SETFSLABEL(r3, 0x8915, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c77dd984784f531853d184c539dcac54ff2e955ab3fd1c00b016be5e263b9695d15c56bbfcc195f2b2c6ac6c6c02f59935620d42a59a7e285c4e602bc5acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb81000000000000003d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc000000000000000000001000")
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x4f, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r6=>0x0})
unshare(0x64000600)
syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000680)=ANY=[@ANYBLOB="12010006020000402505a1a440000102030109026100020102f9030904000001020d00000a240600019fbe97185505240001040d240f0104000000090048810506241a4fad0409058103080096f6070904010000020d00000904010102020d00000905820400000000000000090503020002050d090be45be7218fdd6a9453998bc2b0f53efa574187e910be049c9d1d89d2b48f3535b6f8d094dfd3ad28691a29b8bd37966c6ebbbecfac20b865ca4d3f7b5f4363fdb50d09269190c4fd1fbb551f1ac712620087af1e24a94aad2005b2d609f402973128212aa946da385fb0893b0653ee3d5af5be840f0dcb63b69aa80e9993bd37fec6b6e71065eb66e1551f3fe0"], 0x0)
r7 = gettid()
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850)
pread64(r2, &(0x7f00000024c0)=""/209, 0xd1, 0xa)

16m19.5836427s ago: executing program 33 (id=447):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setuid(0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x10, 0x4c0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)

14m41.625783701s ago: executing program 34 (id=893):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0)

14m10.452949448s ago: executing program 35 (id=1072):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x2010, r1, 0xf1884000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0xfffffffd}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000400)={0x1f, @none}, 0x8)
listen(r5, 0xc)
listen(r4, 0x0)

14m6.401437186s ago: executing program 36 (id=1086):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0)

13m34.340222385s ago: executing program 37 (id=1282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24000840)

13m20.816153677s ago: executing program 38 (id=1336):
r0 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x15, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000e2ca0000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000a0000000085000000060000001800000057000000000000000100000071080200100000001853000005000000000000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000009d160200040000001800000006000000000000000300000085100000f9ffffff"], &(0x7f00000000c0)='syzkaller\x00', 0x762, 0xd5, &(0x7f0000000840)=""/213, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r0, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x1, 0x5, 0xd, 0x9}, {0x3, 0x4, 0x10, 0x8}]}, 0x94)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)=@tipc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)=""/181, 0xb5}], 0x1, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x2121)
socket$inet6(0xa, 0x3, 0x84)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @empty}})
r5 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000340)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078800000003030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6d6163677265656b417362736563746f723d3078d4796ff71944e42b00ef134c303030303030303030303030303066662c696f636861727365743d63703835322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c02"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3")
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x1a2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="400002001000b7043d0000000000", @ANYRES32=0x0, @ANYBLOB="038000000000040020001280080001007369740014000280060008002400000005000a0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x35, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
pidfd_getfd(r6, r5, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r8)
unlink(&(0x7f0000000200)='./file0\x00')

12m28.340505744s ago: executing program 39 (id=1539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c)
dup3(r1, r4, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)
syz_open_procfs(0x0, &(0x7f0000000280)='limits\x00')
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

12m26.078579926s ago: executing program 40 (id=1545):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8)

12m20.180639251s ago: executing program 41 (id=1563):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
shutdown(r5, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1800001, 0x12, r6, 0x6a6db000)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)

12m18.750014106s ago: executing program 42 (id=1567):
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000480), 0xfdef)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)

11m19.720313367s ago: executing program 43 (id=1746):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), 0x0}, 0x20)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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")
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

11m13.189939349s ago: executing program 44 (id=1769):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, &(0x7f0000000040)={'vlan1\x00', @local})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f00000000c0)={[{@fat=@errors_continue}, {@shortname_winnt}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@rodir}, {@shortname_win95}]}, 0x1, 0x226, &(0x7f0000000600)="$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")

9m47.47087837s ago: executing program 45 (id=1987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="3d8c600aba380ed3732ac06f2e290c2da7180c9f587efa596707aaa1b7569390a10fcb957731082accb82e028daf60c9a46871f1024550527d80b1e99fc665e5ce0afb8a2cede4680020e5d616c712fdd80529c1c77f5ac196ce4ff5136ad3025715c29ee3d093edf7b132380453bc70288819316a089cd19e4bfabffa0d9735647d3e0c4a63a82d24420c1fbb35677b4fe6513a604e9a880cb2d1d4f7d727cffdf37dfbc9c1f4be8a144b"], 0x1c}}, 0x24044080)

8m47.393226253s ago: executing program 46 (id=2143):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, &(0x7f0000000040)={'vlan1\x00', @local})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f00000000c0)={[{@fat=@errors_continue}, {@shortname_winnt}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@rodir}, {@shortname_win95}]}, 0x1, 0x226, &(0x7f0000000600)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)

8m21.300939754s ago: executing program 47 (id=2216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000052003b352560"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x40)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x560f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@expire={0x104, 0x18, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in=@broadcast, @in6=@private2, 0x4e22, 0x2, 0x4e20, 0x3e9, 0x2, 0x20, 0x80}, {@in6=@remote, 0x4d2, 0x3c}, @in=@broadcast, {0xb4ca, 0x9af, 0x8, 0x8, 0x1aea, 0xfffffffffffffffe, 0x8, 0x100}, {0x3, 0x7, 0x8000000000000000, 0x80000001}, {0x800, 0xaa1, 0x2}, 0x70bd28, 0x3505, 0xa, 0x1, 0x2}, 0xf}, [@mark={0xc, 0x15, {0x35075c, 0xc0}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x2000402c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x18, 0x68, 0x1, 0x20100003, 0x7ffffffd, {0x0, 0x0, 0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000092)

8m11.547819305s ago: executing program 48 (id=2243):
r0 = socket(0x10, 0x3, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000440)={r0, &(0x7f0000000340)='\x00', 0x101000, &(0x7f0000000380)={@align=0x6, {0x7, 0x1, 0x3, 0x8000000000000000}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x1000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000010040000000000000000000009030000000000000001000004070000000000000002"], 0x0, 0x4a}, 0x28)
sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x2e, &(0x7f00000004c0)={&(0x7f0000003180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4040815}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073797a"], 0x20}}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f00000001c0)={0x77359400}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x7f, 0xb94})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x5b, 0xa0, &(0x7f0000000580)="441a02100ddfad0d3a17a04a92ed00bff1ef9b0638420a832c493029f195feec641e929641421bc3c0e28ed2718f3da4fe3f1ba256dea6b1990a2af8263e68781af240b094c06b573307a6a235990459421749de43c83e46412434", &(0x7f0000000600)=""/160, 0x9, 0x0, 0x1000, 0xcd, &(0x7f0000002cc0)="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", &(0x7f00000027c0)="23108a60f6f46c4d3a6ca622cd6cb241d848c4bf64a96cb462803eeea52a434df404bfe73975cb6b36b6b091b1188ce244c4b8094693e7ac27ff43d690ef628a3470f6a46a821f6fd88192cfaca55e259fef21ea2bf37d3507bbe70c51e5b334f287e7de367ed1c48ec849e5317a90ed7bbe4bf3c1b18402e14d5aaac30b070d56db0eb498a6b8ea9f3a42103ccc56581fadaff616d5e5433fd66d6553d18d9b0d539fc051bc83599b7b7087e37ec36e488db84b399306f2b2bcffc3cc50231b6d43506817edf3a5fcfa94fb69", 0x3, 0x0, 0x9}, 0x50)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
setgroups(0x40000000000000dd, &(0x7f0000000400)=[0xee00])

8m8.656086915s ago: executing program 49 (id=2250):
r0 = socket(0x10, 0x3, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000440)={r0, &(0x7f0000000340)='\x00', 0x101000, &(0x7f0000000380)={@align=0x6, {0x7, 0x1, 0x3, 0x8000000000000000}}, 0x7, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x1000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000010040000000000000000000009030000000000000001000004070000000000000002"], 0x0, 0x4a}, 0x28)
sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x2e, &(0x7f00000004c0)={&(0x7f0000003180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4040815}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073797a"], 0x20}}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x1, &(0x7f00000001c0)={0x77359400}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
write$binfmt_script(r4, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x7f, 0xb94})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x5b, 0xa0, &(0x7f0000000580)="441a02100ddfad0d3a17a04a92ed00bff1ef9b0638420a832c493029f195feec641e929641421bc3c0e28ed2718f3da4fe3f1ba256dea6b1990a2af8263e68781af240b094c06b573307a6a235990459421749de43c83e46412434", &(0x7f0000000600)=""/160, 0x9, 0x0, 0x1000, 0xcd, &(0x7f0000002cc0)="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", &(0x7f00000027c0)="23108a60f6f46c4d3a6ca622cd6cb241d848c4bf64a96cb462803eeea52a434df404bfe73975cb6b36b6b091b1188ce244c4b8094693e7ac27ff43d690ef628a3470f6a46a821f6fd88192cfaca55e259fef21ea2bf37d3507bbe70c51e5b334f287e7de367ed1c48ec849e5317a90ed7bbe4bf3c1b18402e14d5aaac30b070d56db0eb498a6b8ea9f3a42103ccc56581fadaff616d5e5433fd66d6553d18d9b0d539fc051bc83599b7b7087e37ec36e488db84b399306f2b2bcffc3cc50231b6d43506817edf3a5fcfa94fb69", 0x3, 0x0, 0x9}, 0x50)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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")
setgroups(0x40000000000000dd, &(0x7f0000000400)=[0xee00])

8m8.108323257s ago: executing program 50 (id=2254):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x2010, r1, 0xf1884000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}, 0xfffffffd}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, 0x0, 0x0)
listen(r5, 0xc)
listen(r4, 0x0)

8m4.276300382s ago: executing program 51 (id=2263):
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x181001, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)

7m50.458477712s ago: executing program 52 (id=2290):
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x181001, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_score_adj\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40)

7m27.893114155s ago: executing program 53 (id=2485):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488)

7m19.12066534s ago: executing program 54 (id=2581):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@noquota}, {@jqfmt_vfsold}, {@nombcache}, {@nodioread_nolock}, {@minixdf}, {@nomblk_io_submit}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000580)={0x6, "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"})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x60, 0x30, 0x7, 0x1, 0x0, 0x8})

6m57.650091998s ago: executing program 55 (id=2834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900400073797a310000000108000a40fffffffc880000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40)

6m16.233407647s ago: executing program 56 (id=3306):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x400}, 0x80b0, 0x9, 0x800020, 0x2, 0x0, 0x2, 0x1, 0x0, 0x80000, 0x0, 0xc0}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0102000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000005000200890000000500020007000000080006400000000208000440000000170900012b73797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x4, 0x32e, &(0x7f0000000a40)="$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")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
epoll_create1(0x80000)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x7, 0x8, 0x1, {0x0, 0x0, r2}})
io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0)

5m28.43990249s ago: executing program 0 (id=3820):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffbffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xa1, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5m28.284036569s ago: executing program 0 (id=3827):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000040c0)={'filter\x00', 0x5, 0x4, 0x418, 0x220, 0x110, 0x0, 0x220, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@multicast, @remote, @multicast2, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x800008, @empty}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
sendto$inet6(r1, &(0x7f00000001c0)="806bb63df1", 0x5, 0x0, 0x0, 0x0)

5m28.011911195s ago: executing program 0 (id=3832):
r0 = socket(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf7)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7e)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000080000000", @ANYRES32=0x1], 0x50)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0x4, 0xf, 0x20, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7806, 0x20, 0xa, 0x2}})
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)=r2)
socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x5, 0x0, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7})
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8})
io_setup(0x7, &(0x7f0000001e00)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x82, 0xffffffffffffffff, 0x0}])
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0xf8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x6c2, 0x7ee3}, 0x10004, 0x6, 0xfffffffb, 0x2, 0x4, 0x5, 0x8000, 0x0, 0x12000, 0x0, 0x80000001}, 0xffffffffffffffff, 0xb, r6, 0x1)
io_uring_setup(0x7772, &(0x7f0000000340)={0x0, 0x963a, 0x2, 0x2, 0x24})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8e}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x6c)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

5m24.85571353s ago: executing program 0 (id=3845):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000400)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@abort}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@mblk_io_submit}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==")
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0})
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
ioprio_set$pid(0x2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000a1e)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a07, 0x4, @empty, @mcast2={0xff, 0x5}, 0x700, 0x40, 0xb3}})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x1000000000002f, 0x100000000})
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0xffffffffffffffff, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x0, 0x208047}, 0x3c)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

5m24.212532178s ago: executing program 0 (id=3854):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
io_setup(0x400e, &(0x7f0000000600)=<r4=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1)
syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}])
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/175, 0xaf}], 0x5}, 0x10100)

5m24.026928889s ago: executing program 0 (id=3859):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff)

5m9.596399865s ago: executing program 57 (id=3859):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff)

4m17.967055883s ago: executing program 5 (id=4623):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x40840)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, 0x0)

4m15.007951926s ago: executing program 5 (id=4629):
r0 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x80, 0x200002, 0x1f9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0xe5, 0x208000, 0x12345})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

4m14.424538901s ago: executing program 5 (id=4641):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xf691, 0x2000, 0x0, 0x2b4}, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000000000))

4m11.948402036s ago: executing program 5 (id=4643):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000280), &(0x7f0000000080)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0x1, 0x3, {{0xf, 0x4, 0x1, 0x1, 0x3c, 0x65, 0x0, 0x81, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x17, 0x9e, [@multicast2, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @noop, @timestamp={0x44, 0x4, 0xb4, 0x0, 0x1}, @rr={0x7, 0xb, 0x96, [@dev={0xac, 0x14, 0x14, 0x2f}, @loopback]}]}}}}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$P9_RGETLOCK(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ceb2001ccacf6fc436269898de9a4e122d"], 0x23)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000a95000/0x4000)=nil, 0x4000, 0x100000a, 0x40010, r5, 0x0)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0xc0011122)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)

4m11.839579572s ago: executing program 5 (id=4645):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000efff00000000000800010000000000", 0x24)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r1, &(0x7f0000002280)=[{&(0x7f0000000140)="2ec0b70007e03d3e000000000000000508060000", 0x14}, {&(0x7f0000000340)="c0aed5f66e736ea839a9505f36ab39e83fc13113c834e799a9d751", 0x1b}], 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESOCT=r0, @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

4m11.035740509s ago: executing program 5 (id=4652):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x40840)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, 0x0)

4m11.013133911s ago: executing program 58 (id=4652):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x40840)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, 0x0)

1m47.729228023s ago: executing program 7 (id=5537):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@user_xattr}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@data_err_ignore}, {@barrier}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@sysvgroups}]}, 0x1, 0x5af, &(0x7f0000000940)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
fallocate(r0, 0x0, 0xfff, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setresgid(0xee00, 0xffffffffffffffff, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r1 = syz_io_uring_setup(0xeb0, &(0x7f0000000400)={0x0, 0xb31d, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000500)={0x7, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_config_ext={0xb5, 0x2}, 0x88, 0x30, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e26, 0x6, @mcast2, 0xfffffffd}, 0x1c)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r5 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r7 = gettid()
tkill(r7, 0x16)

1m46.826341546s ago: executing program 7 (id=5546):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
chdir(&(0x7f0000000140)='./bus\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xa, 0xa}, {0xd, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@acquire={0x144, 0x17, 0x300, 0x70bd25, 0x400000, {{@in=@multicast1, 0x0, 0xff}, @in6=@loopback, {@in6=@mcast1, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x66177cb5e5c40d1c}, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x3b}, {0x0, 0xfc66, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800000000000}, {0x4000, 0x2, 0x0, 0x8}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x9}, [@srcaddr={0x14, 0xd, @in=@broadcast}, @extra_flags={0x8}]}, 0x144}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@acquire={0x144, 0x17, 0x300, 0x70bd25, 0x400000, {{@in=@multicast1, 0x0, 0xff}, @in6=@loopback, {@in6=@mcast1, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x66177cb5e5c40d1c}, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x3b}, {0x0, 0xfc66, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800000000000}, {0x4000, 0x2, 0x0, 0x8}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x9}, [@srcaddr={0x14, 0xd, @in=@broadcast}, @extra_flags={0x8}]}, 0x144}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', <r4=>0x0, 0x4, 0xb5, 0x4, 0x80000001, 0x48, @loopback, @loopback, 0x80, 0x80, 0x1a, 0xffffffee}})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x4, r4, 0x1, 0x8, 0x6, @local}, 0x14)
fcntl$setlease(r3, 0x400, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)
mkdir(&(0x7f0000000340)='./file\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) (async)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160)
umount2(&(0x7f0000000000)='./file/file0/../\x00', 0x8) (async)
umount2(&(0x7f0000000000)='./file/file0/../\x00', 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fcntl$setlease(r5, 0x400, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

1m46.711526853s ago: executing program 7 (id=5548):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x11)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'})
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

1m46.677642145s ago: executing program 7 (id=5549):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004454}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00')
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1000}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x4004000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xde20, @broadcast}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
io_setup(0x81, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
shutdown(r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff73)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a42, 0x13)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r5, r5, 0x0, 0xe3aa6ea)

1m45.844210453s ago: executing program 7 (id=5570):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000021000100000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x0)

1m45.810964635s ago: executing program 1 (id=5571):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"355bc0113dce32db6d2173fe5014687c", <r3=>0x0, 0x0, {0xdf3, 0x1}, {0x8000000000000000, 0x9}, 0x0, [0x3, 0x81, 0x5, 0x6, 0x80, 0x0, 0x7a8, 0x5, 0x0, 0x4, 0x0, 0xff, 0xfffffffffffffff9, 0x0, 0x5, 0xffffffffffffffff]})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000780)={{r1}, r3, 0x10, @unused=[0x6, 0x9, 0xfffffffffffffff0, 0x6], @subvolid=0x6})
pselect6(0x40, &(0x7f00000001c0)={0x7f}, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2004})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e", 0x9}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r4, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

1m45.688533743s ago: executing program 1 (id=5574):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0))

1m45.654304975s ago: executing program 1 (id=5575):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x100)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
r2 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x260000, 0x1)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast2}], 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r4, 0x40107446, 0x0)
write(r4, 0x0, 0x0)
file_getattr(r3, 0x0, &(0x7f0000000100), 0x18, 0x1000)
renameat2(r2, &(0x7f0000000400)='./file1\x00', r3, &(0x7f0000000440)='./file1\x00', 0x7)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r5, &(0x7f0000000180)="01010101", 0x4)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r6)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r7, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000004780)=""/4109, 0x100d}], 0x2}, 0x7}, {{&(0x7f0000000480)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/4106, 0x100a}, {&(0x7f0000001840)=""/168, 0x68}, {&(0x7f0000001d00)=""/123, 0x7b}], 0x7, &(0x7f0000000600)=""/10, 0xa}, 0x5}, {{&(0x7f0000001a40)=@pppol2tpv3in6, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/12, 0xc}], 0x1, &(0x7f0000001b40)=""/240, 0xf0}, 0x2}], 0x3, 0x1822b, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0xb3, @mcast1}, 0x1c)

1m45.448316117s ago: executing program 7 (id=5576):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
rt_sigtimedwait(&(0x7f0000000300)={[0x7fffffffffffffff]}, 0x0, 0x0, 0x8)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r3, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
setgid(0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
shmget(0x2, 0x4000, 0x200, &(0x7f0000af2000/0x4000)=nil)

1m45.432585787s ago: executing program 59 (id=5576):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
rt_sigtimedwait(&(0x7f0000000300)={[0x7fffffffffffffff]}, 0x0, 0x0, 0x8)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
getdents(r3, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
setgid(0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
fchdir(r1)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
shmget(0x2, 0x4000, 0x200, &(0x7f0000af2000/0x4000)=nil)

1m44.70446469s ago: executing program 1 (id=5581):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004454}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0)
pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00')
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1000}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x4004000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xde20, @broadcast}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
io_setup(0x81, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
shutdown(r4, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a42, 0x13)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r5, r5, 0x0, 0xe3aa6ea)

1m43.891961798s ago: executing program 1 (id=5586):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x576, &(0x7f0000000d00)="$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")
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0xa1)

1m42.873235227s ago: executing program 1 (id=5594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, &(0x7f0000003840)={0x0, 0x3938700})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e})
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a7886fba7f4e169edb30", 0x1c}], 0x1}, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0xfffffffffffffffc, 0x12)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xa5b}, 0x1c)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x2004c840)
sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x794a32f4cbfdf0c9, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4040090}, 0x200088c1)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="64834682c9df29a19e456dc9bb175ee6859cbbb69f8a1196b35794e45798ae5f989ebf501d81bce779ec4d73188fa76dd2fe44d3c0dbfd3599646101273891aa950ac4c08f30ce5463b17da23f90174367defcd726d5220eb7c55cb83f94d8df3cdd08743e80ba7febfcd4f656b2c1ca054a330493042b801d179a0d1dbd0104d463eae3f766a82664740f57", @ANYRES64=r5], 0x68}, 0x1, 0x0, 0x0, 0x4040854}, 0x40000c0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x34000001}, 0x8000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r8, &(0x7f0000000040), 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'})

1m42.83288169s ago: executing program 60 (id=5594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, &(0x7f0000003840)={0x0, 0x3938700})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e})
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a7886fba7f4e169edb30", 0x1c}], 0x1}, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0xfffffffffffffffc, 0x12)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xa5b}, 0x1c)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x2004c840)
sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x794a32f4cbfdf0c9, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4040090}, 0x200088c1)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="64834682c9df29a19e456dc9bb175ee6859cbbb69f8a1196b35794e45798ae5f989ebf501d81bce779ec4d73188fa76dd2fe44d3c0dbfd3599646101273891aa950ac4c08f30ce5463b17da23f90174367defcd726d5220eb7c55cb83f94d8df3cdd08743e80ba7febfcd4f656b2c1ca054a330493042b801d179a0d1dbd0104d463eae3f766a82664740f57", @ANYRES64=r5], 0x68}, 0x1, 0x0, 0x0, 0x4040854}, 0x40000c0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES64=r4], 0x40}, 0x1, 0x0, 0x0, 0x34000001}, 0x8000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r8, &(0x7f0000000040), 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'})

1m33.348106986s ago: executing program 4 (id=5663):
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfb0700", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110bd000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c00038008000140"], 0x110}, 0x1, 0x0, 0x0, 0x4000081}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r8 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
r11 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#\xc2\x01v\x9bQ\xa7\x88\x19\x8dd\xff}\x15\xa8\xb7/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\x03\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5', 0x2)
getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f00000005c0)=0x80)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r11, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e0001002cbd7001ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="06"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x806)
ppoll(0x0, 0x0, &(0x7f0000001cc0)={0x0, 0x3938700}, 0x0, 0x0)
io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0)

1m32.709466214s ago: executing program 4 (id=5669):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'})

1m31.545769482s ago: executing program 4 (id=5681):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x3cd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfeff, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400030540008000ffdbdf250218e4ff", @ANYRES32=r5, @ANYBLOB="080002007f00003fad039542da8b07750108e99f6a065c71bbe7a582b4ae2eb090a98c7d039504ef79ba0f6c9d94a2b0a584cf039791e8d8eb9bad7ef8c9d47c7e5f5bc42c76f5a5c7cdf0105827e68ad2bf0f35dd42bbff0b351f326bcf6dfe3dc954ca33b7a19c22bfbc1909fad4bf73df11b3aa10d7057f41d5f02f1359506e745bee561fd1ed8848b5cd8a44cc8b1a7089"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840)
r6 = timerfd_create(0x0, 0x0)
timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
read(r6, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3})
socket$inet_udp(0x2, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffd80, 0x29, 0x9, 0x0, 0x10, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
lstat(&(0x7f0000000680)='./file0/file0\x00', &(0x7f00000007c0))
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x5423, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2)
io_submit(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

1m29.508649281s ago: executing program 4 (id=5694):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, 0x0, 0x20001000)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x4000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x3ff, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x408d2}, 0x4)
r3 = add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0)
ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000080)=0x200)
r5 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r3)
r6 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r5)
keyctl$KEYCTL_MOVE(0x1e, r3, r3, r6, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x2c, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_pidfd_open(0x0, 0x0)

1m27.863973688s ago: executing program 4 (id=5708):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x3bf, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
close(0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000280)={0xff, 0x0, '\x00', [@pad1]}, 0x10)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000001c0)={{0x29, @private=0xa010102, 0x4e20, 0x4, 'sh\x00', 0x38, 0x9, 0x27}, {@multicast1, 0x4e24, 0x6, 0x39, 0xad1, 0x2}}, 0x44)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000040000000000001202000000050000000000000804000000070000000000001201000000040000000000000702000000040000000000000e0400000000000000002e61305f615f5f"], 0x0, 0x61, 0x0, 0x2}, 0x28)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1m26.904794154s ago: executing program 4 (id=5725):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x40000)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
r2 = shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2000)
shmdt(r2)
msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8, 0x800)

1m26.904462894s ago: executing program 61 (id=5725):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x40000)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
r2 = shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2000)
shmdt(r2)
msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x8, 0x800)

4.352798815s ago: executing program 6 (id=7224):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$caif_stream(0x25, 0x1, 0x1)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000600)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r3, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)

2.999544365s ago: executing program 8 (id=7240):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0xa6ff, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

2.948701947s ago: executing program 6 (id=7241):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001a80)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.925304818s ago: executing program 6 (id=7242):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="b46ae6580fa0baedd557967b1809beaf53be985eb37c71a64f1c8d15fcbc5ce83e7c1566a560c4cd570cc7c85f5d239105c0f465c3755dc087860848dd893326d12af4035907a03f7df684331382f6fe3833bfde7331133ca643f5697732bd659e54831ac91d899d3555765f6aa765f3ff1b1aedb239494187c8e0935f39ee0acc0446e8e5abe1e657dabda1309de7d8ccf05cc95ec456508dfab47bd7fb6079bd1ba82eff5397d4dbb97e52dd656b738b73d6f79945b07b43f6e6ba802d9a5b5c24acad648e9c97483a45b8178c0481409d13a225c1ae5cf67b4bb296f01534784246f089bf03376a0af6d1be5c465e09", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000010000009559b4703cc9e322c15921f7a834ceb48776cdef70fe8c5ff1"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_socket_connect_nvme_tcp()
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2.909607379s ago: executing program 8 (id=7243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x15, 0x11, 0xc, 0x6, 0x7f, {0x6, 0xfffffffa, 0x7, 0x4, 0x2b52, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000)

2.873326352s ago: executing program 8 (id=7244):
sched_setscheduler(0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000b000000040001800400068065b7ad2d378174b2a4568e83fc7c09cd0e8d0c325eb991a4ca8027a6c7033066316c95f9f73d07d375557f834fe851f78801c4b24341098f76c18e5e033400a6b6e7f704526366f93928aabc8a382847484891af120ef5f776922b395755d98a736819bb2cfd6e1e8269d5e47c3eeb62411f5b9d84b7e6ac1352be5d096e1a780567d78c7e2a44beaffbdce5fb3a5ceb59806d957da078543e903da8dfcc6874df0e3ec359ae76c07b105626887c72d946bb09e977d54df4888d1b9d526acd69fa0cdd29b3635df1487be01820"], 0x1c}}, 0x0)

2.581256409s ago: executing program 2 (id=7251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="010000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

2.550990501s ago: executing program 2 (id=7252):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="d6976d1a0a08df", 0x7}, {&(0x7f0000000240)="a9050000000074640001000000", 0xd}], 0x2}}], 0x1, 0x24004044)

2.480824085s ago: executing program 2 (id=7253):
r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r0}, &(0x7f0000000240)=""/242, 0xf2, &(0x7f0000000000)={&(0x7f0000000080)={'sha1\x00'}})

2.480472365s ago: executing program 2 (id=7254):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0xa6ff, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

2.405756639s ago: executing program 2 (id=7257):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

2.100217777s ago: executing program 6 (id=7262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpriority(0x1, 0x18)

1.900116429s ago: executing program 8 (id=7265):
syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b2010202019405"], 0x0)

1.800296455s ago: executing program 3 (id=7266):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x0, 0x100)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2018042, &(0x7f0000000280)={[{@subsystem='memory'}, {@subsystem='memory'}, {@xattr}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000044)

1.378062839s ago: executing program 8 (id=7267):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sched_setscheduler(0x0, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0xfffffffc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r5, 0x1, 0x104, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)

999.636892ms ago: executing program 2 (id=7268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)

752.742016ms ago: executing program 9 (id=7270):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a3042dbd7000ffdbdf251d00000008001e000b0000000800"], 0x2c}}, 0x0)

752.477176ms ago: executing program 6 (id=7271):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040))

749.120476ms ago: executing program 9 (id=7272):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair(0x11, 0xa, 0x8, &(0x7f0000000080))

745.483576ms ago: executing program 6 (id=7273):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="b46ae6580fa0baedd557967b1809beaf53be985eb37c71a64f1c8d15fcbc5ce83e7c1566a560c4cd570cc7c85f5d239105c0f465c3755dc087860848dd893326d12af4035907a03f7df684331382f6fe3833bfde7331133ca643f5697732bd659e54831ac91d899d3555765f6aa765f3ff1b1aedb239494187c8e0935f39ee0acc0446e8e5abe1e657dabda1309de7d8ccf05cc95ec456508dfab47bd7fb6079bd1ba82eff5397d4dbb97e52dd656b738b73d6f79945b07b43f6e6ba802d9a5b5c24acad648e9c97483a45b8178c0481409d13a225c1ae5cf67b4bb296f01534784246f089bf03376a0af6d1be5c465e09", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000010000009559b4703cc9e322c15921f7a834ceb48776cdef70fe8c5ff1"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_socket_connect_nvme_tcp()
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

700.732129ms ago: executing program 9 (id=7274):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[], 0x0)

612.673905ms ago: executing program 9 (id=7275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffe, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0x56}, @mptcp=@remove_addr={0x1e, 0x18, 0xa, 0x0, "f57506bb3755b21d9ec3e7f00342eb1a332e14dca8"}, @timestamp={0x8, 0xa, 0x7, 0x401}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}]}}}}}}}, 0x0)

607.184745ms ago: executing program 9 (id=7276):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

555.735968ms ago: executing program 9 (id=7277):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

416.607936ms ago: executing program 3 (id=7278):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

329.518891ms ago: executing program 3 (id=7279):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)

276.558864ms ago: executing program 3 (id=7280):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000340), 0x1, 0x7c3, &(0x7f0000001680)="$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")
r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
readv(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

133.031363ms ago: executing program 3 (id=7281):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xa6ff, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

12.66831ms ago: executing program 8 (id=7282):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a3042dbd7000ffdbdf251d00000008001e000b00000008000100"], 0x2c}}, 0x0)

0s ago: executing program 3 (id=7283):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioprio_set$uid(0x0, 0x0, 0x2007)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

kaller0>
[ 1021.551260][T29568] loop1: detected capacity change from 0 to 512
[ 1021.601639][T29581] loop7: detected capacity change from 0 to 1764
[ 1021.723171][T29587] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5532'.
[ 1021.930679][T29568] EXT4-fs (loop1): 1 orphan inode deleted
[ 1021.976084][   T28] audit: type=1400 audit(1770924407.620:5634): avc:  denied  { lock } for  pid=29591 comm="syz.6.5533" path="socket:[89524]" dev="sockfs" ino=89524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1021.997758][T29568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1022.179336][T23727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.266792][T29602] loop7: detected capacity change from 0 to 1024
[ 1022.319891][T29604] loop1: detected capacity change from 0 to 1024
[ 1022.328411][T29602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1022.379304][T29604] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[ 1022.408104][T29602] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1022.451325][T29604] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[ 1022.508868][T29602] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5537: bg 0: block 112: padding at end of block bitmap is not set
[ 1022.524132][   T28] audit: type=1400 audit(1770924408.187:5635): avc:  denied  { create } for  pid=29601 comm="syz.7.5537" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1022.545529][T29604] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1022.568600][T29604] EXT4-fs error (device loop1): ext4_get_journal_inode:5861: inode #32: comm syz.1.5538: iget: special inode unallocated
[ 1022.569751][T29610] team0: Device syz_tun is of different type
[ 1022.586731][T29604] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[ 1022.606730][T29604] EXT4-fs (loop1): no journal found
[ 1022.642024][T29604] EXT4-fs (loop1): can't get journal size
[ 1022.649373][T29610] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1022.652598][T29604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1023.000656][T29625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5544'.
[ 1023.038258][   T28] audit: type=1400 audit(1770924408.743:5636): avc:  denied  { ioctl } for  pid=29626 comm="syz.4.5545" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1023.065011][T29627] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[ 1023.071919][T29627] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1023.090181][T29627] vhci_hcd vhci_hcd.0: Device attached
[ 1023.101568][T29627] loop4: detected capacity change from 0 to 1024
[ 1023.106377][T28188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1023.110824][T29627] EXT4-fs: Ignoring removed bh option
[ 1023.126933][T23727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1023.162534][T29627] EXT4-fs (loop4): inodes count not valid: 0 vs 32
[ 1023.175736][T29632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5546'.
[ 1023.176492][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5546'.
[ 1023.207031][T29632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5546'.
[ 1023.214248][T29631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5546'.
[ 1023.321246][ T8000] usb 9-1: new high-speed USB device number 3 using vhci_hcd
[ 1023.350912][   T28] audit: type=1326 audit(1770924409.068:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29644 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744a46bf79 code=0x7ffc0000
[ 1023.381185][   T28] audit: type=1326 audit(1770924409.068:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29644 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744a46bf79 code=0x7ffc0000
[ 1023.414773][   T28] audit: type=1326 audit(1770924409.100:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29644 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f744a46bf79 code=0x7ffc0000
[ 1023.464824][   T28] audit: type=1326 audit(1770924409.100:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29644 comm="syz.1.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744a46bf79 code=0x7ffc0000
[ 1023.536418][T29654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5555'.
[ 1023.545807][T29654] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5555'.
[ 1023.555788][T29654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5555'.
[ 1023.564930][T29654] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5555'.
[ 1023.576487][T29656] loop1: detected capacity change from 0 to 1024
[ 1023.611471][T29656] EXT4-fs: Ignoring removed orlov option
[ 1023.636983][T29656] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1023.685640][T29656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1023.714797][T29628] vhci_hcd: connection reset by peer
[ 1023.720729][ T4899] vhci_hcd vhci_hcd.4: stop threads
[ 1023.726597][ T4899] vhci_hcd vhci_hcd.4: release socket
[ 1023.732183][ T4899] vhci_hcd vhci_hcd.4: disconnect device
[ 1023.806227][T29676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5565'.
[ 1023.826449][T29678] FAULT_INJECTION: forcing a failure.
[ 1023.826449][T29678] name failslab, interval 1, probability 0, space 0, times 0
[ 1023.855069][T23727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1023.863928][T29678] CPU: 0 UID: 0 PID: 29678 Comm: syz.6.5563 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1023.864039][T29678] Tainted: [W]=WARN
[ 1023.864048][T29678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1023.864061][T29678] Call Trace:
[ 1023.864070][T29678]  <TASK>
[ 1023.864079][T29678]  __dump_stack+0x1d/0x30
[ 1023.864108][T29678]  dump_stack_lvl+0x95/0xd0
[ 1023.864132][T29678]  dump_stack+0x15/0x1b
[ 1023.864169][T29678]  should_fail_ex+0x263/0x280
[ 1023.864199][T29678]  ? __se_sys_mount+0xef/0x2e0
[ 1023.864238][T29678]  should_failslab+0x8c/0xb0
[ 1023.864289][T29678]  __kmalloc_cache_noprof+0x5f/0x400
[ 1023.864323][T29678]  ? memdup_user+0x99/0xd0
[ 1023.864351][T29678]  __se_sys_mount+0xef/0x2e0
[ 1023.864428][T29678]  ? fput+0x8f/0xc0
[ 1023.864450][T29678]  ? ksys_write+0x194/0x1a0
[ 1023.864478][T29678]  __x64_sys_mount+0x67/0x80
[ 1023.864510][T29678]  x64_sys_call+0x2d61/0x3020
[ 1023.864593][T29678]  do_syscall_64+0x12c/0x370
[ 1023.864623][T29678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1023.864648][T29678] RIP: 0033:0x7f3472b6bf79
[ 1023.864666][T29678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1023.864767][T29678] RSP: 002b:00007f347159e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1023.864791][T29678] RAX: ffffffffffffffda RBX: 00007f3472de6090 RCX: 00007f3472b6bf79
[ 1023.864807][T29678] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[ 1023.864822][T29678] RBP: 00007f347159e090 R08: 00002000000002c0 R09: 0000000000000000
[ 1023.864837][T29678] R10: 0000000000200400 R11: 0000000000000246 R12: 0000000000000001
[ 1023.864862][T29678] R13: 00007f3472de6128 R14: 00007f3472de6090 R15: 00007ffd3226c9a8
[ 1023.864883][T29678]  </TASK>
[ 1024.286505][T29701] 9pnet_fd: p9_fd_create_unix (29701): problem connecting socket: ./file1: -1
[ 1024.330802][T29704] 9p: Bad value for 'rfdno'
[ 1024.734139][T29707] chnl_net:caif_netlink_parms(): no params data found
[ 1024.830065][T29707] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.846172][T29707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.874220][T29707] bridge_slave_0: entered allmulticast mode
[ 1024.888870][T29707] bridge_slave_0: entered promiscuous mode
[ 1024.895930][T29707] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.903206][T29707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.910499][T29707] bridge_slave_1: entered allmulticast mode
[ 1024.924273][T29707] bridge_slave_1: entered promiscuous mode
[ 1024.926170][T29726] loop4: detected capacity change from 0 to 512
[ 1024.972592][T29707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1024.984319][T29726] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.5579: inode has both inline data and extents flags
[ 1024.999669][T29707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1025.009962][T29726] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1025.010219][T29726] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5579: couldn't read orphan inode 15 (err -117)
[ 1025.049417][T29707] team0: Port device team_slave_0 added
[ 1025.057342][T29726] loop4: lost filesystem error report for type 5 error -117
[ 1025.058017][T29726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1025.086256][T29707] team0: Port device team_slave_1 added
[ 1025.110119][T29709] syz.6.5578 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1025.145492][T29707] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1025.150621][T29726] FAULT_INJECTION: forcing a failure.
[ 1025.150621][T29726] name failslab, interval 1, probability 0, space 0, times 0
[ 1025.153131][T29729] program syz.9.5580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1025.166233][T29709] CPU: 1 UID: 0 PID: 29709 Comm: syz.6.5578 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1025.166270][T29709] Tainted: [W]=WARN
[ 1025.166278][T29709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1025.166292][T29709] Call Trace:
[ 1025.166301][T29709]  <TASK>
[ 1025.166381][T29709]  __dump_stack+0x1d/0x30
[ 1025.166410][T29709]  dump_stack_lvl+0x95/0xd0
[ 1025.166434][T29709]  dump_stack+0x15/0x1b
[ 1025.166524][T29709]  dump_header+0x80/0x240
[ 1025.166573][T29709]  oom_kill_process+0x295/0x350
[ 1025.166607][T29709]  out_of_memory+0x97d/0xb80
[ 1025.166639][T29709]  try_charge_memcg+0x62e/0xa10
[ 1025.166737][T29709]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[ 1025.166796][T29709]  __read_swap_cache_async+0x17b/0x2d0
[ 1025.166822][T29709]  swap_cluster_readahead+0x262/0x3c0
[ 1025.166968][T29709]  swapin_readahead+0xde/0x840
[ 1025.166992][T29709]  ? __rcu_read_unlock+0x4e/0x70
[ 1025.167026][T29709]  ? __perf_event_task_sched_in+0xa65/0xad0
[ 1025.167059][T29709]  ? __list_add_valid_or_report+0x38/0xe0
[ 1025.167155][T29709]  ? __rcu_read_unlock+0x4e/0x70
[ 1025.167187][T29709]  ? swap_cache_get_folio+0x26f/0x280
[ 1025.167282][T29709]  do_swap_page+0x59b/0x2a50
[ 1025.167305][T29709]  ? _raw_spin_unlock+0x9/0x30
[ 1025.167367][T29709]  ? __rcu_read_lock+0x36/0x50
[ 1025.167399][T29709]  ? __pfx_default_wake_function+0x10/0x10
[ 1025.167436][T29709]  handle_mm_fault+0xb40/0x3030
[ 1025.167481][T29709]  ? vma_start_read+0x1c7/0x2c0
[ 1025.167680][T29709]  do_user_addr_fault+0x62f/0x1050
[ 1025.167762][T29709]  exc_page_fault+0x62/0xa0
[ 1025.167787][T29709]  asm_exc_page_fault+0x26/0x30
[ 1025.167809][T29709] RIP: 0033:0x7f3472a39a0c
[ 1025.167830][T29709] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[ 1025.167910][T29709] RSP: 002b:00007ffd3226cb10 EFLAGS: 00010202
[ 1025.167930][T29709] RAX: 0000000000000000 RBX: 00007f3472de5fa0 RCX: 000055556a433808
[ 1025.167955][T29709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1025.167970][T29709] RBP: 00007f3472de7da0 R08: 0000000000000000 R09: 0000000000000000
[ 1025.167985][T29709] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000fd6c9
[ 1025.168000][T29709] R13: 00007f3472de609c R14: 00000000000fd3fe R15: 00007f3472de6090
[ 1025.168021][T29709]  </TASK>
[ 1025.168030][T29709] memory: usage 307200kB, limit 307200kB, failcnt 251
[ 1025.178481][T29707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.193624][T29726] CPU: 1 UID: 0 PID: 29726 Comm: syz.4.5579 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1025.193682][T29726] Tainted: [W]=WARN
[ 1025.193691][T29726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1025.193704][T29726] Call Trace:
[ 1025.193713][T29726]  <TASK>
[ 1025.193724][T29726]  __dump_stack+0x1d/0x30
[ 1025.193753][T29726]  dump_stack_lvl+0x95/0xd0
[ 1025.193776][T29726]  dump_stack+0x15/0x1b
[ 1025.193819][T29726]  should_fail_ex+0x263/0x280
[ 1025.193884][T29726]  should_failslab+0x8c/0xb0
[ 1025.193914][T29726]  kmem_cache_alloc_noprof+0x66/0x400
[ 1025.193945][T29726]  ? do_getname+0x2e/0x1c0
[ 1025.194087][T29726]  ? mutex_unlock+0x4e/0x90
[ 1025.194169][T29726]  do_getname+0x2e/0x1c0
[ 1025.194201][T29726]  getname_flags+0x1d/0x30
[ 1025.194258][T29726]  __x64_sys_execve+0x42/0x80
[ 1025.194293][T29726]  x64_sys_call+0x2752/0x3020
[ 1025.194342][T29726]  do_syscall_64+0x12c/0x370
[ 1025.194375][T29726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.194399][T29726] RIP: 0033:0x7f08038dbf79
[ 1025.194418][T29726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.194457][T29726] RSP: 002b:00007f0802337028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 1025.194480][T29726] RAX: ffffffffffffffda RBX: 00007f0803b55fa0 RCX: 00007f08038dbf79
[ 1025.194530][T29726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[ 1025.194607][T29726] RBP: 00007f0802337090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.194622][T29726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.194636][T29726] R13: 00007f0803b56038 R14: 00007f0803b55fa0 R15: 00007ffe55d7e2b8
[ 1025.194657][T29726]  </TASK>
[ 1025.227736][T29709] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[ 1025.236336][T29707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1025.246503][T29709] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[ 1025.254604][T29730] bond0: entered promiscuous mode
[ 1025.257657][T29709] Memory cgroup stats for 
[ 1025.262607][T29730] bond_slave_0: entered promiscuous mode
[ 1025.284394][T29709] /syz6
[ 1025.290834][T29730] bond_slave_1: entered promiscuous mode
[ 1025.296035][T29056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1025.301734][T29730] batadv_slave_0: entered promiscuous mode
[ 1025.314889][T29709] :
[ 1025.321357][T29730] batadv_slave_0: left promiscuous mode
[ 1025.352882][T29709] cache 0
[ 1025.697511][T29730] bond0: left promiscuous mode
[ 1025.697773][T29709] rss 0
[ 1025.703072][T29730] bond_slave_0: left promiscuous mode
[ 1025.705337][T29709] shmem 0
[ 1025.705351][T29709] mapped_file 0
[ 1025.715477][T29730] bond_slave_1: left promiscuous mode
[ 1025.717727][T29709] dirty 0
[ 1025.717740][T29709] writeback 0
[ 1025.730053][T29709] workingset_refault_anon 431
[ 1025.735225][T29709] workingset_refault_file 32
[ 1025.739856][T29709] swap 200704
[ 1025.743195][T29709] swapcached 4096
[ 1025.743975][T29707] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1025.747017][T29709] pgpgin 1348013
[ 1025.747029][T29709] pgpgout 1348006
[ 1025.747039][T29709] pgfault 599002
[ 1025.754279][T29707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.758476][T29709] pgmajfault 63
[ 1025.773900][T29707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1025.792208][T29709] inactive_anon 0
[ 1025.810021][T29709] active_anon 4096
[ 1025.814139][T29709] inactive_file 0
[ 1025.817961][T29709] active_file 24576
[ 1025.821791][T29709] unevictable 0
[ 1025.825281][T29709] hierarchical_memory_limit 314572800
[ 1025.833295][T29709] hierarchical_memsw_limit 9223372036854771712
[ 1025.852590][T29709] total_cache 0
[ 1025.955666][T29709] total_rss 0
[ 1025.959405][T29709] total_shmem 0
[ 1025.962935][T29709] total_mapped_file 0
[ 1025.967214][T29709] total_dirty 0
[ 1025.971113][T29709] total_writeback 0
[ 1025.975214][T29709] total_workingset_refault_anon 431
[ 1025.980711][T29709] total_workingset_refault_file 32
[ 1025.985852][T29709] total_swap 200704
[ 1025.990351][T29709] total_swapcached 4096
[ 1025.994614][T29709] total_pgpgin 1348013
[ 1025.998910][T29709] total_pgpgout 1348006
[ 1026.003348][T29709] total_pgfault 599002
[ 1026.009451][T29707] hsr_slave_0: entered promiscuous mode
[ 1026.035126][T29709] total_pgmajfault 63
[ 1026.036378][T29707] hsr_slave_1: entered promiscuous mode
[ 1026.040785][T29745] loop4: detected capacity change from 0 to 1024
[ 1026.046085][T29707] debugfs: 'hsr0' already exists in 'hsr'
[ 1026.051607][T29709] total_inactive_anon 0
[ 1026.078368][T29709] total_active_anon 4096
[ 1026.082978][T29709] total_inactive_file 0
[ 1026.087256][T29709] total_active_file 24576
[ 1026.091713][T29709] total_unevictable 0
[ 1026.095981][T29709] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5578,pid=29709,uid=0
[ 1026.180252][T29709] Memory cgroup out of memory: Killed process 29709 (syz.6.5578) total-vm:94156kB, anon-rss:1220kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[ 1026.323704][T29745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1026.396145][T29745] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1026.578939][T29707] Cannot create hsr debugfs directory
[ 1026.634646][T29750] EXT4-fs error (device loop4): ext4_free_blocks:6727: comm syz.4.5585: Freeing blocks not in datazone - block = 0, count = 16
[ 1026.803927][T13157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:66: bg 0: block 112: padding at end of block bitmap is not set
[ 1026.836335][T13157] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1026.858980][T13157] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 1026.858980][T13157] 
[ 1026.897378][T13157] EXT4-fs (loop4): Total free blocks count 0
[ 1026.920020][T13157] EXT4-fs (loop4): Free/Dirty block details
[ 1026.940787][T13157] EXT4-fs (loop4): free_blocks=16
[ 1026.946828][T13157] EXT4-fs (loop4): dirty_blocks=32
[ 1026.959921][T13157] EXT4-fs (loop4): Block reservation details
[ 1026.976369][T13157] EXT4-fs (loop4): i_reserved_data_blocks=2
[ 1026.987071][T29764] syzkaller1: entered promiscuous mode
[ 1026.997070][ T4887] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 4 with error 28
[ 1027.015278][T29764] syzkaller1: entered allmulticast mode
[ 1027.037724][T29764] nfs4: Bad value for 'source'
[ 1027.072886][T29775] loop4: detected capacity change from 0 to 512
[ 1027.100868][T29775] EXT4-fs: journaled quota format not specified
[ 1027.115691][ T4887] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.202366][T29784] tmpfs: Bad value for 'mpol'
[ 1027.202366][ T4887] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.229201][T29756] loop6: detected capacity change from 0 to 4096
[ 1027.374203][ T4887] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.403093][T29807] netlink: 'syz.9.5600': attribute type 13 has an invalid length.
[ 1027.440151][T29807] gretap0: refused to change device tx_queue_len
[ 1027.474939][T29807] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1027.525085][ T4887] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1027.639890][T29830] loop9: detected capacity change from 0 to 128
[ 1027.646963][T29707] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1027.694356][T29707] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1027.841601][T29707] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1028.188377][ T8000] vhci_hcd vhci_hcd.4: vhci_device speed not set
[ 1028.438539][T29707] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1029.561773][ T4887] bridge_slave_1: left allmulticast mode
[ 1029.567959][ T4887] bridge_slave_1: left promiscuous mode
[ 1029.578198][T29876] loop9: detected capacity change from 0 to 512
[ 1029.589354][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1029.608725][ T4887] bridge_slave_0: left allmulticast mode
[ 1029.614694][ T4887] bridge_slave_0: left promiscuous mode
[ 1029.620875][T29876] EXT4-fs: Ignoring removed orlov option
[ 1029.657507][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1029.686638][T29876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1029.726471][T29876] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1029.761457][T29876] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5607: bg 0: block 248: padding at end of block bitmap is not set
[ 1029.778846][T29892] loop6: detected capacity change from 0 to 1764
[ 1029.790249][T29876] loop9: lost filesystem error report for type 5 error -117
[ 1029.801900][T29876] __quota_error: 116 callbacks suppressed
[ 1029.801919][T29876] Quota error (device loop9): write_blk: dquota write failed
[ 1029.854447][T29892] ISOFS: Unable to identify CD-ROM format.
[ 1029.892504][T29876] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1029.930109][T29876] EXT4-fs error (device loop9): ext4_acquire_dquot:6998: comm syz.9.5607: Failed to acquire dquot type 1
[ 1029.954295][T29876] loop9: lost filesystem error report for type 5 error -117
[ 1029.954883][T29876] EXT4-fs (loop9): 1 truncate cleaned up
[ 1029.980809][T29876] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1030.007246][T29910] loop4: detected capacity change from 0 to 1024
[ 1030.040071][ T4887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1030.049651][T29910] EXT4-fs: inline encryption not supported
[ 1030.062449][T26050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.074768][ T4887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1030.084302][T29910] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1030.100125][ T4887] bond0 (unregistering): Released all slaves
[ 1030.131614][T29910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1030.169537][T29707] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1030.182751][T29707] 8021q: adding VLAN 0 to HW filter on device team0
[ 1030.193142][T13157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1030.200351][T13157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1030.244485][ T4887] hsr_slave_0: left promiscuous mode
[ 1030.250467][ T4887] hsr_slave_1: left promiscuous mode
[ 1030.265737][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1030.285664][   T28] audit: type=1400 audit(1770924416.354:5757): avc:  denied  { read append } for  pid=29909 comm="syz.4.5613" path="/28/file1/cpuacct.usage_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1030.317016][ T4887] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1030.327215][   T28] audit: type=1400 audit(1770924416.386:5758): avc:  denied  { lock } for  pid=29909 comm="syz.4.5613" path="/28/file1/cpuacct.usage_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1030.329434][T29925] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 19: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[ 1030.352207][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1030.373922][T29925] EXT4-fs (loop4): Remounting filesystem read-only
[ 1030.403299][ T4887] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1030.425212][ T4887] veth1_macvtap: left promiscuous mode
[ 1030.436212][ T4887] veth0_macvtap: left promiscuous mode
[ 1030.442386][ T4887] veth1_vlan: left promiscuous mode
[ 1030.447884][ T4887] veth0_vlan: left promiscuous mode
[ 1030.585275][ T4887] team0 (unregistering): Port device team_slave_1 removed
[ 1030.597418][ T4887] team0 (unregistering): Port device team_slave_0 removed
[ 1030.671492][ T1687] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1030.678726][ T1687] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1030.707484][T29056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.739174][T29707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1030.755167][T29707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1030.874547][T29789] chnl_net:caif_netlink_parms(): no params data found
[ 1031.020396][T29789] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.036854][T29789] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.053028][T29789] bridge_slave_0: entered allmulticast mode
[ 1031.067073][T29789] bridge_slave_0: entered promiscuous mode
[ 1031.082508][T29789] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.098212][T29789] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.119189][T29789] bridge_slave_1: entered allmulticast mode
[ 1031.129299][T29789] bridge_slave_1: entered promiscuous mode
[ 1031.150640][T29707] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1031.200374][T29789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1031.234718][T29789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1031.274446][T29789] team0: Port device team_slave_0 added
[ 1031.287357][T29789] team0: Port device team_slave_1 added
[ 1031.318696][T29789] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1031.336958][T29789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1031.405279][T29789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1031.436408][T29789] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1031.454975][T29789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1031.511774][T29789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1031.734220][T30023] loop9: detected capacity change from 0 to 512
[ 1031.735356][T29789] hsr_slave_0: entered promiscuous mode
[ 1031.783314][T29789] hsr_slave_1: entered promiscuous mode
[ 1031.789292][T29789] debugfs: 'hsr0' already exists in 'hsr'
[ 1031.796551][T29789] Cannot create hsr debugfs directory
[ 1031.802441][T30023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1031.853988][T30023] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1031.934268][T30023] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.5619: corrupted inode contents
[ 1031.970603][T30023] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.5619: mark_inode_dirty error
[ 1031.980206][T29707] veth0_vlan: entered promiscuous mode
[ 1031.990722][T29707] veth1_vlan: entered promiscuous mode
[ 1032.008724][T30023] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.5619: corrupted inode contents
[ 1032.026217][T29707] veth0_macvtap: entered promiscuous mode
[ 1032.060458][T29707] veth1_macvtap: entered promiscuous mode
[ 1032.082849][T29707] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1032.105065][T26050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.117418][T29707] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1032.190230][ T4887] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.216180][ T4887] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.232031][ T4887] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.252047][ T4887] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1032.349079][T29789] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1032.393054][T29789] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1032.422131][T29789] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1032.432351][T30079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1032.439746][T30079] IPv6: NLM_F_CREATE should be set when creating new route
[ 1032.455833][T29789] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1032.538855][T30079] loop9: detected capacity change from 0 to 4096
[ 1032.562661][T29789] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1032.575354][T30079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1032.595447][T29789] 8021q: adding VLAN 0 to HW filter on device team0
[ 1032.629389][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.636833][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1032.653978][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.661549][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1032.701565][T26050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.806208][T30104] FAULT_INJECTION: forcing a failure.
[ 1032.806208][T30104] name failslab, interval 1, probability 0, space 0, times 0
[ 1032.825180][T30104] CPU: 1 UID: 0 PID: 30104 Comm: syz.9.5626 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1032.825222][T30104] Tainted: [W]=WARN
[ 1032.825231][T30104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1032.825269][T30104] Call Trace:
[ 1032.825277][T30104]  <TASK>
[ 1032.825285][T30104]  __dump_stack+0x1d/0x30
[ 1032.825313][T30104]  dump_stack_lvl+0x95/0xd0
[ 1032.825336][T30104]  dump_stack+0x15/0x1b
[ 1032.825416][T30104]  should_fail_ex+0x263/0x280
[ 1032.825450][T30104]  should_failslab+0x8c/0xb0
[ 1032.825480][T30104]  kmem_cache_alloc_node_noprof+0x6d/0x460
[ 1032.825514][T30104]  ? __alloc_skb+0x2d6/0x690
[ 1032.825533][T30104]  __alloc_skb+0x2d6/0x690
[ 1032.825561][T30104]  ? __alloc_skb+0x200/0x690
[ 1032.825582][T30104]  netlink_dump+0x10d/0x8a0
[ 1032.825604][T30104]  ? __kmalloc_cache_noprof+0x2f5/0x400
[ 1032.825643][T30104]  __netlink_dump_start+0x43e/0x520
[ 1032.825721][T30104]  inet_diag_rcv_msg_compat+0x10b/0x200
[ 1032.825759][T30104]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[ 1032.825811][T30104]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[ 1032.825841][T30104]  ? __pfx_inet_diag_dump_done+0x10/0x10
[ 1032.825877][T30104]  sock_diag_rcv_msg+0x189/0x2c0
[ 1032.825908][T30104]  netlink_rcv_skb+0x123/0x220
[ 1032.825967][T30104]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[ 1032.826003][T30104]  sock_diag_rcv+0x1c/0x30
[ 1032.826029][T30104]  netlink_unicast+0x5c0/0x690
[ 1032.826056][T30104]  netlink_sendmsg+0x5c8/0x6f0
[ 1032.826104][T30104]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1032.826133][T30104]  __sys_sendto+0x470/0x4d0
[ 1032.826163][T30104]  __x64_sys_sendto+0x76/0x90
[ 1032.826196][T30104]  x64_sys_call+0x2d35/0x3020
[ 1032.826225][T30104]  do_syscall_64+0x12c/0x370
[ 1032.826271][T30104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.826317][T30104] RIP: 0033:0x7fa09afbbf79
[ 1032.826337][T30104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1032.826358][T30104] RSP: 002b:00007fa099a0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1032.826383][T30104] RAX: ffffffffffffffda RBX: 00007fa09b235fa0 RCX: 00007fa09afbbf79
[ 1032.826433][T30104] RDX: 000000000000004c RSI: 0000200000000300 RDI: 0000000000000003
[ 1032.826446][T30104] RBP: 00007fa099a0f090 R08: 0000000000000000 R09: 0000000000000000
[ 1032.826462][T30104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1032.826557][T30104] R13: 00007fa09b236038 R14: 00007fa09b235fa0 R15: 00007ffdd0f09248
[ 1032.826579][T30104]  </TASK>
[ 1033.260379][T29789] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1033.279340][T30123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=30123 comm=syz.6.5632
[ 1033.302983][   T28] audit: type=1326 audit(1770924419.514:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30112 comm="syz.4.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08038dbf79 code=0x7ffc0000
[ 1033.379019][   T28] audit: type=1326 audit(1770924419.514:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30112 comm="syz.4.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08038dbf79 code=0x7ffc0000
[ 1033.436302][   T28] audit: type=1326 audit(1770924419.514:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30112 comm="syz.4.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08038dbf79 code=0x7ffc0000
[ 1033.492155][   T28] audit: type=1326 audit(1770924419.514:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30112 comm="syz.4.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08038dbf79 code=0x7ffc0000
[ 1033.537205][T30145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1033.647711][T30145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1033.656973][   T28] audit: type=1326 audit(1770924419.514:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30112 comm="syz.4.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08038dbf79 code=0x7ffc0000
[ 1033.681080][   T28] audit: type=1326 audit(1770924419.514:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30112 comm="syz.4.5628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f08038dbf79 code=0x7ffc0000
[ 1033.711933][T29789] veth0_vlan: entered promiscuous mode
[ 1033.724144][T29789] veth1_vlan: entered promiscuous mode
[ 1033.746600][T29789] veth0_macvtap: entered promiscuous mode
[ 1033.809720][T30172] loop6: detected capacity change from 0 to 512
[ 1033.828292][T30172] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5637: bg 0: block 5: invalid block bitmap
[ 1033.841014][T30172] loop6: lost filesystem error report for type 5 error -117
[ 1033.842458][T30172] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6688: Corrupt filesystem
[ 1033.858921][T30172] loop6: lost filesystem error report for type 5 error -117
[ 1033.863287][T30172] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5637: invalid indirect mapped block 3 (level 2)
[ 1033.884488][T30172] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1033.886132][T30172] EXT4-fs (loop6): 1 orphan inode deleted
[ 1033.902053][T30172] EXT4-fs (loop6): 1 truncate cleaned up
[ 1033.909197][T30172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1033.952418][T30172] 9pnet_fd: p9_fd_create_unix (30172): problem connecting socket: ./file1: -1
[ 1033.962966][T30172] netlink: 'syz.6.5637': attribute type 58 has an invalid length.
[ 1033.971307][T30172] __nla_validate_parse: 66 callbacks suppressed
[ 1033.971385][T30172] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5637'.
[ 1034.280726][T30183] loop9: detected capacity change from 0 to 128
[ 1034.297145][T30183] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1034.300625][T29789] veth1_macvtap: entered promiscuous mode
[ 1034.327063][T29789] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1034.336383][T29789] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1034.399552][T30183] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1034.412933][ T4900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.442692][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1034.459972][ T4900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.475915][ T4900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.484748][ T4900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1034.605558][T30200] FAULT_INJECTION: forcing a failure.
[ 1034.605558][T30200] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1034.666092][T30200] CPU: 1 UID: 0 PID: 30200 Comm: syz.3.5595 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1034.666142][T30200] Tainted: [W]=WARN
[ 1034.666159][T30200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1034.666206][T30200] Call Trace:
[ 1034.666214][T30200]  <TASK>
[ 1034.666225][T30200]  __dump_stack+0x1d/0x30
[ 1034.666255][T30200]  dump_stack_lvl+0x95/0xd0
[ 1034.666282][T30200]  dump_stack+0x15/0x1b
[ 1034.666305][T30200]  should_fail_ex+0x263/0x280
[ 1034.666387][T30200]  should_fail_alloc_page+0xf2/0x100
[ 1034.666424][T30200]  __alloc_frozen_pages_noprof+0x108/0x350
[ 1034.666453][T30200]  alloc_pages_mpol+0xb3/0x260
[ 1034.666543][T30200]  vma_alloc_folio_noprof+0x1a9/0x300
[ 1034.666570][T30200]  do_wp_page+0xf6d/0x2560
[ 1034.666595][T30200]  ? css_rstat_updated+0xbb/0x280
[ 1034.666630][T30200]  ? __rcu_read_lock+0x36/0x50
[ 1034.666683][T30200]  handle_mm_fault+0x8c7/0x3030
[ 1034.666712][T30200]  ? vma_start_read+0x1c7/0x2c0
[ 1034.666780][T30200]  do_user_addr_fault+0x62f/0x1050
[ 1034.666857][T30200]  ? ksys_mmap_pgoff+0xc1/0x310
[ 1034.666878][T30200]  ? fpregs_assert_state_consistent+0xb3/0xe0
[ 1034.666905][T30200]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[ 1034.666927][T30200]  ? irqentry_exit+0x3c/0x520
[ 1034.666986][T30200]  exc_page_fault+0x62/0xa0
[ 1034.667008][T30200]  asm_exc_page_fault+0x26/0x30
[ 1034.667034][T30200] RIP: 0033:0x7f5f80d337e3
[ 1034.667059][T30200] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[ 1034.667081][T30200] RSP: 002b:00007f5f7f8ce470 EFLAGS: 00010202
[ 1034.667103][T30200] RAX: 0000000000000400 RBX: 00007f5f7f8ce530 RCX: 00007f5f774af000
[ 1034.667141][T30200] RDX: 00007f5f7f8ce6d0 RSI: 0000000000000009 RDI: 00007f5f7f8ce5d0
[ 1034.667169][T30200] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a9
[ 1034.667186][T30200] R10: 00000000000000be R11: 00007f5f7f8ce530 R12: 0000000000000001
[ 1034.667203][T30200] R13: 00007f5f80f31ea0 R14: 0000000000000020 R15: 00007f5f7f8ce5d0
[ 1034.667232][T30200]  </TASK>
[ 1034.667258][T30200] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1034.896474][T26050] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1034.915969][T30209] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5643'.
[ 1034.916116][T30215] loop6: detected capacity change from 0 to 512
[ 1034.945385][T30215] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1034.969298][T30215] EXT4-fs (loop6): 1 truncate cleaned up
[ 1034.975518][T30200] loop3: detected capacity change from 0 to 512
[ 1034.975988][T30215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.028140][T30200] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.5595: ea_inode with extended attributes
[ 1035.131736][T30200] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1035.131912][T30200] EXT4-fs (loop3): Remounting filesystem read-only
[ 1035.149173][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1035.208272][T30200] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[ 1035.219276][T30239] loop9: detected capacity change from 0 to 512
[ 1035.238044][T30200] EXT4-fs (loop3): 1 orphan inode deleted
[ 1035.259311][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5644'.
[ 1035.277097][T30239] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1035.300371][T30249] loop6: detected capacity change from 0 to 1024
[ 1035.300384][T30200] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.321842][T30249] EXT4-fs: Ignoring removed oldalloc option
[ 1035.340818][T30249] EXT4-fs: Ignoring removed bh option
[ 1035.347106][T30249] EXT4-fs: Invalid want_extra_isize 708
[ 1035.388179][T30200] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[ 1035.418510][T30239] team_slave_1: Caught tx_queue_len zero misconfig
[ 1035.501262][   T28] kauditd_printk_skb: 44 callbacks suppressed
[ 1035.501338][   T28] audit: type=1400 audit(1770924421.824:5809): avc:  denied  { write } for  pid=30237 comm="syz.9.5649" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1035.534219][T30239] 9p: Bad value for 'rfdno'
[ 1035.576456][T30239] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #15: comm syz.9.5649: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0)
[ 1035.647460][   T28] audit: type=1400 audit(1770924421.824:5810): avc:  denied  { open } for  pid=30237 comm="syz.9.5649" path="/191/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1035.647568][   T28] audit: type=1400 audit(1770924421.866:5811): avc:  denied  { mounton } for  pid=30237 comm="syz.9.5649" path="/191/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1035.724745][   T28] audit: type=1326 audit(1770924422.065:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f80e7bf79 code=0x7ffc0000
[ 1035.725292][   T28] audit: type=1326 audit(1770924422.065:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f80e3c84e code=0x7ffc0000
[ 1035.726510][   T28] audit: type=1326 audit(1770924422.065:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f80e7d297 code=0x7ffc0000
[ 1035.735660][   T28] audit: type=1326 audit(1770924422.076:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f80e7bf79 code=0x7ffc0000
[ 1036.123907][   T28] audit: type=1326 audit(1770924422.076:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f80e7d297 code=0x7ffc0000
[ 1036.149612][   T28] audit: type=1326 audit(1770924422.076:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f80e3c84e code=0x7ffc0000
[ 1036.173871][   T28] audit: type=1326 audit(1770924422.076:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30263 comm="syz.3.5654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f80e7bf79 code=0x7ffc0000
[ 1036.449288][T26050] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1036.452428][T30313] loop8: detected capacity change from 0 to 512
[ 1036.501666][T28460] kernel read not supported for file [fscontext] (pid: 28460 comm: kworker/0:13)
[ 1036.519287][T30313] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1036.600425][T30313] FAULT_INJECTION: forcing a failure.
[ 1036.600425][T30313] name failslab, interval 1, probability 0, space 0, times 0
[ 1036.628435][T30313] CPU: 0 UID: 0 PID: 30313 Comm: syz.8.5659 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1036.628486][T30313] Tainted: [W]=WARN
[ 1036.628495][T30313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1036.628508][T30313] Call Trace:
[ 1036.628515][T30313]  <TASK>
[ 1036.628524][T30313]  __dump_stack+0x1d/0x30
[ 1036.628550][T30313]  dump_stack_lvl+0x95/0xd0
[ 1036.628575][T30313]  dump_stack+0x15/0x1b
[ 1036.628675][T30313]  should_fail_ex+0x263/0x280
[ 1036.628765][T30313]  should_failslab+0x8c/0xb0
[ 1036.628797][T30313]  __kvmalloc_node_noprof+0x144/0x620
[ 1036.628833][T30313]  ? xt_alloc_table_info+0x40/0x80
[ 1036.628917][T30313]  xt_alloc_table_info+0x40/0x80
[ 1036.628941][T30313]  do_ip6t_set_ctl+0x5e5/0x8f0
[ 1036.628974][T30313]  nf_setsockopt+0x199/0x1b0
[ 1036.629063][T30313]  ipv6_setsockopt+0x11a/0x130
[ 1036.629088][T30313]  udpv6_setsockopt+0x99/0xb0
[ 1036.629122][T30313]  sock_common_setsockopt+0x69/0x80
[ 1036.629179][T30313]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1036.629209][T30313]  __sys_setsockopt+0x184/0x200
[ 1036.629233][T30313]  __x64_sys_setsockopt+0x64/0x80
[ 1036.629275][T30313]  x64_sys_call+0x2327/0x3020
[ 1036.629383][T30313]  do_syscall_64+0x12c/0x370
[ 1036.629548][T30313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.629578][T30313] RIP: 0033:0x7fdf0a79bf79
[ 1036.629598][T30313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1036.629618][T30313] RSP: 002b:00007fdf091f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1036.629710][T30313] RAX: ffffffffffffffda RBX: 00007fdf0aa15fa0 RCX: 00007fdf0a79bf79
[ 1036.629726][T30313] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009
[ 1036.629825][T30313] RBP: 00007fdf091f7090 R08: 0000000000000738 R09: 0000000000000000
[ 1036.629841][T30313] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001
[ 1036.629856][T30313] R13: 00007fdf0aa16038 R14: 00007fdf0aa15fa0 R15: 00007fff15676fa8
[ 1036.629878][T30313]  </TASK>
[ 1036.847768][T30313] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #15: comm syz.8.5659: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 8, max 0(0), depth 0(0)
[ 1036.869485][T30313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30313 comm=syz.8.5659
[ 1036.895880][T30337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5663'.
[ 1036.905163][T30337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5663'.
[ 1036.920857][T30334] loop3: detected capacity change from 0 to 4096
[ 1036.968168][T30334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1036.970810][T30345] loop9: detected capacity change from 0 to 1024
[ 1036.990241][T30345] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 1037.004268][T30345] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[ 1037.014718][T30345] EXT4-fs (loop9): stripe (216) is not aligned with cluster size (16), stripe is disabled
[ 1037.019270][T30334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1037.034779][T30345] EXT4-fs error (device loop9): ext4_get_journal_inode:5861: inode #32: comm syz.9.5667: iget: special inode unallocated
[ 1037.050728][T30345] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[ 1037.050987][T30345] EXT4-fs (loop9): no journal found
[ 1037.066648][T30345] EXT4-fs (loop9): can't get journal size
[ 1037.085139][T30345] EXT4-fs (loop9): revision level too high, forcing read-only mode
[ 1037.122495][T30345] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.5667: iget: special inode unallocated
[ 1037.188959][T30345] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[ 1037.189197][T30345] EXT4-fs (loop9): failed to initialize system zone (-117)
[ 1037.208904][T30345] EXT4-fs (loop9): mount failed
[ 1037.371961][T29707] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1037.425513][T30371] loop3: detected capacity change from 0 to 512
[ 1037.488332][T30371] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5668: bg 0: block 5: invalid block bitmap
[ 1037.501241][T30371] loop3: lost filesystem error report for type 5 error -117
[ 1037.501638][T30371] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem
[ 1037.518542][T30371] loop3: lost filesystem error report for type 5 error -117
[ 1037.522069][T30371] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5668: invalid indirect mapped block 3 (level 2)
[ 1037.543260][T30371] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1037.545365][T30371] EXT4-fs (loop3): 1 orphan inode deleted
[ 1037.561166][T30371] EXT4-fs (loop3): 1 truncate cleaned up
[ 1037.568022][T30371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1037.605044][T30371] 9pnet_fd: p9_fd_create_unix (30371): problem connecting socket: ./file1: -1
[ 1037.615228][T30371] netlink: 'syz.3.5668': attribute type 58 has an invalid length.
[ 1037.623360][T30371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5668'.
[ 1037.919497][T30391] loop8: detected capacity change from 0 to 512
[ 1037.977482][T30391] EXT4-fs (loop8): 1 orphan inode deleted
[ 1037.988089][T30391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1038.019210][T30397] syzkaller0: entered promiscuous mode
[ 1038.024913][T30397] syzkaller0: entered allmulticast mode
[ 1038.069943][T29789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.098149][T29707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.215715][T30406] loop3: detected capacity change from 0 to 2048
[ 1038.237082][T30414] netlink: 120 bytes leftover after parsing attributes in process `syz.6.5679'.
[ 1038.252498][T30406] EXT4-fs: Ignoring removed orlov option
[ 1038.275270][T30406] EXT4-fs: Invalid journal IO priority (must be 0-7)
[ 1038.316771][T30414] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5679'.
[ 1038.529325][T30418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5680'.
[ 1038.651827][T30443] loop8: detected capacity change from 0 to 512
[ 1038.673563][T30443] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1038.687781][T30443] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1038.704207][T30443] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.5683: corrupted inode contents
[ 1038.724290][T30439] loop9: detected capacity change from 0 to 4096
[ 1038.745230][T30443] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1038.745450][T30443] EXT4-fs (loop8): Remounting filesystem read-only
[ 1038.782135][T30439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1038.804300][T30443] EXT4-fs (loop8): 1 truncate cleaned up
[ 1038.813434][ T4887] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1038.828652][T30439] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5682: corrupted inode contents
[ 1038.841011][ T4887] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1038.852350][T30439] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.5682: mark_inode_dirty error
[ 1038.864680][ T4887] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1038.875411][T30439] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5682: corrupted inode contents
[ 1038.888240][T30443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1038.902112][T30439] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #15: comm syz.9.5682: mark_inode_dirty error
[ 1038.915401][T30439] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5682: corrupted inode contents
[ 1038.930770][T30439] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #15: comm syz.9.5682: mark_inode_dirty error
[ 1038.942852][T30439] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5682: corrupted inode contents
[ 1038.955901][T30439] EXT4-fs error (device loop9): ext4_truncate:4635: inode #15: comm syz.9.5682: mark_inode_dirty error
[ 1038.990248][T30439] EXT4-fs error (device loop9) in ext4_setattr:6035: Corrupt filesystem
[ 1039.009448][T29707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1039.011184][T30462] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[ 1039.044056][T30458] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.5682: corrupted inode contents
[ 1039.062276][T30430] loop4: detected capacity change from 0 to 512
[ 1039.193040][T30470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5687'.
[ 1039.277039][T26050] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1039.277246][T26050] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1039.299662][T30430] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1039.341654][T30483] loop6: detected capacity change from 0 to 512
[ 1039.418414][T30430] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 1039.431049][T30483] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.5688: bg 0: block 5: invalid block bitmap
[ 1039.443690][T30483] loop6: lost filesystem error report for type 5 error -117
[ 1039.444487][T30483] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6688: Corrupt filesystem
[ 1039.460647][T30483] loop6: lost filesystem error report for type 5 error -117
[ 1039.464479][T30483] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5688: invalid indirect mapped block 3 (level 2)
[ 1039.485993][T30483] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1039.488036][T30483] EXT4-fs (loop6): 1 orphan inode deleted
[ 1039.503720][T30483] EXT4-fs (loop6): 1 truncate cleaned up
[ 1039.510739][T30483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1039.582986][T30488] 9pnet_fd: p9_fd_create_unix (30488): problem connecting socket: ./file1: -1
[ 1039.593211][T30488] netlink: 'syz.6.5688': attribute type 58 has an invalid length.
[ 1039.601482][T30488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5688'.
[ 1039.638373][T30430] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[ 1039.718169][T30482] loop3: detected capacity change from 0 to 512
[ 1039.743783][T26050] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[ 1039.748900][T30430] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1039.781341][T30482] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[ 1039.782763][T30430] System zones: 
[ 1039.794019][T30482] System zones: 0-2, 18-18, 34-34
[ 1039.810203][T30482] EXT4-fs (loop3): too many log groups per flexible block group
[ 1039.818660][T30482] EXT4-fs (loop3): failed to initialize mballoc (-12)
[ 1039.826107][T30482] EXT4-fs (loop3): mount failed
[ 1039.834638][T30430] 0-2, 18-18, 34-35
[ 1039.921752][T30430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1039.930872][T26050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.048395][T30500] loop8: detected capacity change from 0 to 512
[ 1040.067360][T30500] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5692: bg 0: block 5: invalid block bitmap
[ 1040.080368][T30500] loop8: lost filesystem error report for type 5 error -117
[ 1040.084239][T30500] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6688: Corrupt filesystem
[ 1040.100863][T30500] loop8: lost filesystem error report for type 5 error -117
[ 1040.102657][T30500] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5692: invalid indirect mapped block 3 (level 2)
[ 1040.124233][T30500] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1040.125122][T30500] EXT4-fs (loop8): 1 orphan inode deleted
[ 1040.140451][T30500] EXT4-fs (loop8): 1 truncate cleaned up
[ 1040.147424][T30500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1040.230441][T30504] 9pnet_fd: p9_fd_create_unix (30504): problem connecting socket: ./file1: -1
[ 1040.241500][T30504] netlink: 'syz.8.5692': attribute type 58 has an invalid length.
[ 1040.249831][T30504] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5692'.
[ 1040.510654][T29056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.521335][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.668032][T29707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.701053][T30524] tipc: Enabled bearer <eth:caif0>, priority 14
[ 1040.735597][T30525] netlink: 'syz.6.5693': attribute type 10 has an invalid length.
[ 1040.775788][T30525] bridge0: left promiscuous mode
[ 1040.840264][   T28] kauditd_printk_skb: 29 callbacks suppressed
[ 1040.840284][   T28] audit: type=1326 audit(1770924939.422:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1040.908276][   T28] audit: type=1326 audit(1770924939.443:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1040.973906][T30546] loop8: detected capacity change from 0 to 512
[ 1040.979839][T30525] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1040.999948][   T28] audit: type=1326 audit(1770924939.443:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1041.040644][T30546] EXT4-fs warning (device loop8): ext4_xattr_inode_get:546: inode #11: comm syz.8.5699: ea_inode file size=4 entry size=6
[ 1041.065085][T30546] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5699: corrupted inode contents
[ 1041.077895][T30548] syzkaller0: entered promiscuous mode
[ 1041.083395][T30548] syzkaller0: entered allmulticast mode
[ 1041.091639][T30546] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1041.099206][T30546] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.5699: mark_inode_dirty error
[ 1041.128346][   T28] audit: type=1326 audit(1770924939.453:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa09afbbce2 code=0x7ffc0000
[ 1041.174102][T30546] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1041.183916][T30546] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5699: corrupted inode contents
[ 1041.241716][   T28] audit: type=1326 audit(1770924939.631:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa09af7c84e code=0x7ffc0000
[ 1041.270748][T30546] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1041.271253][   T28] audit: type=1326 audit(1770924939.705:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa09afbbda7 code=0x7ffc0000
[ 1041.275294][T30546] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.5699: mark_inode_dirty error
[ 1041.281282][   T28] audit: type=1326 audit(1770924939.757:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa09af7c84e code=0x7ffc0000
[ 1041.306512][T30521] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1041.346908][   T28] audit: type=1326 audit(1770924939.768:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa09afbbc0b code=0x7ffc0000
[ 1041.405719][T30524] EXT4-fs: Ignoring removed i_version option
[ 1041.420339][T30546] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1041.427243][T30546] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.5699: mark inode dirty (error -117)
[ 1041.441699][   T28] audit: type=1326 audit(1770924939.799:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa09af7c84e code=0x7ffc0000
[ 1041.470972][T30521] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[ 1041.501147][T30568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5701'.
[ 1041.513537][T30546] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1041.520112][T30546] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117)
[ 1041.548824][   T28] audit: type=1326 audit(1770924939.799:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30518 comm="syz.9.5691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa09af7c84e code=0x7ffc0000
[ 1041.576670][T30524] EXT4-fs (loop4): 1 truncate cleaned up
[ 1041.588123][T30546] EXT4-fs (loop8): 1 orphan inode deleted
[ 1041.588723][T30546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1041.597807][T30521] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[ 1041.599206][T30521] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1041.631444][T30521] System zones: 0-2, 18-18, 34-35
[ 1041.645341][T30575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5702'.
[ 1041.669022][T30521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1041.691860][T30524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1041.755773][T30577] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f
[ 1041.926534][T29707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.992948][T30591] futex_wake_op: syz.6.5707 tries to shift op by 32; fix this program
[ 1042.013719][T30587] EXT4-fs: Ignoring removed nobh option
[ 1042.045412][T30587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1042.076238][T29056] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /42/bus: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0
[ 1042.098338][T30587] EXT4-fs (loop3): 1 truncate cleaned up
[ 1042.114731][T29056] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 7: invalid block bitmap
[ 1042.126521][T30587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1042.141681][T29056] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6688: Corrupt filesystem
[ 1042.151508][T26050] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1042.161459][T29056] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1042.195926][T30587] delete_channel: no stack
[ 1042.207919][T30587] UHID_CREATE from different security context by process 44 (syz.3.5706), this is not allowed.
[ 1042.233238][T29056] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1042.245389][T30586] delete_channel: no stack
[ 1042.265626][T29789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1042.284651][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5710'.
[ 1042.352928][T30613] set_capacity_and_notify: 3 callbacks suppressed
[ 1042.352945][T30613] loop6: detected capacity change from 0 to 1024
[ 1042.377509][T30613] EXT4-fs: dax option not supported
[ 1042.449956][T30623] FAULT_INJECTION: forcing a failure.
[ 1042.449956][T30623] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1042.468381][T30624] loop8: detected capacity change from 0 to 2048
[ 1042.476506][T30623] CPU: 1 UID: 0 PID: 30623 Comm: syz.9.5719 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1042.476544][T30623] Tainted: [W]=WARN
[ 1042.476553][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1042.476622][T30623] Call Trace:
[ 1042.476629][T30623]  <TASK>
[ 1042.476637][T30623]  __dump_stack+0x1d/0x30
[ 1042.476666][T30623]  dump_stack_lvl+0x95/0xd0
[ 1042.476693][T30623]  dump_stack+0x15/0x1b
[ 1042.476794][T30623]  should_fail_ex+0x263/0x280
[ 1042.476830][T30623]  should_fail+0xb/0x20
[ 1042.476856][T30623]  should_fail_usercopy+0x1a/0x20
[ 1042.476888][T30623]  _copy_from_user+0x1c/0xb0
[ 1042.476999][T30623]  io_submit_one+0x52/0x1350
[ 1042.477123][T30623]  __se_sys_io_submit+0xfb/0x280
[ 1042.477188][T30623]  __x64_sys_io_submit+0x43/0x50
[ 1042.477220][T30623]  x64_sys_call+0x19d5/0x3020
[ 1042.477248][T30623]  do_syscall_64+0x12c/0x370
[ 1042.477290][T30623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.477316][T30623] RIP: 0033:0x7fa09afbbf79
[ 1042.477334][T30623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1042.477354][T30623] RSP: 002b:00007fa099a0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1042.477413][T30623] RAX: ffffffffffffffda RBX: 00007fa09b235fa0 RCX: 00007fa09afbbf79
[ 1042.477502][T30623] RDX: 0000200000000880 RSI: 0000000000000002 RDI: 00007fa09bd72000
[ 1042.477520][T30623] RBP: 00007fa099a0f090 R08: 0000000000000000 R09: 0000000000000000
[ 1042.477536][T30623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1042.477551][T30623] R13: 00007fa09b236038 R14: 00007fa09b235fa0 R15: 00007ffdd0f09248
[ 1042.477570][T30623]  </TASK>
[ 1042.691549][T13157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.704709][T30624]  loop8: p2 p3 p7
[ 1042.811739][T13157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.845196][T29053] udevd[29053]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory
[ 1042.845196][T29597] udevd[29597]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[ 1042.853112][T29087] udevd[29087]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[ 1042.885643][T30630] ipvlan2: entered allmulticast mode
[ 1042.900439][T30630] dummy0: entered allmulticast mode
[ 1042.969420][T13157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1042.982347][T29056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1042.994837][T30636] loop9: detected capacity change from 0 to 8192
[ 1043.031811][T13157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1043.049163][T29087]  loop9: p1 p2 p3 p4
[ 1043.053350][T29087] loop9: p1 start 16777216 is beyond EOD, truncated
[ 1043.085304][T29087] loop9: p4 start 16777223 is beyond EOD, truncated
[ 1043.126316][T30636]  loop9: p1 p2 p3 p4
[ 1043.131140][T30636] loop9: p1 start 16777216 is beyond EOD, truncated
[ 1043.153444][T30636] loop9: p4 start 16777223 is beyond EOD, truncated
[ 1043.211424][T30630] xt_recent: Unsupported userspace flags (000000b1)
[ 1043.220457][T13157] bridge_slave_1: left allmulticast mode
[ 1043.226157][T13157] bridge_slave_1: left promiscuous mode
[ 1043.277456][T13157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.297543][T29116] udevd[29116]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[ 1043.311189][T29087] udevd[29087]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[ 1043.323394][T13157] bridge_slave_0: left allmulticast mode
[ 1043.341071][T13157] bridge_slave_0: left promiscuous mode
[ 1043.357039][T13157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.384044][T29116] udevd[29116]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[ 1043.392694][T30666] loop9: detected capacity change from 0 to 128
[ 1043.414470][T29087] udevd[29087]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[ 1043.421158][T30666] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1043.443409][T30634] loop8: detected capacity change from 0 to 512
[ 1043.456596][T30666] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1043.501928][T30634] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5722: corrupted inode contents
[ 1043.544954][T30634] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1043.570258][T30634] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[ 1043.588818][T30634] loop8: lost filesystem error report for type 5 error -117
[ 1043.589038][T30634] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.5722: corrupted inode contents
[ 1043.616873][T30634] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1043.617065][T30634] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.5722: mark_inode_dirty error
[ 1043.642042][T30634] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1043.649723][T30634] EXT4-fs (loop8): 1 orphan inode deleted
[ 1043.687217][T30634] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1043.727862][T13157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1043.744141][T13157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1043.764487][T13157] bond0 (unregistering): Released all slaves
[ 1043.813789][T13157] tipc: Disabling bearer <udp:syz1>
[ 1043.831132][T13157] tipc: Disabling bearer <eth:caif0>
[ 1043.864468][T13157] tipc: Left network mode
[ 1043.884659][T13157] hsr_slave_0: left promiscuous mode
[ 1043.916178][T13157] hsr_slave_1: left promiscuous mode
[ 1043.921909][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1043.940718][T13157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1043.949344][T29707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1043.959306][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1043.968958][T13157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1043.983333][T13157] veth1_macvtap: left promiscuous mode
[ 1043.998556][T13157] veth0_macvtap: left promiscuous mode
[ 1044.016492][T13157] veth1_vlan: left promiscuous mode
[ 1044.028920][T13157] veth0_vlan: left promiscuous mode
[ 1044.219203][T13157] team0 (unregistering): Port device team_slave_1 removed
[ 1044.231760][T30725] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5741'.
[ 1044.241417][T13157] team0 (unregistering): Port device team_slave_0 removed
[ 1044.476134][T30647] chnl_net:caif_netlink_parms(): no params data found
[ 1044.561804][T26050] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1044.593901][T30752] netlink: 'syz.8.5747': attribute type 3 has an invalid length.
[ 1044.606987][T30757] loop3: detected capacity change from 0 to 512
[ 1044.617533][T30752] netlink: 'syz.8.5747': attribute type 7 has an invalid length.
[ 1044.635793][T30757] EXT4-fs: Ignoring removed bh option
[ 1044.649897][T30757] EXT4-fs: inline encryption not supported
[ 1044.658127][T30752] netlink: 'syz.8.5747': attribute type 8 has an invalid length.
[ 1044.674049][T30752] netlink: 'syz.8.5747': attribute type 7 has an invalid length.
[ 1044.682367][T30752] netlink: 198788 bytes leftover after parsing attributes in process `syz.8.5747'.
[ 1044.694388][T30757] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1044.700067][T30762] loop8: detected capacity change from 0 to 512
[ 1044.710039][T30647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1044.719095][T30762] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1044.734532][T30762] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[ 1044.743571][T30762] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[ 1044.754060][T30647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1044.761390][T30647] bridge_slave_0: entered allmulticast mode
[ 1044.767829][T30762] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1044.775898][T30762] System zones: 0-2, 18-18, 34-35
[ 1044.781864][T30647] bridge_slave_0: entered promiscuous mode
[ 1044.789968][T30647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1044.797405][T30647] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.804829][T30647] bridge_slave_1: entered allmulticast mode
[ 1044.808097][T30762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1044.811873][T30647] bridge_slave_1: entered promiscuous mode
[ 1044.832605][T30757] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1044.865467][T30757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5746: bg 0: block 248: padding at end of block bitmap is not set
[ 1044.887090][T30757] loop3: lost filesystem error report for type 5 error -117
[ 1044.887541][T30757] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.5746: Failed to acquire dquot type 1
[ 1044.915549][T30757] loop3: lost filesystem error report for type 5 error -117
[ 1044.917467][T30647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1044.934962][T30757] EXT4-fs (loop3): 1 truncate cleaned up
[ 1044.944482][T30757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[ 1044.950757][T30647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1045.006608][T29707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1045.035937][T30647] team0: Port device team_slave_0 added
[ 1045.049495][T30647] team0: Port device team_slave_1 added
[ 1045.086122][T30769] loop6: detected capacity change from 0 to 512
[ 1045.113516][T30647] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1045.129164][T30769] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5749: corrupted inode contents
[ 1045.134677][T30647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.159151][T30769] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1045.167742][T30647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1045.189127][T30647] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1045.199502][T30769] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[ 1045.203212][T30647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.216942][T30769] loop6: lost filesystem error report for type 5 error -117
[ 1045.235753][T30647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1045.253708][T30769] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5749: corrupted inode contents
[ 1045.268225][T30769] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1045.268441][T30769] EXT4-fs error (device loop6): ext4_evict_inode:301: inode #15: comm syz.6.5749: mark_inode_dirty error
[ 1045.290180][T30787] netlink: 'syz.8.5751': attribute type 15 has an invalid length.
[ 1045.291212][T30769] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1045.298877][T30769] EXT4-fs (loop6): 1 orphan inode deleted
[ 1045.319149][T30647] hsr_slave_0: entered promiscuous mode
[ 1045.319673][T30769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1045.330115][T30647] hsr_slave_1: entered promiscuous mode
[ 1045.345718][T30647] debugfs: 'hsr0' already exists in 'hsr'
[ 1045.351727][T30647] Cannot create hsr debugfs directory
[ 1045.419449][T30796] tipc: Started in network mode
[ 1045.425536][T30796] tipc: Node identity 86f203fc87f9, cluster identity 4711
[ 1045.433536][T30796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1045.451837][T29789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[ 1045.464924][T13137] EXT4-fs error (device loop3): ext4_release_dquot:7034: comm kworker/u8:48: Failed to release dquot type 1
[ 1045.481308][T30798] syzkaller0: entered promiscuous mode
[ 1045.490824][T30798] syzkaller0: entered allmulticast mode
[ 1045.499495][T13137] loop3: lost filesystem error report for type 5 error -117
[ 1045.500688][T27093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1045.550569][T30798] tipc: Resetting bearer <eth:syzkaller0>
[ 1045.706878][T30795] tipc: Resetting bearer <eth:syzkaller0>
[ 1045.734661][T30795] tipc: Disabling bearer <eth:syzkaller0>
[ 1045.893053][T30822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1045.910238][T30822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1046.378417][T30647] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1046.412335][T30647] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1046.440982][T30647] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1046.480605][T30647] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1046.523275][T30860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1046.555301][T30860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1046.588500][T30647] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1046.605788][T30647] 8021q: adding VLAN 0 to HW filter on device team0
[ 1046.628148][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.635316][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1046.670561][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.677901][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1046.874961][T30647] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1047.019072][T30909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.632497][T30909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.697474][T30931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.771898][T30931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.798328][T30647] veth0_vlan: entered promiscuous mode
[ 1047.825617][T30647] veth1_vlan: entered promiscuous mode
[ 1047.865415][T30647] veth0_macvtap: entered promiscuous mode
[ 1047.883795][T30647] veth1_macvtap: entered promiscuous mode
[ 1047.910605][T30647] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1047.940938][T30647] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1047.967164][ T4900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.982905][ T4900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.022568][ T4900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.038908][ T4900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.170471][T30959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5726'.
[ 1048.326196][T30977] syzkaller1: entered promiscuous mode
[ 1048.342572][T30977] syzkaller1: entered allmulticast mode
[ 1048.400922][T30980] xt_connbytes: Forcing CT accounting to be enabled
[ 1048.407809][T30980] Cannot find set identified by id 0 to match
[ 1048.705479][T30992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5790'.
[ 1049.100776][T31006] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5793'.
[ 1049.186777][T31024] netlink: 'syz.3.5796': attribute type 3 has an invalid length.
[ 1049.213930][T31024] netlink: 'syz.3.5796': attribute type 3 has an invalid length.
[ 1049.276029][T31024] netlink: 'syz.3.5796': attribute type 3 has an invalid length.
[ 1049.288178][T31024] netlink: 'syz.3.5796': attribute type 3 has an invalid length.
[ 1049.296052][T31024] netlink: 'syz.3.5796': attribute type 3 has an invalid length.
[ 1049.361284][T31017] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5797'.
[ 1051.999937][T31074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1052.046309][T31074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.061423][T31076] program syz.3.5812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1052.135165][T31079] FAULT_INJECTION: forcing a failure.
[ 1052.135165][T31079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1052.190075][T31079] CPU: 1 UID: 0 PID: 31079 Comm: syz.9.5813 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1052.190189][T31079] Tainted: [W]=WARN
[ 1052.190198][T31079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1052.190214][T31079] Call Trace:
[ 1052.190224][T31079]  <TASK>
[ 1052.190234][T31079]  __dump_stack+0x1d/0x30
[ 1052.190271][T31079]  dump_stack_lvl+0x95/0xd0
[ 1052.190297][T31079]  dump_stack+0x15/0x1b
[ 1052.190327][T31079]  should_fail_ex+0x263/0x280
[ 1052.190361][T31079]  should_fail+0xb/0x20
[ 1052.190426][T31079]  should_fail_usercopy+0x1a/0x20
[ 1052.190460][T31079]  strncpy_from_user+0x27/0x250
[ 1052.190486][T31079]  ? kmem_cache_alloc_noprof+0x18c/0x400
[ 1052.190678][T31079]  do_getname+0x59/0x1c0
[ 1052.190733][T31079]  user_path_at+0x28/0x100
[ 1052.190832][T31079]  __se_sys_mount+0x25b/0x2e0
[ 1052.190867][T31079]  ? fput+0x8f/0xc0
[ 1052.190891][T31079]  __x64_sys_mount+0x67/0x80
[ 1052.190995][T31079]  x64_sys_call+0x2d61/0x3020
[ 1052.191032][T31079]  do_syscall_64+0x12c/0x370
[ 1052.191062][T31079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.191091][T31079] RIP: 0033:0x7fa09afbbf79
[ 1052.191110][T31079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1052.191199][T31079] RSP: 002b:00007fa099a0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1052.191224][T31079] RAX: ffffffffffffffda RBX: 00007fa09b235fa0 RCX: 00007fa09afbbf79
[ 1052.191240][T31079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1052.191254][T31079] RBP: 00007fa099a0f090 R08: 00002000000001c0 R09: 0000000000000000
[ 1052.191271][T31079] R10: 00000000000c0420 R11: 0000000000000246 R12: 0000000000000001
[ 1052.191286][T31079] R13: 00007fa09b236038 R14: 00007fa09b235fa0 R15: 00007ffdd0f09248
[ 1052.191371][T31079]  </TASK>
[ 1052.603942][T31097] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5817'.
[ 1053.231229][   T28] kauditd_printk_skb: 48 callbacks suppressed
[ 1053.231259][   T28] audit: type=1400 audit(1770924952.429:5897): avc:  denied  { write } for  pid=31108 comm="syz.2.5818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1054.885647][   T28] audit: type=1400 audit(1770924953.667:5898): avc:  denied  { write } for  pid=31129 comm="syz.6.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1055.917725][T31171] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5835'.
[ 1056.096362][T31189] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.103577][T31189] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1056.137466][T31189] bridge0: entered allmulticast mode
[ 1056.931517][T31218] validate_nla: 50 callbacks suppressed
[ 1056.931605][T31218] netlink: 'syz.2.5845': attribute type 3 has an invalid length.
[ 1057.765928][T31226] syz_tun: entered allmulticast mode
[ 1059.098209][   T28] audit: type=1400 audit(1770924958.591:5899): avc:  denied  { connect } for  pid=31255 comm="syz.3.5856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1059.251858][   T28] audit: type=1400 audit(1770924958.759:5900): avc:  denied  { map } for  pid=31265 comm="syz.3.5859" path="socket:[94440]" dev="sockfs" ino=94440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[ 1059.373172][T31272] netlink: 'syz.3.5861': attribute type 39 has an invalid length.
[ 1060.092898][ T8000] IPVS: starting estimator thread 0...
[ 1060.203961][T31300] IPVS: using max 2304 ests per chain, 115200 per kthread
[ 1060.465157][T31315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.522855][T31315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.671204][T31334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5875'.
[ 1062.402915][T31373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1062.454001][T31373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1063.791331][T31434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.803984][T31434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.517319][T31458] random: crng reseeded on system resumption
[ 1065.212815][T31498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1065.244950][T31498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.272970][   T28] audit: type=1326 audit(1770924968.218:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.322800][   T28] audit: type=1326 audit(1770924968.218:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.425294][T31576] serio: Serial port ttyS3
[ 1068.433420][   T28] audit: type=1326 audit(1770924968.249:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.507970][   T28] audit: type=1326 audit(1770924968.249:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.542793][   T28] audit: type=1326 audit(1770924968.249:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.568187][   T28] audit: type=1326 audit(1770924968.249:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.594775][   T28] audit: type=1326 audit(1770924968.249:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.712861][   T28] audit: type=1326 audit(1770924968.249:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.746168][   T28] audit: type=1326 audit(1770924968.249:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1068.810734][   T28] audit: type=1326 audit(1770924968.249:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31567 comm="syz.9.5933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09afbbf79 code=0x7ffc0000
[ 1069.236510][T31634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1069.289064][T31634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1070.355190][T31640] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5956'.
[ 1071.466555][T31693] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1071.473822][T31693] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.803421][T31693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1071.841191][T31693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1072.164101][ T1687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.177550][ T1687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.187673][ T1687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.216656][ T1687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.082972][T31762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.135224][T31762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.416416][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5998'.
[ 1073.464944][   T28] kauditd_printk_skb: 32 callbacks suppressed
[ 1073.464974][   T28] audit: type=1400 audit(1770924973.666:5943): avc:  denied  { mounton } for  pid=31761 comm="syz.8.6000" path="/88/file0" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1073.503015][T31775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.511542][T31775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.582912][   T28] audit: type=1400 audit(1770924973.802:5944): avc:  denied  { write } for  pid=31769 comm="syz.2.6001" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[ 1073.869070][   T28] audit: type=1400 audit(1770924973.802:5945): avc:  denied  { bind } for  pid=31769 comm="syz.2.6001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1074.094220][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.119617][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.145123][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.175989][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.205741][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.231380][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.273761][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.281550][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.319405][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.349989][T31780] netlink: 'syz.9.6003': attribute type 3 has an invalid length.
[ 1074.497044][T31808] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1074.575408][T31817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6010'.
[ 1076.072501][T31871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1076.112671][T31871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.333445][T31876] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6033'.
[ 1077.043857][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6038'.
[ 1077.118772][T31898] xt_hashlimit: size too large, truncated to 1048576
[ 1077.358001][T31927] syzkaller0: entered promiscuous mode
[ 1077.363782][T31927] syzkaller0: entered allmulticast mode
[ 1079.877204][   T28] audit: type=1400 audit(1770924980.416:5946): avc:  denied  { create } for  pid=31984 comm="syz.8.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1080.136199][   T28] audit: type=1400 audit(1770924980.448:5947): avc:  denied  { setopt } for  pid=31984 comm="syz.8.6078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[ 1081.347252][T32019] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6088'.
[ 1082.070205][T32032] validate_nla: 96 callbacks suppressed
[ 1082.070240][T32032] netlink: 'syz.3.6094': attribute type 1 has an invalid length.
[ 1082.121983][T32032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6094'.
[ 1082.249277][ T3417] IPVS: starting estimator thread 0...
[ 1082.258516][T32056] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1082.684540][T32057] IPVS: using max 2304 ests per chain, 115200 per kthread
[ 1082.974122][T32069] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6104'.
[ 1083.600913][   T28] audit: type=1400 audit(1770924984.311:5948): avc:  denied  { getopt } for  pid=32074 comm="syz.3.6107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1083.651575][T32077] netlink: 'syz.8.6105': attribute type 3 has an invalid length.
[ 1083.703462][T32077] syz_tun: entered allmulticast mode
[ 1085.996155][T32149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6139'.
[ 1086.079778][T32160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6144'.
[ 1086.432280][T32188] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6154'.
[ 1087.732266][T32222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.750874][T32222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1087.860376][T32239] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6177'.
[ 1087.919118][T32247] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6181'.
[ 1088.014649][T15614] IPVS: starting estimator thread 0...
[ 1088.133173][T32246] IPVS: using max 2352 ests per chain, 117600 per kthread
[ 1088.710720][T32275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.760075][T32275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.802578][T32281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.844649][T32281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.890381][T32293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6200'.
[ 1089.624052][T32317] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6212'.
[ 1091.082081][T32382] tipc: Cannot configure node identity twice
[ 1091.605786][T32417] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6255'.
[ 1091.720165][T32422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.761357][T32422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.782250][T32424] random: crng reseeded on system resumption
[ 1092.917041][   T28] audit: type=1404 audit(1770924994.106:5949): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[ 1092.958295][   T28] audit: type=1400 audit(1770924994.148:5950): avc:  denied  { read } for  pid=32449 comm="syz.8.6268" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0
[ 1092.984124][   T28] audit: type=1400 audit(1770924994.148:5951): avc:  denied  { create } for  pid=32449 comm="syz.8.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[ 1093.021767][   T28] audit: type=1400 audit(1770924994.200:5952): avc:  denied  { getopt } for  pid=32451 comm="syz.6.6269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[ 1093.049566][   T28] audit: type=1400 audit(1770924994.200:5953): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1093.106853][   T28] audit: type=1400 audit(1770924994.295:5954): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1093.244184][   T28] audit: type=1400 audit(1770924994.347:5955): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1093.341941][   T28] audit: type=1400 audit(1770924994.347:5956): avc:  denied  { create } for  pid=32461 comm="syz.3.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[ 1093.447445][   T28] audit: type=1400 audit(1770924994.358:5957): avc:  denied  { read } for  pid=32461 comm="syz.3.6273" dev="nsfs" ino=4026532820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[ 1093.553187][   T28] audit: type=1400 audit(1770924994.358:5958): avc:  denied  { create } for  pid=32461 comm="syz.3.6273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1093.745159][T32509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6296'.
[ 1094.110360][T32550] binfmt_misc: register: failed to install interpreter file ./file0
[ 1094.225466][T32565] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6)
[ 1094.232254][T32565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1094.244306][T32565] vhci_hcd vhci_hcd.0: Device attached
[ 1094.251954][T32565] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8)
[ 1094.258504][T32565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1094.266953][T32565] vhci_hcd vhci_hcd.0: Device attached
[ 1094.273243][T32565] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(10)
[ 1094.279844][T32565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1094.288104][T32565] vhci_hcd vhci_hcd.0: Device attached
[ 1094.296283][T32565] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(12)
[ 1094.302916][T32565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1094.310785][T32565] vhci_hcd vhci_hcd.0: Device attached
[ 1094.318523][T32565] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(14)
[ 1094.325294][T32565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1094.332916][T32565] vhci_hcd vhci_hcd.0: Device attached
[ 1094.339055][T32565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1094.347898][T32565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1094.357032][T32565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1094.366354][T32565] vhci_hcd vhci_hcd.0: port 0 already used
[ 1094.374434][T32575] vhci_hcd: connection closed
[ 1094.374491][T32572] vhci_hcd: connection closed
[ 1094.374572][ T4914] vhci_hcd vhci_hcd.9: stop threads
[ 1094.382783][T32570] vhci_hcd: connection closed
[ 1094.384138][T32568] vhci_hcd: connection closed
[ 1094.391681][T32566] vhci_hcd: connection closed
[ 1094.400035][ T4914] vhci_hcd vhci_hcd.9: release socket
[ 1094.410983][ T4914] vhci_hcd vhci_hcd.9: disconnect device
[ 1094.418342][ T4914] vhci_hcd vhci_hcd.9: stop threads
[ 1094.423788][ T4914] vhci_hcd vhci_hcd.9: release socket
[ 1094.429385][ T4914] vhci_hcd vhci_hcd.9: disconnect device
[ 1094.435361][ T4914] vhci_hcd vhci_hcd.9: stop threads
[ 1094.441691][ T4914] vhci_hcd vhci_hcd.9: release socket
[ 1094.447249][ T4914] vhci_hcd vhci_hcd.9: disconnect device
[ 1094.456136][ T4914] vhci_hcd vhci_hcd.9: stop threads
[ 1094.461741][ T4914] vhci_hcd vhci_hcd.9: release socket
[ 1094.467419][ T4914] vhci_hcd vhci_hcd.9: disconnect device
[ 1094.473334][T15614] usb 19-1: new low-speed USB device number 3 using vhci_hcd
[ 1094.481535][ T4914] vhci_hcd vhci_hcd.9: stop threads
[ 1094.487381][ T4914] vhci_hcd vhci_hcd.9: release socket
[ 1094.493366][ T4914] vhci_hcd vhci_hcd.9: disconnect device
[ 1095.123742][T32643] netlink: 'syz.2.6353': attribute type 10 has an invalid length.
[ 1095.155853][T32643] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1095.594691][T32666] vxcan1: entered promiscuous mode
[ 1097.193160][T32760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6406'.
[ 1097.549337][  T320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=320 comm=syz.6.6418
[ 1097.604766][  T322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6419'.
[ 1097.687273][   T28] kauditd_printk_skb: 346 callbacks suppressed
[ 1097.687293][   T28] audit: type=1400 audit(1770924999.103:6305): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1097.839801][   T28] audit: type=1400 audit(1770924999.176:6306): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1097.946367][   T28] audit: type=1400 audit(1770924999.187:6307): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1098.041161][  T353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6434'.
[ 1098.050240][   T28] audit: type=1400 audit(1770924999.229:6308): avc:  denied  { prog_load } for  pid=329 comm="syz.8.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1098.125945][   T28] audit: type=1400 audit(1770924999.229:6309): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1098.224313][   T28] audit: type=1400 audit(1770924999.239:6310): avc:  denied  { create } for  pid=334 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[ 1098.311670][   T28] audit: type=1400 audit(1770924999.260:6311): avc:  denied  { read } for  pid=336 comm="syz.2.6426" dev="nsfs" ino=4026532433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[ 1098.403500][   T28] audit: type=1400 audit(1770924999.281:6312): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1098.512595][  T383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6448'.
[ 1098.530451][   T28] audit: type=1400 audit(1770924999.292:6313): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1098.642800][   T28] audit: type=1400 audit(1770924999.302:6314): avc:  denied  { create } for  pid=336 comm="syz.2.6426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1098.956939][  T414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6462'.
[ 1099.297575][T15614] usb 19-1: enqueue for inactive port 0
[ 1099.303187][T15614] usb 19-1: enqueue for inactive port 0
[ 1099.421358][T15614] vhci_hcd vhci_hcd.9: vhci_device speed not set
[ 1099.716658][  T446] netlink: 'syz.2.6476': attribute type 1 has an invalid length.
[ 1099.732436][  T448] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6477'.
[ 1099.765568][  T446] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1099.839957][  T450] bond1: (slave ip6erspan0): making interface the new active one
[ 1099.887184][  T450] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1100.947669][  T490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6493'.
[ 1101.346027][  T519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6505'.
[ 1102.187528][  T633] syzkaller0: entered promiscuous mode
[ 1102.193183][  T633] syzkaller0: entered allmulticast mode
[ 1102.465250][   T28] kauditd_printk_skb: 356 callbacks suppressed
[ 1102.465270][   T28] audit: type=1400 audit(1770925004.121:6671): avc:  denied  { read write } for  pid=26050 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1102.583701][   T28] audit: type=1400 audit(1770925004.152:6672): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1102.583808][  T673] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6580'.
[ 1102.681190][   T28] audit: type=1400 audit(1770925004.163:6673): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1102.773596][   T28] audit: type=1400 audit(1770925004.163:6674): avc:  denied  { allowed } for  pid=665 comm="syz.8.6577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[ 1102.822173][   T28] audit: type=1400 audit(1770925004.173:6675): avc:  denied  { mounton } for  pid=665 comm="syz.8.6577" path="/176/file0" dev="tmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0
[ 1102.914008][   T28] audit: type=1400 audit(1770925004.184:6676): avc:  denied  { create } for  pid=666 comm="syz.6.6578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[ 1102.987772][   T28] audit: type=1400 audit(1770925004.184:6677): avc:  denied  { map_create } for  pid=668 comm="syz.9.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1103.054046][   T28] audit: type=1400 audit(1770925004.194:6678): avc:  denied  { prog_load } for  pid=668 comm="syz.9.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1103.081030][  T716] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6600'.
[ 1103.109740][   T28] audit: type=1400 audit(1770925004.194:6679): avc:  denied  { prog_load } for  pid=668 comm="syz.9.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1103.169544][   T28] audit: type=1400 audit(1770925004.215:6680): avc:  denied  { read write } for  pid=26050 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1103.510354][  T749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6614'.
[ 1103.519359][  T751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6615'.
[ 1103.558382][  T749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6614'.
[ 1103.587428][  T749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6614'.
[ 1103.619222][  T749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6614'.
[ 1103.651261][  T749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6614'.
[ 1104.158076][  T777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6627'.
[ 1104.516301][  T814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6644'.
[ 1104.841966][  T833] netlink: 'syz.8.6652': attribute type 15 has an invalid length.
[ 1107.182210][  T948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[ 1107.188961][  T948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1107.213770][  T948] vhci_hcd vhci_hcd.0: Device attached
[ 1107.224130][  T951] vhci_hcd: connection closed
[ 1107.224316][ T4897] vhci_hcd vhci_hcd.2: stop threads
[ 1107.240200][   T28] kauditd_printk_skb: 406 callbacks suppressed
[ 1107.240230][   T28] audit: type=1400 audit(1770925009.128:7087): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1107.241798][ T4897] vhci_hcd vhci_hcd.2: release socket
[ 1107.289967][ T4897] vhci_hcd vhci_hcd.2: disconnect device
[ 1107.349407][   T28] audit: type=1400 audit(1770925009.254:7088): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1107.380944][   T28] audit: type=1400 audit(1770925009.286:7089): avc:  denied  { create } for  pid=959 comm="syz.8.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[ 1107.405863][   T28] audit: type=1400 audit(1770925009.307:7090): avc:  denied  { execmem } for  pid=959 comm="syz.8.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[ 1107.426128][   T28] audit: type=1400 audit(1770925009.317:7091): avc:  denied  { read } for  pid=959 comm="syz.8.6709" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0
[ 1107.449636][   T28] audit: type=1400 audit(1770925009.338:7092): avc:  denied  { prog_load } for  pid=959 comm="syz.8.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1107.469124][   T28] audit: type=1400 audit(1770925009.359:7093): avc:  denied  { prog_load } for  pid=959 comm="syz.8.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1107.504520][   T28] audit: type=1400 audit(1770925009.359:7094): avc:  denied  { map_create } for  pid=959 comm="syz.8.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1107.527136][   T28] audit: type=1400 audit(1770925009.412:7095): avc:  denied  { read write } for  pid=26050 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1107.555888][   T28] audit: type=1400 audit(1770925009.464:7096): avc:  denied  { execmem } for  pid=962 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[ 1107.595153][  T963] __nla_validate_parse: 1 callbacks suppressed
[ 1107.595170][  T963] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6710'.
[ 1108.148619][  T993] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6723'.
[ 1109.078603][ T1021] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6736'.
[ 1109.292154][ T1042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6745'.
[ 1109.470173][ T1054] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6750'.
[ 1110.201416][ T1094] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6769'.
[ 1111.305896][ T1124] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6782'.
[ 1112.007306][   T28] kauditd_printk_skb: 296 callbacks suppressed
[ 1112.007324][   T28] audit: type=1400 audit(1770925014.146:7393): avc:  denied  { prog_load } for  pid=1153 comm="syz.8.6796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1112.059028][ T1152] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6795'.
[ 1112.136371][   T28] audit: type=1400 audit(1770925014.146:7394): avc:  denied  { map_create } for  pid=1156 comm="syz.3.6797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1112.260845][   T28] audit: type=1400 audit(1770925014.167:7395): avc:  denied  { prog_load } for  pid=1153 comm="syz.8.6796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1112.391960][   T28] audit: type=1400 audit(1770925014.167:7396): avc:  denied  { prog_load } for  pid=1156 comm="syz.3.6797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1112.531506][   T28] audit: type=1400 audit(1770925014.178:7397): avc:  denied  { open } for  pid=1156 comm="syz.3.6797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[ 1112.539895][ T1186] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1112.555065][T26050] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1112.557725][ T1187] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1112.593706][T26050] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[ 1112.616987][ T1188] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1112.723072][ T1191] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6811'.
[ 1112.933207][ T1202] syzkaller0: entered promiscuous mode
[ 1112.965524][ T1202] syzkaller0: entered allmulticast mode
[ 1113.407895][ T1228] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6827'.
[ 1113.670630][ T1238] syzkaller0: entered promiscuous mode
[ 1113.708621][ T1238] syzkaller0: entered allmulticast mode
[ 1114.096396][ T1288] gre0: entered allmulticast mode
[ 1115.200759][ T1388] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6894'.
[ 1115.281881][ T1393] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6896'.
[ 1115.720424][ T1418] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6908'.
[ 1115.807282][ T1424] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6912'.
[ 1115.926580][ T1443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6921'.
[ 1115.999715][ T1445] syzkaller0: entered promiscuous mode
[ 1116.006180][ T1445] syzkaller0: entered allmulticast mode
[ 1116.194424][ T1472] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6935'.
[ 1116.360733][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6947'.
[ 1116.800240][   T28] kauditd_printk_skb: 729 callbacks suppressed
[ 1116.800268][   T28] audit: type=1400 audit(1770925019.175:8114): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1116.832351][   T28] audit: type=1400 audit(1770925019.206:8115): avc:  denied  { create } for  pid=1538 comm="syz.6.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[ 1116.855153][   T28] audit: type=1400 audit(1770925019.206:8116): avc:  denied  { create } for  pid=1538 comm="syz.6.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[ 1116.876245][   T28] audit: type=1400 audit(1770925019.259:8117): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1116.913716][   T28] audit: type=1400 audit(1770925019.290:8118): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1116.942489][   T28] audit: type=1400 audit(1770925019.322:8119): avc:  denied  { read } for  pid=1547 comm="syz.6.6966" dev="nsfs" ino=4026532534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[ 1116.966573][   T28] audit: type=1400 audit(1770925019.353:8120): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1117.006366][   T28] audit: type=1400 audit(1770925019.385:8121): avc:  denied  { read write } for  pid=26050 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1117.033169][   T28] audit: type=1400 audit(1770925019.395:8122): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1117.058978][   T28] audit: type=1400 audit(1770925019.448:8123): avc:  denied  { create } for  pid=1552 comm="syz.3.6969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0
[ 1117.442445][ T1614] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6996'.
[ 1117.743720][ T1666] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7022'.
[ 1120.949357][ T1883] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001
[ 1121.342080][ T1905] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7128'.
[ 1121.599522][   T28] kauditd_printk_skb: 359 callbacks suppressed
[ 1121.599543][   T28] audit: type=1400 audit(1770925024.214:8483): avc:  denied  { map_create } for  pid=1928 comm="syz.2.7138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1121.650102][   T28] audit: type=1400 audit(1770925024.245:8484): avc:  denied  { map_create } for  pid=1928 comm="syz.2.7138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1121.690027][   T28] audit: type=1400 audit(1770925024.245:8485): avc:  denied  { prog_load } for  pid=1928 comm="syz.2.7138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1121.732080][   T28] audit: type=1400 audit(1770925024.287:8486): avc:  denied  { create } for  pid=1930 comm="syz.2.7139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[ 1121.772387][   T28] audit: type=1400 audit(1770925024.340:8487): avc:  denied  { create } for  pid=1932 comm="syz.2.7140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[ 1121.813923][   T28] audit: type=1400 audit(1770925024.340:8488): avc:  denied  { create } for  pid=1932 comm="syz.2.7140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[ 1121.853733][   T28] audit: type=1400 audit(1770925024.371:8489): avc:  denied  { read write } for  pid=1934 comm="syz.2.7141" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[ 1121.900308][   T28] audit: type=1400 audit(1770925024.518:8490): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1121.932585][   T28] audit: type=1400 audit(1770925024.560:8491): avc:  denied  { create } for  pid=1936 comm="syz.6.7142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1121.957108][ T1937] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7142'.
[ 1121.981410][   T28] audit: type=1400 audit(1770925024.613:8492): avc:  denied  { read write } for  pid=27093 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1122.419216][ T1981] bond2: option downdelay: invalid value (18446744073709551613)
[ 1122.444490][ T1981] bond2: option downdelay: allowed values 0 - 2147483647
[ 1122.477460][ T1981] bond2 (unregistering): Released all slaves
[ 1124.103140][ T2033] geneve3: entered promiscuous mode
[ 1124.257205][ T2050] netlink: 'syz.8.7191': attribute type 4 has an invalid length.
[ 1124.314396][ T2057] macsec1: entered promiscuous mode
[ 1124.319816][ T2057] macvlan0: entered promiscuous mode
[ 1124.326918][ T2057] macvlan0: left promiscuous mode
[ 1124.493592][ T2069] kernel profiling enabled (shift: 9)
[ 1126.396664][   T28] kauditd_printk_skb: 254 callbacks suppressed
[ 1126.396683][   T28] audit: type=1400 audit(1770925029.242:8747): avc:  denied  { read write } for  pid=29789 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1126.463834][   T28] audit: type=1400 audit(1770925029.305:8748): avc:  denied  { execmem } for  pid=2151 comm="syz.3.7235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[ 1126.505220][ T2153] xt_CT: No such helper "pptp"
[ 1126.521298][   T28] audit: type=1400 audit(1770925029.358:8749): avc:  denied  { module_request } for  pid=2151 comm="syz.3.7235" kmod="nfct-helper-pptp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[ 1126.601519][   T28] audit: type=1400 audit(1770925029.463:8750): avc:  denied  { read write } for  pid=2154 comm="syz.2.7236" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[ 1126.660383][   T28] audit: type=1400 audit(1770925029.494:8751): avc:  denied  { mounton } for  pid=2154 comm="syz.2.7236" path="/246" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[ 1126.753605][   T28] audit: type=1400 audit(1770925029.620:8752): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1126.795136][   T28] audit: type=1400 audit(1770925029.652:8753): avc:  denied  { mounton } for  pid=2156 comm="syz.8.7237" path="/350/file0" dev="tmpfs" ino=1809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[ 1126.838634][   T28] audit: type=1400 audit(1770925029.662:8754): avc:  denied  { read write } for  pid=2156 comm="syz.8.7237" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1126.872365][   T28] audit: type=1400 audit(1770925029.694:8755): avc:  denied  { read write } for  pid=29707 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1126.910441][   T28] audit: type=1400 audit(1770925029.704:8756): avc:  denied  { create } for  pid=2158 comm="syz.8.7238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1130.000424][ T2248] ==================================================================
[ 1130.008837][ T2248] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[ 1130.017549][ T2248] 
[ 1130.019897][ T2248] write to 0xffff888159ba8528 of 8 bytes by task 2249 on cpu 0:
[ 1130.027553][ T2248]  shmem_file_splice_read+0x470/0x600
[ 1130.032952][ T2248]  splice_direct_to_actor+0x26e/0x670
[ 1130.038361][ T2248]  do_splice_direct+0x119/0x1a0
[ 1130.043332][ T2248]  do_sendfile+0x382/0x650
[ 1130.047767][ T2248]  __x64_sys_sendfile64+0x105/0x150
[ 1130.052989][ T2248]  x64_sys_call+0x2dc4/0x3020
[ 1130.057691][ T2248]  do_syscall_64+0x12c/0x370
[ 1130.062396][ T2248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.068307][ T2248] 
[ 1130.070681][ T2248] write to 0xffff888159ba8528 of 8 bytes by task 2248 on cpu 1:
[ 1130.078482][ T2248]  shmem_file_splice_read+0x470/0x600
[ 1130.084045][ T2248]  splice_direct_to_actor+0x26e/0x670
[ 1130.089706][ T2248]  do_splice_direct+0x119/0x1a0
[ 1130.094570][ T2248]  do_sendfile+0x382/0x650
[ 1130.099098][ T2248]  __x64_sys_sendfile64+0x105/0x150
[ 1130.104309][ T2248]  x64_sys_call+0x2dc4/0x3020
[ 1130.109272][ T2248]  do_syscall_64+0x12c/0x370
[ 1130.113889][ T2248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.119885][ T2248] 
[ 1130.122220][ T2248] value changed: 0x0000000000003e5f -> 0x0000000000003e63
[ 1130.129339][ T2248] 
[ 1130.131664][ T2248] Reported by Kernel Concurrency Sanitizer on:
[ 1130.137908][ T2248] CPU: 1 UID: 0 PID: 2248 Comm: syz.9.7277 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1130.148859][ T2248] Tainted: [W]=WARN
[ 1130.152751][ T2248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1130.162898][ T2248] ==================================================================