last executing test programs:

2m41.484265444s ago: executing program 2 (id=711):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
eventfd2(0x9, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf252100000014002dc0080002000300000005000100300000000800030029586ef72d4000da37a4289a70a349ace1d03b03b0cec7c5423a385079d25c5ce9c6df0e0b1a511fb1714ab2712e0e73bc09de21efda4e7bde33198f3e8425bea8afa14ed0bdf269ce254837170efaa112895d62718c8bf0ebfec3", @ANYRES32=0x0, @ANYBLOB="4c002d8005000100060000000500040001000000050001000700000005000400010000000800030002000000080002000000000005000400010000000800020000000000080003000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4042440}, 0x200000e0)

2m41.244104085s ago: executing program 2 (id=714):
close(0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x917b, 0xc000, 0x2, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000040), 0x12)
preadv2(r7, &(0x7f0000000100)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1, 0x0, 0x200000, 0x0)

2m40.7560406s ago: executing program 2 (id=716):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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")
open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x30400, 0x0)
getdents64(r0, 0x0, 0x0)

2m39.768130459s ago: executing program 2 (id=729):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0xa04801, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xf9, 0x1213, &(0x7f0000000600)="$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")
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340)={0x4009c1, 0x31, 0xa}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0xe, 0x5, &(0x7f0000001a80)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='O', 0x1}], 0x1}, 0x1)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x3, &(0x7f0000000400)="cd2293211e89651704bdd2da0f021da8d97e8e69e581ecfb4265db21ad35e14edfce66061496c3ed0f6e0953205a822428fd34787c45567ff7712540728c78e00f1db1613290f74658767d81c14f2af220f913997700efd10d9ce1d3e5e0bba2468543ac77ff716cfe945b784eb6a6687854d32b893b23792a6ea3cf6afa728a34c06132bce781765b")
ptrace$setregs(0xd, r5, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x2e, r5, 0xffffffff, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa24ded7457c2c960800450000b00000000000119078ac1e0101ac1414aa00004e20009c907801000000000000087b4b142b7461fd777b1c012bd14ea04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643f3bb2c5a57df67d544af6e8dafe09000000000000000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x3, &(0x7f0000001840)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='syzkaller\x00', 0x405}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003140)=""/4080, 0xff0}], 0x1}, 0x2}], 0x2, 0x10043, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e21, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001b40)={[{@nomblk_io_submit}, {@auto_da_alloc}, {@bh}, {@abort}, {@debug}, {@errors_remount}]}, 0x7, 0x60f, &(0x7f0000001bc0)="$eJzs3c9rXFUbAOD33knyJU0+04qILYoBFy1I06QWq26sdWEXBQt2IeKioUlq6PQHTQq2FkzBhYKCiFuRbvwH3Ev37kRQd66FKlJRUOnInbm3nSQz6TTNzLS5zwOTuefcmTnnnZOTe87cObkBlNZE9iON2Blx60QSMd60bywaOyfyx938/crJ7JZErfbGb0kkeV7x+CS/H80TwxHx3eGIRytry128dPn0TLXW8H7EvqUz5/ctXrq8d+HMzKm5U3Nnp/e/cODg1IvTB6Y3Jc7R/P7I0def/OSDd56f/766N4lDcXzwvdlYFcdmmYiJuJWH2Jw/EBEHs40W78vDZguEUGqV/PdxMCIej/GoZKlG147xWPi43/UDuqdWiagBJZXo/1BSxTigmNt3Ng8+3uVRSe/ceKUxAVob/0Djs5EYrs+Ntt1M6vOkwnBEbN+E8rMy/r2y64vsFis+h/jrdusMbEI57SxfjYgnWsWf1Ou2vR5pFn+6oh7JcsRURAzl9Xv1PuqQNG1343OY9Ww0/jQiDuX3Wf7hDZY/sSrd6/gBKKfr2fgnO5AvZ6k7x79s7FGMf6LF+Ge0xbFrI/p9/Gs//iuO98P1z8jTVeOwbMxyrPVLDq7O+PmjI5+1K795/JfdsvKLsWAv3LgasWtV/B9mwebjnyz+pEX7Zw85caizMl774dcj7fb1O/7atYjdLec/d0al2dY65yf3zS9U56YaP1uW8c23b3/Vrvx+x5+1/7Y28Te1f7r6edl7cr7DMr4+du1Mu31jLeNfbpqdpr8MJY355lD+nHdnlpYuTEcMJUcbGWlT/v7161I8pniNLP49z7Tu/yt+/6+ufJ2R4k9mB86/efpmu30baf+mk8m3ah3WoZ0s/tm7t/+a/p/lfdphGX++dfGpdvvWi3/kfgIDAAAAAACAEkrr52CTdPL2dppOTja+3/FYbEur5xaXnp0/d/HsbMSe+vchB9PiTPd4I51k6en8+7BFev+q9HMRsSMiPq+M1NOTJ89VZ/sdPAAAAAAAAAAAAAAAAAAAADwgRvP1/8V1qv+oNNb/AyXRzQvMAQ82/R/Kq97/11ziCSgDx38or3X6/5qLmQJbi+M/lJf+D+Wl/0N56f9QXvo/lFeH/X+s2/UAAAAAADbVjqev/5RExPJLI/VbZijfZ0UQbG2+3w/lVel3BYC+uX3q32AfSqej8f/f+T8H7H51gD5IWmXWBwe19Tv/9ZbPBAAAAAAAAAAAAAC6YPfO9uv/rQ2Grc2yPyiv+1j/718HwEPOpT+gvMzxgbut4h9ut8P6fwAAAAAAAAAAAADombH6LUkn87XAY5Gmk5MR/4+I7TGYzC9U56Yi4pGI+LEy+L8sPd3vSgMAAAAAAAAAAAAAAAAAAMAWs3jp8umZanXuQvPGP2tytvZGcRXUHpT1ctzjsyLp/dsyEhF9b5SubQw05SQRyzES99oo3dqIppyBPjdBv/8yAQAAAAAAAAAAAAAAAABA+TStPW5t15c9rhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9N6d6/93b6PfMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6f/AgAA//+sLkbA")

2m39.270201154s ago: executing program 2 (id=737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)={0x10, 0x1403, 0x2, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000440)={&(0x7f00000003c0)='\x00', &(0x7f0000000400)='syzkaller\x00', 0x9})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
unshare(0x6c040000)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={<r7=>0x0}, &(0x7f0000000100)=0xc)
getpgid(r7)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @local, {[@ssrr={0x89, 0x3, 0xda}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1f}}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}]}}}}}}}, 0x0)
prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x4)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

2m39.114880422s ago: executing program 2 (id=739):
close(0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x917b, 0xc000, 0x2, 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000040), 0x12)
preadv2(r7, &(0x7f0000000100)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1, 0x0, 0x200000, 0x0)

2m39.019248177s ago: executing program 32 (id=739):
close(0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x917b, 0xc000, 0x2, 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000040), 0x12)
preadv2(r7, &(0x7f0000000100)=[{&(0x7f0000002440)=""/4096, 0x1000}], 0x1, 0x0, 0x200000, 0x0)

1m40.046803441s ago: executing program 3 (id=1107):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000170000000000e246268a", 0x45}, {&(0x7f0000000680)="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", 0x1ab}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019258bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded", 0xaa}], 0x1}}], 0x2, 0x2090)

1m39.961886985s ago: executing program 3 (id=1109):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x15, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
open_by_handle_at(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000001000000080000000700bc11000000000000e0315f9f66612d2ca9a2d811d6ba4758a537a432582510541a22ed08d32650c470d4e9848bb00c8efbd75889e08e98fc8182eb409d66a486211f42bc8444ee292fd3637302997c2d6d384066d916a7ee4080e2cc2fd0da6e1661aea2a07e3307b0082ef5115d384a681836065fb216d617ddfa5f1a57f07c1b582f08abf8bac61be4"], 0x400000)
open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @local, 0x99, 0x5, 0xb48, 0x100, 0x3, 0x300200})
sendto$inet6(r7, &(0x7f0000000040)="a6", 0x1, 0x20048051, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0xffffffff)
sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)

1m39.850680201s ago: executing program 3 (id=1111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r1 = getpid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b", 0x35}], 0x1}, 0xff00)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0)
r3 = gettid()
rt_tgsigqueueinfo(r1, r3, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3})
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff)
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0xfdef}])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

1m39.755368015s ago: executing program 3 (id=1112):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000004)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x5, 0x2, 0x9, 0x1, 0x80000000, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x0, 0x9, 0x4, 0xc, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x51, 0x2, "469aa6ea46661c23c9280dd455f160d886bad7e9b0e56691048571c339dc1d1efe83a2b42f6501bc934e08d77da3c8016ce25fa2e00241ca53a3be474c73cf55b0ff244c71e0f49668ed1650b3"}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c0000001100000425bd7000fedbdf25ac1414aa000000000000000000000000000004d40a00ff00772f117b08000c000900000014000e0000000000000000000000ffff7f0000014d000365666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000000e2b6a4672e000000050019000000"], 0x9c}}, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1m38.182503234s ago: executing program 0 (id=1123):
r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x0, 0x43be}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000001a00)=ANY=[@ANYBLOB="5ffa8b2175c6bbbbbbbbbbbb0800460000380000000003069078ac1414bbac1414aa440486504e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a0000000500007fff00000aae5efbc30a75fb084b87ce42115e2f2837ce5bea58eb848573b9a5f5d492fe81abffd6c5349966032ce4d886cd1c29b5a0ac29e949b546547cb5834e0fb6cffc6c1e43d8eeb09a2a396ca8d08f4f390acb748e1e3a5e43f61e3a40243807525e479fd9c746c9820a1db0aabeb89c869dd17132a0895a3b34fb4ad49992b96bd3"], 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000680000/0x3000)=nil, 0x3000, 0x300000d)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1})
io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x7, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x3}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/63, 0x3f}], 0x2, 0x60, 0x4}}], 0x48, 0x48004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
clock_settime(0xfffffffb, &(0x7f0000000140))
r4 = gettid()
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$bt_hci(r5, 0x0, 0x1, 0x0, &(0x7f0000000080))
r6 = syz_open_procfs(r4, &(0x7f0000000080)='auxv\x00')
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$pppoe(0x18, 0x1, 0x0)
recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0)
fsmount(r6, 0x1, 0x8e)

1m37.754943055s ago: executing program 3 (id=1126):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000140)=0xe8)
mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030303030632c63616368653d7265616461686561642c6f626a5f757365723d267b2c666f776e65723ddeaced1f2ac6c1fe44c97fa378ab457636da5c2be44d9b443e4aa02a05564cfa0bddbba53b76f30f46a2f41c630d6633f7645ea5324eb8c58b0363f654b340e7777ba24c5005698623161bf5e31d4f7efc55735c19f51eab5382237d2c", @ANYRESDEC=r1, @ANYBLOB=',\x00'])
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x100000000000000, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})
setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000200)=0xfffffff8, 0x4)

1m37.630513681s ago: executing program 3 (id=1127):
unshare(0x2c020400)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', <r0=>0x0, 0x40, 0x20, 0xd, 0x8b, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x12}, @empty, @empty, @local, @multicast2]}]}}}}})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$usbip_server(r2, &(0x7f0000000240)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x401}, {0x8}}, 0x30)
read$usbmon(r2, &(0x7f0000000500)=""/136, 0x88)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@generic={0x3, 0x6, 0x7, 0x9, 0x2}], &(0x7f0000000300)='GPL\x00', 0xcf, 0x4b, &(0x7f00000007c0)=""/75, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xe, 0xdc, 0xe40}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000008c0)=[{0x4, 0x5, 0xf}, {0x0, 0x4, 0x3, 0x2}, {0x1, 0x4, 0x6, 0x3}, {0x0, 0x2, 0xe5, 0x8}, {0x4, 0x1, 0x8, 0xb}, {0x1, 0x2, 0x3, 0x7}], 0x10, 0x8}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x0, 0xc, 0x3, 0x4, 0xffffffffffffffe0}, @generic={0x4, 0x2, 0x0, 0x6, 0x988}], &(0x7f0000000080)='GPL\x00', 0x5, 0x4e, &(0x7f0000000100)=""/78, 0x41100, 0x28, '\x00', r0, 0x0, r2, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x10, 0xc, 0x40}, 0x10, 0x120b8, r3, 0x9, &(0x7f0000000b40)=[r4, r5, 0x1, r6], &(0x7f0000000b80)=[{0x3, 0x1, 0xc, 0x5}, {0x4, 0x4, 0xc, 0xb}, {0x2, 0x4, 0xa, 0x8}, {0x3, 0x2, 0x6, 0xc}, {0x5, 0x1, 0xb, 0x4}, {0x2, 0x5, 0x1, 0x7}, {0x2, 0x5, 0x1, 0x5}, {0x3, 0x4, 0xe, 0x4}, {0x0, 0x2, 0xd, 0x2}]}, 0x94)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m37.158618564s ago: executing program 0 (id=1134):
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x8400, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x8000}}, 0x44)

1m37.156378095s ago: executing program 0 (id=1135):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc31, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd9, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x200034, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0xffff, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0xffffffff, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x20}], 0x1}, 0x4)

1m37.058083599s ago: executing program 0 (id=1138):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@auto_da_alloc}, {@mblk_io_submit}, {@grpquota}]}, 0x1, 0x569, &(0x7f0000000a00)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2a, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r5 = epoll_create1(0x80000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0xe, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4094)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d80)='/sys/power/hibernate_compression_threads', 0x101000, 0x41)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000000)={0xe000001a})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb011818"], 0x0, 0x3e, 0x0, 0xa, 0x7fb}, 0x28)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x49801, 0x6bb2cd916356d447}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r11}]}}}]}, 0x40}}, 0x0)
sendto$packet(r8, &(0x7f00000003c0)="05d9362722a60700000b00000041880000000000000000", 0x17, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_EXPRESSIONS={0x58, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_QUOTA_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x407, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6667dd28}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x274, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_OBJ_USERDATA={0xe4, 0x8, "b555918cd3c707248ebc4d2818b4f5c90f338fcb7c7748a7a7c2415bd735e95fb878aeae5b2dce793534b3ba0382e4ba32c723ad8fdccda3a1d947b1e84926c6a3b74ca52243918e4e18d1878eb03bf636962d5b81f73f28576f5474d1c2902e22a346cc59a4561d7ac9a3457a1a3034fbc7f3bb60891ad2b757d8c849a2dfae56be1f09e6dbe01e92170d66a82e3a49191f6df979cbeb41a224c4a1769f8e8045472db0cb96ac653035179d6c331ccfc5525e44a0fc8a597eb9a31d8d9905df58e1a04ca8d458162d2159fbda2ffa50c86b96b5702073bb06070a5f312d1f0b"}, @NFTA_OBJ_USERDATA={0xaf, 0x8, "29e872e98245c02a43f0048e3240cbb6b0d3c8720bc7f87cb3c632411170e6f5528e8fa22b05fee9a8ba21d7b8800cd4292a158c625d988a7f068615152cce285fd357424fce4be5aa9a885b3561e513d17d9735e37cc2235ce4ec50ab045af2de00ba2cbcc91767d13b521b1604328594a248bae5685a4c50570b696690296971d1f0e52093019e29c01814b4668b6bd7f1a409df4918b910ea886e0b79da0c1caa4296e208ec1cc8447e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xbf, 0x8, "b8a6c26c58d4b0adfc413df3cc3e6089b4d95e9b987e94e87ecb229b117369d15d31eaa31d5fc8926377e41f2710d523e51f5a22d28d11556449146eedcd4708b6e8be6bea787dfd3fca93657358f9b77b1b913adec1322c4ea868762ce95c653242bbcbe4c3f56fec334bcf0674e8548b2caadf20c15fac0d2e8321ca9532d165bfe4a330b6ac9d073134a4778152505af41f96ee1891aa9a053f1b8e27c352bbec0663aea6628f4199d49ebfa21f946ff7dc7af571c9c2537d99"}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3dc}, 0x1, 0x0, 0x0, 0xc0}, 0x20008000)

1m34.992678152s ago: executing program 0 (id=1150):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
pipe(&(0x7f0000000000))
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r7=>0x0})
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$packet(r5, &(0x7f00000006c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0xe000, 0x4e20, 0x8}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x15}, @remote}}}], 0x20}}, {{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x2, 0x4000800)

1m34.138576595s ago: executing program 0 (id=1158):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0)
open(0x0, 0x14927e, 0x9)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2})
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtaction={0xb0, 0x30, 0x1, 0x4000000, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x9c, 0x1, [@m_mirred={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3}}]}, {0x1b, 0xa, "d8f55a3a10288d1a86291f0d124ba222dbf56e9c9031a2"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x35}, 0x73)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000040)={0x95, 0x1})
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000240)="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", 0x137}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000540)={@empty, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "8b073b6166a0c077ace4330da466052757b3c29353085e7e2cf406437ee9bec5066871be396d6ff1bb6c3deb09743dffdd0c26994bf2be48b95310b3dc573719"}}}}, &(0x7f00000001c0)={0x0, 0x2, [0xab, 0x575, 0xae5, 0xef0]})
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x2000000039b, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)

1m34.065215609s ago: executing program 33 (id=1158):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0)
open(0x0, 0x14927e, 0x9)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2})
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtaction={0xb0, 0x30, 0x1, 0x4000000, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x9c, 0x1, [@m_mirred={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3}}]}, {0x1b, 0xa, "d8f55a3a10288d1a86291f0d124ba222dbf56e9c9031a2"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x35}, 0x73)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000040)={0x95, 0x1})
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000240)="095f3e6ee80f1841023ccf6cb1c0698bc63d25af4d2b576e8d08058cdce3cbabaecf165adf41adefdace3c5ddce07e5902a4b638c1955c664b7ef85807ec1fb9c088e4caccba60d606c2f3b309273c586f88ca510ef7bb3a5e84148677bdc1fa1c19f6258fec16ae14057ad2e29f060d8bbc60269be9459ab6d0c1e1119deada21560e24e9b830afb120d13fe025dbff09fb0a4d3752afab3a3321040273643f2abfc113bb27666ba700cb0c95380dc18e0d94c082f1333e4d4400c4c1e3e69c5cd0fb831b02e1f2041b7be11798f3b33d4f992ba9e0fc1a2cf4cdfc7fc1e9e731fa71b2e3921195fc17762d0849f50549c251cf75a5bcc792b5e219a976f88cd4d6b6cbb407b1ce49e572a11b4d453f753c606c340ce5568e906c136f799357d2b4d4ca9040ba81c52ff2ec4dcbb0b615711188c1dcd8", 0x137}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000540)={@empty, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "8b073b6166a0c077ace4330da466052757b3c29353085e7e2cf406437ee9bec5066871be396d6ff1bb6c3deb09743dffdd0c26994bf2be48b95310b3dc573719"}}}}, &(0x7f00000001c0)={0x0, 0x2, [0xab, 0x575, 0xae5, 0xef0]})
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x2000000039b, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)

1m22.236446187s ago: executing program 34 (id=1127):
unshare(0x2c020400)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', <r0=>0x0, 0x40, 0x20, 0xd, 0x8b, {{0xb, 0x4, 0x1, 0x3, 0x2c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x12}, @empty, @empty, @local, @multicast2]}]}}}}})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001)
r2 = fcntl$dupfd(r1, 0x0, r1)
write$usbip_server(r2, &(0x7f0000000240)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x401}, {0x8}}, 0x30)
read$usbmon(r2, &(0x7f0000000500)=""/136, 0x88)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@generic={0x3, 0x6, 0x7, 0x9, 0x2}], &(0x7f0000000300)='GPL\x00', 0xcf, 0x4b, &(0x7f00000007c0)=""/75, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xe, 0xdc, 0xe40}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000008c0)=[{0x4, 0x5, 0xf}, {0x0, 0x4, 0x3, 0x2}, {0x1, 0x4, 0x6, 0x3}, {0x0, 0x2, 0xe5, 0x8}, {0x4, 0x1, 0x8, 0xb}, {0x1, 0x2, 0x3, 0x7}], 0x10, 0x8}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x4, 0x0, 0xc, 0x3, 0x4, 0xffffffffffffffe0}, @generic={0x4, 0x2, 0x0, 0x6, 0x988}], &(0x7f0000000080)='GPL\x00', 0x5, 0x4e, &(0x7f0000000100)=""/78, 0x41100, 0x28, '\x00', r0, 0x0, r2, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x10, 0xc, 0x40}, 0x10, 0x120b8, r3, 0x9, &(0x7f0000000b40)=[r4, r5, 0x1, r6], &(0x7f0000000b80)=[{0x3, 0x1, 0xc, 0x5}, {0x4, 0x4, 0xc, 0xb}, {0x2, 0x4, 0xa, 0x8}, {0x3, 0x2, 0x6, 0xc}, {0x5, 0x1, 0xb, 0x4}, {0x2, 0x5, 0x1, 0x7}, {0x2, 0x5, 0x1, 0x5}, {0x3, 0x4, 0xe, 0x4}, {0x0, 0x2, 0xd, 0x2}]}, 0x94)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

8.899792996s ago: executing program 1 (id=1752):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r2, 0xa, 0x0, 0xccd, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0]}, 0x40)
sendfile(r1, r2, 0x0, 0x100000000)
ioctl$TIOCCONS(r2, 0x541d)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="bbfb2bbd7000fddbdb25670000000800d700"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb37}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5299}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x20004080)
mount$cgroup(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000001100), 0x40, &(0x7f0000001280)={[{@cpuset_v2_mode}, {@favordynmods}]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xe0, 0x700}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0)

8.577107172s ago: executing program 1 (id=1754):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
eventfd2(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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")
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
open(&(0x7f0000000200)='./file0\x00', 0x4827e, 0xdc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

7.145197614s ago: executing program 1 (id=1758):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10)
syz_emit_ethernet(0xfc0, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0xe, 0x81, "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"}}}}}}, 0x0) (fail_nth: 4)

6.634623029s ago: executing program 6 (id=1760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r1, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084)

6.561663563s ago: executing program 6 (id=1762):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
r3 = socket(0x2, 0x3, 0xff)
r4 = socket(0x27, 0x4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r6, &(0x7f0000000000)='\"', 0xfdef)
listen(r5, 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)

6.123129495s ago: executing program 1 (id=1764):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x3, 0x0, 0x7cce8c743ee810df})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x200, 0x0, 0x724f, 0x0, 0x55a})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a00000009500"/96], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="220300090c00000000000000000000000500060000000e000a004e2200000006fc010000000000000000000000000000010000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000"], 0x60}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r3, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800080000000000", @ANYRES32, @ANYBLOB="d7100061612e79a2"], 0x50)
unshare(0x22020600)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4)
syz_clone(0x105000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x3, 'vlan0\x00', {0xc21}, 0x1})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x1, 0x20, 0xfffffffd, 0x7, {{0x13, 0x4, 0x2, 0x7, 0x4c, 0x63, 0x0, 0x2, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0xb, 0xf, [@loopback, @local]}, @timestamp={0x44, 0x10, 0xa8, 0x0, 0xc, [0x7, 0x6, 0x3]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x4, [{@private=0xa014102, 0x3}, {@multicast2, 0x2}, {@remote}]}]}}}}})
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x802000, @loopback}, {0xa, 0x4, 0xfffffffd, @mcast2}, 0x3, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0xdfffffff]}}, 0x5c)

4.769824362s ago: executing program 1 (id=1772):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440))
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x2c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r3, 0x1, 0x4070bd26, 0x1, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x20000898)

4.639438598s ago: executing program 1 (id=1775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
prlimit64(0x0, 0x3, &(0x7f00000002c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
rt_tgsigqueueinfo(r1, r1, 0x19, &(0x7f0000000340)={0x38, 0xd, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x3402, 0x0, 0x0, 0x8, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
rt_sigqueueinfo(r1, 0x1e, &(0x7f0000000100)={0x2e, 0xf4, 0x8000})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10)
syz_io_uring_submit(0x0, 0x0, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4.343772693s ago: executing program 6 (id=1778):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x10)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000001540)={0xa, 0x0, 0x2, @mcast1, 0x0, 0x4}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="900000001a00010027bd700002dcdf2502202001000000000020000008000200ffffffff08000100ac1e0101630008"], 0x90}}, 0x4040000)
socket$inet6(0xa, 0x1, 0x84)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, &(0x7f0000001a40)=""/4096, 0x1000}, 0xffffdff9}], 0x1, 0x2121, 0x0)

3.756785582s ago: executing program 5 (id=1784):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
rmdir(&(0x7f0000000340)='./file0/file0/..\x00')
mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2000, 0x0)

3.684619196s ago: executing program 5 (id=1787):
ioprio_set$uid(0x3, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000004)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x5, 0x2, 0x9, 0x1, 0x80000000, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x0, 0x9, 0x4, 0xc, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x51, 0x2, "469aa6ea46661c23c9280dd455f160d886bad7e9b0e56691048571c339dc1d1efe83a2b42f6501bc934e08d77da3c8016ce25fa2e00241ca53a3be474c73cf55b0ff244c71e0f49668ed1650b3"}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c0000001100000425bd7000fedbdf25ac1414aa000000000000000000000000000004d40a00ff00772f117b08000c000900000014000e0000000000000000000000ffff7f0000014d000365666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000000e2b6a4672e000000050019000000"], 0x9c}}, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3.683990666s ago: executing program 4 (id=1788):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
syz_emit_ethernet(0x46, 0x0, 0x0)
io_setup(0x9, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ac1e0101000000000000000000000000000000000000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c0000002001000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000001000000000ffffffbfffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000400080000000000000014000e"], 0x104}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)

3.378732221s ago: executing program 6 (id=1789):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
r3 = socket(0x2, 0x3, 0xff)
r4 = socket(0x27, 0x4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r6, &(0x7f0000000000)='\"', 0xfdef)
listen(r5, 0x1)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)

2.976181961s ago: executing program 7 (id=1790):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x87c0, 0x2, 0x1ff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @empty}}}}) (async)
dup3(r2, r1, 0x0) (async)
io_setup(0x2, &(0x7f0000000400)=<r3=>0x0) (async)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfe6d, 0x429a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008, 0x6}, 0x98100, 0xccf8, 0x0, 0x1, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80b3c00, 0x0, 0xfffffffffffffdb9, 0x0, 0x0, 0x0) (async, rerun: 64)
r5 = dup(r4) (rerun: 64)
read$char_usb(r5, &(0x7f0000000180)=""/147, 0xfdef) (async, rerun: 64)
io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}]) (rerun: 64)

2.885049306s ago: executing program 7 (id=1791):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008380011"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)

2.772677421s ago: executing program 4 (id=1792):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x2000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

2.737171993s ago: executing program 5 (id=1793):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004d40009800800014000000006c80002"], 0x140}}, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x0, @remote}}, 0x0, 0x0, 0x40, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0ca6c09f", 0x4, 0xfffffffffffffffc)
r5 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0xfffffffffffffffd, 0xeca, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffff}, {0xfffffffffffffffd, 0x6, 0xc0f}}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x0, @in=@multicast1}}, 0xe4)
close(r5)
r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$link(0x8, r4, r6)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r6)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x258, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x20000000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)

2.694695255s ago: executing program 4 (id=1794):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x1500)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x3)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001d40)=ANY=[], 0x3c8, 0x100000)

2.694397195s ago: executing program 7 (id=1795):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r0, 0x0, 0x8e14, 0x8ffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd25, 0x25dfdc01, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20742, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@jqfmt_vfsv0}, {@grpquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) (async)
fallocate(r0, 0x0, 0x8e14, 0x8ffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd25, 0x25dfdc01, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x50) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20742, 0x0) (async)

2.671456937s ago: executing program 5 (id=1796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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")
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000011000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000083800118009000100"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)

2.59567345s ago: executing program 4 (id=1797):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x6}, &(0x7f00000000c0)=0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
syz_read_part_table(0x406c, &(0x7f000000c180)="$eJzszzFKxEAYBeCXzYZECSyCVoIoFraxs8ottpc9g5WFirmJpXgA7+EdLD2DVVbWCBYi4vJ91TzePz8z4a+V307Um7FI8rx62ktyfJKh65ImyXzsdz5Gu/NUu80sbZKr6eLl4w/fDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/F+zJPU63SYZXq7Pxtysm9Vhhps+F23SHCyS+zJVf1RkP/Mv95bJa5IiyVuS5eK3PwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbIfLjVR/rtvxcDe9+nCaoa/e2Z1DAwBAKISCRBd0SZfEZvb3u0rgvbVtv29Xss+0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCyAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//RwoVBA==")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00')
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.422802039s ago: executing program 7 (id=1798):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x220, 0x110, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x33}, @loopback, 0xffffffff, 0xffffff00, 0xc, 0x0, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x33eb4ad762aa97cc, 0x0, 0xff]}}, 0x7, 0x5, 0x4, 0x4, 0x0, 0x0, 'bond_slave_1\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x19}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x35}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @multicast2, @private=0xa010100, 0xf, 0xff03}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x13, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

2.319640324s ago: executing program 7 (id=1799):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
recvmsg$unix(r2, 0x0, 0x40)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a0001002dbd7000040000008180"], 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = socket(0x2b, 0x80801, 0x1)
ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000000c0)={&(0x7f00000002c0)="7c93e6cd6096b5111b9d3e0a9bcfe6b95e02e52169baef137d050f84c4c9b8cab776b34ff27d4d2a593697246c3cadf01a68a1f0e678ed507b32f85086b6a96fe14d3200966ae2e3f998ca96816857", 0x4f})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4010}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r6}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004030000010400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x8086}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c)
bind$xdp(r4, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000040)=r7)
close(r8)

2.095683455s ago: executing program 5 (id=1800):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf5, 0x2)

1.274453106s ago: executing program 4 (id=1801):
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file1\x00', 0x1000080, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYBLOB="069aba214c6180730b220e791ed3f2bb1878083984f686012c5830cbbd26b61e3e6c95e3f0fc77b6ca52b13bd6ee6120925d94ed04302b1c7356d0fa98dcc9aa72f0b8fba7146af21a2153fc180e17f632b3f61a63eaf35f00c5a7818d6ae4f4588995a66416db0273567cbb784c5ff07f3015e8055c1f825fb1f8b63eb1691a6fe9e8e6b37eabfced7e83e5e5fe73a5e6afb91ed55deb21ab95bbc51707103bec91a66091a30304ed612083bc033bac9f37c2cbc73417578bf6277c146d3a0e12d6c87d495f22f30387b831bc57d9076c0b4f", @ANYRES8=0x0], 0x4, 0x358, &(0x7f0000000a80)="$eJzs3T9onGUYAPDnekkuDdbcIBSdTjdBShNx0CmhVChm0Mrhv8XDpv7JnYUcHsQhl1uU4qS4CDq5ddCxsziIuDm4WkGq4mK3QoOffPd99/9ik+Fii7/fUB6e933e9/3e++j3JSRvXm/H1qX5uHzr1s1YXCzE3Nq5tbhdiHKciGJk9mKqjxam5wGAe9ztJIm/kszde3+y1Is8+wHg/tV9/r95apAoHaH46gOzWBIAMGOH/Pr/+anZKzNbFgAwQxPP/8dGmse+zT/X/5kAAOD+9eIrrz63vhFxsVJZjGh82Kq2qvHMoH39crwd9diMs7Ec+xHZi0L2tpD+++yFjfNnK6nfylFNK1rViEa7Vc3eFNaL3fpSZyWWo5zXJ/36Ylq/0q2vRMReuzt/NAqt6nws5fP/vBSbsRrL8dBEfcSFjfOrlXyAaqNX347oxGLvItL1n4nl+PGNuBL1uBRp7WD9uyuVyrlkY6S+da3U7QcAAAAAAAAAAAAAAAAAAAAAALNwptJX7p9/kzTarQ8ujncoj5yPU82a8/OBOtn5QEmpdzrP1eL4+UCj5/O0qnNx4j+9cgAAAAAAAAAAAAAAAAAAALh3NHcWolavb243d97fGg7aQ5l3v//q25PRa5rLS98pDqoiT46M0+s4NHIx+lMk/fKkONInD4oRvc57tWvX+yse7lPqX8VEeRqUJpoK+Zpq9fqpR3/9fFrV3/V6IQqRZooxsS2jQSGff6ip8WCaWIyI/YOqDg5W79LnRpIkB5XvfjZZFYWIuTjyMg4RfHfzrYefbJ5+qpv5Jj/04fEnll+68emXf2zV6tHJdqZeX9hu7ieHGDld63hTkiTtdJQsU8j3uTDlTpgedAaZznZzp1b86c+XH/n4h7HOxen3TzKcee/gub4ezyxkQSGi3NuEf1vq/JSbf3rw2p1svPl8A470wZ3+Yq12ffeX3w/7KQ/9J+GgDgAAAAAAAAAAAAAAAAAAOBZDvyt+BE+/MLsVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxG/z9/6GgM5E5THCnHZNNpc3t5oGTnzzWSwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/snwAAAP//fypwBA==")
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
unshare(0x22020400)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
unshare(0x2060280)
r5 = fsmount(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000540)='\x83x\r`{\xb8-\x19F\x8c\x15J\xb2J\x1cj\xa9\xb9t\x9c=!\x1d\xe3\x89[\a\'\xe0\xea\xbc\x98\xb6/I%\xf4\xccGyI\x9b\xce[\x99E\xf2q\\\'\n\x7f\x19tH\xb7\xb4\xe6a\xc2.\x00\xb6\xb1\xb4\xd0\xa1\xae\xf8\x90\xb1\xe1\x12\x81@\xafg\xee\xc9?\xe1&v\xee\xf1C\xf2\xba^\fI\x9f\x9c\xda\xa8A\xdc\xfd\xfc\xb9e\xf4\xcd\xf5\x0e\x10\xa1V\x80\x00\x00\x00\x00\x00\x00\x00Q\x83\xc1\x86V<\xde\xe9\x12E\x8f\xb4\xb2^Tj\xd5&,5z\x15\x10I\xe8f\f*m\xf9Wy\xb00\xf0\x10\xc8\xf5-\xda\xaf\xe0\xa1:u\xe0&\v\xb8X\xbcH\xfa\xd8\x1d\x82\x1d\xb6>\x12\xfc~\x15\xf2\xdb\xc0o\xf3\x02\xa6\xce\xb1\x11\x02\xbc\xb5\xcdY\xc5\xdc\x1f\xef\x9e\x9a\xcaRn\t\xdd\xc0\xa1\xdc\x0e\xe7+\x1a\f-\x1f\xa4{Fl$\xfc\xa4\x83\xa9l\xfd')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005}}], 0x2, 0x0)
socket(0x9, 0x1, 0x0)

456.639107ms ago: executing program 7 (id=1802):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000004)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x5, 0x2, 0x9, 0x1, 0x80000000, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x0, 0x9, 0x4, 0xc, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x51, 0x2, "469aa6ea46661c23c9280dd455f160d886bad7e9b0e56691048571c339dc1d1efe83a2b42f6501bc934e08d77da3c8016ce25fa2e00241ca53a3be474c73cf55b0ff244c71e0f49668ed1650b3"}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c0000001100000425bd7000fedbdf25ac1414aa000000000000000000000000000004d40a00ff00772f117b08000c000900000014000e0000000000000000000000ffff7f0000014d000365666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000000e2b6a4672e000000050019000000"], 0x9c}}, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

186.82914ms ago: executing program 5 (id=1803):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
getpriority(0x2, r1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x62000000)
syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
sync()
r5 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000022)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000), 0x8}, 0x40012162)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)

106.775164ms ago: executing program 6 (id=1804):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

83.035895ms ago: executing program 6 (id=1805):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe83, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
r3 = fcntl$dupfd(r0, 0x0, r0)
unshare(0x20000680)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40180, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="fd477a8e38232aab446a5eaa5dec306950b96380cfd749788d75a85bebee135b920b8c0db005cb2acd2342e47965ae77d5d4f0c221b0d1bdd732ecf31c88a6117d702a93e23662d2c1b6650d1ec7a65380cbf26809f8592d5f8c83f52fc11aae8d687d4de429958333c88346a17d7efafc6d29a5652d01319cb033dba9f03025baf371ba1c2030ed5bfa991cad5cf2dcaa9b4d25bc53feba2b1d274c337d9c120fe4ce30e92a50d6130c58b27feb8d7eb570d39a1b49eb6915f1ea85cb8590b30de67113326aaf1a845992e3f0cd9d980f442134099122782ee1edb3669fc55853edd5e8460b4c9b0cbe8864ab6bb69bd85095", @ANYRES32=r5, @ANYRES8=r0, @ANYRES64=0x0, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRESOCT=r6, @ANYRES32=r4], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r7, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="63460ba00084060000001000000000000000000000000000ff0100000000000000000000000000010406000000000000a12c7fc9581dc1fef6eaca1f7dc3c19ab1e884d04c870ae8cc13341950eb1c151927dc4236ca508c559b6e8a7d92b23e6d079a1452cdd340000000000000020100000000000007080000000300a207000000000000000000000000000000000000000000000a00004e2200004e240000000000000002000000010000000400"/188], 0xac)

0s ago: executing program 4 (id=1806):
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x100)
setresuid(r0, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80a0, &(0x7f0000000180)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}], [{@euid_gt={'euid>', r0}}]}, 0x1, 0x47d, &(0x7f00000007c0)="$eJzs3M1vVFUbAPDnTj/4ftsX8QNEqaKx0djSgsrCBRhNXGhiogtc1rYgUqihoxFCdHSBS0Pinrg08S9wpRujrkzc6t6QEMMG1M01d+beMjPMDEOZOsD8fsnQc+65wznPnHvae87pbQADayL7J4nYGhG/RcRYLdt4wkTty7Ur5+b/unJuPok0ffPPpHre1Svn5otTi/dtKTKVxuP1Vs6cPTG3tLR4Os9Pl0++P71y5uyzx0/OHVs8tnhq9uDBA/tnXnh+9rmexJm16equj5d373z17Quvzx+58M5P3yRF/A1xfNj9f7qxY+lEi2NDReLJ7mu5K2yrSyfDfWwIt+TdiMi6a6Q6/sdiKK533li88llfGwesqzRN0w3tiyspcA9Lot8tAPoj/zmfRFSyqf98/Xx+EFw+XJsAZXFfy1+1kuEo1RLjF5vmt72UzbaOVP6+mL2iaT0FAGA9fHe49jW77yhetSOlhlX8Q/ne0HhE/D8itkfEfRGxIyLuj4gHIuLBiHio7j2t9n2aNW+S3Hj/U7q0psC6lN3/vZjvbTXe/5WKU8aH8ty2avwjydHjS4v7IuJ/ETEZIxuy/EyHOr5/+dcv2pVN1N3/Za+s/uJeMG/HpeGmBbqFufLI7cRc7/KnEbuGW8WfrO4EZP24MyJ27VlbHcef/np3u7Kbx99BD/aZ0q8inqr1fyWa4i8knfcnpzfG0uK+6eKquNHPv5x/o139txV/D2T9v7nl9b8a/3hSv1+7cut1nP/987Zzmi6v/9H69yzMledGk7eq6aLgo7ly+fRMxGjyWn78UH68sb7qebPXz8/in9zbevxvj+ufxMMRkV3Ej0TEoxGxJ2/7YxHxeETs7RD/jy898d7a419fWfwLt9T/bRPF3vYNRUMnfvi2WlJ01niH+JNo0f8HqqnJ/EjW/zeLq2NLT9/O1QwAAAB3n1JEbI2kNLWaLpWmpmq/L78jNpeWllfKzxxd/uDUQu0ZgfEYKRUrXWOr66FRmcmn9cX66GxTfn++bvzl0KZqfmp+eWmh38HDgNvSZvxn/hjqd+uA9dXht/+Be99a99HTNP2kx00B/mOe14bBZfzD4Gox/jc15a0SwD2q1c9/E3sYDO7/YXAZ/zC4jH8YXMY/DKT8Sfjhbh7wX7dE9v2nf7V3k4iGFqZpn5oxemd8GtVElPpWe6zx7ZN9+sT+yf/Y5p3RcV0m+v2dCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA///GduAN")
chdir(&(0x7f0000000400)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x802, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000))
socket(0x18, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x87)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x14, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==")

kernel console output (not intermixed with test programs):


[  205.846947][ T7672]  x64_sys_call+0x1563/0x3020
[  205.846975][ T7672]  do_syscall_64+0x12c/0x370
[  205.846998][ T7672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.847053][ T7672] RIP: 0033:0x7f5f58bec799
[  205.847068][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.847089][ T7672] RSP: 002b:00007f5f57647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.847109][ T7672] RAX: ffffffffffffffda RBX: 00007f5f58e65fa0 RCX: 00007f5f58bec799
[  205.847122][ T7672] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000003
[  205.847138][ T7672] RBP: 00007f5f57647090 R08: 0000000000000000 R09: 0000000000000000
[  205.847153][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.847168][ T7672] R13: 00007f5f58e66038 R14: 00007f5f58e65fa0 R15: 00007ffea4aa7da8
[  205.847235][ T7672]  </TASK>
[  206.168153][ T6582] bond1 (unregistering): (slave gretap1): Releasing active interface
[  206.254897][ T7686] netlink: 'syz.1.1166': attribute type 6 has an invalid length.
[  206.459794][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1169'.
[  206.861385][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.885673][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.921764][ T6582] bond0 (unregistering): Released all slaves
[  206.947990][ T6582] bond1 (unregistering): Released all slaves
[  206.967133][ T6582] bond2 (unregistering): Released all slaves
[  206.988830][ T6582] bond3 (unregistering): Released all slaves
[  207.008362][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1164'.
[  207.216477][ T7637] lo speed is unknown, defaulting to 1000
[  207.277867][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'.
[  207.288734][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'.
[  207.339972][ T6582] hsr_slave_0: left promiscuous mode
[  207.355757][ T6582] hsr_slave_1: left promiscuous mode
[  207.378775][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.391743][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.480439][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.528302][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.558080][ T7724] hub 8-0:1.0: USB hub found
[  207.595288][ T7724] hub 8-0:1.0: 8 ports detected
[  207.637289][ T6582] veth1_macvtap: left promiscuous mode
[  207.654093][ T7729] netlink: 'syz.4.1174': attribute type 10 has an invalid length.
[  207.696920][ T6582] veth0_macvtap: left promiscuous mode
[  207.715495][ T6582] veth1_vlan: left promiscuous mode
[  207.721656][ T7730] netlink: 'syz.4.1174': attribute type 10 has an invalid length.
[  207.785641][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1174'.
[  208.032086][ T6582] veth0_vlan: left promiscuous mode
[  208.347643][ T6582] team0 (unregistering): Port device team_slave_1 removed
[  208.388847][ T6582] team0 (unregistering): Port device team_slave_0 removed
[  208.489943][ T7730] batadv0: entered promiscuous mode
[  208.495481][ T7730] batadv0: entered allmulticast mode
[  208.527084][ T7730] bridge0: port 3(batadv0) entered blocking state
[  208.543524][ T7730] bridge0: port 3(batadv0) entered disabled state
[  208.678873][ T7637] chnl_net:caif_netlink_parms(): no params data found
[  208.791251][ T1649] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  208.800868][ T1649] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  208.924947][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.951845][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.982345][ T7637] bridge_slave_0: entered allmulticast mode
[  209.002558][ T7637] bridge_slave_0: entered promiscuous mode
[  209.041451][ T6582] IPVS: stop unused estimator thread 0...
[  209.047542][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.089064][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.131813][ T7637] bridge_slave_1: entered allmulticast mode
[  209.139608][ T7637] bridge_slave_1: entered promiscuous mode
[  209.286313][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.418551][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.439269][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  209.439284][   T28] audit: type=1400 audit(1774455710.404:1672): avc:  denied  { firmware_load } for  pid=7755 comm="syz.1.1177" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  209.515100][ T7637] team0: Port device team_slave_0 added
[  209.534436][ T7637] team0: Port device team_slave_1 added
[  209.563813][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.582427][ T7756] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1177'.
[  209.583233][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.620840][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.634557][ T7756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7756 comm=syz.1.1177
[  209.689975][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.697279][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.769809][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.834053][ T7637] hsr_slave_0: entered promiscuous mode
[  209.849396][ T7637] hsr_slave_1: entered promiscuous mode
[  209.867554][ T7637] debugfs: 'hsr0' already exists in 'hsr'
[  209.891066][ T7637] Cannot create hsr debugfs directory
[  210.024394][ T7787] loop5: detected capacity change from 0 to 1764
[  210.112802][ T7637] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  210.131737][ T7637] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  210.151207][ T7637] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  210.182616][ T7637] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  210.245267][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.260767][ T7800] loop5: detected capacity change from 0 to 7
[  210.265601][ T7637] 8021q: adding VLAN 0 to HW filter on device team0
[  210.291662][  T256] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.299292][  T256] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.317933][  T256] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.325497][  T256] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.443638][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.612689][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1183'.
[  210.664929][ T7819] hub 8-0:1.0: USB hub found
[  210.670329][ T7819] hub 8-0:1.0: 8 ports detected
[  210.955713][   T28] audit: type=1400 audit(1774455711.881:1673): avc:  denied  { setopt } for  pid=7823 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  211.107484][   T28] audit: type=1400 audit(1774455711.910:1674): avc:  denied  { read } for  pid=7823 comm="syz.1.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  211.127834][ T7827] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  211.163817][ T7827] vhci_hcd vhci_hcd.1: invalid port number 96
[  211.195376][ T7827] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0
[  211.205311][ T7637] veth0_vlan: entered promiscuous mode
[  211.222064][ T7836] 9pnet_virtio: no channels available for device 127.0.0.1
[  211.228050][ T7637] veth1_vlan: entered promiscuous mode
[  211.250431][ T7637] veth0_macvtap: entered promiscuous mode
[  211.263090][ T7637] veth1_macvtap: entered promiscuous mode
[  211.284459][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.306898][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.362634][ T4726] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.382006][ T4726] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.397143][ T4726] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.417097][ T4726] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.756973][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1190'.
[  211.831137][ T7849] hub 8-0:1.0: USB hub found
[  211.836087][ T7849] hub 8-0:1.0: 8 ports detected
[  212.353182][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'.
[  212.441908][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1193'.
[  212.457237][ T7863] hub 8-0:1.0: USB hub found
[  212.462432][ T7863] hub 8-0:1.0: 8 ports detected
[  212.651005][   T28] audit: type=1400 audit(1774455713.538:1675): avc:  denied  { lock } for  pid=7859 comm="syz.4.1195" path="socket:[19261]" dev="sockfs" ino=19261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  212.966294][ T7869] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1197'.
[  213.088413][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1201'.
[  213.123344][   T28] audit: type=1400 audit(1774455713.997:1676): avc:  denied  { setopt } for  pid=7878 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  213.124476][ T7877] loop6: detected capacity change from 0 to 128
[  213.292236][ T7887] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1205'.
[  213.365842][ T7887] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1205'.
[  213.424256][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.477591][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.087075][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'.
[  214.135073][ T7910] 8021q: adding VLAN 0 to HW filter on device bond1
[  214.779399][ T7989] loop5: detected capacity change from 0 to 1024
[  214.819819][ T7989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.884614][   T28] audit: type=1400 audit(1774455715.718:1677): avc:  denied  { write } for  pid=7987 comm="syz.5.1220" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  215.001601][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.226449][ T7996] loop6: detected capacity change from 0 to 512
[  215.245690][   T28] audit: type=1400 audit(1774455716.070:1678): avc:  denied  { read } for  pid=7997 comm="syz.5.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  215.267071][ T7996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  215.290250][ T7996] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1222: iget: bad i_size value: 38620345925642
[  215.310066][   T28] audit: type=1400 audit(1774455716.070:1679): avc:  denied  { connect } for  pid=7997 comm="syz.5.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  215.363930][ T8002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8002 comm=syz.5.1221
[  215.378140][ T7996] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  215.382722][ T7996] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1222: couldn't read orphan inode 15 (err -117)
[  215.392726][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  215.392744][    C1] EXT4-fs (loop6): initial error at time 1774455716: ext4_orphan_get:1391: inode 15
[  215.392774][    C1] EXT4-fs (loop6): last error at time 1774455716: ext4_orphan_get:1391: inode 15
[  215.460924][ T7996] loop6: lost filesystem error report for type 5 error -117
[  215.469169][ T7996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.689455][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1222'.
[  215.737182][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.776938][ T8016] loop6: detected capacity change from 0 to 512
[  215.787392][ T8016] EXT4-fs: Ignoring removed bh option
[  215.808379][ T8016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.825530][ T8016] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.844819][   T28] audit: type=1400 audit(1774455716.658:1680): avc:  denied  { relabelfrom } for  pid=8015 comm="syz.6.1226" name="" dev="pipefs" ino=21399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  215.883235][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.528682][ T8027] loop5: detected capacity change from 0 to 512
[  216.620401][ T8027] EXT4-fs (loop5): 1 truncate cleaned up
[  216.684373][ T8027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.796966][ T8027] 9p: Bad value for 'rfdno'
[  216.801695][   T28] audit: type=1400 audit(1774455717.590:1681): avc:  denied  { cpu } for  pid=8026 comm="syz.5.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  216.828866][   T28] audit: type=1400 audit(1774455717.590:1682): avc:  denied  { mounton } for  pid=8026 comm="syz.5.1228" path="/109/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  216.857926][ T4428] syz_tun (unregistering): left allmulticast mode
[  216.865408][ T4428] syz_tun (unregistering): left promiscuous mode
[  216.872425][ T4428] bridge0: port 3(syz_tun) entered disabled state
[  216.898941][ T8036] loop1: detected capacity change from 0 to 1024
[  216.938590][ T8042] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1228: bg 0: block 465: padding at end of block bitmap is not set
[  216.956036][ T8042] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  216.966268][ T8036] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  217.003215][ T8036] EXT4-fs error (device loop1): __ext4_fill_super:5563: inode #2: comm syz.1.1231: iget: bogus i_mode (177774)
[  217.025556][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1232'.
[  217.058763][ T8042] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1228: invalid indirect mapped block 234881024 (level 0)
[  217.107169][ T8036] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  217.107557][ T8036] EXT4-fs (loop1): get root inode failed
[  217.118072][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  217.118105][    C1] EXT4-fs (loop1): initial error at time 1774455717: __ext4_fill_super:5563: inode 2
[  217.118142][    C1] EXT4-fs (loop1): last error at time 1774455717: __ext4_fill_super:5563: inode 2
[  217.233996][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.254794][ T8036] EXT4-fs (loop1): mount failed
[  217.575641][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.625844][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.643189][ T8054] sg_write: data in/out 446940/208 bytes for SCSI command 0x0-- guessing data in;
[  217.643189][ T8054]    program syz.5.1234 not setting count and/or reply_len properly
[  217.666808][ T8060] loop1: detected capacity change from 0 to 512
[  217.677634][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.691141][ T8060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  217.700934][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.722024][ T8060] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1236: iget: bad i_size value: 38620345925642
[  217.735968][ T8060] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  217.736319][ T8060] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1236: couldn't read orphan inode 15 (err -117)
[  217.746507][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  217.746533][    C0] EXT4-fs (loop1): initial error at time 1774455718: ext4_orphan_get:1391: inode 15
[  217.746582][    C0] EXT4-fs (loop1): last error at time 1774455718: ext4_orphan_get:1391: inode 15
[  217.784665][ T8060] loop1: lost filesystem error report for type 5 error -117
[  217.786850][ T8060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.842120][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.855952][ T8067] netlink: 'syz.4.1239': attribute type 21 has an invalid length.
[  217.877709][ T8067] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1239'.
[  217.906363][ T8037] lo speed is unknown, defaulting to 1000
[  217.923930][ T8060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1236'.
[  217.946884][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.974259][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'.
[  217.996693][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.011129][   T28] audit: type=1400 audit(1774455718.788:1683): avc:  denied  { getopt } for  pid=8070 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  218.095273][ T3489] hid-generic 0080:0005:FFFFFFFE.0008: unknown main item tag 0x0
[  218.126431][ T3489] hid-generic 0080:0005:FFFFFFFE.0008: unknown main item tag 0x0
[  218.170264][ T3489] hid-generic 0080:0005:FFFFFFFE.0008: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  218.205740][ T8037] chnl_net:caif_netlink_parms(): no params data found
[  218.218689][   T28] audit: type=1400 audit(1774455718.985:1684): avc:  denied  { bind } for  pid=8078 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  218.270860][ T3420] hid-generic 0080:0005:FFFFFFFE.0009: unknown main item tag 0x0
[  218.284271][   T12] bridge_slave_1: left allmulticast mode
[  218.295218][   T12] bridge_slave_1: left promiscuous mode
[  218.300013][ T8081] fido_id[8081]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  218.301658][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.345372][ T3420] hid-generic 0080:0005:FFFFFFFE.0009: unknown main item tag 0x0
[  218.362157][   T12] bridge_slave_0: left allmulticast mode
[  218.376127][   T12] bridge_slave_0: left promiscuous mode
[  218.382739][ T3420] hid-generic 0080:0005:FFFFFFFE.0009: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  218.417986][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.461894][ T8094] fido_id[8094]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  218.635395][ T8107] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1243'.
[  218.709180][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1246'.
[  218.725834][   T28] audit: type=1400 audit(1774455719.418:1685): avc:  denied  { bind } for  pid=8085 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  218.947140][ T8114] hub 8-0:1.0: USB hub found
[  218.952089][ T8114] hub 8-0:1.0: 8 ports detected
[  221.015332][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'.
[  221.046229][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1251'.
[  221.123606][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'.
[  221.225607][ T8139] hub 8-0:1.0: USB hub found
[  221.234685][ T8139] hub 8-0:1.0: 8 ports detected
[  221.673677][ T8127] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  221.702788][ T8133] macvlan0: entered allmulticast mode
[  221.727721][   T12] IPVS: stopping master sync thread 4999 ...
[  221.741485][ T8133] veth1_vlan: entered allmulticast mode
[  221.851488][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.859768][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.867457][ T8037] bridge_slave_0: entered allmulticast mode
[  221.876984][ T8037] bridge_slave_0: entered promiscuous mode
[  221.905309][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.912957][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.935901][ T8037] bridge_slave_1: entered allmulticast mode
[  221.945538][ T8037] bridge_slave_1: entered promiscuous mode
[  221.994818][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.007136][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.015801][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.029503][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.045616][   T12] hsr0: left allmulticast mode
[  222.050754][   T12] veth1_macvtap: left promiscuous mode
[  222.056992][   T12] veth0_macvtap: left promiscuous mode
[  222.063449][   T12] veth1_vlan: left promiscuous mode
[  222.070437][   T12] veth0_vlan: left promiscuous mode
[  222.118847][ T8159] loop6: detected capacity change from 0 to 32768
[  222.235352][   T12] team0 (unregistering): Port device team_slave_1 removed
[  222.250095][   T12] team0 (unregistering): Port device team_slave_0 removed
[  222.556507][ T8167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1260'.
[  222.575002][ T8174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1260'.
[  222.690240][ T8172] lo speed is unknown, defaulting to 1000
[  222.769814][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.808302][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.836872][ T8037] team0: Port device team_slave_0 added
[  222.857922][ T8037] team0: Port device team_slave_1 added
[  222.906741][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.914863][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.944634][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.959216][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.966402][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.019153][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.101960][ T8185] hub 8-0:1.0: USB hub found
[  223.107866][ T8185] hub 8-0:1.0: 8 ports detected
[  223.189114][ T8037] hsr_slave_0: entered promiscuous mode
[  223.216057][ T8037] hsr_slave_1: entered promiscuous mode
[  223.258980][ T8037] debugfs: 'hsr0' already exists in 'hsr'
[  223.287475][ T8037] Cannot create hsr debugfs directory
[  223.341216][ T8190] FAULT_INJECTION: forcing a failure.
[  223.341216][ T8190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.389269][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.1.1262 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  223.389309][ T8190] Tainted: [W]=WARN
[  223.389319][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  223.389368][ T8190] Call Trace:
[  223.389380][ T8190]  <TASK>
[  223.389389][ T8190]  __dump_stack+0x1d/0x30
[  223.389423][ T8190]  dump_stack_lvl+0x95/0xd0
[  223.389457][ T8190]  dump_stack+0x15/0x1b
[  223.389511][ T8190]  should_fail_ex+0x263/0x280
[  223.389542][ T8190]  should_fail+0xb/0x20
[  223.389636][ T8190]  should_fail_usercopy+0x1a/0x20
[  223.389674][ T8190]  _copy_to_user+0x20/0xa0
[  223.389726][ T8190]  simple_read_from_buffer+0xb5/0x130
[  223.389759][ T8190]  proc_fail_nth_read+0x10e/0x150
[  223.389813][ T8190]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.389855][ T8190]  vfs_read+0x1ab/0x7f0
[  223.389895][ T8190]  ? __rcu_read_unlock+0x4e/0x70
[  223.389922][ T8190]  ? __fget_files+0x184/0x1c0
[  223.389956][ T8190]  ? mutex_lock+0x57/0x90
[  223.390061][ T8190]  ksys_read+0xdc/0x1a0
[  223.390120][ T8190]  __x64_sys_read+0x40/0x50
[  223.390139][ T8190]  x64_sys_call+0x2886/0x3020
[  223.390169][ T8190]  do_syscall_64+0x12c/0x370
[  223.390256][ T8190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.390288][ T8190] RIP: 0033:0x7f600de3cfce
[  223.390310][ T8190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  223.390336][ T8190] RSP: 002b:00007f600c8b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  223.390363][ T8190] RAX: ffffffffffffffda RBX: 00007f600c8b66c0 RCX: 00007f600de3cfce
[  223.390442][ T8190] RDX: 000000000000000f RSI: 00007f600c8b60a0 RDI: 0000000000000005
[  223.390456][ T8190] RBP: 00007f600c8b6090 R08: 0000000000000000 R09: 0000000000000000
[  223.390470][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.390488][ T8190] R13: 00007f600e0f6128 R14: 00007f600e0f6090 R15: 00007ffdab4352d8
[  223.390510][ T8190]  </TASK>
[  223.625729][ T8037] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  223.648615][ T8037] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  223.663381][ T8037] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  223.700248][ T8037] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  223.828336][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.839028][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.882580][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.894461][ T8037] 8021q: adding VLAN 0 to HW filter on device team0
[  223.914353][ T8037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.925919][ T8037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.927267][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1267'.
[  223.947959][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.955644][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.994829][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.002710][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.129368][ T8223] hub 8-0:1.0: USB hub found
[  224.151495][ T8223] hub 8-0:1.0: 8 ports detected
[  224.381590][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.956358][ T8037] veth0_vlan: entered promiscuous mode
[  224.989891][ T8037] veth1_vlan: entered promiscuous mode
[  225.040980][ T8037] veth0_macvtap: entered promiscuous mode
[  225.084836][ T8306] loop6: detected capacity change from 0 to 4096
[  225.093186][ T8037] veth1_macvtap: entered promiscuous mode
[  225.130796][ T8306] EXT4-fs: Ignoring removed bh option
[  225.206531][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.243654][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.304969][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'.
[  225.464920][  T256] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.630578][ T8292] cgroup: fork rejected by pids controller in /syz6
[  225.695972][  T256] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.730959][   T28] audit: type=1400 audit(1774455726.354:1686): avc:  denied  { mount } for  pid=8037 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  225.772954][  T256] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.818285][  T256] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.838657][ T8306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.512131][ T8498] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1278'.
[  226.597240][ T8498] hub 8-0:1.0: USB hub found
[  226.602517][ T8498] hub 8-0:1.0: 8 ports detected
[  226.625299][ T8498] netlink: 'syz.1.1278': attribute type 36 has an invalid length.
[  226.642271][ T8498] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  226.652859][ T8498] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  226.675970][ T8498] netlink: 'syz.1.1278': attribute type 10 has an invalid length.
[  226.685287][ T8498] macvlan1: entered allmulticast mode
[  226.695806][ T8498] veth1_vlan: entered allmulticast mode
[  226.707383][ T8498] team0: Port device macvlan1 added
[  226.734554][   T70] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.803800][   T70] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.126095][ T4726] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.190062][ T4726] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.251483][ T8511] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.1282'.
[  227.312718][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  227.341734][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.450176][ T8516] hub 8-0:1.0: USB hub found
[  227.455128][ T8516] hub 8-0:1.0: 8 ports detected
[  228.368238][ T8581] loop7: detected capacity change from 0 to 128
[  228.428194][ T8581] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.486473][ T8581] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.164503][ T8636] loop1: detected capacity change from 0 to 128
[  229.303946][ T6584] kworker/u8:19: attempt to access beyond end of device
[  229.303946][ T6584] loop1: rw=1, sector=145, nr_sectors = 16 limit=128
[  229.362959][ T6584] kworker/u8:19: attempt to access beyond end of device
[  229.362959][ T6584] loop1: rw=1, sector=169, nr_sectors = 6 limit=128
[  230.163991][ T8037] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.177150][   T28] audit: type=1400 audit(1774455730.793:1687): avc:  denied  { remount } for  pid=8658 comm="syz.6.1302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  230.211201][ T8659] loop6: detected capacity change from 0 to 512
[  230.277988][ T8659] EXT4-fs (loop6): 1 orphan inode deleted
[  230.302766][ T6584] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  230.339161][ T8659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.365751][ T6584] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 1
[  230.396641][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'.
[  230.437862][ T8679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1309'.
[  230.447399][ T6584] loop6: lost filesystem error report for type 5 error -117
[  230.447887][ T8659] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.525619][ T8675] hub 8-0:1.0: USB hub found
[  230.534227][ T8675] hub 8-0:1.0: 8 ports detected
[  230.595728][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.618362][   T28] audit: type=1400 audit(1774455731.230:1688): avc:  denied  { unmount } for  pid=7637 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  230.768281][ T8682] lo speed is unknown, defaulting to 1000
[  230.875799][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.883678][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.080695][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1309'.
[  231.220199][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1311'.
[  231.394589][   T28] audit: type=1400 audit(1774455732.014:1689): avc:  denied  { bind } for  pid=8696 comm="syz.7.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  231.659563][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1316'.
[  231.752561][ T8707] hub 8-0:1.0: USB hub found
[  231.757475][ T8707] hub 8-0:1.0: 8 ports detected
[  232.171868][ T8718] loop7: detected capacity change from 0 to 1764
[  232.557113][   T28] audit: type=1326 audit(1774455732.917:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  232.823171][   T28] audit: type=1326 audit(1774455732.917:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  232.928685][ T8729] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1324'.
[  232.963470][ T8730] netlink: 'syz.4.1325': attribute type 4 has an invalid length.
[  233.102501][   T28] audit: type=1326 audit(1774455732.917:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  233.131834][ T8733] netlink: 'syz.4.1325': attribute type 4 has an invalid length.
[  233.268569][ T8735] lo speed is unknown, defaulting to 1000
[  233.420568][ T8735] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1324'.
[  233.499606][   T28] audit: type=1326 audit(1774455732.917:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9596d1c502 code=0x7ffc0000
[  233.605658][   T28] audit: type=1326 audit(1774455732.937:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9596cdcfce code=0x7ffc0000
[  233.635856][   T28] audit: type=1326 audit(1774455733.076:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9596d1c5c7 code=0x7ffc0000
[  233.697548][   T28] audit: type=1326 audit(1774455733.086:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9596cdcfce code=0x7ffc0000
[  233.852494][ T8747] loop6: detected capacity change from 0 to 256
[  233.913485][   T28] audit: type=1326 audit(1774455733.086:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9596cdcfce code=0x7ffc0000
[  233.937286][   T28] audit: type=1326 audit(1774455733.116:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8717 comm="syz.7.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  234.013839][ T8756] loop5: detected capacity change from 0 to 512
[  234.044428][ T8756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  234.110437][ T8756] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1332: iget: bad i_size value: 38620345925642
[  234.124197][ T8756] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  234.124509][ T8756] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1332: couldn't read orphan inode 15 (err -117)
[  234.134171][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  234.134197][    C0] EXT4-fs (loop5): initial error at time 1774455734: ext4_orphan_get:1391: inode 15
[  234.134231][    C0] EXT4-fs (loop5): last error at time 1774455734: ext4_orphan_get:1391: inode 15
[  234.172646][ T8756] loop5: lost filesystem error report for type 5 error -117
[  234.192175][ T8756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.224874][ T8766] loop6: detected capacity change from 0 to 512
[  234.249717][ T8766] msdos: Unknown parameter 'syztnl0'
[  234.303016][ T8739] loop1: detected capacity change from 0 to 512
[  234.400863][ T8739] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.1327: missing EA_INODE flag
[  234.417156][ T8739] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  234.418808][ T8739] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1327: error while reading EA inode 12 err=-117
[  234.429064][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  234.429136][    C1] EXT4-fs (loop1): initial error at time 1774455735: ext4_xattr_inode_iget:441: inode 12
[  234.429429][    C1] EXT4-fs (loop1): last error at time 1774455735: ext4_xattr_inode_iget:441: inode 12
[  234.529402][ T8739] loop1: lost filesystem error report for type 5 error -117
[  234.532141][ T8739] EXT4-fs (loop1): 1 orphan inode deleted
[  234.554651][ T8739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.835357][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.965474][ T8838] netlink: 'syz.7.1339': attribute type 11 has an invalid length.
[  235.011009][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1339'.
[  235.105686][ T8739] 9pnet_fd: Insufficient options for proto=fd
[  235.263994][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.264361][ T8847] loop5: detected capacity change from 0 to 256
[  235.295626][ T8847] FAT-fs (loop5): Directory bread(block 64) failed
[  235.302552][ T8847] FAT-fs (loop5): Directory bread(block 65) failed
[  235.309313][ T8847] FAT-fs (loop5): Directory bread(block 66) failed
[  235.316110][ T8847] FAT-fs (loop5): Directory bread(block 67) failed
[  235.323003][ T8847] FAT-fs (loop5): Directory bread(block 68) failed
[  235.329659][ T8847] FAT-fs (loop5): Directory bread(block 69) failed
[  235.336412][ T8847] FAT-fs (loop5): Directory bread(block 70) failed
[  235.343038][ T8847] FAT-fs (loop5): Directory bread(block 71) failed
[  235.349802][ T8847] FAT-fs (loop5): Directory bread(block 72) failed
[  235.356674][ T8847] FAT-fs (loop5): Directory bread(block 73) failed
[  235.376402][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1342'.
[  235.422717][ T8848] netlink: 'syz.7.1341': attribute type 5 has an invalid length.
[  235.453497][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1341'.
[  235.463247][ T8855] loop1: detected capacity change from 0 to 512
[  235.511527][ T8857] netlink: 'syz.4.1345': attribute type 63 has an invalid length.
[  235.522649][ T8857] lo: entered promiscuous mode
[  235.529257][ T8857] lo: entered allmulticast mode
[  235.535543][ T8855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  235.553435][ T8855] ext4 filesystem being mounted at /257/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.621312][ T8855] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, 
[  235.621361][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'.
[  235.639118][ T8855] block bitmap and bg descriptor inconsistent: 96 vs 1632 free clusters
[  235.717342][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'.
[  235.755166][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  235.794890][ T8874] loop1: detected capacity change from 0 to 512
[  235.820271][ T8874] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  235.828650][ T8874] EXT4-fs (loop1): orphan cleanup on readonly fs
[  235.836186][ T8874] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  235.852437][ T8874] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  235.861846][ T8874] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1350: bg 0: block 15: invalid block bitmap
[  235.875594][ T8874] loop1: lost filesystem error report for type 5 error -117
[  235.875838][ T8874] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  235.883704][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  235.883737][    C1] EXT4-fs (loop1): initial error at time 1774455736: ext4_validate_block_bitmap:432
[  235.883762][    C1] EXT4-fs (loop1): last error at time 1774455736: ext4_validate_block_bitmap:432
[  235.945874][ T8874] loop1: lost filesystem error report for type 5 error -117
[  235.946283][ T8874] EXT4-fs (loop1): 1 truncate cleaned up
[  236.035493][ T8877] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1351'.
[  236.061870][ T8874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  236.081818][ T8877] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1351'.
[  236.100369][ T8874] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1350: corrupted xattr block 31: invalid header
[  236.144776][ T8874] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=16
[  236.173298][ T8874] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1350: corrupted xattr block 31: invalid header
[  236.217898][ T8889] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.1350: corrupted xattr block 31: invalid header
[  236.222564][ T8874] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=16
[  236.269758][ T8889] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=16
[  236.293267][ T8889] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.1350: bad symlink.
[  236.654797][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.828899][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1362'.
[  236.894727][ T8965] macvlan0: entered promiscuous mode
[  236.901500][ T8965] netlink: 'syz.7.1362': attribute type 2 has an invalid length.
[  236.939249][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1362'.
[  237.357216][ T8989] loop6: detected capacity change from 0 to 164
[  237.442954][ T8999] team0: entered promiscuous mode
[  237.471745][ T8999] team_slave_0: entered promiscuous mode
[  237.489350][ T8999] team_slave_1: entered promiscuous mode
[  237.495782][ T8999] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  237.507900][ T8999] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  237.529212][ T9007] FAULT_INJECTION: forcing a failure.
[  237.529212][ T9007] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  237.543207][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.1.1369 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  237.543304][ T9007] Tainted: [W]=WARN
[  237.543314][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  237.543329][ T9007] Call Trace:
[  237.543337][ T9007]  <TASK>
[  237.543347][ T9007]  __dump_stack+0x1d/0x30
[  237.543379][ T9007]  dump_stack_lvl+0x95/0xd0
[  237.543405][ T9007]  dump_stack+0x15/0x1b
[  237.543501][ T9007]  should_fail_ex+0x263/0x280
[  237.543535][ T9007]  should_fail_alloc_page+0xf2/0x100
[  237.543563][ T9007]  __alloc_frozen_pages_noprof+0x108/0x360
[  237.543602][ T9007]  alloc_pages_mpol+0xb3/0x260
[  237.543703][ T9007]  ? selinux_file_open+0x2e6/0x330
[  237.543736][ T9007]  alloc_frozen_pages_noprof+0x8f/0x110
[  237.543773][ T9007]  ___kmalloc_large_node+0x3f/0xe0
[  237.543818][ T9007]  __kmalloc_large_node_noprof+0x18/0xb0
[  237.543849][ T9007]  __kmalloc_noprof+0x268/0x4e0
[  237.543877][ T9007]  ? iovec_from_user+0x84/0x200
[  237.543954][ T9007]  iovec_from_user+0x84/0x200
[  237.544038][ T9007]  __import_iovec+0xf3/0x530
[  237.544069][ T9007]  ? _parse_integer_limit+0x170/0x190
[  237.544092][ T9007]  import_iovec+0x60/0x80
[  237.544244][ T9007]  ___sys_sendmsg+0x160/0x1e0
[  237.544297][ T9007]  __x64_sys_sendmsg+0xd4/0x160
[  237.544334][ T9007]  x64_sys_call+0x194c/0x3020
[  237.544454][ T9007]  do_syscall_64+0x12c/0x370
[  237.544485][ T9007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.544559][ T9007] RIP: 0033:0x7f600de7c799
[  237.544578][ T9007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.544597][ T9007] RSP: 002b:00007f600c8d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.544620][ T9007] RAX: ffffffffffffffda RBX: 00007f600e0f5fa0 RCX: 00007f600de7c799
[  237.544684][ T9007] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  237.544706][ T9007] RBP: 00007f600c8d7090 R08: 0000000000000000 R09: 0000000000000000
[  237.544718][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.544729][ T9007] R13: 00007f600e0f6038 R14: 00007f600e0f5fa0 R15: 00007ffdab4352d8
[  237.544804][ T9007]  </TASK>
[  237.823598][ T9016] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1373'.
[  237.908024][   T28] kauditd_printk_skb: 180 callbacks suppressed
[  237.908041][   T28] audit: type=1400 audit(1774455738.485:1878): avc:  denied  { ioctl } for  pid=9011 comm="syz.4.1371" path="socket:[23435]" dev="sockfs" ino=23435 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  237.943336][ T9019] loop1: detected capacity change from 0 to 512
[  237.950223][ T9019] EXT4-fs: Ignoring removed orlov option
[  237.956732][ T9019] EXT4-fs: Ignoring removed i_version option
[  237.986998][ T9019] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1372: corrupted in-inode xattr: e_value size too large
[  238.018702][ T9019] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  238.018969][ T9019] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1372: couldn't read orphan inode 15 (err -117)
[  238.028291][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  238.028313][    C0] EXT4-fs (loop1): initial error at time 1774455738: ext4_iget_extra_inode:5025: inode 15
[  238.028377][    C0] EXT4-fs (loop1): last error at time 1774455738: ext4_iget_extra_inode:5025: inode 15
[  238.067731][ T9019] loop1: lost filesystem error report for type 5 error -117
[  238.203492][ T9026] lo speed is unknown, defaulting to 1000
[  238.298796][ T9019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.574542][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1373'.
[  238.764882][ T9019] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1372: lblock 3 mapped to illegal pblock 12 (length 1)
[  238.798483][   T28] audit: type=1400 audit(1774455739.321:1879): avc:  denied  { create } for  pid=9013 comm="syz.1.1372" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[  239.059519][   T28] audit: type=1400 audit(1774455739.629:1880): avc:  denied  { getopt } for  pid=9041 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  239.117450][ T9042] lo speed is unknown, defaulting to 1000
[  239.127308][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1381'.
[  239.319393][ T9032] rdma_rxe: rxe_newlink: failed to add bridge_slave_0
[  239.455984][ T9080] netlink: 'syz.5.1388': attribute type 8 has an invalid length.
[  239.692935][ T9093] lo speed is unknown, defaulting to 1000
[  240.099832][   T28] audit: type=1400 audit(1774455740.675:1881): avc:  denied  { bind } for  pid=9114 comm="syz.7.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  240.881145][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.034653][ T9144] batman_adv: batadv0: Adding interface: dummy0
[  241.041809][ T9144] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  241.120358][ T9172] rdma_rxe: rxe_newlink: failed to add bond0
[  241.154122][ T9144] batman_adv: batadv0: Interface activated: dummy0
[  241.257299][ T9183] loop1: detected capacity change from 0 to 164
[  241.288669][ T9183] rock: directory entry would overflow storage
[  241.307068][ T9186] loop7: detected capacity change from 0 to 512
[  241.354183][ T9183] rock: sig=0x5252, size=5, remaining=3
[  241.555708][ T9186] EXT4-fs (loop7): 1 orphan inode deleted
[  241.574061][ T9190] __nla_validate_parse: 3 callbacks suppressed
[  241.574079][ T9190] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1406'.
[  241.605752][ T9186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.945755][ T9200] lo speed is unknown, defaulting to 1000
[  242.091341][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1406'.
[  242.365685][ T9218] loop6: detected capacity change from 0 to 512
[  242.375745][ T9186] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.386275][ T9218] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  242.502392][ T9218] EXT4-fs (loop6): 1 truncate cleaned up
[  242.522778][ T9218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.571593][ T9218] FAULT_INJECTION: forcing a failure.
[  242.571593][ T9218] name failslab, interval 1, probability 0, space 0, times 0
[  242.585415][ T9218] CPU: 0 UID: 0 PID: 9218 Comm: syz.6.1411 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  242.585492][ T9218] Tainted: [W]=WARN
[  242.585498][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  242.585511][ T9218] Call Trace:
[  242.585517][ T9218]  <TASK>
[  242.585525][ T9218]  __dump_stack+0x1d/0x30
[  242.585558][ T9218]  dump_stack_lvl+0x95/0xd0
[  242.585588][ T9218]  dump_stack+0x15/0x1b
[  242.585651][ T9218]  should_fail_ex+0x263/0x280
[  242.585686][ T9218]  should_failslab+0x8c/0xb0
[  242.585713][ T9218]  __kmalloc_noprof+0xb8/0x4e0
[  242.585740][ T9218]  ? ext4_inlinedir_to_tree+0x146/0x7c0
[  242.585794][ T9218]  ? ext4_get_inode_loc+0xb2/0xe0
[  242.585886][ T9218]  ext4_inlinedir_to_tree+0x146/0x7c0
[  242.585921][ T9218]  ? __rcu_read_unlock+0x4e/0x70
[  242.586036][ T9218]  ext4_htree_fill_tree+0x36f/0xa60
[  242.586092][ T9218]  ? path_openat+0x1b01/0x2050
[  242.586133][ T9218]  ? inode_query_iversion+0xb9/0x110
[  242.586170][ T9218]  ext4_readdir+0x1915/0x1f80
[  242.586209][ T9218]  ? __rcu_read_unlock+0x4e/0x70
[  242.586228][ T9218]  ? avc_policy_seqno+0x15/0x30
[  242.586254][ T9218]  ? selinux_file_permission+0x1f2/0x690
[  242.586285][ T9218]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  242.586349][ T9218]  iterate_dir+0x114/0x330
[  242.586371][ T9218]  __se_sys_getdents64+0xd2/0x230
[  242.586390][ T9218]  ? __pfx_filldir64+0x10/0x10
[  242.586412][ T9218]  __x64_sys_getdents64+0x43/0x50
[  242.586432][ T9218]  x64_sys_call+0x2408/0x3020
[  242.586465][ T9218]  do_syscall_64+0x12c/0x370
[  242.586514][ T9218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.586542][ T9218] RIP: 0033:0x7fa14589c799
[  242.586563][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.586587][ T9218] RSP: 002b:00007fa1442f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  242.586628][ T9218] RAX: ffffffffffffffda RBX: 00007fa145b15fa0 RCX: 00007fa14589c799
[  242.586643][ T9218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  242.586701][ T9218] RBP: 00007fa1442f7090 R08: 0000000000000000 R09: 0000000000000000
[  242.586716][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.586731][ T9218] R13: 00007fa145b16038 R14: 00007fa145b15fa0 R15: 00007fff4694bb48
[  242.586785][ T9218]  </TASK>
[  242.596970][ T9230] syzkaller0: tun_chr_ioctl cmd 2147767520
[  242.831479][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.835410][ T9245] loop7: detected capacity change from 0 to 1024
[  242.867327][ T9245] EXT4-fs: test_dummy_encryption option not supported
[  242.984495][ T9257] 9p: Bad value for 'rfdno'
[  243.040637][ T9259] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1423'.
[  243.117808][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1421'.
[  243.569942][ T9266] lo speed is unknown, defaulting to 1000
[  244.032548][ T9274] loop1: detected capacity change from 0 to 512
[  244.058015][ T9274] EXT4-fs: inline encryption not supported
[  244.089010][ T9274] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  244.128666][ T9274] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  244.165440][ T9274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1425: bg 0: block 248: padding at end of block bitmap is not set
[  244.204604][ T9274] loop1: lost filesystem error report for type 5 error -117
[  244.204783][ T9274] Quota error (device loop1): write_blk: dquota write failed
[  244.219718][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  244.219740][    C1] EXT4-fs (loop1): last error at time 1774455744: ext4_validate_block_bitmap:441
[  244.242363][ T9274] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  244.252991][ T9274] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1425: Failed to acquire dquot type 1
[  244.379846][ T9288] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1427'.
[  244.563144][ T9274] loop1: lost filesystem error report for type 5 error -117
[  244.563456][ T9286] loop7: detected capacity change from 0 to 512
[  244.586511][ T9274] EXT4-fs (loop1): 1 truncate cleaned up
[  244.604369][ T9274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  245.081680][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  245.314635][ T9306] Cannot find del_set index 1 as target
[  245.436134][ T9286] EXT4-fs (loop7): 1 orphan inode deleted
[  245.449856][ T6578] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  245.494487][ T6578] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 1
[  245.508044][ T9311] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1437'.
[  245.541833][ T6578] loop7: lost filesystem error report for type 5 error -117
[  245.768397][ T9286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.058058][ T9314] lo speed is unknown, defaulting to 1000
[  246.205113][   T28] audit: type=1400 audit(1774455746.754:1882): avc:  denied  { create } for  pid=9315 comm="syz.6.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  246.373003][ T9286] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.389606][   T28] audit: type=1400 audit(1774455746.804:1883): avc:  denied  { bind } for  pid=9315 comm="syz.6.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  246.460832][   T28] audit: type=1400 audit(1774455746.804:1884): avc:  denied  { write } for  pid=9315 comm="syz.6.1438" path="socket:[24271]" dev="sockfs" ino=24271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  246.567364][ T9321] loop5: detected capacity change from 0 to 1024
[  246.618113][ T9321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.661723][ T9319] loop1: detected capacity change from 0 to 512
[  246.711468][ T9321] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.1440: Allocating blocks 497-513 which overlap fs metadata
[  246.728708][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'.
[  246.738862][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'.
[  246.781553][ T9333] loop6: detected capacity change from 0 to 1024
[  246.839686][ T9333] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  246.866899][ T9333] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  246.867977][ T9319] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1439: invalid indirect mapped block 256 (level 2)
[  246.877846][ T9333] EXT4-fs (loop6): invalid journal inode
[  246.896081][ T9333] EXT4-fs (loop6): can't get journal size
[  246.903618][ T9333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  246.916663][ T9319] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  246.918473][ T9333] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1445'.
[  246.927744][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  246.927764][    C1] EXT4-fs (loop1): initial error at time 1774455747: ext4_free_branches:1023: inode 11
[  246.927800][    C1] EXT4-fs (loop1): last error at time 1774455747: ext4_free_branches:1023: inode 11
[  246.964975][ T9319] EXT4-fs (loop1): 2 truncates cleaned up
[  246.985689][ T9333] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1445'.
[  246.990920][ T9319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.998535][ T9320] EXT4-fs (loop5): pa ffff888107e6fd90: logic 48, phys. 177, len 21
[  247.016353][ T9320] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1
[  247.027439][ T9333] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1445'.
[  247.053203][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.098866][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.114125][ T9342] process 'syz.6.1446' launched './file2' with NULL argv: empty string added
[  247.124618][   T28] audit: type=1400 audit(1774455747.671:1885): avc:  denied  { execute_no_trans } for  pid=9341 comm="syz.6.1446" path="/67/file2" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  247.131311][ T9342] loop6: detected capacity change from 0 to 512
[  247.168781][ T9342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  247.207794][ T9342] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1446: iget: bad i_size value: 38620345925642
[  247.240030][ T9342] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  247.240462][ T9342] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1446: couldn't read orphan inode 15 (err -117)
[  247.249894][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  247.249914][    C0] EXT4-fs (loop6): initial error at time 1774455747: ext4_orphan_get:1391: inode 15
[  247.249953][    C0] EXT4-fs (loop6): last error at time 1774455747: ext4_orphan_get:1391: inode 15
[  247.293833][ T9342] loop6: lost filesystem error report for type 5 error -117
[  247.327262][ T9342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.351403][ T9349] loop5: detected capacity change from 0 to 128
[  247.386393][ T9349] syz.5.1449: attempt to access beyond end of device
[  247.386393][ T9349] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  247.422982][   T28] audit: type=1400 audit(1774455747.960:1886): avc:  denied  { ioctl } for  pid=9341 comm="syz.6.1446" path="/67/bus/cpuset.effective_mems" dev="loop6" ino=18 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  247.487934][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.505333][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'.
[  247.566133][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.681890][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'.
[  247.877428][ T9361] xt_time: invalid argument - start or stop time greater than 23:59:59
[  247.897737][ T9361] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1454'.
[  247.947500][ T6257] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap
[  247.962059][ T6257] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 436 with error 28
[  248.005604][ T6257] EXT4-fs (loop6): This should not happen!! Data will be lost
[  248.005604][ T6257] 
[  248.025788][ T6257] EXT4-fs (loop6): Total free blocks count 0
[  248.037943][ T6257] EXT4-fs (loop6): Free/Dirty block details
[  248.054307][ T6257] EXT4-fs (loop6): free_blocks=0
[  248.061740][ T6257] EXT4-fs (loop6): dirty_blocks=436
[  248.075847][ T6257] EXT4-fs (loop6): Block reservation details
[  248.092182][ T6257] EXT4-fs (loop6): i_reserved_data_blocks=436
[  248.131019][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.558337][ T9375] loop5: detected capacity change from 0 to 1024
[  249.160941][ T9386] loop6: detected capacity change from 0 to 256
[  249.206366][ T9388] loop6: detected capacity change from 0 to 1024
[  249.213355][ T9388] EXT4-fs: Ignoring removed bh option
[  249.225131][ T9388] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  249.264567][ T9388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000]
[  249.279433][ T9388] System zones: 0-1, 3-12
[  249.320202][ T9391] loop5: detected capacity change from 0 to 512
[  249.329663][ T9388] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #3: block 1: comm syz.6.1463: lblock 1 mapped to illegal pblock 1 (length 1)
[  249.399502][ T9391] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1464: inode has both inline data and extents flags
[  249.415408][ T9388] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  249.415572][ T9388] EXT4-fs (loop6): Remounting filesystem read-only
[  249.424964][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  249.424981][    C0] EXT4-fs (loop6): initial error at time 1774455749: ext4_map_blocks:818: inode 3: block 1
[  249.425022][    C0] EXT4-fs (loop6): last error at time 1774455749: ext4_map_blocks:818: inode 3: block 1
[  249.490832][ T9391] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  249.493243][ T9391] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1464: couldn't read orphan inode 15 (err -117)
[  249.503355][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  249.503391][    C0] EXT4-fs (loop5): initial error at time 1774455750: ext4_orphan_get:1391: inode 15
[  249.503423][    C0] EXT4-fs (loop5): last error at time 1774455750: ext4_orphan_get:1391: inode 15
[  249.569606][ T9391] loop5: lost filesystem error report for type 5 error -117
[  249.570673][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.599644][ T9391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.613532][ T9388] Quota error (device loop6): write_blk: dquota write failed
[  249.621565][ T9388] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  249.673409][ T9388] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  249.683794][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.695757][ T9391] netlink: 'syz.5.1464': attribute type 4 has an invalid length.
[  249.715399][ T9388] EXT4-fs (loop6): 1 orphan inode deleted
[  249.759187][ T9388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.780311][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.869403][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.998336][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.022635][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.055396][   T28] audit: type=1400 audit(1774455750.594:1887): avc:  denied  { ioctl } for  pid=9417 comm="syz.7.1475" path="socket:[25067]" dev="sockfs" ino=25067 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  250.104254][   T28] audit: type=1400 audit(1774455750.644:1888): avc:  denied  { map } for  pid=9417 comm="syz.7.1475" path="/proc/97" dev="proc" ino=24502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  250.147973][ T9421] loop1: detected capacity change from 0 to 764
[  250.155742][ T9421] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  250.399693][ T9427] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1477'.
[  250.476723][ T9426] lo speed is unknown, defaulting to 1000
[  250.811565][   T28] audit: type=1400 audit(1774455751.342:1889): avc:  denied  { unmount } for  pid=5912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  250.911196][ T9467] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  250.996135][ T9469] lo speed is unknown, defaulting to 1000
[  252.177001][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1497'.
[  252.756951][ T9485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9485 comm=syz.4.1497
[  252.897558][ T9484] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1496'.
[  254.675996][ T9498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=9498 comm=syz.6.1501
[  254.752148][ T9498] ip6tnl1: entered promiscuous mode
[  254.757714][ T9498] ip6tnl1: entered allmulticast mode
[  254.876276][ T9514] loop5: detected capacity change from 0 to 512
[  254.896767][ T9516] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1505'.
[  254.934532][ T9514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.949967][ T9514] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.972464][   T28] audit: type=1400 audit(1774455755.505:1890): avc:  denied  { read } for  pid=9513 comm="syz.5.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  255.122265][ T9546] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1513'.
[  255.159429][ T9546] batadv_slave_1: entered promiscuous mode
[  255.184719][ T9546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.210428][   T28] audit: type=1400 audit(1774455755.744:1891): avc:  denied  { ioctl } for  pid=9549 comm="syz.7.1514" path="socket:[25788]" dev="sockfs" ino=25788 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  255.249353][ T9557] loop7: detected capacity change from 0 to 1024
[  255.306699][ T9557] EXT4-fs (loop7): #clusters per group too big: 8454176
[  255.475338][ T9584] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1541 sclass=netlink_xfrm_socket pid=9584 comm=syz.6.1524
[  255.772152][ T9605] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1525'.
[  257.262388][ T9666] loop1: detected capacity change from 0 to 512
[  257.269614][ T9666] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.286537][ T9666] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  257.295133][ T9666] SELinux: failed to load policy
[  257.306224][   T28] audit: type=1400 audit(1774455757.811:1892): avc:  denied  { load_policy } for  pid=9658 comm="syz.1.1528" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  257.594667][ T9672] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1526'.
[  258.058672][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.172036][ T9698] loop5: detected capacity change from 0 to 8192
[  259.222532][ T9698] msdos: Unknown parameter 'noLots'
[  259.852147][ T9731] 9p: Bad value for 'source'
[  261.381271][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  262.306924][ T9744] lo speed is unknown, defaulting to 1000
[  262.555165][ T9745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  262.566456][ T9745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1539'.
[  262.894715][ T9749] hub 8-0:1.0: USB hub found
[  262.899755][ T9749] hub 8-0:1.0: 8 ports detected
[  263.504773][ T9755] loop1: detected capacity change from 0 to 4096
[  263.541804][ T9755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.718355][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1549'.
[  263.764241][ T9768] hub 8-0:1.0: USB hub found
[  263.769050][ T9768] hub 8-0:1.0: 8 ports detected
[  263.875658][ T9773] loop7: detected capacity change from 0 to 1024
[  263.925417][ T9755] netlink: 'syz.1.1548': attribute type 21 has an invalid length.
[  263.933739][   T28] audit: type=1400 audit(1774455764.444:1893): avc:  denied  { watch watch_reads } for  pid=9754 comm="syz.1.1548" path="/285/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.001875][ T9755] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1548'.
[  264.011554][ T9773] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  264.095452][ T9773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.175730][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.439810][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1559'.
[  264.516269][ T9810] loop6: detected capacity change from 0 to 512
[  264.540443][ T9806] hub 8-0:1.0: USB hub found
[  264.545452][ T9806] hub 8-0:1.0: 8 ports detected
[  264.565379][ T9810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  264.622550][ T9810] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1565: iget: bad i_size value: 38620345925642
[  264.637849][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.656612][ T9810] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  264.657399][ T9810] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1565: couldn't read orphan inode 15 (err -117)
[  264.667158][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  264.667183][    C0] EXT4-fs (loop6): initial error at time 1774455765: ext4_orphan_get:1391: inode 15
[  264.667219][    C0] EXT4-fs (loop6): last error at time 1774455765: ext4_orphan_get:1391: inode 15
[  264.752758][ T9810] loop6: lost filesystem error report for type 5 error -117
[  264.753474][ T9810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.791736][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'.
[  264.902057][ T9821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'.
[  264.996207][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.052858][   T28] audit: type=1400 audit(1774455765.573:1894): avc:  denied  { read } for  pid=9842 comm="syz.4.1576" laddr=::1 lport=40669 faddr=::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  265.053446][ T9843] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1576'.
[  265.153575][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1578'.
[  265.367566][ T9865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1575'.
[  265.421905][ T9880] loop7: detected capacity change from 0 to 512
[  265.498283][ T9880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  265.552508][ T9880] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1584: iget: bad i_size value: 38620345925642
[  265.586167][ T9880] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  265.589454][ T9880] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1584: couldn't read orphan inode 15 (err -117)
[  265.598939][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  265.598960][    C0] EXT4-fs (loop7): initial error at time 1774455766: ext4_orphan_get:1391: inode 15
[  265.598985][    C0] EXT4-fs (loop7): last error at time 1774455766: ext4_orphan_get:1391: inode 15
[  265.638267][ T9880] loop7: lost filesystem error report for type 5 error -117
[  265.644657][ T9880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.822291][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.913754][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.058190][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.234030][ T9942] FAULT_INJECTION: forcing a failure.
[  266.234030][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.328348][ T9950] loop7: detected capacity change from 0 to 512
[  266.340367][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.5.1588 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  266.340466][ T9942] Tainted: [W]=WARN
[  266.340474][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  266.340491][ T9942] Call Trace:
[  266.340497][ T9942]  <TASK>
[  266.340503][ T9942]  __dump_stack+0x1d/0x30
[  266.340531][ T9942]  dump_stack_lvl+0x95/0xd0
[  266.340573][ T9942]  dump_stack+0x15/0x1b
[  266.340602][ T9942]  should_fail_ex+0x263/0x280
[  266.340637][ T9942]  should_fail+0xb/0x20
[  266.340666][ T9942]  should_fail_usercopy+0x1a/0x20
[  266.340723][ T9942]  _copy_from_user+0x1c/0xb0
[  266.340753][ T9942]  wants_mount_setattr+0x12d/0x6b0
[  266.340788][ T9942]  __se_sys_mount_setattr+0xf6/0x260
[  266.340837][ T9942]  __x64_sys_mount_setattr+0x67/0x80
[  266.340863][ T9942]  x64_sys_call+0x2f2f/0x3020
[  266.340889][ T9942]  do_syscall_64+0x12c/0x370
[  266.340990][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.341017][ T9942] RIP: 0033:0x7f5f58bec799
[  266.341034][ T9942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.341051][ T9942] RSP: 002b:00007f5f57647028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba
[  266.341126][ T9942] RAX: ffffffffffffffda RBX: 00007f5f58e65fa0 RCX: 00007f5f58bec799
[  266.341177][ T9942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  266.341191][ T9942] RBP: 00007f5f57647090 R08: 0000000000000020 R09: 0000000000000000
[  266.341203][ T9942] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  266.341216][ T9942] R13: 00007f5f58e66038 R14: 00007f5f58e65fa0 R15: 00007ffea4aa7da8
[  266.341241][ T9942]  </TASK>
[  266.431158][   T28] audit: type=1400 audit(1774455766.922:1895): avc:  denied  { mounton } for  pid=9949 comm="syz.7.1590" path="/62/file0" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  266.549527][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1590'.
[  266.559228][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1590'.
[  266.780696][ T9969] hub 8-0:1.0: USB hub found
[  266.785742][ T9969] hub 8-0:1.0: 8 ports detected
[  266.877464][   T28] audit: type=1400 audit(1774455767.331:1896): avc:  denied  { associate } for  pid=9967 comm="syz.7.1592" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  267.179763][ T9974] loop7: detected capacity change from 0 to 512
[  267.232308][ T9974] FAT-fs (loop7): bogus number of FAT sectors
[  267.238781][ T9974] FAT-fs (loop7): Can't find a valid FAT filesystem
[  267.765682][T10023] hub 8-0:1.0: USB hub found
[  267.770658][T10023] hub 8-0:1.0: 8 ports detected
[  268.072419][T10025] loop7: detected capacity change from 0 to 512
[  268.166236][T10025] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  268.224615][T10025] EXT4-fs (loop7): 1 truncate cleaned up
[  268.243047][T10025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.289549][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.409692][T10032] hsr0: entered promiscuous mode
[  268.477372][T10032] hsr_slave_0: left promiscuous mode
[  268.487073][T10032] hsr_slave_1: left promiscuous mode
[  268.513667][T10032] hsr0 (unregistering): left promiscuous mode
[  268.635216][T10044] syzkaller0: entered promiscuous mode
[  268.640994][T10044] syzkaller0: entered allmulticast mode
[  269.484338][T10051] __nla_validate_parse: 5 callbacks suppressed
[  269.484361][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1607'.
[  269.551640][T10051] hub 8-0:1.0: USB hub found
[  269.556880][T10051] hub 8-0:1.0: 8 ports detected
[  270.263342][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1614'.
[  270.311923][T10072] hub 8-0:1.0: USB hub found
[  270.316835][T10072] hub 8-0:1.0: 8 ports detected
[  270.408240][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1613'.
[  270.538701][T10076] hub 8-0:1.0: USB hub found
[  270.592893][T10076] hub 8-0:1.0: 8 ports detected
[  270.845802][   T28] audit: type=1400 audit(1774455771.359:1897): avc:  denied  { cmd } for  pid=10077 comm="syz.4.1616" path="socket:[26443]" dev="sockfs" ino=26443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  270.955480][   T28] audit: type=1400 audit(1774455771.359:1898): avc:  denied  { setopt } for  pid=10077 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  271.175931][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'.
[  271.464441][T10092] FAULT_INJECTION: forcing a failure.
[  271.464441][T10092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.565870][T10092] CPU: 1 UID: 0 PID: 10092 Comm: syz.7.1615 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  271.565958][T10092] Tainted: [W]=WARN
[  271.565966][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  271.566050][T10092] Call Trace:
[  271.566058][T10092]  <TASK>
[  271.566071][T10092]  __dump_stack+0x1d/0x30
[  271.566117][T10092]  dump_stack_lvl+0x95/0xd0
[  271.566167][T10092]  dump_stack+0x15/0x1b
[  271.566191][T10092]  should_fail_ex+0x263/0x280
[  271.566244][T10092]  should_fail+0xb/0x20
[  271.566274][T10092]  should_fail_usercopy+0x1a/0x20
[  271.566306][T10092]  _copy_from_user+0x1c/0xb0
[  271.566393][T10092]  __se_sys_file_setattr+0x142/0x490
[  271.566436][T10092]  ? mutex_unlock+0x4e/0x90
[  271.566483][T10092]  ? fput+0x8f/0xc0
[  271.566518][T10092]  __x64_sys_file_setattr+0x67/0x80
[  271.566549][T10092]  x64_sys_call+0x143f/0x3020
[  271.566575][T10092]  do_syscall_64+0x12c/0x370
[  271.566665][T10092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.566687][T10092] RIP: 0033:0x7f9596d1c799
[  271.566705][T10092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.566725][T10092] RSP: 002b:00007f959576f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d5
[  271.566747][T10092] RAX: ffffffffffffffda RBX: 00007f9596f95fa0 RCX: 00007f9596d1c799
[  271.566803][T10092] RDX: 0000200000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  271.566818][T10092] RBP: 00007f959576f090 R08: 0000000000001000 R09: 0000000000000000
[  271.566831][T10092] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  271.566843][T10092] R13: 00007f9596f96038 R14: 00007f9596f95fa0 R15: 00007ffc02d5f468
[  271.566867][T10092]  </TASK>
[  271.871620][T10096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'.
[  271.966819][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.016513][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.242500][T10098] lo speed is unknown, defaulting to 1000
[  272.393777][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'.
[  273.017348][T10112] loop6: detected capacity change from 0 to 512
[  273.051645][T10112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  273.074822][T10112] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1626: iget: bad i_size value: 38620345925642
[  273.108465][T10112] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  273.112542][T10112] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1626: couldn't read orphan inode 15 (err -117)
[  273.122210][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  273.122232][    C1] EXT4-fs (loop6): initial error at time 1774455773: ext4_orphan_get:1391: inode 15
[  273.122270][    C1] EXT4-fs (loop6): last error at time 1774455773: ext4_orphan_get:1391: inode 15
[  273.191476][T10112] loop6: lost filesystem error report for type 5 error -117
[  273.192209][T10112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.269915][T10123] loop7: detected capacity change from 0 to 512
[  273.331571][T10123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  273.362139][T10123] EXT4-fs (loop7): orphan cleanup on readonly fs
[  273.374334][T10123] EXT4-fs error (device loop7): ext4_quota_enable:7188: comm syz.7.1629: Bad quota inum: 2, type: 2
[  273.408144][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.417805][T10123] loop7: lost filesystem error report for type 5 error -117
[  273.418016][T10123] EXT4-fs (loop7): Remounting filesystem read-only
[  273.432403][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  273.432420][    C1] EXT4-fs (loop7): last error at time 1774455773: ext4_quota_enable:7188
[  273.513720][T10123] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  273.561038][T10123] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  273.585250][T10123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  273.617635][   T28] audit: type=1326 audit(1774455774.127:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  273.788329][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1629'.
[  273.805535][T10137] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  273.807563][   T28] audit: type=1326 audit(1774455774.127:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  273.846670][   T28] audit: type=1326 audit(1774455774.137:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  273.880141][T10137] vhci_hcd vhci_hcd.1: invalid port number 96
[  273.886446][T10137] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0
[  273.895033][   T28] audit: type=1326 audit(1774455774.157:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  273.940764][   T28] audit: type=1326 audit(1774455774.157:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  273.969231][   T28] audit: type=1326 audit(1774455774.167:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  274.004828][   T28] audit: type=1326 audit(1774455774.167:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10136 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9596cdcfce code=0x7ffc0000
[  274.040022][   T28] audit: type=1326 audit(1774455774.167:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10122 comm="syz.7.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  274.161579][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.261822][T10155] loop5: detected capacity change from 0 to 512
[  274.279244][T10155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  274.517771][T10155] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1640: iget: bad i_size value: 38620345925642
[  274.530779][T10155] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  274.530967][T10155] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1640: couldn't read orphan inode 15 (err -117)
[  274.531282][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1638'.
[  274.540274][T10155] loop5: lost filesystem error report for type 5 error -117
[  274.552190][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  274.552214][    C0] EXT4-fs (loop5): initial error at time 1774455775: ext4_orphan_get:1391: inode 15
[  274.552268][    C0] EXT4-fs (loop5): last error at time 1774455775: ext4_orphan_get:1391: inode 15
[  274.596026][T10155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.532927][T10166] hub 8-0:1.0: USB hub found
[  275.743687][T10166] hub 8-0:1.0: 8 ports detected
[  275.910512][T10169] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.937347][T10169] bond0: (slave bond1): Enslaving as an active interface with an up link
[  276.137191][   T28] kauditd_printk_skb: 63 callbacks suppressed
[  276.137206][   T28] audit: type=1400 audit(1774455776.646:1970): avc:  denied  { setopt } for  pid=10171 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  276.166302][T10174] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1643'.
[  276.245530][   T28] audit: type=1400 audit(1774455776.686:1971): avc:  denied  { getopt } for  pid=10171 comm="syz.6.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  276.437363][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.484023][T10182] loop5: detected capacity change from 0 to 1024
[  276.503945][T10182] EXT4-fs: Ignoring removed bh option
[  276.557539][T10182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  276.571516][T10188] bridge0: port 3(hsr0) entered disabled state
[  276.578194][T10188] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.585637][T10188] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.595198][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1649'.
[  276.604578][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'.
[  276.614055][T10182] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.630523][T10179] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.643630][T10187] bridge10: the hash_elasticity option has been deprecated and is always 16
[  276.645240][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.666560][T10187] bridge10: entered promiscuous mode
[  276.672030][T10187] bridge10: entered allmulticast mode
[  276.678194][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.748420][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.780693][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.814666][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.849302][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.876629][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.904041][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.925044][T10195] loop1: detected capacity change from 0 to 1024
[  276.932518][T10179] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.1645: lblock 0 mapped to illegal pblock 0 (length 1)
[  276.935727][T10195] EXT4-fs: test_dummy_encryption option not supported
[  277.652687][T10208] loop1: detected capacity change from 0 to 512
[  277.692469][T10208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  277.757880][T10208] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1656: iget: bad i_size value: 38620345925642
[  277.771742][T10208] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  277.772365][T10208] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1656: couldn't read orphan inode 15 (err -117)
[  277.781659][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  277.781684][    C0] EXT4-fs (loop1): initial error at time 1774455778: ext4_orphan_get:1391: inode 15
[  277.781708][    C0] EXT4-fs (loop1): last error at time 1774455778: ext4_orphan_get:1391: inode 15
[  277.820570][T10208] loop1: lost filesystem error report for type 5 error -117
[  277.821945][T10208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.229515][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  278.293364][T10220] loop5: detected capacity change from 0 to 128
[  278.301630][   T28] audit: type=1400 audit(1774455778.815:1972): avc:  denied  { setopt } for  pid=10216 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  278.335216][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.364682][T10220] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  278.385733][T10220] FAT-fs (loop5): Filesystem has been set read-only
[  278.415456][T10220] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  278.549089][T10223] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  278.560987][T10220] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  278.584535][T10225] FAULT_INJECTION: forcing a failure.
[  278.584535][T10225] name failslab, interval 1, probability 0, space 0, times 0
[  279.128381][T10225] CPU: 0 UID: 0 PID: 10225 Comm: syz.6.1661 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  279.128425][T10225] Tainted: [W]=WARN
[  279.128460][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  279.128474][T10225] Call Trace:
[  279.128482][T10225]  <TASK>
[  279.128513][T10225]  __dump_stack+0x1d/0x30
[  279.128623][T10225]  dump_stack_lvl+0x95/0xd0
[  279.128653][T10225]  dump_stack+0x15/0x1b
[  279.128683][T10225]  should_fail_ex+0x263/0x280
[  279.128765][T10225]  should_failslab+0x8c/0xb0
[  279.128792][T10225]  __kvmalloc_node_noprof+0x155/0x650
[  279.128849][T10225]  ? qdisc_class_hash_init+0x29/0xa0
[  279.128873][T10225]  ? __pfx_drr_init_qdisc+0x10/0x10
[  279.128894][T10225]  qdisc_class_hash_init+0x29/0xa0
[  279.128917][T10225]  drr_init_qdisc+0x4e/0xb0
[  279.129021][T10225]  qdisc_create+0x582/0x9d0
[  279.129052][T10225]  tc_modify_qdisc+0xffc/0x14f0
[  279.129082][T10225]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  279.129109][T10225]  rtnetlink_rcv_msg+0x6a7/0x720
[  279.129134][T10225]  netlink_rcv_skb+0x123/0x220
[  279.129173][T10225]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  279.129249][T10225]  rtnetlink_rcv+0x1c/0x30
[  279.129266][T10225]  netlink_unicast+0x5c0/0x690
[  279.129295][T10225]  netlink_sendmsg+0x5c8/0x6f0
[  279.129354][T10225]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.129426][T10225]  ____sys_sendmsg+0x563/0x5b0
[  279.129549][T10225]  ___sys_sendmsg+0x195/0x1e0
[  279.129588][T10225]  ? path_openat+0x1b01/0x2050
[  279.129636][T10225]  __sys_sendmmsg+0x185/0x320
[  279.129686][T10225]  __x64_sys_sendmmsg+0x57/0x70
[  279.129727][T10225]  x64_sys_call+0x27aa/0x3020
[  279.129762][T10225]  do_syscall_64+0x12c/0x370
[  279.129816][T10225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.129837][T10225] RIP: 0033:0x7fa14589c799
[  279.129852][T10225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.129874][T10225] RSP: 002b:00007fa1442f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  279.129980][T10225] RAX: ffffffffffffffda RBX: 00007fa145b15fa0 RCX: 00007fa14589c799
[  279.129999][T10225] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  279.130028][T10225] RBP: 00007fa1442f7090 R08: 0000000000000000 R09: 0000000000000000
[  279.130100][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.130117][T10225] R13: 00007fa145b16038 R14: 00007fa145b15fa0 R15: 00007fff4694bb48
[  279.130213][T10225]  </TASK>
[  280.357041][T10256] loop6: detected capacity change from 0 to 764
[  280.652310][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1665'.
[  280.750081][T10296] hub 8-0:1.0: USB hub found
[  280.765463][T10296] hub 8-0:1.0: 8 ports detected
[  280.919813][T10304] loop5: detected capacity change from 0 to 512
[  280.933236][T10304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  281.028611][T10301] loop1: detected capacity change from 0 to 128
[  281.038303][T10304] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1669: iget: bad i_size value: 38620345925642
[  281.052719][T10310] 9pnet_fd: p9_fd_create_tcp (10310): problem connecting socket to 127.0.0.1
[  281.072663][   T28] audit: type=1400 audit(1774455781.564:1973): avc:  denied  { mounton } for  pid=10309 comm="syz.6.1670" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  281.149760][T10304] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  281.152746][T10304] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1669: couldn't read orphan inode 15 (err -117)
[  281.162050][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  281.162086][    C1] EXT4-fs (loop5): initial error at time 1774455781: ext4_orphan_get:1391: inode 15
[  281.162120][    C1] EXT4-fs (loop5): last error at time 1774455781: ext4_orphan_get:1391: inode 15
[  281.212670][T10304] loop5: lost filesystem error report for type 5 error -117
[  281.213260][T10304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.282094][T10311] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  281.384556][T10315] loop1: detected capacity change from 0 to 512
[  281.415498][   T28] audit: type=1400 audit(1774455781.924:1974): avc:  denied  { accept } for  pid=10309 comm="syz.6.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  281.670105][T10322] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1672'.
[  282.594566][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.718270][T10330] loop1: detected capacity change from 0 to 512
[  282.785470][T10330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.871947][T10330] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.203117][T10351] FAULT_INJECTION: forcing a failure.
[  284.203117][T10351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.217061][T10353] FAULT_INJECTION: forcing a failure.
[  284.217061][T10353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.230999][T10351] CPU: 0 UID: 0 PID: 10351 Comm: syz.6.1682 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  284.231077][T10351] Tainted: [W]=WARN
[  284.231083][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  284.231165][T10351] Call Trace:
[  284.231173][T10351]  <TASK>
[  284.231183][T10351]  __dump_stack+0x1d/0x30
[  284.231216][T10351]  dump_stack_lvl+0x95/0xd0
[  284.231239][T10351]  dump_stack+0x15/0x1b
[  284.231336][T10351]  should_fail_ex+0x263/0x280
[  284.231419][T10351]  should_fail+0xb/0x20
[  284.231448][T10351]  should_fail_usercopy+0x1a/0x20
[  284.231520][T10351]  _copy_from_user+0x1c/0xb0
[  284.231555][T10351]  kstrtouint_from_user+0x69/0xf0
[  284.231672][T10351]  proc_fail_nth_write+0x50/0x160
[  284.231712][T10351]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  284.231748][T10351]  vfs_write+0x269/0x9f0
[  284.231782][T10351]  ? __rcu_read_unlock+0x4e/0x70
[  284.231863][T10351]  ? __fget_files+0x184/0x1c0
[  284.231894][T10351]  ? mutex_lock+0x57/0x90
[  284.232010][T10351]  ksys_write+0xdc/0x1a0
[  284.232034][T10351]  __x64_sys_write+0x40/0x50
[  284.232073][T10351]  x64_sys_call+0x27e1/0x3020
[  284.232164][T10351]  do_syscall_64+0x12c/0x370
[  284.232188][T10351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.232261][T10351] RIP: 0033:0x7fa14585cfce
[  284.232280][T10351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  284.232302][T10351] RSP: 002b:00007fa1442f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  284.232326][T10351] RAX: ffffffffffffffda RBX: 00007fa1442f76c0 RCX: 00007fa14585cfce
[  284.232343][T10351] RDX: 0000000000000001 RSI: 00007fa1442f70a0 RDI: 0000000000000004
[  284.232412][T10351] RBP: 00007fa1442f7090 R08: 0000000000000000 R09: 0000000000000000
[  284.232424][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.232436][T10351] R13: 00007fa145b16038 R14: 00007fa145b15fa0 R15: 00007fff4694bb48
[  284.232459][T10351]  </TASK>
[  284.301141][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.5.1679 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  284.301276][T10353] Tainted: [W]=WARN
[  284.301307][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  284.301348][T10353] Call Trace:
[  284.301448][T10353]  <TASK>
[  284.301469][T10353]  __dump_stack+0x1d/0x30
[  284.301559][T10353]  dump_stack_lvl+0x95/0xd0
[  284.301636][T10353]  dump_stack+0x15/0x1b
[  284.301779][T10353]  should_fail_ex+0x263/0x280
[  284.301864][T10353]  should_fail+0xb/0x20
[  284.301981][T10353]  should_fail_usercopy+0x1a/0x20
[  284.302103][T10353]  _copy_to_iter+0xd2/0xea0
[  284.302209][T10353]  ? __account_obj_stock+0x211/0x350
[  284.302294][T10353]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  284.302408][T10353]  __skb_datagram_iter+0xc6/0x680
[  284.302555][T10353]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  284.302660][T10353]  skb_copy_datagram_iter+0x3f/0x120
[  284.302764][T10353]  ip_recv_error+0xc1/0x620
[  284.302869][T10353]  ? __rcu_read_unlock+0x4e/0x70
[  284.302934][T10353]  ? avc_has_perm_noaudit+0xab/0x130
[  284.303038][T10353]  udp_recvmsg+0x43b/0xa90
[  284.303104][T10353]  ? selinux_socket_recvmsg+0x192/0x1c0
[  284.303260][T10353]  ? __pfx_udp_recvmsg+0x10/0x10
[  284.303336][T10353]  ? __pfx_inet_recvmsg+0x10/0x10
[  284.303442][T10353]  inet_recvmsg+0x143/0x290
[  284.303550][T10353]  ? __pfx_inet_recvmsg+0x10/0x10
[  284.303695][T10353]  sock_recvmsg+0xda/0x120
[  284.303786][T10353]  ____sys_recvmsg+0xf5/0x280
[  284.303968][T10353]  ___sys_recvmsg+0x11f/0x3b0
[  284.304103][T10353]  do_recvmmsg+0x1ef/0x560
[  284.304194][T10353]  ? fput+0x8f/0xc0
[  284.304341][T10353]  __x64_sys_recvmmsg+0xe5/0x170
[  284.304467][T10353]  x64_sys_call+0x80f/0x3020
[  284.304546][T10353]  do_syscall_64+0x12c/0x370
[  284.304623][T10353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.304727][T10353] RIP: 0033:0x7f5f58bec799
[  284.304773][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.304907][T10353] RSP: 002b:00007f5f57626028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  284.305022][T10353] RAX: ffffffffffffffda RBX: 00007f5f58e66090 RCX: 00007f5f58bec799
[  284.305065][T10353] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003
[  284.305107][T10353] RBP: 00007f5f57626090 R08: 0000000000000000 R09: 0000000000000000
[  284.305149][T10353] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001
[  284.305213][T10353] R13: 00007f5f58e66128 R14: 00007f5f58e66090 R15: 00007ffea4aa7da8
[  284.305278][T10353]  </TASK>
[  284.859832][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.888418][   T28] audit: type=1400 audit(1774455785.393:1975): avc:  denied  { read } for  pid=10356 comm="syz.5.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  284.927773][T10364] loop1: detected capacity change from 0 to 512
[  284.960021][T10364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  284.972399][T10364] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1686: iget: bad i_size value: 38620345925642
[  284.985258][T10364] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  284.985461][T10364] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1686: couldn't read orphan inode 15 (err -117)
[  284.994833][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  284.994851][    C1] EXT4-fs (loop1): initial error at time 1774455785: ext4_orphan_get:1391: inode 15
[  284.994879][    C1] EXT4-fs (loop1): last error at time 1774455785: ext4_orphan_get:1391: inode 15
[  285.033060][T10364] loop1: lost filesystem error report for type 5 error -117
[  285.033757][T10364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.125138][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1688'.
[  285.267364][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.310773][   T28] audit: type=1400 audit(1774455785.813:1976): avc:  denied  { accept } for  pid=10392 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  285.451035][T10410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1693'.
[  285.473638][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'.
[  285.514803][T10412] hub 8-0:1.0: USB hub found
[  285.520714][T10412] hub 8-0:1.0: 8 ports detected
[  285.724001][T10433] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in;
[  285.724001][T10433]    program syz.5.1696 not setting count and/or reply_len properly
[  286.094857][   T28] audit: type=1400 audit(1774455786.603:1977): avc:  denied  { map } for  pid=10476 comm="syz.5.1701" path="socket:[33827]" dev="sockfs" ino=33827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  286.133958][   T28] audit: type=1400 audit(1774455786.603:1978): avc:  denied  { read } for  pid=10476 comm="syz.5.1701" path="socket:[33827]" dev="sockfs" ino=33827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  286.201599][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1704'.
[  286.249423][T10490] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1706'.
[  286.299338][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1707'.
[  286.346482][T10494] loop7: detected capacity change from 0 to 4096
[  286.424265][T10508] loop6: detected capacity change from 0 to 512
[  286.464136][T10508] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1712: bg 0: block 5: invalid block bitmap
[  286.484660][T10508] loop6: lost filesystem error report for type 5 error -117
[  286.484935][T10508] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  286.492578][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  286.492604][    C1] EXT4-fs (loop6): initial error at time 1774455786: ext4_validate_block_bitmap:432
[  286.492629][    C1] EXT4-fs (loop6): last error at time 1774455786: ext4_validate_block_bitmap:432
[  286.528983][T10508] loop6: lost filesystem error report for type 5 error -117
[  286.537397][T10508] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1712: invalid indirect mapped block 3 (level 2)
[  286.558678][T10508] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  286.571124][T10508] EXT4-fs (loop6): 1 orphan inode deleted
[  286.590775][T10508] EXT4-fs (loop6): 1 truncate cleaned up
[  286.608703][T10508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.649476][T10517] loop7: detected capacity change from 0 to 1024
[  286.743922][T10508] ip6tnl1: entered allmulticast mode
[  286.751223][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1712'.
[  286.760332][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1712'.
[  286.805176][T10520] lo speed is unknown, defaulting to 1000
[  286.842433][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.935504][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'.
[  286.954398][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'.
[  286.984715][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1722'.
[  286.998784][T10539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10539 comm=syz.1.1721
[  287.015679][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'.
[  287.025872][T10539] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10539 comm=syz.1.1721
[  287.040802][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'.
[  287.149473][T10548] 8021q: VLANs not supported on vcan0
[  287.610876][T10567] loop5: detected capacity change from 0 to 164
[  288.134778][   T28] audit: type=1400 audit(1774455788.643:1979): avc:  denied  { bind } for  pid=10566 comm="syz.5.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  288.215645][T10577] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  288.248306][   T28] audit: type=1326 audit(1774455788.753:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.362027][   T28] audit: type=1326 audit(1774455788.783:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.445714][   T28] audit: type=1326 audit(1774455788.783:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.527660][   T28] audit: type=1326 audit(1774455788.783:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.560495][T10591] bond2: option lp_interval: invalid value (18446744073709551613)
[  288.581606][   T28] audit: type=1326 audit(1774455788.783:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.611007][T10591] bond2: option lp_interval: allowed values 1 - 2147483647
[  288.635156][   T28] audit: type=1326 audit(1774455788.793:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.678199][T10591] bond2 (unregistering): Released all slaves
[  288.684702][   T28] audit: type=1326 audit(1774455788.793:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.737122][   T28] audit: type=1326 audit(1774455788.793:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.806258][T10595] loop6: detected capacity change from 0 to 512
[  288.848109][T10595] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  288.867273][   T28] audit: type=1326 audit(1774455788.793:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.7.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9596d1c799 code=0x7ffc0000
[  288.911824][T10595] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 2: comm syz.6.1739: invalid block
[  288.931608][T10595] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  288.931781][T10595] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1739: couldn't read orphan inode 11 (err -117)
[  288.953715][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  288.953739][    C0] EXT4-fs (loop6): initial error at time 1774455789: __ext4_iget:5378: inode 11: block 2
[  288.953800][    C0] EXT4-fs (loop6): last error at time 1774455789: __ext4_iget:5378: inode 11: block 2
[  289.052338][T10595] loop6: lost filesystem error report for type 5 error -117
[  289.053013][T10595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.164501][ T7637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.231661][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.245529][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.312164][T10604] lo speed is unknown, defaulting to 1000
[  289.969642][T10665] FAULT_INJECTION: forcing a failure.
[  289.969642][T10665] name failslab, interval 1, probability 0, space 0, times 0
[  290.000379][T10665] CPU: 0 UID: 0 PID: 10665 Comm: syz.5.1751 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  290.000415][T10665] Tainted: [W]=WARN
[  290.000422][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  290.000434][T10665] Call Trace:
[  290.000442][T10665]  <TASK>
[  290.000451][T10665]  __dump_stack+0x1d/0x30
[  290.000483][T10665]  dump_stack_lvl+0x95/0xd0
[  290.000513][T10665]  dump_stack+0x15/0x1b
[  290.000589][T10665]  should_fail_ex+0x263/0x280
[  290.000664][T10665]  should_failslab+0x8c/0xb0
[  290.000729][T10665]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  290.000752][T10665]  ? __alloc_skb+0x2d6/0x690
[  290.000784][T10665]  __alloc_skb+0x2d6/0x690
[  290.000814][T10665]  ? __alloc_skb+0x200/0x690
[  290.000871][T10665]  netlink_alloc_large_skb+0xbf/0xf0
[  290.000916][T10665]  netlink_sendmsg+0x40c/0x6f0
[  290.000954][T10665]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.001007][T10665]  ____sys_sendmsg+0x563/0x5b0
[  290.001053][T10665]  ___sys_sendmsg+0x195/0x1e0
[  290.001150][T10665]  __x64_sys_sendmsg+0xd4/0x160
[  290.001196][T10665]  x64_sys_call+0x194c/0x3020
[  290.001224][T10665]  do_syscall_64+0x12c/0x370
[  290.001316][T10665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.001347][T10665] RIP: 0033:0x7f5f58bec799
[  290.001366][T10665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.001383][T10665] RSP: 002b:00007f5f57647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.001402][T10665] RAX: ffffffffffffffda RBX: 00007f5f58e65fa0 RCX: 00007f5f58bec799
[  290.001495][T10665] RDX: 000000000400c084 RSI: 0000200000000080 RDI: 0000000000000003
[  290.001508][T10665] RBP: 00007f5f57647090 R08: 0000000000000000 R09: 0000000000000000
[  290.001520][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.001531][T10665] R13: 00007f5f58e66038 R14: 00007f5f58e65fa0 R15: 00007ffea4aa7da8
[  290.001555][T10665]  </TASK>
[  290.424310][T10679] loop1: detected capacity change from 0 to 512
[  290.480059][T10679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  290.673091][T10679] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1754: iget: bad i_size value: 38620345925642
[  290.688775][T10679] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  290.689424][T10679] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1754: couldn't read orphan inode 15 (err -117)
[  290.699516][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  290.699544][    C0] EXT4-fs (loop1): initial error at time 1774455791: ext4_orphan_get:1391: inode 15
[  290.699582][    C0] EXT4-fs (loop1): last error at time 1774455791: ext4_orphan_get:1391: inode 15
[  290.737694][T10679] loop1: lost filesystem error report for type 5 error -117
[  290.815239][T10708] hub 8-0:1.0: USB hub found
[  291.000846][T10679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.505489][T10708] hub 8-0:1.0: 8 ports detected
[  291.773328][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.991881][T10738] loop7: detected capacity change from 0 to 1024
[  292.044463][T10738] EXT4-fs: inline encryption not supported
[  292.050551][T10738] EXT4-fs: Ignoring removed bh option
[  292.134607][T10738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.310826][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.444883][T10744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.462324][T10748] FAULT_INJECTION: forcing a failure.
[  292.462324][T10748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.473369][T10744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.485720][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.1.1758 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  292.485859][T10748] Tainted: [W]=WARN
[  292.485874][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  292.485886][T10748] Call Trace:
[  292.485893][T10748]  <TASK>
[  292.485900][T10748]  __dump_stack+0x1d/0x30
[  292.485926][T10748]  dump_stack_lvl+0x95/0xd0
[  292.486017][T10748]  dump_stack+0x15/0x1b
[  292.486046][T10748]  should_fail_ex+0x263/0x280
[  292.486077][T10748]  should_fail+0xb/0x20
[  292.486180][T10748]  should_fail_usercopy+0x1a/0x20
[  292.486224][T10748]  _copy_from_iter+0xcf/0xea0
[  292.486262][T10748]  ? skb_set_owner_w+0x19b/0x200
[  292.486374][T10748]  ? sock_alloc_send_pskb+0x469/0x500
[  292.486424][T10748]  skb_copy_datagram_from_iter+0xb2/0x480
[  292.486499][T10748]  ? terminate_walk+0x1e6/0x210
[  292.486525][T10748]  ? path_openat+0x1ab2/0x2050
[  292.486558][T10748]  ? skb_put+0xa9/0xf0
[  292.486596][T10748]  tun_get_user+0x90b/0x27c0
[  292.486753][T10748]  ? ref_tracker_alloc+0x1eb/0x2f0
[  292.486798][T10748]  tun_chr_write_iter+0x15e/0x210
[  292.486831][T10748]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  292.486935][T10748]  vfs_write+0x5a6/0x9f0
[  292.486974][T10748]  ksys_write+0xdc/0x1a0
[  292.486998][T10748]  __x64_sys_write+0x40/0x50
[  292.487081][T10748]  x64_sys_call+0x27e1/0x3020
[  292.487116][T10748]  do_syscall_64+0x12c/0x370
[  292.487144][T10748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.487182][T10748] RIP: 0033:0x7f600de3cfce
[  292.487202][T10748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  292.487220][T10748] RSP: 002b:00007f600c8d6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  292.487239][T10748] RAX: ffffffffffffffda RBX: 00007f600c8d76c0 RCX: 00007f600de3cfce
[  292.487255][T10748] RDX: 0000000000000fc0 RSI: 00002000000006c0 RDI: 00000000000000c8
[  292.487268][T10748] RBP: 00007f600c8d7090 R08: 0000000000000000 R09: 0000000000000000
[  292.487338][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.487388][T10748] R13: 00007f600e0f6038 R14: 00007f600e0f5fa0 R15: 00007ffdab4352d8
[  292.487449][T10748]  </TASK>
[  293.130612][T10774] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20004
[  293.226115][T10784] __nla_validate_parse: 5 callbacks suppressed
[  293.226135][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1767'.
[  293.297684][T10787] Q�6�`Ҙ: renamed from lo
[  293.713735][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1769'.
[  294.165868][T10835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10835 comm=syz.1.1772
[  294.202834][   T28] kauditd_printk_skb: 50 callbacks suppressed
[  294.202847][   T28] audit: type=1400 audit(1774455794.712:2039): avc:  denied  { connect } for  pid=10833 comm="syz.5.1771" lport=37725 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  294.233734][   T28] audit: type=1400 audit(1774455794.712:2040): avc:  denied  { name_connect } for  pid=10833 comm="syz.5.1771" dest=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  294.438888][T10848] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1777'.
[  294.450335][T10848] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1777'.
[  294.460129][T10845] lo speed is unknown, defaulting to 1000
[  294.772771][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.163345][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.236457][T10873] loop7: detected capacity change from 0 to 256
[  295.370344][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1787'.
[  295.433036][T10880] hub 8-0:1.0: USB hub found
[  295.438071][T10880] hub 8-0:1.0: 8 ports detected
[  295.658837][T10884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.706703][T10884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.851335][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.052320][T10892] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1791'.
[  296.193997][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'.
[  296.204391][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.231064][T10900] loop7: detected capacity change from 0 to 1024
[  296.253128][T10900] EXT4-fs: inline encryption not supported
[  296.259484][T10900] EXT4-fs: Ignoring removed bh option
[  296.290957][T10900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.293274][T10902] loop5: detected capacity change from 0 to 1024
[  296.323888][T10902] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  296.335843][T10900] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1795: Allocating blocks 449-513 which overlap fs metadata
[  296.368735][T10902] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  296.408161][T10902] EXT4-fs (loop5): invalid journal inode
[  296.426455][T10902] EXT4-fs (loop5): can't get journal size
[  296.454333][T10902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  296.479477][ T8037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.531235][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1796'.
[  296.612971][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.631673][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1796'.
[  296.785909][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1796'.
[  296.882029][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.894070][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.003713][ T5912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.614256][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.733588][T10936] __nla_validate_parse: 1 callbacks suppressed
[  298.733605][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1803'.
[  298.771263][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.836621][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1802'.
[  299.115370][T10936] lo speed is unknown, defaulting to 1000
[  299.184251][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1803'.
[  299.234465][T10939] ==================================================================
[  299.242687][T10939] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  299.250562][T10939] 
[  299.252888][T10939] write to 0xffffea00053a1118 of 8 bytes by task 10943 on cpu 0:
[  299.261038][T10939]  __filemap_remove_folio+0x201/0x310
[  299.266960][T10939]  filemap_remove_folio+0x6d/0x1d0
[  299.272302][T10939]  truncate_inode_folio+0x42/0x50
[  299.277381][T10939]  shmem_undo_range+0x26d/0xb10
[  299.282589][T10939]  shmem_evict_inode+0x12e/0x510
[  299.287729][T10939]  evict+0x2af/0x510
[  299.291670][T10939]  iput+0x41a/0x580
[  299.295600][T10939]  dentry_unlink_inode+0x24f/0x260
[  299.300741][T10939]  __dentry_kill+0x13f/0x460
[  299.305609][T10939]  finish_dput+0x2b/0x200
[  299.310408][T10939]  dput+0x52/0x60
[  299.314245][T10939]  __fput+0x444/0x650
[  299.318440][T10939]  fput_close_sync+0xad/0x190
[  299.323330][T10939]  __x64_sys_close+0x55/0xf0
[  299.328247][T10939]  x64_sys_call+0x275d/0x3020
[  299.333046][T10939]  do_syscall_64+0x12c/0x370
[  299.337664][T10939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.344014][T10939] 
[  299.346790][T10939] read to 0xffffea00053a1118 of 8 bytes by task 10939 on cpu 1:
[  299.354674][T10939]  folio_mapping+0xa1/0xe0
[  299.359313][T10939]  lru_add+0x8d/0x490
[  299.363325][T10939]  folio_batch_move_lru+0x1c5/0x270
[  299.368604][T10939]  folio_add_lru+0x149/0x1e0
[  299.374200][T10939]  folio_add_lru_vma+0x49/0x70
[  299.379156][T10939]  do_wp_page+0x15b3/0x2590
[  299.383686][T10939]  handle_mm_fault+0x8cb/0x3020
[  299.388820][T10939]  do_user_addr_fault+0x3fd/0x1050
[  299.394429][T10939]  exc_page_fault+0x62/0xa0
[  299.399215][T10939]  asm_exc_page_fault+0x26/0x30
[  299.404208][T10939]  __put_user_nocheck_4+0x3/0x10
[  299.410053][T10939]  ____sys_recvmsg+0x1a1/0x280
[  299.414959][T10939]  ___sys_recvmsg+0x11f/0x3b0
[  299.419835][T10939]  do_recvmmsg+0x1ef/0x560
[  299.424469][T10939]  __x64_sys_recvmmsg+0xe5/0x170
[  299.429445][T10939]  x64_sys_call+0x80f/0x3020
[  299.434328][T10939]  do_syscall_64+0x12c/0x370
[  299.439070][T10939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.445149][T10939] 
[  299.447580][T10939] value changed: 0xffff888136135c18 -> 0x0000000000000000
[  299.454703][T10939] 
[  299.457043][T10939] Reported by Kernel Concurrency Sanitizer on:
[  299.463204][T10939] CPU: 1 UID: 0 PID: 10939 Comm: syz.7.1802 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  299.474245][T10939] Tainted: [W]=WARN
[  299.478217][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  299.488496][T10939] ==================================================================
[  299.550958][T10947] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in;
[  299.550958][T10947]    program syz.6.1805 not setting count and/or reply_len properly
[  299.673364][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.805821][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.846137][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.885767][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.686449][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.926390][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.965886][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.006471][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.083630][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.723932][ T3532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.046202][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.085653][ T3420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.126220][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.763595][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.166662][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog