last executing test programs:

17m42.083800428s ago: executing program 32 (id=283):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000a043614b70b89dfb000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet(0x2, 0x80001, 0x84)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
exit(0x100000000000035)
getdents(r4, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x84b, &(0x7f0000000040)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}, 0x1, 0x7a0, &(0x7f0000000280)="$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")
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x6, 0x8, 0x1, 0x0, 0x2, 0x108, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x80, 0x100000000, 0x15bb, 0x6, 0x40000, 0x7, 0x9, 0x0, 0xfffffffe, 0x0, 0x80}, r1, 0xd, r1, 0x7)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40d60, 0x0)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000a40))

16m28.466014573s ago: executing program 33 (id=780):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@rand_addr=0x64010102, @multicast1, 0xffffffffffffffff, "3450cf5013e26ab0498f37e1e165af16677de05a2cc0fceee92529ea0b4feffe", 0x6, 0x3, 0xb4, 0x5}, 0x3c)

16m25.727411926s ago: executing program 34 (id=788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x4c, 0xb, 0x6, 0x201, 0x0, 0xf000000, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48004}, 0x24004000)

16m6.999776262s ago: executing program 35 (id=953):
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nobarrier}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0/file0/..\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x13, 0x0, 0xffffffff, 0x5, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x80, 0xd]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000088", @ANYRES16=r2, @ANYBLOB="010026bd70000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180), 0x4)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000505000400030000000900020073797a32000000000cb0e80703698af87207876adb7c85000780050015000000000005e7040002000000050001000600000015000300686173683a69"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@usrjquota}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=")
r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_usb_disconnect(r6)

15m46.264370497s ago: executing program 36 (id=1068):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x14) (fail_nth: 1)

13m36.248073413s ago: executing program 37 (id=1832):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)

12m47.231521929s ago: executing program 38 (id=2051):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
dup2(r1, r2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

12m41.563805772s ago: executing program 39 (id=2076):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)

9m41.790547593s ago: executing program 40 (id=2971):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x4)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x300)

7m53.122057924s ago: executing program 9 (id=3637):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x220c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket(0xa, 0x1, 0x0)
listen(r4, 0x7f)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x7)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x2)

7m52.842217509s ago: executing program 9 (id=3642):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x98, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x60}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x100}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa47}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x265d25f95816a24a}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGSND(r4, 0x8040451a, 0xffffffffffffffff)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000080)=""/49)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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")
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)

7m52.842039399s ago: executing program 41 (id=3642):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x98, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x60}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x100}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa47}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x265d25f95816a24a}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGSND(r4, 0x8040451a, 0xffffffffffffffff)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000080)=""/49)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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")
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)

5m19.787128677s ago: executing program 42 (id=4587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='f\n\x00\x00\t\x00\x00\x00a'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00')
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r8, @ANYBLOB="0c00028005be"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014)
writev(r1, &(0x7f00000003c0), 0x100000000000022d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000c3d8bac20aa85cccdb1f52621a9c227f70ec7a4b0b9079ec2d33e875ffd305d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)

5m6.058361887s ago: executing program 0 (id=4788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000030101030000000000060000000000000000084000000009"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000000340))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000)
r8 = eventfd2(0x9, 0x80002)
io_cancel(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000000640)="eed71b3432b8e5e72fed905a53b9b6908b003008358e80ddb93aef12302b3521498848963aa5ea79e77b4b41bdc1c9e60de1407a609a2bbfd37cf02ce624d396b611bcc5bec0b23c32d415403838abd69b4d38b287b18216758bfd8e32ec43feb94b32d8d580be4b63c00f6c26aecc82659118960f345a83656ee1105c0a307d75b66cfb54f71b048ef916b5edc6672f5f75a67e04c2df38a0a17f5476221ac6dfcda0b1abfd5716c443a6a4f21423bd8ac8a6ae4bd3cb5d3c6c39efe3587bddeacaa70b63d197b50b5923436cd5f9e1ffae607bb83e434d", 0xd8, 0x2, 0x0, 0x3, r8}, &(0x7f0000000780))
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r10, 0x1, 0x4, 0x0, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x70bd25, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x0, 0xfffffffd}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0)
r11 = socket$rds(0x15, 0x5, 0x0)
recvfrom(r11, &(0x7f0000000180)=""/94, 0x5e, 0x2142, &(0x7f0000000200)=@in={0x2, 0x4e20, @private=0xa010102}, 0x80)

5m4.809373152s ago: executing program 0 (id=4793):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)

5m4.734857716s ago: executing program 0 (id=4797):
unshare(0x64000600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x2, 0x931766f6319eed44)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000040)=0xe)
fsmount(0xffffffffffffffff, 0x0, 0xf0)

5m4.587845153s ago: executing program 0 (id=4800):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000640))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000108000013fc45d5c7cd1c4f0000", @ANYRES32=0x0, @ANYBLOB="020005000c00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={0x0, 0x8, 0x1, [0x6, 0xd60, 0xaca, 0x18, 0x5fc4], [0x6, 0x9, 0x101, 0x1, 0x1ff, 0xa, 0xf5, 0x5, 0x0, 0x45, 0x8f14, 0x4, 0xfffffffffffffff5, 0xfffffffffffffff9, 0x80000000, 0x7, 0x1, 0x101000000000000, 0x100000001, 0x5, 0x7, 0x7, 0x3, 0x9, 0x1ffcfde6, 0x8, 0xfffffffffffffff8, 0xec8d, 0xcf4, 0x5, 0x2, 0x8001, 0x47db, 0x9, 0x2, 0x1, 0x4, 0xffff, 0x5, 0x59ff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x1000, 0x5, 0xff, 0x63b, 0x100, 0x5, 0xfffffffffffffffa, 0x5, 0x9, 0x100000001, 0x5, 0xe, 0xe39d, 0x60, 0x400, 0x2, 0xfff, 0xfff, 0x6, 0xfffffffffffffff7, 0x8000, 0x3, 0x3, 0x9, 0x6, 0x3, 0x0, 0x42, 0x7fffffffffffffff, 0x2, 0x1a23c0, 0x1, 0x29d631c3, 0x2, 0x4, 0x4, 0xffffffffffffff9f, 0x18, 0x4, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x7, 0x200000000003, 0x2, 0x7, 0x2, 0x1, 0x3, 0x5418, 0x80000000, 0x4, 0xeb, 0x7, 0x2, 0x1, 0x0, 0x6, 0x5, 0x7, 0x7ed, 0x4, 0x8000000000000001, 0x7, 0x2, 0x2, 0x10001, 0x98, 0x100000001, 0xb9, 0x1, 0xe, 0x9, 0x4e, 0x0, 0x7ff, 0x1d]})
r5 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000280), 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$KDSKBMODE(r3, 0x4b45, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder-control\x00', 0x800, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
pread64(r6, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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")
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
io_setup(0xb, &(0x7f00000003c0)=<r9=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r9, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r8, 0x0, 0x0, 0x7}])
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

5m4.178839954s ago: executing program 0 (id=4805):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10, {0x2, 0x4e21, @multicast2}})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x4, 0x5})
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r1, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2)
semctl$IPC_RMID(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
semget(0x2, 0x2, 0x8)

5m3.008150705s ago: executing program 0 (id=4812):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x340, 0x178, 0x178, 0x340, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x130, 0x150, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0)

5m2.871602822s ago: executing program 43 (id=4812):
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x340, 0x178, 0x178, 0x340, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x130, 0x150, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x340)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0)

4m57.433443833s ago: executing program 5 (id=4854):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2000000000000379, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffffffb}]}, 0x10)

4m57.357183988s ago: executing program 5 (id=4856):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff99, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x400c004)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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")
open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x3, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0xfe}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m57.268682872s ago: executing program 5 (id=4858):
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffb)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_clone(0x200, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff)
socketpair(0x15, 0xa, 0x3, &(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffce6, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1d, 0x800, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7, 0x4, 0x5, 0x0, 0x0, 0x1, 0xd181a, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x2a00, 0x0, 0x3, 0xe, 0xf1, 0x631, 0x1800, 0x0, 0x7, 0x0, 0x3fc}, 0x0, 0x200004, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x52, 0x9, 0x2, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x16)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000080), 0x12)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x13)
openat$cgroup_int(r5, &(0x7f0000000180)='net_cls.classid\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2001002a", @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf25150000000c00018008000100", @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x640d0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x389482)

4m57.041225434s ago: executing program 5 (id=4859):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000640))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000108000013fc45d5c7cd1c4f0000", @ANYRES32=0x0, @ANYBLOB="020005000c00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={0x0, 0x8, 0x1, [0x6, 0xd60, 0xaca, 0x18, 0x5fc4], [0x6, 0x9, 0x101, 0x1, 0x1ff, 0xa, 0xf5, 0x5, 0x0, 0x45, 0x8f14, 0x4, 0xfffffffffffffff5, 0xfffffffffffffff9, 0x80000000, 0x7, 0x1, 0x101000000000000, 0x100000001, 0x5, 0x7, 0x7, 0x3, 0x9, 0x1ffcfde6, 0x8, 0xfffffffffffffff8, 0xec8d, 0xcf4, 0x5, 0x2, 0x8001, 0x47db, 0x9, 0x2, 0x1, 0x4, 0xffff, 0x5, 0x59ff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x1000, 0x5, 0xff, 0x63b, 0x100, 0x5, 0xfffffffffffffffa, 0x5, 0x9, 0x100000001, 0x5, 0xe, 0xe39d, 0x60, 0x400, 0x2, 0xfff, 0xfff, 0x6, 0xfffffffffffffff7, 0x8000, 0x3, 0x3, 0x9, 0x6, 0x3, 0x0, 0x42, 0x7fffffffffffffff, 0x2, 0x1a23c0, 0x1, 0x29d631c3, 0x2, 0x4, 0x4, 0xffffffffffffff9f, 0x18, 0x4, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x7, 0x200000000003, 0x2, 0x7, 0x2, 0x1, 0x3, 0x5418, 0x80000000, 0x4, 0xeb, 0x7, 0x2, 0x1, 0x0, 0x6, 0x5, 0x7, 0x7ed, 0x4, 0x8000000000000001, 0x7, 0x2, 0x2, 0x10001, 0x98, 0x100000001, 0xb9, 0x1, 0xe, 0x9, 0x4e, 0x0, 0x7ff, 0x1d]})
r5 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000280), 0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$KDSKBMODE(r3, 0x4b45, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder-control\x00', 0x800, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
pread64(r6, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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")
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
io_setup(0xb, &(0x7f00000003c0)=<r8=>0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r8, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7}])
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

4m56.559350709s ago: executing program 5 (id=4866):
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
eventfd2(0x5, 0x80001)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c6394f90324fc602f000015500001", 0x1b}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x1c, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}, {0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c880}, 0x40000)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000000c0)={{0x0, 0x1}, {0xe}, 0x2, 0x3, 0x2e})
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r5)
sync_file_range(r4, 0x80000000, 0xe, 0x7)
r6 = getpgid(0x0)
r7 = syz_pidfd_open(r6, 0x0)
r8 = pidfd_getfd(r7, r7, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x0)
setns(r8, 0x66020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xb5a, 0xffffffffffffffff, &(0x7f0000000140)="6f6f5e7a83947966ed598b036edf09699fd710a8965f22d03ff3ec469957916040c0604fba88f5190eb9618044400e76e497ecd28fd66a642858f5208eb429a2209c78c5789c2cc371b75c4f31465d3af037624e3e0f6d8df5e4e5750008d53595882a2ff0af79879e755b67b7f9d174fcd7867e8399334c9f74788361577cd0cc76669f0939f62f6d137033bc82e6ea47e10cedace01cd9eea7f77a668a74899f6f064b77aa883c852df99c10", 0xad, 0x8, 0x0, 0x2}, &(0x7f0000000240))
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

4m56.13847197s ago: executing program 5 (id=4868):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0xa38)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
truncate(&(0x7f0000000300)='./file1\x00', 0x591)

4m56.13425403s ago: executing program 44 (id=4868):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0xa38)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
truncate(&(0x7f0000000300)='./file1\x00', 0x591)

2m48.37373649s ago: executing program 2 (id=5805):
clock_gettime(0x0, &(0x7f0000000040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
clock_gettime(0x0, &(0x7f00000002c0))
futex_waitv(&(0x7f0000000480)=[{0x1, &(0x7f0000000300), 0x82}, {0x0, &(0x7f0000000340), 0x82}, {0xff, &(0x7f0000001600)=0x2, 0x82}, {0x6, &(0x7f00000003c0)=0x5, 0x2}, {0xb, &(0x7f0000000400)=0x3, 0x2}, {0x80000001, &(0x7f0000000440)=0x3, 0x2}], 0x6, 0x0, &(0x7f0000000cc0)={0x0, 0x3938700}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = gettid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(r5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x837f7000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88)
r7 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
waitid$P_PIDFD(0x3, r7, &(0x7f0000001640), 0x4, &(0x7f00000016c0))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000200)={r2, 0x8001, 0x4}, &(0x7f00000002c0)=0x8)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="a6", 0x1}], 0x1, &(0x7f00000003c0)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0xfa92, 0x2, 0x3, 0x0, 0x0, 0x7f, 0x5, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7ff}}], 0x48, 0x8080}, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="2000000000000000840000000200000000004102000000000d0000690ac4c7abc66200", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0)
r8 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
mq_timedsend(r8, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0)
r9 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f00000001c0)=0x4, 0x4)
close(0x3)
getsockname(r9, &(0x7f0000000540)=@nfc_llcp, &(0x7f00000005c0)=0x80)

2m47.694090045s ago: executing program 2 (id=5810):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @local, 0xbff}, @ib={0x1b, 0xb1, 0x4, {"e9657c5f97885ce1de9887459e7cb729"}, 0x5f, 0x7, 0x7}}}, 0x118)

2m47.426636049s ago: executing program 2 (id=5813):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0x9, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x400001, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2)

2m46.695314607s ago: executing program 2 (id=5816):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00')
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800318, &(0x7f0000000080)={[{@nobh}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@usrjquota}, {@nouid32}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x49e, &(0x7f0000001580)="$eJzs3M9rHGUfAPDvTLJJ+/ZH8vbt+762Vo0WISgmTVq1By9KBZGKgh7qMSbbErptpIlia7GpiCdFCnoWj6J/gSdFEPUkePXkSQpFe2krHiIzmcmP7WYTm2027X4+sDPPM/PMzvPdZ34/kwTQsQayQRKxPSJ+iYi++ezyAgPzo+tXz4/fuHp+PIm5uZd/T/Jy166eHy+LlsttKzKDaUT6XlKsZLnps+dOjtVq1TNFfnjm1OvD02fPPfbmqbET1RPV06OHDx86OPLkE6OPtyTOLK5re9+Z2rfnuVcvvTB+7NJrP3yZ1Xd7MX9pHK0ykAX+x1yuft7DrV5Zm+3Ih735MOluc2VYs66IyJqrku//fdEVi43XF8++29bKAbdVdm7qXXn27BxwF0tirSUrS44ZwJ2vPNFn97/lZwMuOzaNK0/P3wBlcV8vPvNzuiMtylQW7m9bbyAijs3++WlXke+03x8A2HgfjH9ytCd64+0bXzyfXXv0LcxJ43/5+Nd8uLPoQ+mPiH9HxK6I+E9E7I6I/0bkZf8fEfessz43X/+kl9f5lU1l139PFX1by6//yqu/6O8qcjvy+CvJ8cla9UDxmwxGpTfLjzRZxzdHfv5opXnl9V/5ydafjRdLpJe76x7QTYzNjEVlPVEvunIxYm93o/iThZ6AJCL2RMTehaXW1MGzs0xMPvL5vpUKrR5/Ey3oZ5r7LAtvNot/NuriLyVL+ycnb+qfHN4SteqB4XKruNmPP73/0krrX1f8LXClOj9e0v71RfqTpf21061d/y1u/2lP8spf2e1rT9Hn+NbYzMyZkYie5Gie/7povnz66OKyZb4sn23/g/sb7/+7imWyr7o3IrKN+L6IuD8iHijq/mBEPBQR+5vE+P0zq8cfaZva/2LERMPj38L2X9f+Z8+dLA+Ni1OaJrpOfvfVSutfW/sfylODxZT8+LeKRtXpblDlW/3dAAAA4E6S5u/AJ+nQQjpNh4bm3+HfHf9Ka1PTM48en3rj9MT8u/L9UUnLJ119xfPQ2mStOpLMFt9YSY5ErTpaPCsun5ceLJ4bf9y1Nc8PjU/VJtocO3S6bSvs/5nfutpdO+A229pw6mjPhlcEaIP6fvR0efbCi+FgAHerf/YeTZM/FwTuOKvs/+lG1QPYeP5fC3SuRvv/hbq8vgC4Ozn/Q+ey/0OHSr9tdw2ANnL+h4606h/vtyexZemUnuaFezZJnVuW2KyNkifieplIN0V9JNae+DCJWHPhdh+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuPvAAAA//9RsNvf")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_open_dev$usbmon(&(0x7f0000000080), 0x20, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x3, 0x9, 0x7}, {0x8, 0x2, 0x9, 0x34cc}]})
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
syz_emit_ethernet(0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000aa8aaaaaaa0088f5beb409197a42108914f8fee2822113bf14614695489d4c0a2b0900380000000000000000501833fce6eb2b6fd9e7e0c3be02b3a280610de3909865a114be25fa3173a829842257896a92c06b8b99c6e3ecf728e6dd9e3b7910e4514a0cbcc0582918b211fb9ed4042f0e3b741d459f17ada7863a883b2c9645c7f5cf9926317abff37d5209402322"], 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$kcm(0x10, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0)
r0 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x1000000000000007}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/84, 0x54}, {&(0x7f00000004c0)=""/4135, 0x1027}, {&(0x7f0000000180)=""/95, 0x5f}], 0x3}, 0x42)
recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000019480)=""/4107, 0x100b}, {&(0x7f0000019180)=""/252, 0xfc}, {&(0x7f0000000300)=""/103, 0x67}], 0x3}, 0x10000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000003c0)={0x0, 0x2, 0x7, 0x1c})
r2 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00'})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000001a40)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x7fffffff, 0x6, 0xffffffff, 0x6, 0x1c6}, &(0x7f0000001b00)=0x98)

2m46.089576848s ago: executing program 2 (id=5821):
clock_gettime(0x0, &(0x7f0000000040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
clock_gettime(0x0, &(0x7f00000002c0))
futex_waitv(&(0x7f0000000480)=[{0x1, &(0x7f0000000300), 0x82}, {0x0, &(0x7f0000000340), 0x82}, {0xff, &(0x7f0000001600)=0x2, 0x82}, {0x6, &(0x7f00000003c0)=0x5, 0x2}, {0xb, &(0x7f0000000400)=0x3, 0x2}, {0x80000001, &(0x7f0000000440)=0x3, 0x2}], 0x6, 0x0, &(0x7f0000000cc0)={0x0, 0x3938700}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000017c0)=[@in6={0xa, 0x4e23, 0x87, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280))

2m45.617068933s ago: executing program 2 (id=5827):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000079121800000000009500000000040000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x2}, &(0x7f00000004c0)=0x28)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', <r1=>0x0, 0x708, 0x1, 0xf4, 0x20000, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x18, 0x5b, 0x0, 0x1, [0x6, 0x2, 0x81, 0x157d, 0xfffff072]}, @generic={0x86, 0x12, "628f7dbc704ebca90ff73312fdc265ff"}, @noop, @timestamp={0x44, 0xc, 0x3c, 0x0, 0xb, [0xffffffff, 0x4]}, @generic={0x86, 0x10, "08802b7d88caf00fb8b740bf48cd"}, @end, @timestamp_prespec={0x44, 0x24, 0x8, 0x3, 0x6, [{@multicast2, 0x800}, {@broadcast, 0x7fffffff}, {@multicast1, 0x5}, {@broadcast, 0x800}]}]}}}}})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r5 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x200, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002440)={0x14, r6, 0xad9a673c54048f09, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000380)={0x8, 'wg0\x00', {'team0\x00'}, 0x4})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000009c0)={0x130, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "0f3a766a228702e75977a2fcf488a5147e0ba9d05a821b903d2a2e9c46b731a8b8d1b5a8933e1c331a5e9412d37723a06f00ab85bf4197cfdb1aea22b6ae74152fda72fd4f6d8da973e5759eddedb0209e9d3e4c2dab2b9ddf15740d69846601ed96ed48a3a05fbebefaacea3073fa262198e21c5acde00ea77c06fae8b919d5d8bcaf3d55afd33ccf4683bd3d9bf1a56d96f7a4bc8d4601fa6b1306507dbdc35b52ad864093b6d23ac1af13bad4b66615405c94deab92b1ea07a9ce7e2420002994226acedebd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x0, 0xef, 0x1, 0x4, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xd2}, {@multicast2, 0x2}, {@remote, 0x4}]}, @ra={0x94, 0x0, 0x1}, @lsrr={0x83, 0x0, 0x81, [@loopback, @broadcast, @multicast2, @multicast1, @local]}, @rr={0x7, 0x0, 0xa3, [@private=0xa010101, @remote, @local, @broadcast, @multicast1, @local]}, @ssrr={0x89, 0x0, 0xf6, [@multicast1, @empty, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @private=0xa010100, @loopback]}, @noop]}}}, @ip_tos_u8={{0xb1, 0x0, 0x1, 0x77}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x10}}], 0x90}, 0x0)

2m45.563404355s ago: executing program 45 (id=5827):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000079121800000000009500000000040000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80, 0x800)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x2}, &(0x7f00000004c0)=0x28)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', <r1=>0x0, 0x708, 0x1, 0xf4, 0x20000, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x18, 0x5b, 0x0, 0x1, [0x6, 0x2, 0x81, 0x157d, 0xfffff072]}, @generic={0x86, 0x12, "628f7dbc704ebca90ff73312fdc265ff"}, @noop, @timestamp={0x44, 0xc, 0x3c, 0x0, 0xb, [0xffffffff, 0x4]}, @generic={0x86, 0x10, "08802b7d88caf00fb8b740bf48cd"}, @end, @timestamp_prespec={0x44, 0x24, 0x8, 0x3, 0x6, [{@multicast2, 0x800}, {@broadcast, 0x7fffffff}, {@multicast1, 0x5}, {@broadcast, 0x800}]}]}}}}})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r5 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x200, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002440)={0x14, r6, 0xad9a673c54048f09, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000380)={0x8, 'wg0\x00', {'team0\x00'}, 0x4})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000009c0)={0x130, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "0f3a766a228702e75977a2fcf488a5147e0ba9d05a821b903d2a2e9c46b731a8b8d1b5a8933e1c331a5e9412d37723a06f00ab85bf4197cfdb1aea22b6ae74152fda72fd4f6d8da973e5759eddedb0209e9d3e4c2dab2b9ddf15740d69846601ed96ed48a3a05fbebefaacea3073fa262198e21c5acde00ea77c06fae8b919d5d8bcaf3d55afd33ccf4683bd3d9bf1a56d96f7a4bc8d4601fa6b1306507dbdc35b52ad864093b6d23ac1af13bad4b66615405c94deab92b1ea07a9ce7e2420002994226acedebd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x0, 0xef, 0x1, 0x4, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xd2}, {@multicast2, 0x2}, {@remote, 0x4}]}, @ra={0x94, 0x0, 0x1}, @lsrr={0x83, 0x0, 0x81, [@loopback, @broadcast, @multicast2, @multicast1, @local]}, @rr={0x7, 0x0, 0xa3, [@private=0xa010101, @remote, @local, @broadcast, @multicast1, @local]}, @ssrr={0x89, 0x0, 0xf6, [@multicast1, @empty, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @private=0xa010100, @loopback]}, @noop]}}}, @ip_tos_u8={{0xb1, 0x0, 0x1, 0x77}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x10}}], 0x90}, 0x0)

2m26.125316871s ago: executing program 1 (id=5944):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xa6, 0x0, 0x0, 0x5}, 0x28)
syz_clone3(0x0, 0x11)
socket$netlink(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000380)=<r0=>0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="700200001310290a00100000000000000700000024c1798f6403b5b1333e9369e596362fb42a957950eb1605c393bed38b117392", @ANYRES32=r3, @ANYBLOB="000000000000000010011a801000f48004000580080009000000000008"], 0x270}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r4=>0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'gretap0\x00', 0x0})
timer_settime(r4, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002"], 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1000}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b}, 0x94)
r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0xff2e)
r8 = syz_open_pts(r7, 0x0)
r9 = dup3(r8, r7, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r9, 0x5412, 0x0)

2m25.398151748s ago: executing program 1 (id=5945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))
unshare(0x40200)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x1, 0xffffffffffffffff, 0x6})
r4 = semget(0x2, 0x3, 0x39c)
fsmount(0xffffffffffffffff, 0xe4f3c378e660c387, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
semop(r4, &(0x7f0000000080)=[{0x1, 0x7ffe, 0x1000}], 0x1)
semop(r4, &(0x7f0000000000)=[{0x2, 0xbbdd}], 0x1)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff])
unshare(0x40400)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001200010103000000000000000700000008000700010000000c000080080031"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000010000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010000000000000000000900020073797a320000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000880)
r7 = signalfd(r1, &(0x7f0000000040)={[0x10001]}, 0x8)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4042840)

2m24.39738256s ago: executing program 1 (id=5950):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_INPUT2(r3, 0x0, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa780a010101ac14140c83028606000000024e214e2204519078089cc7e80394125f"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2m23.229311821s ago: executing program 1 (id=5960):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000108000013fc45d5c7cd1c4f0000", @ANYRES32=0x0, @ANYBLOB="020005000c00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={0x0, 0x8, 0x1, [0x6, 0xd60, 0xaca, 0x18, 0x5fc4], [0x6, 0x9, 0x101, 0x1, 0x1ff, 0xa, 0xf5, 0x5, 0x0, 0x45, 0x8f14, 0x4, 0xfffffffffffffff5, 0xfffffffffffffff9, 0x80000000, 0x7, 0x1, 0x101000000000000, 0x100000001, 0x5, 0x7, 0x7, 0x3, 0x9, 0x1ffcfde6, 0x8, 0xfffffffffffffff8, 0xec8d, 0xcf4, 0x5, 0x2, 0x8001, 0x47db, 0x9, 0x2, 0x1, 0x4, 0xffff, 0x5, 0x59ff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x1000, 0x5, 0xff, 0x63b, 0x100, 0x5, 0xfffffffffffffffa, 0x5, 0x9, 0x100000001, 0x5, 0xe, 0xe39d, 0x60, 0x400, 0x2, 0xfff, 0xfff, 0x6, 0xfffffffffffffff7, 0x8000, 0x3, 0x3, 0x9, 0x6, 0x3, 0x0, 0x42, 0x7fffffffffffffff, 0x2, 0x1a23c0, 0x1, 0x29d631c3, 0x2, 0x4, 0x4, 0xffffffffffffff9f, 0x18, 0x4, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x7, 0x200000000003, 0x2, 0x7, 0x2, 0x1, 0x3, 0x5418, 0x80000000, 0x4, 0xeb, 0x7, 0x2, 0x1, 0x0, 0x6, 0x5, 0x7, 0x7ed, 0x4, 0x8000000000000001, 0x7, 0x2, 0x2, 0x10001, 0x98, 0x100000001, 0xb9, 0x1, 0xe, 0x9, 0x4e, 0x0, 0x7ff, 0x1d]})
r5 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000280), 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder-control\x00', 0x800, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
pread64(r6, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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")
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
io_setup(0xb, &(0x7f00000003c0)=<r8=>0x0)
write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r8, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r7, 0x0, 0x0, 0x7}])
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

2m21.775935716s ago: executing program 1 (id=5964):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffc00, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x40000006, 0x4)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
syz_open_dev$hidraw(0x0, 0x7, 0x400040)
ioctl$HIDIOCSFEATURE(r4, 0xc0404806, 0x0)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000440)={0xe, {0x0, 0x5, 0x4f}}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x5f, &(0x7f00000000c0)=""/95, 0x0, 0x3b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x2, 0x8001, 0x6}, 0x10, 0x422b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a", @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m21.169375707s ago: executing program 1 (id=5969):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003180)={0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, &(0x7f0000003040)=""/13, 0x0, 0x0, 0x0, 0x43, 0x0, &(0x7f00000030c0)="bb1c99f7695a88f477eb7c8f60ae0de8c40147fadf44fefd1b0217340091c6411788dd19b7b1e28da6aa959e269f213a0fe93e768319b7dd0f1902c1461babc8953aad", 0x0, 0x0, 0xb259}, 0x50)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271b, 0x0, &(0x7f00000000c0))

2m21.097533661s ago: executing program 46 (id=5969):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003180)={0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, &(0x7f0000003040)=""/13, 0x0, 0x0, 0x0, 0x43, 0x0, &(0x7f00000030c0)="bb1c99f7695a88f477eb7c8f60ae0de8c40147fadf44fefd1b0217340091c6411788dd19b7b1e28da6aa959e269f213a0fe93e768319b7dd0f1902c1461babc8953aad", 0x0, 0x0, 0xb259}, 0x50)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x271b, 0x0, &(0x7f00000000c0))

2m13.19661456s ago: executing program 9 (id=5970):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_INPUT2(r3, 0x0, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa780a010101ac14140c83028606000000024e214e2204519078089cc7e80394125f"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2m12.150017694s ago: executing program 9 (id=6010):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x70010, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x5, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000197c0)={'\x00', 0x7fff, 0x0, 0x4, 0x7ff, 0x25d6, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f00000190c0)='setgroups\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, &(0x7f0000000040))
modify_ldt$write2(0x11, &(0x7f0000019840)={0x9, 0xffffffffffffffff, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r7, &(0x7f0000019680)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000100faff0200000000000000000000e500000000000000ffffffffffffffff040000000000000075c064fb248c82455f3d5f7aabb3a8beb0076f11bfb0ab9c186a5ce8c881ba65daba20c5a2aaa07207114753a1d2ea8fe4b520f6035bb8eda72ce8cb9bd341d169cccf49f80abbdffd606afc8577c7d8527bf3ecf6cde00a60385ec741b83087ca0663a7e5264e311cb370c83efaa618147d1fbca68da956b7653d24ed60f023488100005268820fa761ae9ce1bc78ded0ee1d69a6295d741205b9dffe0d9e7c5e53579e90a074628732fe"], 0xed)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(r7)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000019100)=@security={'security\x00', 0xe, 0x4, 0x500, 0xffffffff, 0x0, 0x328, 0x328, 0xffffffff, 0xffffffff, 0x430, 0x430, 0x430, 0xffffffff, 0x4, &(0x7f0000019080), {[{{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0xffffffff, 0x24e0e13e1b5a9486], [0x0, 0xffffffff, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth0_to_bond\x00', {}, {}, 0x33, 0x7f, 0x4, 0x4}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x5, 0x3], 0xf, 0x10, 0x7, [@mcast1, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x2a}, @dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x30}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @empty}], 0xa}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d4], 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'hsr0\x00', {0x5}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, [0xff000000, 0xff, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xffffffff], 'macsec0\x00', 'veth1_to_bond\x00', {}, {}, 0x89, 0x8e, 0x0, 0x18}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xff000000, 0xff, 0xff], 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x8, 0x1, 0x8, 0xfab, 0x273}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r9, &(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r9, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000019900)="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", 0x1}], 0x1e, &(0x7f0000001f40)=ANY=[@ANYRES16], 0x120}}], 0x1, 0x20040040)
ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x1, 0x80, 0x40, 0xff, 0x3, 0xb, 0x0, 0x3a, 0x4012f, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bc, 0x4, @perf_config_ext={0x2}, 0x8, 0x6, 0xfffefff8, 0x0, 0x6, 0x30, 0x6, 0x0, 0x7fffffff, 0x0, 0xd})

2m11.662258189s ago: executing program 9 (id=6013):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000640))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000108000013fc45d5c7cd1c4f0000", @ANYRES32=0x0, @ANYBLOB="020005000c00000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000680)={0x0, 0x8, 0x1, [0x6, 0xd60, 0xaca, 0x18, 0x5fc4], [0x6, 0x9, 0x101, 0x1, 0x1ff, 0xa, 0xf5, 0x5, 0x0, 0x45, 0x8f14, 0x4, 0xfffffffffffffff5, 0xfffffffffffffff9, 0x80000000, 0x7, 0x1, 0x101000000000000, 0x100000001, 0x5, 0x7, 0x7, 0x3, 0x9, 0x1ffcfde6, 0x8, 0xfffffffffffffff8, 0xec8d, 0xcf4, 0x5, 0x2, 0x8001, 0x47db, 0x9, 0x2, 0x1, 0x4, 0xffff, 0x5, 0x59ff, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x1000, 0x5, 0xff, 0x63b, 0x100, 0x5, 0xfffffffffffffffa, 0x5, 0x9, 0x100000001, 0x5, 0xe, 0xe39d, 0x60, 0x400, 0x2, 0xfff, 0xfff, 0x6, 0xfffffffffffffff7, 0x8000, 0x3, 0x3, 0x9, 0x6, 0x3, 0x0, 0x42, 0x7fffffffffffffff, 0x2, 0x1a23c0, 0x1, 0x29d631c3, 0x2, 0x4, 0x4, 0xffffffffffffff9f, 0x18, 0x4, 0x7, 0x5, 0x2, 0x8001, 0x4, 0x7, 0x200000000003, 0x2, 0x7, 0x2, 0x1, 0x3, 0x5418, 0x80000000, 0x4, 0xeb, 0x7, 0x2, 0x1, 0x0, 0x6, 0x5, 0x7, 0x7ed, 0x4, 0x8000000000000001, 0x7, 0x2, 0x2, 0x10001, 0x98, 0x100000001, 0xb9, 0x1, 0xe, 0x9, 0x4e, 0x0, 0x7ff, 0x1d]})
r4 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000280), 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder-control\x00', 0x800, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
pread64(r5, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}})
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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")
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
io_setup(0xb, &(0x7f00000003c0)=<r7=>0x0)
write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r7, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r6, 0x0, 0x0, 0x7}])
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

2m8.438301516s ago: executing program 9 (id=6033):
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x2)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000002000000000000022f86f0a9080006000500004008000400fb17ffff"], 0x34}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={<r4=>0x0, @initdev, @multicast2}, &(0x7f0000000300)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], <r5=>0x0, 0x65, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0xfffffffffffffcf0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x26, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x2, 0x2, 0xa, 0x40}, @alu={0x7, 0x1, 0x9, 0xb, 0xb5dafbc70213168, 0xffffffffffffffe0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x13871a3774d4208b, 0x0, 0xa, 0x5, 0x5, 0x6, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x5f, &(0x7f0000000240)=""/95, 0x41000, 0x5a, '\x00', r4, @sk_msg=0x7, r3, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r3, 0x3, 0x0, &(0x7f0000000680)=[{0x3, 0x5, 0xf, 0x3}, {0x2, 0x3, 0x5, 0xa}, {0x3, 0x2, 0xf, 0x3}], 0x10, 0x9}, 0x94)

2m8.437838096s ago: executing program 47 (id=6033):
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x2)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000002000000000000022f86f0a9080006000500004008000400fb17ffff"], 0x34}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, r2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={<r4=>0x0, @initdev, @multicast2}, &(0x7f0000000300)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], <r5=>0x0, 0x65, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0xfffffffffffffcf0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x26, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x2, 0x2, 0xa, 0x40}, @alu={0x7, 0x1, 0x9, 0xb, 0xb5dafbc70213168, 0xffffffffffffffe0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x13871a3774d4208b, 0x0, 0xa, 0x5, 0x5, 0x6, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x5f, &(0x7f0000000240)=""/95, 0x41000, 0x5a, '\x00', r4, @sk_msg=0x7, r3, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r3, 0x3, 0x0, &(0x7f0000000680)=[{0x3, 0x5, 0xf, 0x3}, {0x2, 0x3, 0x5, 0xa}, {0x3, 0x2, 0xf, 0x3}], 0x10, 0x9}, 0x94)

6.612891818s ago: executing program 4 (id=6881):
capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f00000004c0)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af439e1432fa00228f11b0f472aeeb58", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

6.501009124s ago: executing program 4 (id=6882):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xc, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x52}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xc234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
r3 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061195400080000009500000000000000e23c51143956b5154dd1d51a1df71f86e0815427af41ccffb915a081f4102223929a4e5b51618dcb8596204a518a50e3f7f12fec50edb4a256f943c9966705b737693707a25e4d8d5e197707d191455990dac745b14204fe7c9d352f43ecfeacc617c8da3d24c4214aa4d276b22f646f44007bdfac310f2fb73c5bd2920defcc12e78c514a483252af6a14a44ee0bbcbf98604606561ff6173"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1a}, 0x94)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019880)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'geneve0\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000], [], 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x32}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000200", @ANYRES32=r5, @ANYBLOB="18000880"], 0x40}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000180)=0x9, 0x4)
creat(&(0x7f0000000840)='./file0\x00', 0x40)
mount$bpf(0x0, 0x0, 0x0, 0x1900040, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='C'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

6.205576449s ago: executing program 4 (id=6883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100003"], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x75)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076804268c989e14f088a8", 0x0, 0x40500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0)
mlock2(&(0x7f000008f000/0x3000)=nil, 0x3000, 0x0)
mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xd3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f00000000c0)=0xffffffff, 0xfee2)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000048c0)=@newtaction={0xc8, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x100, 0x8, 0x7, 0x0, 0x1}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xc8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

6.107244125s ago: executing program 7 (id=6884):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023897)

5.786125081s ago: executing program 3 (id=6886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x84}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='clear_refs\x00')
getdents(r3, &(0x7f0000000ec0)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000646a00000000001f850000007b000000950000000000000076c4fb6f8f5abc0abc9f25"], 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000)
write$vga_arbiter(r5, &(0x7f0000000080)=@other={'unlock', ' ', 'mem'}, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xb, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x4000c00)
r6 = socket$inet6(0xa, 0x2, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7})
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xc, 0xf60e}, 0x11a09b, 0x800000, 0x43a1ad7a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x200c}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r11}]}, 0x38}, 0x1, 0x11}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r12)

5.010958821s ago: executing program 3 (id=6889):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x22020400)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[], 0x0)
poll(0x0, 0x0, 0x9)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
r5 = dup(r0)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"a2e3ad214fc752f91b29090955f70e0dd038e7ff7fc6e5539b3266078b089b3b08383a09089020878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b333b0d07680936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0afc9397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6258742317662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76ccc2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2e57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849d11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f9d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f0712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1ccced94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1025}}, 0x1006)

4.954080415s ago: executing program 7 (id=6891):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
epoll_create1(0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
timer_create(0x1, &(0x7f00000003c0)={0x0, 0x38, 0x4}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r2 = getpid()
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, r2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'veth1_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x0, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x187242, 0x1fa)
write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
getsockopt$sock_int(r3, 0x1, 0x1a, &(0x7f0000000100), &(0x7f0000000140)=0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f00000001c0)='./bus\x00', r4}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
read(r7, &(0x7f0000000000)=""/82, 0x52)
connect$can_bcm(r7, &(0x7f0000000080)={0x1d, r6}, 0x19)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xc, 0x8}, {0xfff1, 0xa}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008010)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000380)=0x1e)

4.515042487s ago: executing program 4 (id=6892):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x9, 0x0)

4.208228193s ago: executing program 8 (id=6894):
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x14) (async)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00830b00000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
prlimit64(r0, 0x5, &(0x7f0000000280)={0x1ff, 0x3}, &(0x7f0000000340)) (async, rerun: 64)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32)
r5 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, 0x0, 0x0) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
close(0xffffffffffffffff) (rerun: 32)
socket$unix(0x1, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r9=>0x0}) (async)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r10], 0x44}}, 0x2000040)

4.207648783s ago: executing program 6 (id=6895):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x9, 0x0) (fail_nth: 1)

4.162585926s ago: executing program 4 (id=6896):
syz_clone(0x2008800, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0x0, 0x1, 0xc, 0x1}, 0x4, 0x46}, [{0x7, 0x7, 0x40, 0x3, 0x0, 0x1}, {0x3edee688, 0x0, 0xfffffffd, 0x10, 0x5c56b80f, 0x5}, {0x8, 0x4, 0x1, 0x6, 0xf, 0x8001}, {0x4, 0xffffffff, 0x0, 0x8000, 0xffff, 0x9}, {0x0, 0x7, 0xb, 0xffffff81, 0x7fff, 0x4}, {0x1000, 0x81, 0xcec4, 0x1, 0x1, 0x7f}, {0x401, 0x2, 0x8, 0xfffffff7, 0x0, 0x7}, {0x2, 0x1, 0x1000, 0x4, 0x9, 0xa}, {0x8, 0x2, 0xf3320, 0x80000000, 0x9, 0x8}, {0x5, 0x2, 0x5, 0x5, 0x80000001}, {0x3, 0x2, 0x5, 0x3, 0x2, 0x5}, {0xfffffff5, 0x5, 0x6, 0x3, 0x8, 0x200}, {0x0, 0x2, 0x1, 0xc, 0xc61, 0x4}, {0x4, 0x1, 0x2, 0x8, 0xdad, 0xae}, {0x9, 0x4, 0xfff, 0x0, 0x90400000}, {0x7267, 0xe, 0xffffffff, 0x4, 0x3, 0x5}, {0x10000, 0x6, 0x80, 0xfffffff7, 0x20000009, 0x4}, {0x0, 0x7, 0xfa, 0x6, 0x3a00, 0xfffffffe}, {0xa00, 0x9, 0x0, 0x6, 0x7fff, 0x7ff}, {0x42, 0x10, 0x7, 0x10001, 0x2a}, {0x1, 0x2, 0x7fffffff, 0x1, 0x3, 0x7f}, {0x6326e196, 0x200, 0x9, 0x1, 0x6, 0x7}, {0xc8, 0x1, 0x1, 0x8, 0x4, 0x1d}, {0x13f, 0xd, 0x7fff00, 0x7f, 0x7ff, 0xffff}, {0xe, 0x2, 0x2, 0x0, 0x8, 0x6}, {0x5, 0x3, 0x53, 0x4, 0x400000, 0x1}, {0x0, 0xfff, 0x40, 0xfffffffc, 0x6, 0xcb03}, {0x6, 0x0, 0x80000000, 0x5, 0x8, 0x101}, {0xffffffff, 0x7fff, 0x20000000, 0x0, 0x1, 0x8}, {0x625321fa, 0x101, 0x0, 0xe0000000, 0x2, 0x1}, {0x5, 0x8001, 0x7000, 0x7, 0x61ae, 0x80000000}, {0x2, 0x6, 0x5, 0x2, 0x7fffffff, 0x2}, {0x5, 0x2, 0x8, 0x1907, 0x2, 0x3}, {0x8, 0x2, 0x1, 0x1, 0xffff, 0x6}, {0x8, 0x7, 0x6, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x1, 0x200, 0x5}, {0x6, 0x7, 0x7, 0x100, 0x4, 0x3}, {0x100, 0x2, 0x80000001, 0x10, 0xfffffffa, 0xf}, {0xa9, 0xd12, 0xffffffff, 0xa, 0x6, 0x1d}, {0x41, 0x6, 0x0, 0x3, 0x1000, 0x5}, {0x6, 0x800, 0x4, 0x7, 0x1, 0x8001}, {0x4, 0x2, 0xfc0, 0xf898, 0x8001, 0x6}, {0x1, 0x3e, 0x98, 0x0, 0x3ff, 0x101}, {0x3ff, 0x2, 0x6, 0xfffffffb, 0x3ff, 0xa}, {0x7, 0x2, 0x3135, 0x1, 0x9, 0xcf}, {0xfffffffd, 0xf, 0x0, 0x8, 0xebb, 0x4}, {0xc, 0x5, 0x1, 0x6, 0x8}, {0x9, 0x3, 0x4, 0x1, 0x1ff, 0x80000000}, {0x6, 0x7, 0x8b, 0xfb, 0x80, 0x6}, {0x9, 0x80000000, 0xffffffff, 0xfffffa84, 0x6, 0x7f}, {0x1, 0xb, 0xbc, 0x5c, 0x6, 0x5}, {0x7, 0xfe, 0x0, 0x8, 0x5, 0x10}, {0x8, 0x4, 0x4, 0xfffffffb, 0x200, 0xcff}, {0x2, 0x8, 0x7, 0x8, 0x9, 0x35}, {0x0, 0x9, 0x0, 0xa, 0x3, 0xfe}, {0x8, 0x3, 0x0, 0x3c86, 0x56a5, 0x5}, {0xe4, 0x47, 0xffff, 0xd0, 0x2, 0x80000001}, {0x0, 0xa, 0x62, 0x10000, 0x6, 0xfffffff8}, {0x3, 0x4, 0x8d47, 0x710, 0x3c70}, {0x40, 0x7f, 0xd0, 0x0, 0xff, 0x8}, {0x2, 0xacd, 0x75ad, 0x7, 0x9, 0xff}, {0x80, 0x6, 0x10001, 0x1ff, 0x81, 0x12}, {0x0, 0x7a53, 0x5, 0x7, 0x8, 0x3}, {0x7, 0x1000000, 0xfffffff8, 0x9, 0x8, 0x40}, {0xfffffffe, 0x0, 0x6, 0x7fff, 0x80000001, 0x40}, {0x588f, 0x5, 0x7, 0x10001, 0xffffffff, 0x1}, {0x8, 0x4, 0x1c, 0x6, 0x3e, 0x9}, {0x2, 0x7, 0x5, 0x3, 0x8, 0x3}, {0xc, 0xc, 0x1be, 0x8, 0x9, 0x3}, {0x0, 0x7, 0xd94, 0x7, 0x9, 0x2}, {0x4, 0x6, 0x4, 0x3, 0x7, 0xffff}, {0x7, 0xc27, 0x2, 0xc614, 0x5, 0x5}, {0x5, 0x9, 0x7, 0x9, 0x0, 0x4}, {0xbc7, 0x4, 0xf08b, 0x6, 0x9, 0x23}, {0x6, 0x2, 0x6f, 0xea78, 0x9925, 0xb6d}, {0x5, 0xc9, 0x4, 0x0, 0x89, 0x14}, {0x8, 0x3, 0x9da, 0x800, 0xfffffffc, 0xe7e8}, {0x10000, 0x40, 0x5, 0xd0, 0xa9, 0x47a8}, {0x8, 0x3ff, 0x4, 0x3, 0x0, 0x9}, {0x48, 0xc, 0x3ff, 0x4, 0x800, 0xe}, {0x4, 0x1, 0x3, 0x4, 0x1000, 0xda30}, {0x1, 0xffff, 0x8001, 0x98, 0xfffffff8, 0x7}, {0x81, 0x1, 0x2, 0x7, 0xbc9, 0x28000000}, {0x7, 0xada, 0x1, 0x6, 0xfffffffe, 0xb030}, {0x9f, 0x761, 0xf95c, 0x2, 0x86, 0x5}, {0xd3, 0xffff, 0x6, 0xc424, 0x9, 0x4}, {0x5, 0xffffff6e, 0x7fff, 0x3, 0xd, 0x2}, {0x621, 0x2, 0x0, 0x9, 0x3, 0x4854}, {0x3, 0x6, 0x8, 0x1, 0x9, 0xa72}, {0x5, 0x4, 0x6, 0xfffffffa, 0x9, 0x3}, {0x0, 0xfffffff8, 0x8, 0x320, 0x5}, {0x6, 0x3, 0x200, 0x6, 0x1ff, 0x8}, {0x7ff, 0x5, 0x4, 0x4, 0x5, 0x800}, {0xfa4a, 0x5, 0x6, 0xa, 0x5, 0x2}, {0x8, 0x7, 0x5, 0x2, 0x6, 0x80000001}, {0x2, 0xa, 0x2, 0x7, 0x4, 0x5}, {0x9, 0x7, 0x4, 0x9eb, 0xa, 0x8}, {0x2, 0x4, 0x7, 0xffffffff, 0x3, 0x401}, {0x3ff, 0x2, 0x8, 0x3ff, 0xfffffffb, 0x1}, {0x0, 0x0, 0x0, 0xfffff55e, 0x8, 0x6}, {0x1, 0x7fff, 0x8, 0x4, 0x7ff, 0x6}, {0x8, 0x0, 0x0, 0xfffffffd, 0xfff, 0x40}, {0x9, 0x1, 0xa792, 0x5, 0x1ff}, {0xd94b, 0x5, 0x2, 0xff, 0x4f, 0x7ff}, {0xdbc, 0x80000000, 0x5d, 0x3, 0xfffffffc}, {0x8, 0x3, 0x67, 0x8, 0xbdf, 0xf7}, {0x4c0f, 0xfff, 0x0, 0xb, 0x8, 0x100}, {0x400, 0x9, 0x0, 0x4, 0x9, 0x1b}, {0x48fd4449, 0x2, 0x5, 0x4, 0x7f, 0xfffffffc}, {0x7ff, 0x5, 0x3, 0x5c93, 0xc, 0x6}, {0x8, 0x2c2d000, 0x9, 0x2, 0x1, 0x2}, {0xffffffff, 0x8076, 0x7f, 0xffffffc0, 0x7, 0x8001}, {0x0, 0x1, 0x7, 0x200, 0x5}, {0x78, 0x2d, 0x4, 0x4, 0x80000001, 0xe9}, {0x0, 0x6, 0x0, 0x255c, 0x9, 0x1000}, {0x200000, 0x200, 0x6, 0xfffffffd, 0x0, 0x6}, {0x77b, 0x0, 0x2, 0x1e8a, 0x1a, 0x4}, {0x1000, 0x4, 0x0, 0x2, 0x0, 0x1}, {0x7ff, 0x5, 0x5, 0x6, 0x6, 0x2000009}, {0x4, 0x800, 0xea2, 0x8000, 0x0, 0x40}, {0x9, 0x200, 0x539, 0x1, 0xb, 0x7}, {0x2, 0x2, 0x87, 0x7, 0xfffffffe, 0x1}, {0x1e7, 0x2, 0x6, 0x9bb, 0x3, 0x7}, {0x7, 0x3ff, 0xe322, 0x2, 0x4, 0xc}, {0xfffffffa, 0x2, 0x93, 0xfffffffa, 0x10001, 0x40}, {0x7, 0x9bc, 0x800, 0x9, 0x7, 0x3851}, {0xfffffffe, 0x101, 0x3, 0x1, 0x7, 0x4}, {0x5, 0x0, 0xb0, 0xa, 0x5, 0x5}], [{0x4}, {0x3}, {0x2}, {0x3}, {}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x7}, {0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x4}, {}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x1}, {}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0xd9d493184d3ac47}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0xc49612a26cceaca7}, {0x0, 0xa5bbafc9e2acde54}, {0x5, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x572, &(0x7f0000000b00)="$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")
r9 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r10 = socket$inet6(0xa, 0x3, 0x7)
recvfrom$inet6(r10, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x8000009, @private0, 0x23}, 0x1c)
socket$pppoe(0x18, 0x1, 0x0)

4.038018002s ago: executing program 8 (id=6897):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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")
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60c}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd13, 0x4, &(0x7f0000000380))
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x20)
mount$cgroup2(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x10010, &(0x7f0000000100)={[{@favordynmods}, {@memory_hugetlb_accounting}, {@pids_localevents}]})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in6}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8)
fstat(0xffffffffffffffff, &(0x7f00000002c0))
getgid()
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
sendto$packet(r8, &(0x7f0000000180)="1ad3ad138992cd06260ce2fa9d09e302cbe0d16cc480c5e6e3a344a9a2561f252b9155e3cb550b55dccad4c6136c729a20ce8ed0fc039328ca4a7e157bcc191a714603d0efeeddb4a4a14adbe82513f9989f7989e654fe1815185e4f592e2822a13fee709e03ff630440bbe472162de4b2cd554c9bcc1687cd8d348601c26d2166539df8970e3833d08ce06bba68364cc366a43338e5b1daa8e561b49e72c50f2f7218564ebe42bd498589d44a0239cc44a021d4b445b6f0f54ee7fa52ffc4b72c54afffa7fd27629ccaac2dd767922308446b64c6dbf1d112638bb8723c11aa84e9d042ef9def8dd1172af5fdbea03bde", 0xf1, 0x40000, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x9, 0x0)

4.036430502s ago: executing program 3 (id=6898):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$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")
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x6ec2, 0x5, 0x1, 0x5}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f00000008c0)="94355e0508e2153f71a8e3973dff3c05f93b01b6a18a1967703e75b71c9d76c221364e05e0333304080b0bdde777a967233937abf385520d4a2693f5009c4d5c293de40419ad22ae6bcb7db2998d994119047aec295a1329c1c0c4c36a6d86e9abeef5972efd0911fe617f1ecb3713bfcd8bafcf6634cd20ccaed4ae954d5c1814bcde93e327281d0625117d40ef", &(0x7f0000000440), 0x1}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0xf8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x13, 0xffff}, {0xfff9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x1]}}}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x5, 0x81, 0xa, 0xfffffff0, 0x0, 0xfffffff7, 0x5316, 0x4}}, {0xc, 0x2, [0x8, 0xa73, 0x6791, 0x18]}}, {{0x1c, 0x1, {0x5, 0x5, 0x1, 0x1000, 0x1, 0x800, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0xf8}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0xe903627fae477156, 0x2, 0x8, 0xa, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x7, 0x7800, 0x64269cfb, 0x400}})
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = syz_clone(0x80004080, 0x0, 0x2b, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000040)='smaps\x00')
r7 = epoll_create1(0x0)
syz_clone3(0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x9, [@fwd={0xf}, @enum={0xf, 0x3, 0x0, 0x6, 0x4, [{0x6, 0x7}, {0xa, 0x6}, {0x1, 0x7}]}, @union={0x5, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x2, 0x329c}, {0xc, 0x2, 0xfb7}, {0xa, 0x3}, {0x1, 0x5, 0x8}, {0xe, 0x4, 0x38}, {0x0, 0x5, 0x4}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x3, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}, @struct={0xe, 0x7, 0x0, 0x4, 0x1, 0x583, [{0x9, 0x2, 0xe1}, {0xf, 0x3, 0x8}, {0x4, 0x4, 0xff}, {0x4, 0x1}, {0xd, 0x5}, {0x9, 0x0, 0x7fff}, {0x5, 0x3, 0x4}]}, @fwd={0x8}]}, {0x0, [0x10, 0x2e, 0xdceae479774d754f, 0x30, 0x30, 0x0, 0x30]}}, &(0x7f0000000440)=""/48, 0x131, 0x30, 0x1, 0xb5}, 0x28)
epoll_wait(r7, &(0x7f0000000100), 0x0, 0xff)
pread64(r6, &(0x7f0000000500)=""/15, 0xf, 0x40000000007)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0)
syz_usb_connect(0x5, 0x84, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@broadcast, @private}, &(0x7f0000000240)=0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

3.953354736s ago: executing program 6 (id=6899):
r0 = open(0x0, 0x80, 0x122)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x40, 0x4, 0x3c})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=@newchain={0x24, 0x64, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0x7}, {0xb, 0xfff3}, {0x4, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x28, r6, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)

3.761070286s ago: executing program 7 (id=6900):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unshare(0x2040600)
r0 = open(&(0x7f00000000c0)='.\x00', 0x3c3501, 0x50)
getdents(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)

3.470917111s ago: executing program 7 (id=6901):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="280c233e0000000000000029000000050000000002020100000000fe8000000000000000000000000000bb180000000000000029000000360000002b00000000"], 0x40}, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x2, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)

3.29816171s ago: executing program 8 (id=6902):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x1, 0x6361, 0xb, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x3)
close(r7)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f0000000f00)="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", 0x252}], 0x2}, 0x0)

1.111768693s ago: executing program 7 (id=6903):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000007a80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
write$cgroup_int(r0, &(0x7f00000033c0)=0xf44, 0x12)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="a3a80e3927a92a70afde29e4ac49d0a1b84002000000e8e2cd88bfd46265c1a7301c982a370751a007864ab8d8550556", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)

594.64392ms ago: executing program 3 (id=6904):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'erspan0\x00', 0x0})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10)

537.854463ms ago: executing program 6 (id=6905):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000010, 0x2c4e1b0000000000})

535.468633ms ago: executing program 8 (id=6906):
capset(&(0x7f0000000040)={0x19980330}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f00000004c0)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af439e1432fa00228f11b0f472aeeb58", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

527.645513ms ago: executing program 6 (id=6907):
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x384c42)
r0 = socket$kcm(0x2d, 0x2, 0x0)
socket$inet(0x2, 0x802, 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x10000000, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000)
r4 = socket$kcm(0x23, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x1, 0x2, 0x2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x4880)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000000)=0x7)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x384c42) (async)
socket$kcm(0x2d, 0x2, 0x0) (async)
socket$inet(0x2, 0x802, 0x1) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
sendmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async)
sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x10000000, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) (async)
socket$kcm(0x23, 0x0, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x1, 0x2, 0x2}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x4880) (async)
ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000000)=0x7) (async)

523.621574ms ago: executing program 3 (id=6908):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'erspan0\x00', 0x0})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) (fail_nth: 2)

480.388186ms ago: executing program 4 (id=6909):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x4001, 0x3, 0x530, 0x2a8, 0x0, 0x148, 0x0, 0x148, 0x498, 0x240, 0x240, 0x498, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2a8, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0xff, 'syz1\x00', 0xc}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@loopback, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {}, 0x11, 0x3, 0x60}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x4, 0x9, 0x1, 0x0, 'syz1\x00', 0x3}}, @common=@ttl={{0x28}, {0x1, 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x7, 0x4, 0x0, 0x2], 0x3, 0x2}, {0x1, [0x3, 0x4, 0x0, 0x1, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)="4e32ce56f6e63d5dba52f6a6254e34a8c52edfd2cd949b2aefe9be944058ef86ff159b0507cb310365355f5207abae09eac46f5969be345891566751c395e2b9b87e79c21fac3c9532afa960", 0x4c, r0}, 0x68)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0x5}}, {@grpjquota}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200100000209050000000000000000000a0000050800064000000001f80002000c00"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0})
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x11)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200), 0x10)
sendfile(r3, r3, 0x0, 0xe3aa6ea)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, r3, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10)

420.566669ms ago: executing program 7 (id=6910):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r1, 0xb7c5746c4912cbff}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x9]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

419.595069ms ago: executing program 8 (id=6911):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0xc, 0xc, 0x2, [@const={0xc, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, [@call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000002ec0)={0x10000, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/103, 0x67}, {&(0x7f0000000b00)=""/233, 0xe9}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/68, 0x44}, {&(0x7f0000002b40)=""/96, 0x60}, {&(0x7f0000002bc0)=""/228, 0xe4}, {&(0x7f0000002cc0)=""/198, 0xc6}], &(0x7f0000002e80)=[0x8], 0xa}, 0x20)
listen(r3, 0x400)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x4c, 0x15, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x4c}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "889b509614d82fbfa7b95de97ec8f8baa7cec266b6b13be536c2744b8d36e04cd03a95b160f1550dca2210cb864cdc4b66"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x104}}, 0x0)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x200004, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x800)
r9 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
pwritev(r9, 0x0, 0x0, 0x1, 0xfffffbff)
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000280)={0x5, 0x4, 0x5, 0x7, 0xda46, 0xff75})
r10 = syz_clone(0x40002c00, &(0x7f0000002f00)="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", 0x1000, &(0x7f0000003f00), &(0x7f0000003f40), &(0x7f0000003f80)="0e2ff0704fb0d3f15e6c82bcbca50d8094499d2c")
ptrace$ARCH_SET_GS(0x1e, r10, &(0x7f0000003fc0), 0x1001)
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}})

118.281245ms ago: executing program 6 (id=6912):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8000000000002, 0xfffffffe, 0xf, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nouid32}, {@jqfmt_vfsold}, {@debug}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0xfe, 0x42f, &(0x7f0000000940)="$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")
symlink(&(0x7f000000a900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x92082, 0x92)

117.887925ms ago: executing program 3 (id=6913):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="280c233e0000000000000029000000050000000002020100000000fe8000000000000000000000000000bb180000000000000029000000360000002b00000000"], 0x40}, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x2, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)

41.431818ms ago: executing program 8 (id=6914):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc)
close(r4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000440)={0x0, 'bond_slave_1\x00', {0x1}, 0x200})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8)
statx(r0, &(0x7f0000000280)='./file0\x00', 0x800, 0x80, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {r5, r6}}, './file0/file0\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

0s ago: executing program 6 (id=6915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
r1 = socket(0xa, 0x3, 0x3a)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="49fc91c5", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250c00000008003100030000000800310003a5000005002d000000000008003c000400000008002b0001000000050038000100000008003a0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8050)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30)
r4 = fsopen(&(0x7f0000000040)='bdev\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', <r5=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0x0, r5}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1414020021200000300012800c0001006d6163766c616e002000028008000100120000000a000400aaaaaaaaaa280000080003000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x58}}, 0xc008006)

kernel console output (not intermixed with test programs):

pid=28692 comm="syz.3.6369" path="/278/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1099.512763][   T28] audit: type=1400 audit(1050.780:78508): avc:  denied  { ioctl } for  pid=28702 comm="syz.7.6372" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1099.555566][   T28] audit: type=1400 audit(1050.780:78509): avc:  denied  { map_create } for  pid=28702 comm="syz.7.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1100.272992][T28721] ip6tnl1: entered promiscuous mode
[ 1100.482157][T28728] program syz.4.6379 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1100.520148][T28730] set_capacity_and_notify: 2 callbacks suppressed
[ 1100.520168][T28730] loop4: detected capacity change from 0 to 256
[ 1101.052692][T28730] vfat: Bad value for 'utf8'
[ 1101.392739][T23005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1101.480007][T28737] loop6: detected capacity change from 0 to 512
[ 1101.508554][T28737] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1101.530993][T28741] loop3: detected capacity change from 0 to 1024
[ 1101.557607][T28741] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1101.601728][T28741] EXT4-fs: Ignoring removed i_version option
[ 1101.642454][T28741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1101.680622][T28741] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1101.720348][T28741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce118, mo2=0000]
[ 1101.728486][T28741] System zones: 0-1, 3-12
[ 1101.738713][T28737] syzkaller0: entered promiscuous mode
[ 1101.744514][T28737] syzkaller0: entered allmulticast mode
[ 1101.753269][T28741] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.6381: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[ 1101.771981][T28741] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1101.772909][T28741] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6381: couldn't read orphan inode 11 (err -117)
[ 1101.793861][T28741] loop3: lost filesystem error report for type 5 error -117
[ 1101.798005][    C1] EXT4-fs (loop3): error count since last fsck: 2
[ 1101.811765][    C1] EXT4-fs (loop3): initial error at time 1053: ext4_ext_check_inode:521: inode 11
[ 1101.821025][    C1] EXT4-fs (loop3): last error at time 1053: ext4_orphan_get:1402
[ 1101.848770][T28741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1101.898084][T23005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1102.018486][T28765] program syz.4.6390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1102.599656][T28786] syzkaller0: entered promiscuous mode
[ 1102.605253][T28786] syzkaller0: entered allmulticast mode
[ 1103.044906][T28791] __nla_validate_parse: 6 callbacks suppressed
[ 1103.045601][T28791] netlink: 1204 bytes leftover after parsing attributes in process `syz.7.6399'.
[ 1103.408832][T28792] netlink: 1204 bytes leftover after parsing attributes in process `syz.7.6399'.
[ 1104.336401][   T28] kauditd_printk_skb: 320 callbacks suppressed
[ 1104.336425][   T28] audit: type=1400 audit(1055.740:78830): avc:  denied  { recv } for  pid=28784 comm="syz.8.6398" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1104.415060][T28803] program syz.3.6401 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1104.456691][   T28] audit: type=1400 audit(1055.740:78831): avc:  denied  { recv } for  pid=28784 comm="syz.8.6398" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1104.512214][   T28] audit: type=1400 audit(1055.777:78832): avc:  denied  { read write } for  pid=23005 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1104.592374][   T28] audit: type=1400 audit(1055.777:78833): avc:  denied  { open } for  pid=23005 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1104.666381][   T28] audit: type=1400 audit(1055.777:78834): avc:  denied  { ioctl } for  pid=23005 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1104.713758][T28814] loop3: detected capacity change from 0 to 128
[ 1104.731682][   T28] audit: type=1400 audit(1055.815:78835): avc:  denied  { write } for  pid=28801 comm="syz.3.6401" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1104.797514][T28814] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1104.833197][   T28] audit: type=1400 audit(1055.815:78836): avc:  denied  { open } for  pid=28801 comm="syz.3.6401" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1104.880258][T28814] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.6406: No space for directory leaf checksum. Please run e2fsck -D.
[ 1104.961468][T28814] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.6406: checksumming directory block 0
[ 1104.981495][   T28] audit: type=1400 audit(1055.824:78837): avc:  denied  { recv } for  pid=28796 comm="syz.6.6400" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1105.056468][T28821] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.6406: No space for directory leaf checksum. Please run e2fsck -D.
[ 1105.091732][   T28] audit: type=1400 audit(1055.824:78838): avc:  denied  { create } for  pid=28802 comm="syz.7.6402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1105.120528][T28826] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1105.131882][T28821] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.6406: checksumming directory block 0
[ 1105.146408][T28826] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.6409'.
[ 1105.180834][T28785] kexec: Could not allocate control_code_buffer
[ 1105.218537][T28828] loop8: detected capacity change from 0 to 512
[ 1105.226099][T28828] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1105.278766][T23005] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1105.379216][T28828] syzkaller0: entered promiscuous mode
[ 1105.385593][T28828] syzkaller0: entered allmulticast mode
[ 1105.873201][T28836] program syz.3.6413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1105.958205][T28840] 9p: Could not find request transport: f
[ 1106.046847][T28847] loop7: detected capacity change from 0 to 512
[ 1106.055392][T28847] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1106.066770][T28847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[ 1106.076112][T28847] System zones: 0-2, 18-18, 34-34
[ 1106.083103][T28847] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.6416: bad orphan inode 15
[ 1106.127504][T28847] loop7: lost filesystem error report for type 5 error -117
[ 1106.128670][T28847] ext4_test_bit(bit=14, block=18) = 1
[ 1106.136148][    C0] EXT4-fs (loop7): error count since last fsck: 1
[ 1106.136193][    C0] EXT4-fs (loop7): initial error at time 1057: ext4_orphan_get:1423
[ 1106.136240][    C0] EXT4-fs (loop7): last error at time 1057: ext4_orphan_get:1423
[ 1106.645898][T28851] syzkaller0: entered promiscuous mode
[ 1106.651713][T28851] syzkaller0: entered allmulticast mode
[ 1106.978835][T28847] is_bad_inode(inode)=0
[ 1106.983121][T28847] NEXT_ORPHAN(inode)=2264924160
[ 1106.988112][T28847] max_ino=32
[ 1106.991432][T28847] i_nlink=0
[ 1107.033358][T28847] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.6416: corrupted inode contents
[ 1107.136827][T28847] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1107.163907][T28847] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #15: comm syz.7.6416: mark_inode_dirty error
[ 1107.196115][T28847] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1107.196336][T28847] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #15: comm syz.7.6416: corrupted inode contents
[ 1107.248278][T28847] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1107.368213][T28847] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.6416: mark_inode_dirty error
[ 1107.464045][T28847] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1107.464293][T28847] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.6416: mark inode dirty (error -117)
[ 1107.526858][T28859] loop3: detected capacity change from 0 to 1024
[ 1107.561200][T28859] EXT4-fs: test_dummy_encryption option not supported
[ 1107.624247][T28861] loop8: detected capacity change from 0 to 256
[ 1107.636965][T28847] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1107.637218][T28847] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117)
[ 1107.793714][T28861] vfat: Bad value for 'utf8'
[ 1107.989032][T28847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.035807][T28870] loop3: detected capacity change from 0 to 1024
[ 1108.044204][T28870] ext4: Unknown parameter 'nouser_xattr'
[ 1108.494360][T28874] program syz.8.6424 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1108.603695][T28847] ext4: Unknown parameter 'ÿ18446744073709551615ÿÿÿÿ0xffffffffffffffffŸVbÐd­ºäñXtiËJJR�3öu'ÊÑ
·Ð8¤Ôç-ÐÍk6'
[ 1108.617009][T28880] loop8: detected capacity change from 0 to 128
[ 1108.657348][T28880] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1108.669569][T28875] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6416: bg 0: block 80: padding at end of block bitmap is not set
[ 1108.762454][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.856200][T27313] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1108.940997][T28886] loop6: detected capacity change from 0 to 512
[ 1108.955178][T28886] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1108.973795][T28886] EXT4-fs (loop6): invalid journal inode
[ 1108.979493][T28886] EXT4-fs (loop6): can't get journal size
[ 1108.986562][T28886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1108.994584][T28886] System zones: 1-12, 13-13
[ 1108.999832][T28886] EXT4-fs (loop6): 1 truncate cleaned up
[ 1109.005970][T28886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1109.297303][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1109.346663][T28892] loop8: detected capacity change from 0 to 512
[ 1109.374127][T28893] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.6427'.
[ 1109.418604][T28892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1109.449625][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6431'.
[ 1109.639404][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1109.654392][T28901] syzkaller0: entered promiscuous mode
[ 1109.660031][T28901] syzkaller0: entered allmulticast mode
[ 1109.734109][   T28] kauditd_printk_skb: 489 callbacks suppressed
[ 1109.734201][   T28] audit: type=1400 audit(1060.737:79317): avc:  denied  { execmem } for  pid=28903 comm="syz.6.6435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1109.790281][   T28] audit: type=1400 audit(1060.774:79318): avc:  denied  { create } for  pid=28900 comm="syz.4.6432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1109.817233][   T28] audit: type=1400 audit(1060.784:79319): avc:  denied  { read } for  pid=28900 comm="syz.4.6432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1109.836928][   T28] audit: type=1400 audit(1060.849:79320): avc:  denied  { read write } for  pid=27313 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1109.862506][   T28] audit: type=1400 audit(1060.849:79321): avc:  denied  { open } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1109.889260][   T28] audit: type=1400 audit(1060.849:79322): avc:  denied  { ioctl } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1110.017448][   T28] audit: type=1400 audit(1060.868:79323): avc:  denied  { name_bind } for  pid=28909 comm="syz.8.6434" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1110.220328][   T28] audit: type=1400 audit(1060.868:79324): avc:  denied  { node_bind } for  pid=28909 comm="syz.8.6434" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1110.410650][   T28] audit: type=1400 audit(1060.962:79325): avc:  denied  { recv } for  pid=28909 comm="syz.8.6434" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 netif=tunl0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1110.437613][   T28] audit: type=1400 audit(1060.980:79326): avc:  denied  { create } for  pid=28900 comm="syz.4.6432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1110.531246][T28922] program syz.7.6436 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1110.553598][T28922] netlink: 'syz.7.6436': attribute type 21 has an invalid length.
[ 1110.799946][T28928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28928 comm=syz.4.6438
[ 1111.488615][T28952] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.6447'.
[ 1111.502888][T28950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1111.604367][T28948] loop4: detected capacity change from 0 to 4096
[ 1111.664195][T28948] EXT4-fs: Ignoring removed bh option
[ 1111.693510][T28948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1111.818763][T28961] loop6: detected capacity change from 0 to 128
[ 1111.831401][T28961] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 1111.974946][T28968] loop6: detected capacity change from 0 to 512
[ 1111.985688][T28968] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1111.993506][T28968] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6452: couldn't read orphan inode 26 (err -116)
[ 1112.005980][T28968] loop6: lost filesystem error report for type 5 error -116
[ 1112.006205][T28968] EXT4-fs (loop6): Remounting filesystem read-only
[ 1112.013558][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1112.013582][    C0] EXT4-fs (loop6): initial error at time 1062: ext4_orphan_get:1402
[ 1112.013608][    C0] EXT4-fs (loop6): last error at time 1062: ext4_orphan_get:1402
[ 1112.045732][T28968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1112.075691][T28968] EXT4-fs (loop6): shut down requested (1)
[ 1112.265397][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1112.318795][T28979] lo speed is unknown, defaulting to 1000
[ 1112.334114][T28979] lo speed is unknown, defaulting to 1000
[ 1112.347976][T28980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6456'.
[ 1112.357715][T28979] lo speed is unknown, defaulting to 1000
[ 1112.367429][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1112.371080][T28979] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1112.407931][T28981] random: crng reseeded on system resumption
[ 1112.423216][T28979] lo speed is unknown, defaulting to 1000
[ 1112.446620][T28979] lo speed is unknown, defaulting to 1000
[ 1112.481216][T28979] lo speed is unknown, defaulting to 1000
[ 1112.507803][T28979] lo speed is unknown, defaulting to 1000
[ 1112.542917][T28987] netlink: 'syz.6.6459': attribute type 3 has an invalid length.
[ 1112.552626][T28979] lo speed is unknown, defaulting to 1000
[ 1112.557871][T28988] loop4: detected capacity change from 0 to 1024
[ 1112.581002][T28988] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1112.596719][T28971] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1112.612372][T28979] lo speed is unknown, defaulting to 1000
[ 1112.618590][T28979] lo speed is unknown, defaulting to 1000
[ 1112.624926][T28979] lo speed is unknown, defaulting to 1000
[ 1112.638472][T28988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1112.643296][T28979] lo speed is unknown, defaulting to 1000
[ 1112.686282][T28988] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1112.746762][T28988] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.6457: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[ 1112.902999][T28988] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1112.906924][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1112.922567][    C1] EXT4-fs (loop4): initial error at time 1063: ext4_ext_check_inode:521: inode 11
[ 1112.931829][    C1] EXT4-fs (loop4): last error at time 1063: ext4_ext_check_inode:521: inode 11
[ 1112.941805][T28988] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6457: couldn't read orphan inode 11 (err -117)
[ 1112.964299][T28988] loop4: lost filesystem error report for type 5 error -117
[ 1112.965522][T28988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1113.043373][T28988] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.6457: pblk 0 bad header/extent: invalid magic - magic 810a, entries 0, max 0(0), depth 0(0)
[ 1113.080445][T29003] FAULT_INJECTION: forcing a failure.
[ 1113.080445][T29003] name failslab, interval 1, probability 0, space 0, times 0
[ 1113.104733][T29003] CPU: 0 UID: 0 PID: 29003 Comm: syz.3.6464 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1113.104771][T29003] Tainted: [W]=WARN
[ 1113.104778][T29003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1113.104790][T29003] Call Trace:
[ 1113.104833][T29003]  <TASK>
[ 1113.104876][T29003]  __dump_stack+0x1d/0x30
[ 1113.104910][T29003]  dump_stack_lvl+0x95/0xd0
[ 1113.104934][T29003]  dump_stack+0x15/0x1b
[ 1113.104989][T29003]  should_fail_ex+0x263/0x280
[ 1113.105095][T29003]  should_failslab+0x8c/0xb0
[ 1113.105117][T29003]  kmem_cache_alloc_noprof+0x66/0x3f0
[ 1113.105142][T29003]  ? do_getname+0x2e/0x1c0
[ 1113.105172][T29003]  do_getname+0x2e/0x1c0
[ 1113.105198][T29003]  __se_sys_mkdirat+0x21/0xf0
[ 1113.105229][T29003]  __x64_sys_mkdirat+0x43/0x50
[ 1113.105257][T29003]  x64_sys_call+0x2c4e/0x3020
[ 1113.105377][T29003]  do_syscall_64+0x12c/0x3b0
[ 1113.105439][T29003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1113.105463][T29003] RIP: 0033:0x7f3bebc2c819
[ 1113.105482][T29003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1113.105503][T29003] RSP: 002b:00007f3bea687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1113.105527][T29003] RAX: ffffffffffffffda RBX: 00007f3bebea5fa0 RCX: 00007f3bebc2c819
[ 1113.105546][T29003] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c
[ 1113.105562][T29003] RBP: 00007f3bea687090 R08: 0000000000000000 R09: 0000000000000000
[ 1113.105579][T29003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1113.105604][T29003] R13: 00007f3bebea6038 R14: 00007f3bebea5fa0 R15: 00007ffc2173ce48
[ 1113.105691][T29003]  </TASK>
[ 1113.310254][T29004] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1113.416402][T29013] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6468'.
[ 1113.493117][T29015] loop7: detected capacity change from 0 to 1024
[ 1113.509520][T29012] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1113.551085][T29021] loop4: detected capacity change from 0 to 4096
[ 1113.568044][T29021] EXT4-fs: Ignoring removed bh option
[ 1113.567994][T29015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1113.592340][T29021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1113.736198][T29007] loop6: detected capacity change from 0 to 128
[ 1113.793299][T29007] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6465'.
[ 1114.001530][T29015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6469'.
[ 1114.030500][T29015] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1114.203011][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.362825][T29035] loop3: detected capacity change from 0 to 512
[ 1114.372733][T29036] loop7: detected capacity change from 0 to 2048
[ 1114.379729][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.412207][T29035] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.6471: pblk 0 bad header/extent: invalid magic - magic f399, entries 1, max 4(0), depth 0(0)
[ 1114.439015][T29036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1114.475350][T29035] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[ 1114.475565][T29035] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.6471: Bad quota inode: 3, type: 0
[ 1114.484830][    C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1114.484849][    C0] EXT4-fs (loop3): initial error at time 1065: ext4_ext_check_inode:521: inode 3
[ 1114.484879][    C0] EXT4-fs (loop3): last error at time 1065: ext4_ext_check_inode:521: inode 3
[ 1114.581281][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.643618][T29035] loop3: lost filesystem error report for type 5 error -117
[ 1114.643792][T29035] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[ 1114.712151][T29035] EXT4-fs (loop3): mount failed
[ 1114.890924][T29058] loop7: detected capacity change from 0 to 512
[ 1114.904239][T29058] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1114.936149][T29058] EXT4-fs (loop7): 1 orphan inode deleted
[ 1114.947612][T29058] EXT4-fs (loop7): 1 truncate cleaned up
[ 1114.959668][T29058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1115.066382][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.109083][   T28] kauditd_printk_skb: 605 callbacks suppressed
[ 1115.109099][   T28] audit: type=1400 audit(1065.828:79932): avc:  denied  { create } for  pid=29067 comm="syz.7.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1115.136187][   T28] audit: type=1400 audit(1065.846:79933): avc:  denied  { write } for  pid=29067 comm="syz.7.6480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1115.345090][   T28] audit: type=1400 audit(1066.043:79934): avc:  denied  { recv } for  pid=29043 comm="syz.4.6473" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1115.378568][   T28] audit: type=1400 audit(1066.062:79935): avc:  denied  { read write } for  pid=27313 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1115.404826][   T28] audit: type=1400 audit(1066.062:79936): avc:  denied  { open } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1115.458568][   T28] audit: type=1400 audit(1066.062:79937): avc:  denied  { ioctl } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1115.485002][   T28] audit: type=1400 audit(1066.099:79938): avc:  denied  { create } for  pid=29069 comm="syz.8.6481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1115.505360][   T28] audit: type=1400 audit(1066.127:79939): avc:  denied  { write } for  pid=29069 comm="syz.8.6481" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1115.576463][T29075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1115.594106][   T28] audit: type=1400 audit(1066.146:79940): avc:  denied  { read write } for  pid=27313 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1115.650395][T29075] EXT4-fs warning (device loop4): ext4_group_extend:1861: can't shrink FS - resize aborted
[ 1115.663620][   T28] audit: type=1400 audit(1066.146:79941): avc:  denied  { open } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1115.814747][T29083] iso9660: Corrupted directory entry in block 2 of inode 1792
[ 1115.816239][T22380] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1115.977244][T29088] EXT4-fs: Ignoring removed bh option
[ 1116.040545][T29088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1116.207403][T29088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6488'.
[ 1118.094033][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1118.335576][T29113] x_tables: duplicate underflow at hook 1
[ 1118.557962][T29124] set_capacity_and_notify: 3 callbacks suppressed
[ 1118.557991][T29124] loop3: detected capacity change from 0 to 128
[ 1119.051218][T29132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29132 comm=syz.4.6496
[ 1119.318106][T24083] kworker/u8:50: attempt to access beyond end of device
[ 1119.318106][T24083] loop6: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1119.594029][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6502'.
[ 1119.603093][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6502'.
[ 1119.612623][T29151] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6502'.
[ 1119.728783][T29156] loop8: detected capacity change from 0 to 128
[ 1119.762330][T29156] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1119.923702][T27313] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1120.366913][T29170] loop8: detected capacity change from 0 to 8192
[ 1120.405357][T29174] loop6: detected capacity change from 0 to 512
[ 1120.459674][T29174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1120.472761][   T28] kauditd_printk_skb: 355 callbacks suppressed
[ 1120.472781][   T28] audit: type=1400 audit(1070.778:80297): avc:  denied  { execmem } for  pid=29176 comm="syz.4.6513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1120.542007][T29170]  loop8: p1 < > p2 p4 < p5 >
[ 1120.611956][T29170] loop8: partition table partially beyond EOD, truncated
[ 1120.682114][T29170] loop8: p1 start 134217728 is beyond EOD, truncated
[ 1120.689421][T29170] loop8: p2 size 591360 extends beyond EOD, truncated
[ 1120.732952][T29170] loop8: p5 size 591360 extends beyond EOD, truncated
[ 1120.800000][T29174] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[ 1121.072949][T29174] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1121.334204][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1121.522091][T29190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1121.563759][   T28] audit: type=1400 audit(1070.788:80298): avc:  denied  { recv } for  pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1121.586305][T29191] SELinux: syz.6.6517 (29191) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[ 1121.669743][   T28] audit: type=1400 audit(1070.806:80299): avc:  denied  { mounton } for  pid=29173 comm="syz.6.6512" path="/329/bus" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1121.733443][   T28] audit: type=1400 audit(1070.881:80300): avc:  denied  { open } for  pid=29167 comm="syz.8.6510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1121.778442][   T28] audit: type=1400 audit(1070.881:80301): avc:  denied  { perfmon } for  pid=29167 comm="syz.8.6510" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1121.827991][   T28] audit: type=1400 audit(1070.881:80302): avc:  denied  { kernel } for  pid=29167 comm="syz.8.6510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1121.928719][   T28] audit: type=1400 audit(1070.900:80303): avc:  denied  { read write } for  pid=23005 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1122.024616][   T28] audit: type=1400 audit(1070.900:80304): avc:  denied  { open } for  pid=23005 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1122.078652][T29197] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1122.095537][T29197] audit: audit_lost=645 audit_rate_limit=0 audit_backlog_limit=64
[ 1122.143884][T29197] loop7: detected capacity change from 0 to 512
[ 1122.182419][T29197] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1122.233166][T29197] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6519: invalid indirect mapped block 4294967295 (level 0)
[ 1122.279581][T29197] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1122.280405][T29197] EXT4-fs (loop7): Remounting filesystem read-only
[ 1122.289620][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1122.289640][    C1] EXT4-fs (loop7): initial error at time 1072: ext4_free_branches:1023: inode 16
[ 1122.289677][    C1] EXT4-fs (loop7): last error at time 1072: ext4_free_branches:1023: inode 16
[ 1122.369567][T29197] EXT4-fs (loop7): 1 orphan inode deleted
[ 1122.386069][T29197] EXT4-fs (loop7): 1 truncate cleaned up
[ 1122.408704][T29197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1122.553967][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1122.617305][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6522'.
[ 1122.652092][T29206] netlink: 'syz.7.6522': attribute type 22 has an invalid length.
[ 1123.234731][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6522'.
[ 1123.337844][T29217] loop3: detected capacity change from 0 to 1024
[ 1123.348131][T29217] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1123.360295][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6522'.
[ 1123.370446][T29206] netlink: 'syz.7.6522': attribute type 22 has an invalid length.
[ 1123.378356][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6522'.
[ 1123.385776][T29217] EXT4-fs (loop3): group descriptors corrupted!
[ 1123.614549][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1123.745458][T29233] loop8: detected capacity change from 0 to 512
[ 1123.765949][T29233] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1123.794965][T29233] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.6533: invalid indirect mapped block 4294967295 (level 0)
[ 1123.830911][T29233] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1123.831556][T29233] EXT4-fs (loop8): Remounting filesystem read-only
[ 1123.840922][    C1] EXT4-fs (loop8): error count since last fsck: 1
[ 1123.840981][    C1] EXT4-fs (loop8): initial error at time 1073: ext4_free_branches:1023: inode 16
[ 1123.841007][    C1] EXT4-fs (loop8): last error at time 1073: ext4_free_branches:1023: inode 16
[ 1123.886913][T29233] EXT4-fs (loop8): 1 orphan inode deleted
[ 1123.893670][T29233] EXT4-fs (loop8): 1 truncate cleaned up
[ 1123.901074][T29233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1123.951520][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1124.139110][T29242] SELinux:  Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped).
[ 1124.618018][T29260] loop8: detected capacity change from 0 to 128
[ 1125.450190][T29264] loop3: detected capacity change from 0 to 128
[ 1125.846221][   T28] kauditd_printk_skb: 349 callbacks suppressed
[ 1125.846239][   T28] audit: type=1400 audit(1075.869:80653): avc:  denied  { sys_module } for  pid=29258 comm="syz.3.6542" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1125.907684][   T28] audit: type=1400 audit(1075.869:80654): avc:  denied  { module_request } for  pid=29258 comm="syz.3.6542" kmod="syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1125.941232][   T28] audit: type=1400 audit(1075.897:80655): avc:  denied  { recv } for  pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1126.016489][   T28] audit: type=1400 audit(1075.916:80656): avc:  denied  { read write } for  pid=22380 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1126.043840][   T28] audit: type=1400 audit(1075.916:80657): avc:  denied  { open } for  pid=22380 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1126.115699][T29274] netlink: 'syz.3.6544': attribute type 10 has an invalid length.
[ 1126.118172][   T28] audit: type=1400 audit(1075.916:80658): avc:  denied  { ioctl } for  pid=22380 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1126.150743][T29274] team0: Failed to send options change via netlink (err -105)
[ 1126.172750][T29278] netlink: 'syz.3.6544': attribute type 10 has an invalid length.
[ 1126.190562][T29274] team0: Port device dummy0 added
[ 1126.191094][T29275] loop4: detected capacity change from 0 to 512
[ 1126.206651][   T28] audit: type=1400 audit(1075.953:80659): avc:  denied  { create } for  pid=29267 comm="syz.4.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1126.212912][T29278] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1126.230806][T29275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1126.258075][   T28] audit: type=1400 audit(1075.962:80660): avc:  denied  { create } for  pid=29267 comm="syz.4.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1126.278688][   T28] audit: type=1400 audit(1075.962:80661): avc:  denied  { read } for  pid=29267 comm="syz.4.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1126.319016][T29275] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6546: invalid indirect mapped block 4294967295 (level 0)
[ 1126.339394][T29275] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1126.339483][   T28] audit: type=1400 audit(1076.037:80662): avc:  denied  { unmount } for  pid=27313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 1126.368374][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1126.368394][    C1] EXT4-fs (loop4): initial error at time 1076: ext4_free_branches:1023: inode 16
[ 1126.368427][    C1] EXT4-fs (loop4): last error at time 1076: ext4_free_branches:1023: inode 16
[ 1126.415655][T29275] EXT4-fs (loop4): Remounting filesystem read-only
[ 1126.432527][T29275] EXT4-fs (loop4): 1 orphan inode deleted
[ 1126.435782][T29278] team0: Failed to send options change via netlink (err -105)
[ 1126.446300][T29278] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1126.450195][T29275] EXT4-fs (loop4): 1 truncate cleaned up
[ 1126.455313][T29278] team0: Port device dummy0 removed
[ 1126.466368][T29274] ±ÿ: renamed from team_slave_1
[ 1126.473422][T29275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1126.576463][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1126.615328][T29287] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1126.639286][T29287] team0: Port device bond0 added
[ 1126.700399][T29290] loop4: detected capacity change from 0 to 512
[ 1126.714582][T29290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1126.787924][T29290] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.6549: Unimplemented hash flags: 0x0001
[ 1126.818615][T29290] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6549: Corrupt directory, running e2fsck is recommended
[ 1126.847708][T29296] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.6549: Unimplemented hash flags: 0x0001
[ 1126.877398][T29296] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6549: Corrupt directory, running e2fsck is recommended
[ 1126.971506][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1128.161751][T29315] loop6: detected capacity change from 0 to 128
[ 1129.430798][T29324] FAULT_INJECTION: forcing a failure.
[ 1129.430798][T29324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1129.462957][T29324] CPU: 1 UID: 0 PID: 29324 Comm: syz.4.6561 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1129.462990][T29324] Tainted: [W]=WARN
[ 1129.462998][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1129.463011][T29324] Call Trace:
[ 1129.463018][T29324]  <TASK>
[ 1129.463028][T29324]  __dump_stack+0x1d/0x30
[ 1129.463102][T29324]  dump_stack_lvl+0x95/0xd0
[ 1129.463126][T29324]  dump_stack+0x15/0x1b
[ 1129.463147][T29324]  should_fail_ex+0x263/0x280
[ 1129.463189][T29324]  should_fail+0xb/0x20
[ 1129.463223][T29324]  should_fail_usercopy+0x1a/0x20
[ 1129.463253][T29324]  _copy_to_user+0x20/0xa0
[ 1129.463296][T29324]  simple_read_from_buffer+0xb5/0x130
[ 1129.463347][T29324]  proc_fail_nth_read+0x10e/0x150
[ 1129.463388][T29324]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1129.463417][T29324]  vfs_read+0x1ab/0x7f0
[ 1129.463515][T29324]  ? __rcu_read_unlock+0x4e/0x70
[ 1129.463541][T29324]  ? __fget_files+0x184/0x1c0
[ 1129.463568][T29324]  ? xsk_setsockopt+0x4d4/0x640
[ 1129.463691][T29324]  ? mutex_lock+0x57/0x90
[ 1129.463724][T29324]  ksys_read+0xdc/0x1a0
[ 1129.463756][T29324]  __x64_sys_read+0x40/0x50
[ 1129.463826][T29324]  x64_sys_call+0x2886/0x3020
[ 1129.463852][T29324]  do_syscall_64+0x12c/0x3b0
[ 1129.463888][T29324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.463981][T29324] RIP: 0033:0x7fb3a666d04e
[ 1129.463998][T29324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1129.464019][T29324] RSP: 002b:00007fb3a5106fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1129.464044][T29324] RAX: ffffffffffffffda RBX: 00007fb3a51076c0 RCX: 00007fb3a666d04e
[ 1129.464060][T29324] RDX: 000000000000000f RSI: 00007fb3a51070a0 RDI: 0000000000000004
[ 1129.464076][T29324] RBP: 00007fb3a5107090 R08: 0000000000000000 R09: 0000000000000000
[ 1129.464178][T29324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1129.464216][T29324] R13: 00007fb3a6926038 R14: 00007fb3a6925fa0 R15: 00007ffe47c290c8
[ 1129.464259][T29324]  </TASK>
[ 1129.473956][T29325] syzkaller0: entered promiscuous mode
[ 1129.562332][T29329] loop4: detected capacity change from 0 to 128
[ 1129.609217][T29325] syzkaller0: entered allmulticast mode
[ 1129.730270][T29325] syzkaller0: left promiscuous mode
[ 1129.735624][T29325] syzkaller0: left allmulticast mode
[ 1129.753249][T29325] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved
[ 1130.356824][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6572'.
[ 1130.375534][T29354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6572'.
[ 1130.392458][T29354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6572'.
[ 1130.412538][T29354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6572'.
[ 1130.414449][T29358] loop3: detected capacity change from 0 to 1024
[ 1130.429392][T29358] EXT4-fs: test_dummy_encryption option not supported
[ 1130.688902][T29361] FAULT_INJECTION: forcing a failure.
[ 1130.688902][T29361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1131.391729][T29361] CPU: 0 UID: 0 PID: 29361 Comm: syz.8.6573 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1131.391764][T29361] Tainted: [W]=WARN
[ 1131.391771][T29361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1131.391783][T29361] Call Trace:
[ 1131.391789][T29361]  <TASK>
[ 1131.391797][T29361]  __dump_stack+0x1d/0x30
[ 1131.391829][T29361]  dump_stack_lvl+0x95/0xd0
[ 1131.391910][T29361]  dump_stack+0x15/0x1b
[ 1131.391938][T29361]  should_fail_ex+0x263/0x280
[ 1131.392000][T29361]  should_fail+0xb/0x20
[ 1131.392025][T29361]  should_fail_usercopy+0x1a/0x20
[ 1131.392055][T29361]  _copy_from_user+0x1c/0xb0
[ 1131.392075][T29361]  ___sys_sendmsg+0xc1/0x1e0
[ 1131.392181][T29361]  __x64_sys_sendmsg+0xd4/0x160
[ 1131.392213][T29361]  x64_sys_call+0x194c/0x3020
[ 1131.392288][T29361]  do_syscall_64+0x12c/0x3b0
[ 1131.392314][T29361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.392339][T29361] RIP: 0033:0x7f4bca7fc819
[ 1131.392356][T29361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1131.392407][T29361] RSP: 002b:00007f4bc9215028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1131.392502][T29361] RAX: ffffffffffffffda RBX: 00007f4bcaa76180 RCX: 00007f4bca7fc819
[ 1131.392581][T29361] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000009
[ 1131.392601][T29361] RBP: 00007f4bc9215090 R08: 0000000000000000 R09: 0000000000000000
[ 1131.392614][T29361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1131.392626][T29361] R13: 00007f4bcaa76218 R14: 00007f4bcaa76180 R15: 00007ffe001a11b8
[ 1131.392645][T29361]  </TASK>
[ 1131.448782][   T28] kauditd_printk_skb: 325 callbacks suppressed
[ 1131.448799][   T28] audit: type=1400 audit(1336.195:80988): avc:  denied  { execmem } for  pid=29357 comm="syz.3.6574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1132.732321][   T28] audit: type=1400 audit(1336.289:80989): avc:  denied  { prog_load } for  pid=29355 comm="syz.8.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1132.753496][   T28] audit: type=1400 audit(1336.289:80990): avc:  denied  { bpf } for  pid=29355 comm="syz.8.6573" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1132.802797][T29371] loop3: detected capacity change from 0 to 1024
[ 1132.813781][   T28] audit: type=1400 audit(1336.289:80991): avc:  denied  { perfmon } for  pid=29355 comm="syz.8.6573" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1132.825032][T29371] EXT4-fs: test_dummy_encryption option not supported
[ 1132.843420][   T28] audit: type=1400 audit(1336.298:80992): avc:  denied  { prog_run } for  pid=29355 comm="syz.8.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1132.868273][   T28] audit: type=1400 audit(1336.298:80993): avc:  denied  { open } for  pid=29355 comm="syz.8.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1132.916715][   T28] audit: type=1400 audit(1336.298:80994): avc:  denied  { kernel } for  pid=29355 comm="syz.8.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1132.937351][T29371] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1132.944640][T29371] audit: audit_lost=646 audit_rate_limit=0 audit_backlog_limit=64
[ 1132.950176][   T28] audit: type=1400 audit(1336.298:80995): avc:  denied  { create } for  pid=29355 comm="syz.8.6573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1133.270765][T29401] usb usb8: usbfs: process 29401 (syz.3.6585) did not claim interface 0 before use
[ 1133.704066][T29409] loop3: detected capacity change from 0 to 128
[ 1134.603920][T29411] loop8: detected capacity change from 0 to 128
[ 1135.202289][T29422] loop8: detected capacity change from 0 to 512
[ 1135.224745][T29422] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6590: bg 0: block 127: padding at end of block bitmap is not set
[ 1135.267685][T29422] loop8: lost filesystem error report for type 5 error -117
[ 1135.268102][T29422] EXT4-fs error (device loop8): ext4_free_inode:354: comm syz.8.6590: bit already cleared for inode 11
[ 1135.275514][    C1] EXT4-fs (loop8): error count since last fsck: 1
[ 1135.275534][    C1] EXT4-fs (loop8): initial error at time 1340: ext4_validate_block_bitmap:441
[ 1135.275556][    C1] EXT4-fs (loop8): last error at time 1340: ext4_validate_block_bitmap:441
[ 1135.343649][T29422] loop8: lost filesystem error report for type 5 error -117
[ 1135.343871][T29422] EXT4-fs (loop8): 1 orphan inode deleted
[ 1135.359495][T29422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1135.727867][T27564] hid_parser_main: 91 callbacks suppressed
[ 1135.727929][T27564] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[ 1135.756949][T29444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.757019][T27564] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1135.790364][T29444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1135.865812][T29447] loop4: detected capacity change from 0 to 1024
[ 1135.882768][T29444] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1135.892260][T29447] EXT4-fs: test_dummy_encryption option not supported
[ 1135.919231][T29444] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1136.032826][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1136.147684][T29453] loop4: detected capacity change from 0 to 512
[ 1136.174058][T29453] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1136.215259][T29453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6599'.
[ 1136.281871][T29460] loop8: detected capacity change from 0 to 512
[ 1136.427731][T29460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1136.600977][T29453] geneve1: left allmulticast mode
[ 1136.606992][T24084] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.659896][T24084] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.672034][T22380] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1136.682318][T24084] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.698770][T24084] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.802764][   T28] kauditd_printk_skb: 512 callbacks suppressed
[ 1136.802781][   T28] audit: type=1400 audit(2938.909:81446): avc:  denied  { module_request } for  pid=29473 comm="syz.3.6602" kmod="net-pf-10-proto-0-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1136.867024][T29470] syzkaller0: entered promiscuous mode
[ 1136.885337][T29470] syzkaller0: entered allmulticast mode
[ 1136.895722][   T28] audit: type=1400 audit(2938.918:81448): avc:  denied  { create } for  pid=29471 comm="syz.7.6601" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1136.956462][   T28] audit: type=1400 audit(2938.974:81449): avc:  denied  { map_create } for  pid=29469 comm="syz.4.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1136.995779][   T28] audit: type=1400 audit(2938.974:81450): avc:  denied  { bpf } for  pid=29469 comm="syz.4.6600" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1137.023205][   T28] audit: type=1400 audit(2938.974:81451): avc:  denied  { map_read map_write } for  pid=29469 comm="syz.4.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1137.043488][   T28] audit: type=1400 audit(2938.974:81452): avc:  denied  { prog_load } for  pid=29469 comm="syz.4.6600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1137.087055][   T28] audit: type=1400 audit(2938.974:81453): avc:  denied  { read write } for  pid=29473 comm="syz.3.6602" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1137.129118][   T28] audit: type=1400 audit(2938.974:81454): avc:  denied  { open } for  pid=29473 comm="syz.3.6602" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[ 1137.181488][   T28] audit: type=1400 audit(2938.984:81455): avc:  denied  { setopt } for  pid=29451 comm="syz.8.6598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1137.208828][   T28] audit: type=1400 audit(2938.993:81456): avc:  denied  { module_request } for  pid=29473 comm="syz.3.6602" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 1137.435362][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1137.507639][T29494] FAULT_INJECTION: forcing a failure.
[ 1137.507639][T29494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1137.536396][T29494] CPU: 0 UID: 0 PID: 29494 Comm: syz.7.6608 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1137.536432][T29494] Tainted: [W]=WARN
[ 1137.536439][T29494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1137.536451][T29494] Call Trace:
[ 1137.536458][T29494]  <TASK>
[ 1137.536466][T29494]  __dump_stack+0x1d/0x30
[ 1137.536513][T29494]  dump_stack_lvl+0x95/0xd0
[ 1137.536552][T29494]  dump_stack+0x15/0x1b
[ 1137.536573][T29494]  should_fail_ex+0x263/0x280
[ 1137.536658][T29494]  should_fail+0xb/0x20
[ 1137.536683][T29494]  should_fail_usercopy+0x1a/0x20
[ 1137.536780][T29494]  _copy_from_user+0x1c/0xb0
[ 1137.536802][T29494]  ___sys_sendmsg+0xc1/0x1e0
[ 1137.536839][T29494]  __x64_sys_sendmsg+0xd4/0x160
[ 1137.536874][T29494]  x64_sys_call+0x194c/0x3020
[ 1137.536908][T29494]  do_syscall_64+0x12c/0x3b0
[ 1137.537054][T29494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1137.537109][T29494] RIP: 0033:0x7f2e32ccc819
[ 1137.537128][T29494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1137.537146][T29494] RSP: 002b:00007f2e31727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1137.537166][T29494] RAX: ffffffffffffffda RBX: 00007f2e32f45fa0 RCX: 00007f2e32ccc819
[ 1137.537180][T29494] RDX: 0000000020004044 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1137.537228][T29494] RBP: 00007f2e31727090 R08: 0000000000000000 R09: 0000000000000000
[ 1137.537244][T29494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1137.537259][T29494] R13: 00007f2e32f46038 R14: 00007f2e32f45fa0 R15: 00007fff018085b8
[ 1137.537277][T29494]  </TASK>
[ 1137.788123][T29502] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6609'.
[ 1138.265304][T29513] 9p: Bad value for 'wfdno'
[ 1138.568401][T29496] loop8: detected capacity change from 0 to 32768
[ 1138.630330][T29496]  loop8: p1 p3 < >
[ 1138.752829][T29515] loop7: detected capacity change from 0 to 512
[ 1138.780331][T29515] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1138.815365][T29515] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.6613: invalid indirect mapped block 4294967295 (level 0)
[ 1138.858791][T29515] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1138.860279][T29515] EXT4-fs (loop7): Remounting filesystem read-only
[ 1138.869479][    C0] EXT4-fs (loop7): error count since last fsck: 1
[ 1138.869504][    C0] EXT4-fs (loop7): initial error at time 2940: ext4_free_branches:1023: inode 16
[ 1138.869536][    C0] EXT4-fs (loop7): last error at time 2940: ext4_free_branches:1023: inode 16
[ 1138.881871][ T3564] udevd[3564]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1138.883993][T29515] EXT4-fs (loop7): 1 orphan inode deleted
[ 1138.908510][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[ 1138.912415][T29515] EXT4-fs (loop7): 1 truncate cleaned up
[ 1138.934816][T29515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1138.956525][T29517] syzkaller0: entered promiscuous mode
[ 1138.966453][T29517] syzkaller0: entered allmulticast mode
[ 1139.004547][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1139.657271][T29549] netlink: 'syz.7.6624': attribute type 4 has an invalid length.
[ 1139.936236][T29556] program syz.4.6626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1140.346432][T29564] loop4: detected capacity change from 0 to 512
[ 1140.357582][T29564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1140.428785][T29564] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6627: invalid indirect mapped block 4294967295 (level 0)
[ 1140.473238][T29564] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1140.473426][T29564] EXT4-fs (loop4): Remounting filesystem read-only
[ 1140.482692][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1140.482730][    C1] EXT4-fs (loop4): initial error at time 2942: ext4_free_branches:1023: inode 16
[ 1140.482759][    C1] EXT4-fs (loop4): last error at time 2942: ext4_free_branches:1023: inode 16
[ 1140.624890][T29571] loop7: detected capacity change from 0 to 7
[ 1140.649667][T29571] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1140.662883][T29564] EXT4-fs (loop4): 1 orphan inode deleted
[ 1140.672005][T29571] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1140.675055][T29564] EXT4-fs (loop4): 1 truncate cleaned up
[ 1140.703898][T29571]  loop7: unable to read partition table
[ 1140.704790][T29564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1140.722555][T29571] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[ 1140.727165][ T3564] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1140.762191][ T3564] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1140.784672][ T3564] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1140.822729][ T3564] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1140.867599][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1140.879308][T29576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1140.898194][ T3564] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1141.141864][T29590] loop4: detected capacity change from 0 to 512
[ 1141.557981][T29592] loop8: detected capacity change from 0 to 512
[ 1141.574376][T29592] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1141.592649][T29592] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[ 1141.610361][T29592] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.6636: bad orphan inode 4
[ 1141.631308][T29592] loop8: lost filesystem error report for type 5 error -117
[ 1141.631724][T29592] EXT4-fs (loop8): 1 orphan inode deleted
[ 1141.644890][    C1] EXT4-fs (loop8): error count since last fsck: 1
[ 1141.644909][    C1] EXT4-fs (loop8): initial error at time 2943: ext4_orphan_get:1423
[ 1141.644948][    C1] EXT4-fs (loop8): last error at time 2943: ext4_orphan_get:1423
[ 1141.674864][T29592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1141.884846][T29596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=29596 comm=syz.7.6637
[ 1141.995056][T29589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1142.004269][T29589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1142.094465][T29600] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[ 1142.162080][   T28] kauditd_printk_skb: 411 callbacks suppressed
[ 1142.162124][   T28] audit: type=1400 audit(2943.934:81868): avc:  denied  { recv } for  pid=29591 comm="syz.8.6636" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1142.303517][   T28] audit: type=1400 audit(2944.028:81869): avc:  denied  { recv } for  pid=29591 comm="syz.8.6636" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1142.435872][   T28] audit: type=1400 audit(2944.037:81870): avc:  denied  { read write } for  pid=26057 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1142.541282][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1142.566617][   T28] audit: type=1400 audit(2944.037:81871): avc:  denied  { open } for  pid=26057 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1142.616799][   T28] audit: type=1400 audit(2944.037:81872): avc:  denied  { ioctl } for  pid=26057 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1142.682412][T29608] loop4: detected capacity change from 0 to 512
[ 1142.691054][   T28] audit: type=1400 audit(2944.121:81873): avc:  denied  { allowed } for  pid=29601 comm="syz.7.6639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1142.718736][T29608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1142.872292][T29608] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 1143.884946][   T28] audit: type=1400 audit(2944.130:81874): avc:  denied  { create } for  pid=29601 comm="syz.7.6639" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1143.919064][T29608] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.6638: bad orphan inode 4
[ 1144.290680][T29608] loop4: lost filesystem error report for type 5 error -117
[ 1144.298838][T29608] EXT4-fs (loop4): 1 orphan inode deleted
[ 1144.306256][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1144.306285][    C1] EXT4-fs (loop4): initial error at time 2945: ext4_orphan_get:1423
[ 1144.306310][    C1] EXT4-fs (loop4): last error at time 2945: ext4_orphan_get:1423
[ 1144.344319][   T28] audit: type=1400 audit(2944.149:81875): avc:  denied  { recv } for  pid=29591 comm="syz.8.6636" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1144.370205][T29608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1144.382789][   T28] audit: type=1400 audit(2944.168:81876): avc:  denied  { read write } for  pid=26057 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1144.451332][T29620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1144.460855][T29623] loop6: detected capacity change from 0 to 512
[ 1144.508357][T29623] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1144.538938][T29625] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1144.606910][T29624] loop8: detected capacity change from 0 to 512
[ 1144.800910][T29623] syzkaller0: entered promiscuous mode
[ 1144.806600][T29623] syzkaller0: entered allmulticast mode
[ 1145.128380][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1145.138765][T29620] loop7: detected capacity change from 0 to 4096
[ 1145.146999][T29620] EXT4-fs: Ignoring removed bh option
[ 1145.153151][T29624] EXT4-fs (loop8): 1 truncate cleaned up
[ 1145.167995][T29624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1145.267639][T29620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1145.283170][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1145.722429][T29653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.738682][T29653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.758988][T29650] loop4: detected capacity change from 0 to 512
[ 1145.887201][T29650] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1146.095007][T29654] loop8: detected capacity change from 0 to 128
[ 1146.292190][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1146.333572][T29650] EXT4-fs (loop4): invalid journal inode
[ 1146.352444][T29650] EXT4-fs (loop4): can't get journal size
[ 1146.389036][T29650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1146.442471][T29650] System zones: 1-12, 13-13
[ 1146.505751][T29650] EXT4-fs (loop4): 1 truncate cleaned up
[ 1146.628238][T29650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1146.829368][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1147.873088][   T28] kauditd_printk_skb: 280 callbacks suppressed
[ 1147.873106][   T28] audit: type=1400 audit(2949.277:82155): avc:  denied  { read write } for  pid=21484 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1148.002470][   T28] audit: type=1400 audit(2949.277:82156): avc:  denied  { open } for  pid=21484 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1148.087611][T29678] ip6t_rpfilter: unknown options
[ 1148.416787][   T28] audit: type=1400 audit(2949.277:82157): avc:  denied  { ioctl } for  pid=21484 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1148.553459][   T28] audit: type=1400 audit(2949.315:82158): avc:  denied  { recv } for  pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1148.681025][   T28] audit: type=1400 audit(2949.324:82159): avc:  denied  { write } for  pid=29661 comm="syz.8.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1148.702373][   T28] audit: type=1400 audit(2949.446:82160): avc:  denied  { allowed } for  pid=29671 comm="syz.4.6661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[ 1148.726311][T29690] program syz.7.6666 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1148.760440][   T28] audit: type=1400 audit(2949.465:82161): avc:  denied  { create } for  pid=29671 comm="syz.4.6661" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1148.785990][T29696] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1148.804431][T26057] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1148.804595][    C0] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1148.982345][T29699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1148.991447][T29699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.203106][T29705] FAULT_INJECTION: forcing a failure.
[ 1149.203106][T29705] name failslab, interval 1, probability 0, space 0, times 0
[ 1149.269922][T29705] CPU: 0 UID: 0 PID: 29705 Comm: syz.8.6671 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1149.269962][T29705] Tainted: [W]=WARN
[ 1149.269995][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1149.270089][T29705] Call Trace:
[ 1149.270097][T29705]  <TASK>
[ 1149.270105][T29705]  __dump_stack+0x1d/0x30
[ 1149.270132][T29705]  dump_stack_lvl+0x95/0xd0
[ 1149.270182][T29705]  dump_stack+0x15/0x1b
[ 1149.270210][T29705]  should_fail_ex+0x263/0x280
[ 1149.270244][T29705]  should_failslab+0x8c/0xb0
[ 1149.270311][T29705]  kmem_cache_alloc_node_noprof+0x6d/0x450
[ 1149.270402][T29705]  ? __alloc_skb+0x2d6/0x690
[ 1149.270421][T29705]  __alloc_skb+0x2d6/0x690
[ 1149.270439][T29705]  ? __alloc_skb+0x200/0x690
[ 1149.270467][T29705]  netlink_alloc_large_skb+0xbf/0xf0
[ 1149.270532][T29705]  netlink_sendmsg+0x40c/0x6f0
[ 1149.270595][T29705]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1149.270626][T29705]  ____sys_sendmsg+0x563/0x5b0
[ 1149.270718][T29705]  ___sys_sendmsg+0x195/0x1e0
[ 1149.270753][T29705]  __x64_sys_sendmsg+0xd4/0x160
[ 1149.270806][T29705]  x64_sys_call+0x194c/0x3020
[ 1149.270839][T29705]  do_syscall_64+0x12c/0x3b0
[ 1149.270942][T29705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1149.270965][T29705] RIP: 0033:0x7f4bca7fc819
[ 1149.270982][T29705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.271074][T29705] RSP: 002b:00007f4bc9257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1149.271099][T29705] RAX: ffffffffffffffda RBX: 00007f4bcaa75fa0 RCX: 00007f4bca7fc819
[ 1149.271142][T29705] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004
[ 1149.271205][T29705] RBP: 00007f4bc9257090 R08: 0000000000000000 R09: 0000000000000000
[ 1149.271219][T29705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1149.271234][T29705] R13: 00007f4bcaa76038 R14: 00007f4bcaa75fa0 R15: 00007ffe001a11b8
[ 1149.271260][T29705]  </TASK>
[ 1149.649919][T29716] loop6: detected capacity change from 0 to 512
[ 1149.659272][T29716] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1150.056391][T29734] loop3: detected capacity change from 0 to 1024
[ 1150.077184][T29734] EXT4-fs: test_dummy_encryption option not supported
[ 1150.255032][T29736] loop7: detected capacity change from 0 to 512
[ 1150.283222][T29736] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1150.293109][T29738] program syz.3.6680 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1150.322957][T29736] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[ 1150.354333][T29736] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.6679: bad orphan inode 4
[ 1150.369287][T29736] loop7: lost filesystem error report for type 5 error -117
[ 1150.370261][T29736] EXT4-fs (loop7): 1 orphan inode deleted
[ 1150.377698][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1150.377716][    C1] EXT4-fs (loop7): initial error at time 2951: ext4_orphan_get:1423
[ 1150.377757][    C1] EXT4-fs (loop7): last error at time 2951: ext4_orphan_get:1423
[ 1150.447468][T29736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1151.226055][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1151.309655][T29755] lo speed is unknown, defaulting to 1000
[ 1151.380346][T29759] loop4: detected capacity change from 0 to 512
[ 1151.439525][T29759] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1151.452797][T29759] EXT4-fs (loop4): invalid journal inode
[ 1151.458494][T29759] EXT4-fs (loop4): can't get journal size
[ 1151.501594][T29760] netlink: 'syz.7.6684': attribute type 39 has an invalid length.
[ 1151.519352][T29759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1151.527409][T29759] System zones: 1-12, 13-13
[ 1152.346199][T29759] EXT4-fs (loop4): 1 truncate cleaned up
[ 1152.352667][T29759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1152.679053][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1153.509527][   T28] kauditd_printk_skb: 478 callbacks suppressed
[ 1153.509612][   T28] audit: type=1400 audit(2954.490:82613): avc:  denied  { recv } for  pid=29784 comm="syz.8.6696" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1153.554849][   T28] audit: type=1400 audit(2954.546:82614): avc:  denied  { read write } for  pid=26057 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.588383][   T28] audit: type=1400 audit(2954.546:82615): avc:  denied  { open } for  pid=26057 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.596130][T29792] loop7: detected capacity change from 0 to 512
[ 1153.648555][T29791] loop4: detected capacity change from 0 to 512
[ 1153.703007][T29791] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1153.741668][   T28] audit: type=1400 audit(2954.546:82616): avc:  denied  { ioctl } for  pid=26057 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1153.794826][T29791] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 1153.808456][T29791] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.6694: bad orphan inode 4
[ 1153.819167][T29791] loop4: lost filesystem error report for type 5 error -117
[ 1153.821041][T29791] EXT4-fs (loop4): 1 orphan inode deleted
[ 1153.828420][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1153.828440][    C1] EXT4-fs (loop4): initial error at time 2954: ext4_orphan_get:1423
[ 1153.828462][    C1] EXT4-fs (loop4): last error at time 2954: ext4_orphan_get:1423
[ 1153.834772][T29792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002]
[ 1153.856941][T29791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1153.878988][   T28] audit: type=1400 audit(2954.621:82617): avc:  denied  { map_create } for  pid=29790 comm="syz.7.6697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1153.904085][T29792] System zones: 1-20
[ 1153.908748][   T28] audit: type=1400 audit(2954.621:82618): avc:  denied  { prog_load } for  pid=29790 comm="syz.7.6697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1153.928984][T29792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1153.943875][   T28] audit: type=1400 audit(2954.621:82619): avc:  denied  { bpf } for  pid=29790 comm="syz.7.6697" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1153.965700][   T28] audit: type=1400 audit(2954.621:82620): avc:  denied  { map_read map_write } for  pid=29790 comm="syz.7.6697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1153.986528][   T28] audit: type=1400 audit(2954.621:82621): avc:  denied  { perfmon } for  pid=29790 comm="syz.7.6697" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1154.010083][   T28] audit: type=1400 audit(2954.621:82622): avc:  denied  { perfmon } for  pid=29790 comm="syz.7.6697" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1154.708937][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1154.878532][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.692554][T29831] loop4: detected capacity change from 0 to 512
[ 1155.704563][T29831] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1155.724871][T29831] EXT4-fs (loop4): invalid journal inode
[ 1155.730742][T29831] EXT4-fs (loop4): can't get journal size
[ 1155.758938][T29831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1155.767050][T29831] System zones: 1-12, 13-13
[ 1155.775787][T29831] EXT4-fs (loop4): 1 truncate cleaned up
[ 1155.785106][T29831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1155.900142][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.965860][T29839] loop3: detected capacity change from 0 to 1024
[ 1156.013041][T29843] loop4: detected capacity change from 0 to 512
[ 1156.024856][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6712'.
[ 1156.030536][T29843] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1156.345837][T29861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1156.384398][T29861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.388274][T29866] can0: slcan on ttyS3.
[ 1156.443181][T29866] can0 (unregistered): slcan off ttyS3.
[ 1156.454346][T29866] can0: slcan on ttyS3.
[ 1156.516796][T29865] can0 (unregistered): slcan off ttyS3.
[ 1156.938121][T29898] loop7: detected capacity change from 0 to 512
[ 1156.953676][T29898] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1157.016905][T29898] EXT4-fs (loop7): invalid journal inode
[ 1157.053206][T29898] EXT4-fs (loop7): can't get journal size
[ 1157.089195][T29898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1157.102229][T29898] System zones: 1-12, 13-13
[ 1157.129343][T29898] EXT4-fs (loop7): 1 truncate cleaned up
[ 1157.154475][T29898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1157.440811][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1157.478248][T29921] loop8: detected capacity change from 0 to 512
[ 1157.485358][T29921] EXT4-fs: Ignoring removed nobh option
[ 1157.500573][T29921] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1157.526183][T29921] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.6727: EA inode hash validation failed
[ 1157.546481][T29921] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1157.575269][T29921] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.6727: corrupted inode contents
[ 1157.661328][T29930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6731'.
[ 1157.685962][T29921] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1157.687427][T29921] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #15: comm syz.8.6727: mark_inode_dirty error
[ 1157.698367][    C0] EXT4-fs (loop8): error count since last fsck: 1
[ 1157.698732][    C0] EXT4-fs (loop8): initial error at time 2958: ext4_do_update_inode:5690: inode 15
[ 1157.699233][    C0] EXT4-fs (loop8): last error at time 2958: ext4_do_update_inode:5690: inode 15
[ 1157.727815][T29933] loop6: detected capacity change from 0 to 256
[ 1157.790297][T29921] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1157.790488][T29921] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #15: comm syz.8.6727: corrupted inode contents
[ 1157.810762][T29933] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[ 1157.831493][T29921] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1157.833650][T29921] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.6727: mark_inode_dirty error
[ 1157.834379][T29933] FAT-fs (loop6): Filesystem has been set read-only
[ 1157.834408][T29933] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[ 1157.880186][T29921] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1157.882400][T29921] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.6727: mark inode dirty (error -117)
[ 1157.927682][T29921] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1157.927905][T29921] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117)
[ 1157.978118][T29921] EXT4-fs (loop8): 1 orphan inode deleted
[ 1158.002897][T29921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1158.115313][T29921] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6727'.
[ 1158.198805][T29945] FAULT_INJECTION: forcing a failure.
[ 1158.198805][T29945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1158.212734][T29945] CPU: 0 UID: 0 PID: 29945 Comm: syz.3.6737 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1158.212775][T29945] Tainted: [W]=WARN
[ 1158.212783][T29945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1158.212817][T29945] Call Trace:
[ 1158.212825][T29945]  <TASK>
[ 1158.212835][T29945]  __dump_stack+0x1d/0x30
[ 1158.212869][T29945]  dump_stack_lvl+0x95/0xd0
[ 1158.212896][T29945]  dump_stack+0x15/0x1b
[ 1158.212996][T29945]  should_fail_ex+0x263/0x280
[ 1158.213033][T29945]  should_fail+0xb/0x20
[ 1158.213065][T29945]  should_fail_usercopy+0x1a/0x20
[ 1158.213133][T29945]  _copy_to_user+0x20/0xa0
[ 1158.213153][T29945]  simple_read_from_buffer+0xb5/0x130
[ 1158.213182][T29945]  proc_fail_nth_read+0x10e/0x150
[ 1158.213213][T29945]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1158.213249][T29945]  vfs_read+0x1ab/0x7f0
[ 1158.213340][T29945]  ? __rcu_read_unlock+0x4e/0x70
[ 1158.213370][T29945]  ? __fget_files+0x184/0x1c0
[ 1158.213396][T29945]  ? mutex_lock+0x57/0x90
[ 1158.213430][T29945]  ksys_read+0xdc/0x1a0
[ 1158.213534][T29945]  __x64_sys_read+0x40/0x50
[ 1158.213568][T29945]  x64_sys_call+0x2886/0x3020
[ 1158.213600][T29945]  do_syscall_64+0x12c/0x3b0
[ 1158.213620][T29945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.213712][T29945] RIP: 0033:0x7f3bebbed04e
[ 1158.213733][T29945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1158.213755][T29945] RSP: 002b:00007f3bea686fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1158.213779][T29945] RAX: ffffffffffffffda RBX: 00007f3bea6876c0 RCX: 00007f3bebbed04e
[ 1158.213851][T29945] RDX: 000000000000000f RSI: 00007f3bea6870a0 RDI: 0000000000000005
[ 1158.213864][T29945] RBP: 00007f3bea687090 R08: 0000000000000000 R09: 0000000000000000
[ 1158.213877][T29945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1158.213890][T29945] R13: 00007f3bebea6038 R14: 00007f3bebea5fa0 R15: 00007ffc2173ce48
[ 1158.213911][T29945]  </TASK>
[ 1158.456004][T29948] loop6: detected capacity change from 0 to 512
[ 1158.470783][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1158.474254][T29948] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1158.574666][T29954] loop8: detected capacity change from 0 to 512
[ 1158.581863][T29954] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1158.600901][T29954] EXT4-fs (loop8): invalid journal inode
[ 1158.606752][T29954] EXT4-fs (loop8): can't get journal size
[ 1158.679542][T29954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1158.741383][T29954] System zones: 1-12, 13-13
[ 1158.788729][T29954] EXT4-fs (loop8): 1 truncate cleaned up
[ 1158.794999][T29954] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1158.972304][   T28] kauditd_printk_skb: 697 callbacks suppressed
[ 1158.972324][   T28] audit: type=1400 audit(2959.646:83320): avc:  denied  { open } for  pid=29957 comm="syz.4.6742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1159.815732][T29978] program syz.7.6744 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1160.022104][   T28] audit: type=1400 audit(2959.646:83321): avc:  denied  { perfmon } for  pid=29957 comm="syz.4.6742" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1160.044763][   T28] audit: type=1400 audit(2959.646:83322): avc:  denied  { kernel } for  pid=29957 comm="syz.4.6742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1160.094510][T29980] FAULT_INJECTION: forcing a failure.
[ 1160.094510][T29980] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1160.108577][T29980] CPU: 0 UID: 0 PID: 29980 Comm: syz.7.6745 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1160.108616][T29980] Tainted: [W]=WARN
[ 1160.108625][T29980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1160.108675][T29980] Call Trace:
[ 1160.108683][T29980]  <TASK>
[ 1160.108693][T29980]  __dump_stack+0x1d/0x30
[ 1160.108720][T29980]  dump_stack_lvl+0x95/0xd0
[ 1160.108743][T29980]  dump_stack+0x15/0x1b
[ 1160.108822][T29980]  should_fail_ex+0x263/0x280
[ 1160.108858][T29980]  should_fail+0xb/0x20
[ 1160.108890][T29980]  should_fail_usercopy+0x1a/0x20
[ 1160.108941][T29980]  _copy_to_user+0x20/0xa0
[ 1160.108961][T29980]  simple_read_from_buffer+0xb5/0x130
[ 1160.108987][T29980]  proc_fail_nth_read+0x10e/0x150
[ 1160.109026][T29980]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1160.109117][T29980]  vfs_read+0x1ab/0x7f0
[ 1160.109222][T29980]  ? __rcu_read_unlock+0x6b/0x70
[ 1160.109249][T29980]  ? __fget_files+0x184/0x1c0
[ 1160.109271][T29980]  ? mutex_lock+0x57/0x90
[ 1160.109299][T29980]  ksys_read+0xdc/0x1a0
[ 1160.109330][T29980]  __x64_sys_read+0x40/0x50
[ 1160.109404][T29980]  x64_sys_call+0x2886/0x3020
[ 1160.109434][T29980]  do_syscall_64+0x12c/0x3b0
[ 1160.109525][T29980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.109637][T29980] RIP: 0033:0x7f2e32c8d04e
[ 1160.109654][T29980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1160.109672][T29980] RSP: 002b:00007f2e31726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1160.109825][T29980] RAX: ffffffffffffffda RBX: 00007f2e317276c0 RCX: 00007f2e32c8d04e
[ 1160.109842][T29980] RDX: 000000000000000f RSI: 00007f2e317270a0 RDI: 000000000000000e
[ 1160.109858][T29980] RBP: 00007f2e31727090 R08: 0000000000000000 R09: 0000000000000000
[ 1160.109874][T29980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1160.109888][T29980] R13: 00007f2e32f46038 R14: 00007f2e32f45fa0 R15: 00007fff018085b8
[ 1160.109911][T29980]  </TASK>
[ 1161.146874][   T28] audit: type=1400 audit(2959.693:83323): avc:  denied  { read write } for  pid=29957 comm="syz.4.6742" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1161.267448][   T28] audit: type=1400 audit(2959.693:83324): avc:  denied  { open } for  pid=29957 comm="syz.4.6742" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[ 1161.299818][   T28] audit: type=1400 audit(2959.693:83325): avc:  denied  { map_create } for  pid=29957 comm="syz.4.6742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1161.338470][   T28] audit: type=1400 audit(2959.693:83326): avc:  denied  { map_read map_write } for  pid=29957 comm="syz.4.6742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1161.359379][   T28] audit: type=1400 audit(2959.945:83327): avc:  denied  { open } for  pid=29964 comm="syz.3.6743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1161.675371][   T28] audit: type=1400 audit(2959.945:83328): avc:  denied  { perfmon } for  pid=29964 comm="syz.3.6743" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1161.721192][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1161.841292][   T28] audit: type=1400 audit(2959.945:83329): avc:  denied  { kernel } for  pid=29964 comm="syz.3.6743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1162.020746][T29998] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[ 1162.095532][T29998] SELinux: failed to load policy
[ 1162.888776][T30038] loop7: detected capacity change from 0 to 512
[ 1162.943607][T30038] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1162.953415][T30038] EXT4-fs (loop7): invalid journal inode
[ 1162.964683][T30038] EXT4-fs (loop7): can't get journal size
[ 1162.985626][T30038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[ 1162.993982][T30038] System zones: 1-12, 13-13
[ 1162.999586][T30038] EXT4-fs (loop7): 1 truncate cleaned up
[ 1163.008565][T30038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1163.474921][T26057] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1163.489737][T30058] loop6: detected capacity change from 0 to 256
[ 1163.640927][T30066] loop6: detected capacity change from 0 to 512
[ 1163.653348][T30068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6767'.
[ 1163.665834][T30068] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6767'.
[ 1163.700378][T30066] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1163.717411][T30067] loop4: detected capacity change from 0 to 2048
[ 1163.730498][T30066] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[ 1163.754581][T30066] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.6769: bad orphan inode 4
[ 1163.764712][T30066] loop6: lost filesystem error report for type 5 error -117
[ 1163.764901][T30066] EXT4-fs (loop6): 1 orphan inode deleted
[ 1163.777992][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1163.778028][    C0] EXT4-fs (loop6): initial error at time 2964: ext4_orphan_get:1423
[ 1163.778047][    C0] EXT4-fs (loop6): last error at time 2964: ext4_orphan_get:1423
[ 1163.802736][T30066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1163.938495][T30067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1163.969947][T30067] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6770: bg 0: block 345: padding at end of block bitmap is not set
[ 1163.984877][T30067] EXT4-fs (loop4): Remounting filesystem read-only
[ 1164.359240][   T28] kauditd_printk_skb: 370 callbacks suppressed
[ 1164.359257][   T28] audit: type=1400 audit(2964.699:83691): avc:  denied  { recv } for  pid=3309 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1164.420816][   T28] audit: type=1400 audit(2964.737:83692): avc:  denied  { read write } for  pid=27313 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1164.447097][   T28] audit: type=1400 audit(2964.737:83693): avc:  denied  { open } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1164.504727][   T28] audit: type=1400 audit(2964.737:83694): avc:  denied  { ioctl } for  pid=27313 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1164.587574][   T28] audit: type=1400 audit(2964.737:83695): avc:  denied  { create } for  pid=30084 comm="syz.3.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1164.622961][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1164.638877][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1164.640863][   T28] audit: type=1400 audit(2964.774:83696): avc:  denied  { setopt } for  pid=30084 comm="syz.3.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1165.127670][T30104] FAULT_INJECTION: forcing a failure.
[ 1165.127670][T30104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1165.675546][   T28] audit: type=1400 audit(2964.793:83697): avc:  denied  { map } for  pid=30084 comm="syz.3.6775" path="socket:[96877]" dev="sockfs" ino=96877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1165.676024][T30106] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1165.701352][   T28] audit: type=1400 audit(2964.793:83698): avc:  denied  { read } for  pid=30084 comm="syz.3.6775" path="socket:[96877]" dev="sockfs" ino=96877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1165.705762][T30106] audit: audit_lost=681 audit_rate_limit=0 audit_backlog_limit=64
[ 1165.982065][T30104] CPU: 0 UID: 0 PID: 30104 Comm: syz.6.6778 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1165.982102][T30104] Tainted: [W]=WARN
[ 1165.982109][T30104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1165.982120][T30104] Call Trace:
[ 1165.982128][T30104]  <TASK>
[ 1165.982137][T30104]  __dump_stack+0x1d/0x30
[ 1165.982200][T30104]  dump_stack_lvl+0x95/0xd0
[ 1165.982248][T30104]  dump_stack+0x15/0x1b
[ 1165.982276][T30104]  should_fail_ex+0x263/0x280
[ 1165.982388][T30104]  should_fail+0xb/0x20
[ 1165.982421][T30104]  should_fail_usercopy+0x1a/0x20
[ 1165.982506][T30104]  _copy_from_user+0x1c/0xb0
[ 1165.982530][T30104]  kstrtouint_from_user+0x69/0xf0
[ 1165.982633][T30104]  ? 0xffffffff81000000
[ 1165.982650][T30104]  ? selinux_file_permission+0x1e1/0x320
[ 1165.982686][T30104]  proc_fail_nth_write+0x50/0x160
[ 1165.982781][T30104]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1165.982851][T30104]  vfs_write+0x269/0x9f0
[ 1165.982962][T30104]  ? __rcu_read_unlock+0x4e/0x70
[ 1165.982990][T30104]  ? __fget_files+0x184/0x1c0
[ 1165.983018][T30104]  ? fdget_pos+0x26/0x1d0
[ 1165.983124][T30104]  ? mutex_lock+0x57/0x90
[ 1165.983157][T30104]  ksys_write+0xdc/0x1a0
[ 1165.983236][T30104]  __x64_sys_write+0x40/0x50
[ 1165.983272][T30104]  x64_sys_call+0x27e1/0x3020
[ 1165.983298][T30104]  do_syscall_64+0x12c/0x3b0
[ 1165.983324][T30104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.983410][T30104] RIP: 0033:0x7f9846f0d04e
[ 1165.983426][T30104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1165.983447][T30104] RSP: 002b:00007f984597dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1165.983474][T30104] RAX: ffffffffffffffda RBX: 00007f984597e6c0 RCX: 00007f9846f0d04e
[ 1165.983491][T30104] RDX: 0000000000000001 RSI: 00007f984597e0a0 RDI: 0000000000000004
[ 1165.983507][T30104] RBP: 00007f984597e090 R08: 0000000000000000 R09: 0000000000000000
[ 1165.983592][T30104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1165.983607][T30104] R13: 00007f98471c6128 R14: 00007f98471c6090 R15: 00007ffdd2c3ebb8
[ 1165.983629][T30104]  </TASK>
[ 1166.417292][T30096] loop8: detected capacity change from 0 to 512
[ 1166.439164][T30096] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1166.489730][T30096] EXT4-fs (loop8): 1 orphan inode deleted
[ 1166.504392][T30096] EXT4-fs (loop8): 1 truncate cleaned up
[ 1166.589615][T30096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1166.671765][T30118] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6784'.
[ 1166.716533][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1166.898099][T30130] loop3: detected capacity change from 0 to 512
[ 1166.905405][T30130] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1166.917665][T30130] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[ 1166.926341][T30130] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6788: bad orphan inode 4
[ 1167.000376][T30130] loop3: lost filesystem error report for type 5 error -117
[ 1167.000701][T30130] EXT4-fs (loop3): 1 orphan inode deleted
[ 1167.013971][    C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1167.013991][    C0] EXT4-fs (loop3): initial error at time 2967: ext4_orphan_get:1423
[ 1167.014016][    C0] EXT4-fs (loop3): last error at time 2967: ext4_orphan_get:1423
[ 1167.047367][T30130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1167.273984][T30136] loop6: detected capacity change from 0 to 2048
[ 1167.286873][T30136] loop6: detected capacity change from 0 to 128
[ 1167.295841][T30136] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1168.546100][T30157] hub 8-0:1.0: USB hub found
[ 1168.551216][T30157] hub 8-0:1.0: 8 ports detected
[ 1168.567467][T30157] netlink: 'syz.8.6795': attribute type 10 has an invalid length.
[ 1168.834747][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6796'.
[ 1169.007858][T30157] macvlan1: entered allmulticast mode
[ 1169.019184][T30157] veth1_vlan: entered allmulticast mode
[ 1169.030035][T30157] team0: Port device macvlan1 added
[ 1169.108880][T23005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1169.353574][T30167] loop0: detected capacity change from 4096 to 4095
[ 1169.494572][T30180] loop3: detected capacity change from 0 to 512
[ 1169.515300][T30180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1169.710414][   T28] kauditd_printk_skb: 452 callbacks suppressed
[ 1169.710432][   T28] audit: type=1400 audit(2969.706:84013): avc:  denied  { map_create } for  pid=30186 comm="syz.7.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1169.739465][   T28] audit: type=1400 audit(2969.734:84014): avc:  denied  { perfmon } for  pid=30186 comm="syz.7.6806" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1169.760270][   T28] audit: type=1400 audit(2969.734:84015): avc:  denied  { recv } for  pid=30186 comm="syz.7.6806" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1169.859121][   T28] audit: type=1400 audit(2969.734:84016): avc:  denied  { map_create } for  pid=30186 comm="syz.7.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1169.885526][   T28] audit: type=1400 audit(2969.734:84017): avc:  denied  { map_read map_write } for  pid=30186 comm="syz.7.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1170.760131][T30202] FAULT_INJECTION: forcing a failure.
[ 1170.760131][T30202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1170.796759][T30202] CPU: 0 UID: 0 PID: 30202 Comm: syz.8.6809 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1170.796802][T30202] Tainted: [W]=WARN
[ 1170.796837][T30202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1170.796848][T30202] Call Trace:
[ 1170.796855][T30202]  <TASK>
[ 1170.796862][T30202]  __dump_stack+0x1d/0x30
[ 1170.796895][T30202]  dump_stack_lvl+0x95/0xd0
[ 1170.796920][T30202]  dump_stack+0x15/0x1b
[ 1170.797013][T30202]  should_fail_ex+0x263/0x280
[ 1170.797044][T30202]  should_fail+0xb/0x20
[ 1170.797075][T30202]  should_fail_usercopy+0x1a/0x20
[ 1170.797106][T30202]  _copy_from_user+0x1c/0xb0
[ 1170.797174][T30202]  ___sys_sendmsg+0xc1/0x1e0
[ 1170.797211][T30202]  __x64_sys_sendmsg+0xd4/0x160
[ 1170.797246][T30202]  x64_sys_call+0x194c/0x3020
[ 1170.797300][T30202]  do_syscall_64+0x12c/0x3b0
[ 1170.797329][T30202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.797354][T30202] RIP: 0033:0x7f4bca7fc819
[ 1170.797383][T30202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1170.797405][T30202] RSP: 002b:00007f4bc9236028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1170.797562][T30202] RAX: ffffffffffffffda RBX: 00007f4bcaa76090 RCX: 00007f4bca7fc819
[ 1170.797579][T30202] RDX: 0000000020000080 RSI: 00002000000001c0 RDI: 0000000000000008
[ 1170.797595][T30202] RBP: 00007f4bc9236090 R08: 0000000000000000 R09: 0000000000000000
[ 1170.797610][T30202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1170.797626][T30202] R13: 00007f4bcaa76128 R14: 00007f4bcaa76090 R15: 00007ffe001a11b8
[ 1170.797648][T30202]  </TASK>
[ 1171.122986][   T28] audit: type=1400 audit(2969.743:84018): avc:  denied  { execmem } for  pid=30195 comm="syz.6.6808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1171.361996][   T28] audit: type=1400 audit(2969.837:84019): avc:  denied  { open } for  pid=30187 comm="syz.4.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1171.384917][   T28] audit: type=1400 audit(2969.837:84020): avc:  denied  { perfmon } for  pid=30187 comm="syz.4.6807" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1171.406173][   T28] audit: type=1400 audit(2969.837:84021): avc:  denied  { kernel } for  pid=30187 comm="syz.4.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1171.436595][   T28] audit: type=1400 audit(2969.874:84022): avc:  denied  { create } for  pid=30193 comm="syz.8.6809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1171.554398][T23005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1171.993140][T30217] xt_l2tp: v2 doesn't support IP mode
[ 1172.031028][T30217] loop7: detected capacity change from 0 to 128
[ 1172.068494][T30224] FAULT_INJECTION: forcing a failure.
[ 1172.068494][T30224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1172.083864][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6811'.
[ 1172.130779][T30224] CPU: 1 UID: 0 PID: 30224 Comm: syz.8.6817 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1172.130818][T30224] Tainted: [W]=WARN
[ 1172.130869][T30224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1172.130930][T30224] Call Trace:
[ 1172.130939][T30224]  <TASK>
[ 1172.130949][T30224]  __dump_stack+0x1d/0x30
[ 1172.130983][T30224]  dump_stack_lvl+0x95/0xd0
[ 1172.131091][T30224]  dump_stack+0x15/0x1b
[ 1172.131114][T30224]  should_fail_ex+0x263/0x280
[ 1172.131151][T30224]  should_fail+0xb/0x20
[ 1172.131193][T30224]  should_fail_usercopy+0x1a/0x20
[ 1172.131224][T30224]  _copy_from_user+0x1c/0xb0
[ 1172.131243][T30224]  get_user_ifreq+0x52/0x110
[ 1172.131341][T30224]  br_ioctl_stub+0xb9/0x8f0
[ 1172.131410][T30224]  ? do_vfs_ioctl+0x84f/0xe70
[ 1172.131445][T30224]  ? __pfx_br_ioctl_stub+0x10/0x10
[ 1172.131464][T30224]  sock_ioctl+0x39c/0x610
[ 1172.131547][T30224]  ? mutex_lock+0x57/0x90
[ 1172.131611][T30224]  ? __pfx_sock_ioctl+0x10/0x10
[ 1172.131635][T30224]  __se_sys_ioctl+0xce/0x140
[ 1172.131724][T30224]  __x64_sys_ioctl+0x43/0x50
[ 1172.131829][T30224]  x64_sys_call+0x1563/0x3020
[ 1172.131855][T30224]  do_syscall_64+0x12c/0x3b0
[ 1172.131877][T30224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.131904][T30224] RIP: 0033:0x7f4bca7fc819
[ 1172.132028][T30224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1172.132050][T30224] RSP: 002b:00007f4bc9257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1172.132076][T30224] RAX: ffffffffffffffda RBX: 00007f4bcaa75fa0 RCX: 00007f4bca7fc819
[ 1172.132101][T30224] RDX: 0000200000000200 RSI: 00000000000089a3 RDI: 0000000000000003
[ 1172.132162][T30224] RBP: 00007f4bc9257090 R08: 0000000000000000 R09: 0000000000000000
[ 1172.132178][T30224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1172.132191][T30224] R13: 00007f4bcaa76038 R14: 00007f4bcaa75fa0 R15: 00007ffe001a11b8
[ 1172.132237][T30224]  </TASK>
[ 1172.526106][T30228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6811'.
[ 1173.564202][T30253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6826'.
[ 1173.576707][T30253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6826'.
[ 1173.780792][T30261] loop4: detected capacity change from 0 to 1024
[ 1173.788113][T30261] EXT4-fs: Ignoring removed bh option
[ 1173.841954][T30261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1173.932868][T30261] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1173.994099][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6833'.
[ 1174.157736][T30281] loop8: detected capacity change from 0 to 512
[ 1174.168404][T30281] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1174.202671][T30281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[ 1174.214864][T30281] System zones: 1-12
[ 1174.229144][T30281] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1174.275681][T30281] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6836: bg 0: block 361: padding at end of block bitmap is not set
[ 1174.316197][T30281] loop8: lost filesystem error report for type 5 error -117
[ 1174.319802][    C0] EXT4-fs (loop8): error count since last fsck: 1
[ 1174.334791][    C0] EXT4-fs (loop8): initial error at time 2974: ext4_validate_block_bitmap:441
[ 1174.345460][    C0] EXT4-fs (loop8): last error at time 2974: ext4_validate_block_bitmap:441
[ 1174.362645][T30281] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1174.378536][T30281] loop8: lost filesystem error report for type 5 error -117
[ 1174.379028][T30281] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.6836: attempt to clear invalid blocks 33619980 len 1
[ 1174.403240][T30281] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1174.404443][T30281] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6836: invalid indirect mapped block 1811939328 (level 0)
[ 1174.431011][T30281] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1174.431663][T30281] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6836: invalid indirect mapped block 2 (level 2)
[ 1174.457243][T30281] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1174.457803][T30281] EXT4-fs (loop8): 1 truncate cleaned up
[ 1174.684659][T30288] pim6reg1: entered promiscuous mode
[ 1174.715600][T30288] pim6reg1: entered allmulticast mode
[ 1174.774362][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1174.821160][T30281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1175.037767][T30292] loop3: detected capacity change from 0 to 128
[ 1175.076673][   T28] kauditd_printk_skb: 434 callbacks suppressed
[ 1175.076690][   T28] audit: type=1400 audit(2974.731:84453): avc:  denied  { create } for  pid=30291 comm="syz.3.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1175.129834][   T28] audit: type=1400 audit(2974.759:84454): avc:  denied  { read } for  pid=30295 comm="syz.4.6839" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1175.150772][   T28] audit: type=1400 audit(2974.759:84455): avc:  denied  { open } for  pid=30295 comm="syz.4.6839" path="net:[4026532386]" dev="nsfs" ino=4026532386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1175.172720][T30292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6840'.
[ 1175.173755][   T28] audit: type=1400 audit(2974.759:84456): avc:  denied  { write } for  pid=30291 comm="syz.3.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1175.173785][   T28] audit: type=1400 audit(2974.759:84457): avc:  denied  { read } for  pid=30291 comm="syz.3.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1175.223609][   T28] audit: type=1400 audit(2974.759:84458): avc:  denied  { create } for  pid=30295 comm="syz.4.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1175.269519][   T28] audit: type=1400 audit(2974.759:84459): avc:  denied  { prog_load } for  pid=30295 comm="syz.4.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1175.288250][   T28] audit: type=1400 audit(2974.759:84460): avc:  denied  { bpf } for  pid=30295 comm="syz.4.6839" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1175.312736][T30299] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6836'.
[ 1175.362857][   T28] audit: type=1400 audit(2974.759:84461): avc:  denied  { perfmon } for  pid=30295 comm="syz.4.6839" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1175.385963][   T28] audit: type=1400 audit(2974.759:84462): avc:  denied  { prog_run } for  pid=30295 comm="syz.4.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1175.508246][T27313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1175.599718][T30311] loop6: detected capacity change from 0 to 512
[ 1175.937617][T30311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1176.192825][T30324] loop4: detected capacity change from 0 to 512
[ 1176.205503][T30324] EXT4-fs: Ignoring removed nobh option
[ 1176.214242][T30324] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[ 1176.236427][T30324] 9p: Bad value for 'rfdno'
[ 1176.282532][T30333] program syz.3.6855 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1176.294965][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1176.628366][T30354] loop3: detected capacity change from 0 to 4096
[ 1176.643903][T30354] EXT4-fs: Ignoring removed bh option
[ 1176.683166][T30354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1176.718266][T30354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6862'.
[ 1176.778402][T23005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1176.780722][T30362] loop7: detected capacity change from 0 to 128
[ 1176.816496][T30364] program syz.4.6864 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1177.001553][T30372] loop4: detected capacity change from 0 to 164
[ 1177.009241][T30372] iso9660: Unknown parameter '„ˆÉ¹…ÅŸ•'
[ 1177.028269][T30375] program syz.3.6869 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1177.088585][T30372] syzkaller0: entered promiscuous mode
[ 1177.123295][T30372] syzkaller0: entered allmulticast mode
[ 1177.476221][T30392] loop8: detected capacity change from 0 to 256
[ 1177.898583][T30393] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6872'.
[ 1177.908280][T30393] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6872'.
[ 1178.013570][T30392] FAT-fs (loop8): Directory bread(block 64) failed
[ 1178.024254][T30392] FAT-fs (loop8): Directory bread(block 65) failed
[ 1178.086728][T30392] FAT-fs (loop8): Directory bread(block 66) failed
[ 1178.114445][T30392] FAT-fs (loop8): Directory bread(block 67) failed
[ 1178.135765][T30392] FAT-fs (loop8): Directory bread(block 68) failed
[ 1178.156517][T30392] FAT-fs (loop8): Directory bread(block 69) failed
[ 1178.275060][T30392] FAT-fs (loop8): Directory bread(block 70) failed
[ 1178.289874][T30392] FAT-fs (loop8): Directory bread(block 71) failed
[ 1178.305880][T30392] FAT-fs (loop8): Directory bread(block 72) failed
[ 1178.369982][T30392] FAT-fs (loop8): Directory bread(block 73) failed
[ 1178.510062][T30402] loop3: detected capacity change from 0 to 1024
[ 1178.525624][T30404] batadv0: entered allmulticast mode
[ 1178.537237][T30404] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1178.573747][T30402] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[ 1178.610702][T30402] System zones: 0-1, 3-36
[ 1178.635768][T30402] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6875: bad orphan inode 134217728
[ 1178.682840][T30402] loop3: lost filesystem error report for type 5 error -117
[ 1178.686144][T30402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1178.774169][T30419] program syz.4.6881 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1178.948371][T30423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6882'.
[ 1178.958785][T30423] devpts: Bad value for 'gid'
[ 1178.963531][T30423] devpts: Bad value for 'gid'
[ 1179.148845][T30427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6883'.
[ 1179.158518][T30428] 9pnet_fd: Insufficient options for proto=fd
[ 1179.253923][T30429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1179.284167][T30429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1179.692361][T30431] loop6: detected capacity change from 0 to 1024
[ 1179.709436][T30431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[ 1179.723825][T30431] System zones: 0-1, 3-12
[ 1179.728903][T30431] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1179.975970][T23005] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1180.224377][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[ 1180.378159][T30447] ip6gretap1: entered allmulticast mode
[ 1180.428931][   T28] kauditd_printk_skb: 829 callbacks suppressed
[ 1180.428957][   T28] audit: type=1400 audit(2979.738:85290): avc:  denied  { setopt } for  pid=30441 comm="syz.6.6888" lport=44499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1180.471897][   T28] audit: type=1400 audit(2979.747:85291): avc:  denied  { recv } for  pid=30443 comm="syz.3.6889" saddr=10.128.0.163 src=30036 daddr=10.128.0.85 dest=47398 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[ 1180.474525][T30447] geneve2: entered promiscuous mode
[ 1180.504748][T24097] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1180.513737][T24097] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1180.592439][   T28] audit: type=1400 audit(2979.766:85293): avc:  denied  { open } for  pid=30446 comm="syz.7.6891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1180.702979][   T28] audit: type=1400 audit(2979.784:85294): avc:  denied  { perfmon } for  pid=30446 comm="syz.7.6891" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1180.725250][   T28] audit: type=1400 audit(2979.766:85292): avc:  denied  { read } for  pid=30441 comm="syz.6.6888" lport=44499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1180.747862][   T28] audit: type=1400 audit(2979.784:85295): avc:  denied  { kernel } for  pid=30446 comm="syz.7.6891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1180.959956][   T28] audit: type=1400 audit(2979.784:85296): avc:  denied  { prog_load } for  pid=30445 comm="syz.8.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[ 1180.981793][T24097] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1180.986594][T30459] loop4: detected capacity change from 0 to 128
[ 1180.999219][T24097] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1181.005360][   T28] audit: type=1400 audit(2979.784:85297): avc:  denied  { perfmon } for  pid=30446 comm="syz.7.6891" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1181.045009][T30459] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52)
[ 1181.055057][T30461] program syz.6.6893 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1181.068124][   T28] audit: type=1400 audit(2979.784:85298): avc:  denied  { bpf } for  pid=30445 comm="syz.8.6890" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1181.072077][T30459] FAT-fs (loop4): Filesystem has been set read-only
[ 1181.089344][   T28] audit: type=1400 audit(2979.784:85299): avc:  denied  { perfmon } for  pid=30445 comm="syz.8.6890" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1181.103409][T30459] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52)
[ 1181.130823][T30459] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52)
[ 1181.146107][T30462] FAT-fs (loop4): error, corrupted directory (invalid entries)
[ 1181.186498][T30468] loop6: detected capacity change from 0 to 128
[ 1181.218974][T30468] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52)
[ 1181.229497][T30468] FAT-fs (loop6): Filesystem has been set read-only
[ 1181.237377][T30468] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 52)
[ 1181.246302][T30468] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 52)
[ 1181.299853][T30468] FAULT_INJECTION: forcing a failure.
[ 1181.299853][T30468] name failslab, interval 1, probability 0, space 0, times 0
[ 1181.313350][T30468] CPU: 1 UID: 0 PID: 30468 Comm: syz.6.6895 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1181.313384][T30468] Tainted: [W]=WARN
[ 1181.313391][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1181.313436][T30468] Call Trace:
[ 1181.313444][T30468]  <TASK>
[ 1181.313453][T30468]  __dump_stack+0x1d/0x30
[ 1181.313485][T30468]  dump_stack_lvl+0x95/0xd0
[ 1181.313512][T30468]  dump_stack+0x15/0x1b
[ 1181.313537][T30468]  should_fail_ex+0x263/0x280
[ 1181.313649][T30468]  should_failslab+0x8c/0xb0
[ 1181.313675][T30468]  kmem_cache_alloc_noprof+0x66/0x3f0
[ 1181.313773][T30468]  ? do_getname+0x2e/0x1c0
[ 1181.313798][T30468]  do_getname+0x2e/0x1c0
[ 1181.313824][T30468]  user_path_at+0x28/0x100
[ 1181.313852][T30468]  __se_sys_mount+0x25b/0x2e0
[ 1181.313951][T30468]  ? fput+0x8f/0xc0
[ 1181.313979][T30468]  __x64_sys_mount+0x67/0x80
[ 1181.314003][T30468]  x64_sys_call+0x2d61/0x3020
[ 1181.314030][T30468]  do_syscall_64+0x12c/0x3b0
[ 1181.314092][T30468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1181.314116][T30468] RIP: 0033:0x7f9846f4c819
[ 1181.314138][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1181.314160][T30468] RSP: 002b:00007f984599f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1181.314183][T30468] RAX: ffffffffffffffda RBX: 00007f98471c5fa0 RCX: 00007f9846f4c819
[ 1181.314210][T30468] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000
[ 1181.314279][T30468] RBP: 00007f984599f090 R08: 0000000000000000 R09: 0000000000000000
[ 1181.314293][T30468] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001
[ 1181.314306][T30468] R13: 00007f98471c6038 R14: 00007f98471c5fa0 R15: 00007ffdd2c3ebb8
[ 1181.314327][T30468]  </TASK>
[ 1181.315019][T30470] syzkaller0: entered promiscuous mode
[ 1181.321130][T30473] loop8: detected capacity change from 0 to 128
[ 1181.346663][T30470] syzkaller0: entered allmulticast mode
[ 1181.377721][T30475] loop3: detected capacity change from 0 to 256
[ 1181.424915][T30476] loop4: detected capacity change from 0 to 1024
[ 1181.498717][T30475] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1181.602500][T30476] EXT4-fs: Ignoring removed nobh option
[ 1181.625362][T30473] FAT-fs (loop8): error, corrupted directory (invalid entries)
[ 1181.634156][T30479] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1181.643154][T30473] FAT-fs (loop8): Filesystem has been set read-only
[ 1181.669080][T30476] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1181.708969][T30486] FAT-fs (loop8): error, corrupted directory (invalid entries)
[ 1181.719118][T30476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1181.771448][T30473] FAT-fs (loop8): error, corrupted directory (invalid entries)
[ 1182.073073][T30515] syzkaller0: entered promiscuous mode
[ 1182.085359][T30515] syzkaller0: entered allmulticast mode
[ 1184.854557][T30617] program syz.8.6906 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1184.873579][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1184.895292][T30618] FAULT_INJECTION: forcing a failure.
[ 1184.895292][T30618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1184.946571][T30618] CPU: 1 UID: 0 PID: 30618 Comm: syz.3.6908 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1184.946605][T30618] Tainted: [W]=WARN
[ 1184.946617][T30618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1184.946629][T30618] Call Trace:
[ 1184.946636][T30618]  <TASK>
[ 1184.946646][T30618]  __dump_stack+0x1d/0x30
[ 1184.946688][T30618]  dump_stack_lvl+0x95/0xd0
[ 1184.946712][T30618]  dump_stack+0x15/0x1b
[ 1184.946754][T30618]  should_fail_ex+0x263/0x280
[ 1184.946790][T30618]  should_fail+0xb/0x20
[ 1184.946827][T30618]  should_fail_usercopy+0x1a/0x20
[ 1184.946859][T30618]  _copy_from_user+0x1c/0xb0
[ 1184.946882][T30618]  bpf_obj_get_info_by_fd+0x318/0x2370
[ 1184.946947][T30618]  ? _parse_integer+0x27/0x40
[ 1184.947018][T30618]  ? kstrtoull+0x111/0x140
[ 1184.947074][T30618]  __sys_bpf+0x557/0x7e0
[ 1184.947112][T30618]  __x64_sys_bpf+0x41/0x50
[ 1184.947140][T30618]  x64_sys_call+0x10cb/0x3020
[ 1184.947224][T30618]  do_syscall_64+0x12c/0x3b0
[ 1184.947244][T30618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1184.947265][T30618] RIP: 0033:0x7f3bebc2c819
[ 1184.947284][T30618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1184.947305][T30618] RSP: 002b:00007f3bea687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1184.947330][T30618] RAX: ffffffffffffffda RBX: 00007f3bebea5fa0 RCX: 00007f3bebc2c819
[ 1184.947363][T30618] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f
[ 1184.947378][T30618] RBP: 00007f3bea687090 R08: 0000000000000000 R09: 0000000000000000
[ 1184.947392][T30618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1184.947438][T30618] R13: 00007f3bebea6038 R14: 00007f3bebea5fa0 R15: 00007ffc2173ce48
[ 1184.947523][T30618]  </TASK>
[ 1185.154297][T30626] can: request_module (can-proto-0) failed.
[ 1185.214235][T30629] Cannot find add_set index 2 as target
[ 1185.226456][T30632] loop6: detected capacity change from 0 to 512
[ 1185.234941][T30632] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1185.261074][T30632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002]
[ 1185.261298][T30629] loop4: detected capacity change from 0 to 512
[ 1185.269340][T30632] System zones: 1-12
[ 1185.269684][T30632] EXT4-fs (loop6): 1 truncate cleaned up
[ 1185.295057][T30632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1185.356837][T30629] EXT4-fs: Ignoring removed nobh option
[ 1185.357804][T24083] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1185.372523][T21484] ==================================================================
[ 1185.380706][T21484] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping
[ 1185.389051][T21484] 
[ 1185.391368][T21484] write to 0xffffea0006833658 of 8 bytes by task 30629 on cpu 1:
[ 1185.399081][T21484]  delete_from_page_cache_batch+0x310/0x720
[ 1185.404992][T21484]  truncate_inode_pages_range+0x1fe/0x7e0
[ 1185.410774][T21484]  truncate_inode_pages+0x24/0x30
[ 1185.415822][T21484]  set_blocksize+0x1ed/0x270
[ 1185.420478][T21484]  sb_set_blocksize+0x93/0x170
[ 1185.425244][T21484]  sb_min_blocksize+0x53/0x60
[ 1185.429929][T21484]  ext4_fill_super+0x398/0x37c0
[ 1185.434815][T21484]  get_tree_bdev_flags+0x291/0x300
[ 1185.439938][T21484]  get_tree_bdev+0x1f/0x30
[ 1185.444359][T21484]  ext4_get_tree+0x1c/0x30
[ 1185.448768][T21484]  vfs_get_tree+0x57/0x1d0
[ 1185.453205][T21484]  do_new_mount+0x288/0x8d0
[ 1185.457704][T21484]  path_mount+0x4d0/0xbc0
[ 1185.462033][T21484]  __se_sys_mount+0x28c/0x2e0
[ 1185.466736][T21484]  __x64_sys_mount+0x67/0x80
[ 1185.471505][T21484]  x64_sys_call+0x2d61/0x3020
[ 1185.476282][T21484]  do_syscall_64+0x12c/0x3b0
[ 1185.480890][T21484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1185.486877][T21484] 
[ 1185.489215][T21484] read to 0xffffea0006833658 of 8 bytes by task 21484 on cpu 0:
[ 1185.497029][T21484]  folio_mapping+0xa1/0xe0
[ 1185.501450][T21484]  lru_add+0x8d/0x460
[ 1185.505440][T21484]  folio_batch_move_lru+0x1d3/0x290
[ 1185.510639][T21484]  lru_add_drain_cpu+0x66/0x210
[ 1185.515482][T21484]  __folio_batch_release+0x44/0xb0
[ 1185.520590][T21484]  writeback_iter+0x41a/0x800
[ 1185.525279][T21484]  blkdev_writepages+0xa7/0x100
[ 1185.530169][T21484]  do_writepages+0x1c6/0x310
[ 1185.534753][T21484]  filemap_flush+0xee/0x130
[ 1185.539253][T21484]  sync_blockdev_nowait+0x29/0x40
[ 1185.544273][T21484]  sync_filesystem+0xe2/0x190
[ 1185.549059][T21484]  generic_shutdown_super+0x4c/0x220
[ 1185.554354][T21484]  kill_block_super+0x2a/0x70
[ 1185.559146][T21484]  ext4_kill_sb+0x42/0x80
[ 1185.563579][T21484]  deactivate_locked_super+0x75/0x1c0
[ 1185.568957][T21484]  deactivate_super+0x97/0xa0
[ 1185.573629][T21484]  cleanup_mnt+0x2bb/0x330
[ 1185.578047][T21484]  __cleanup_mnt+0x19/0x20
[ 1185.582460][T21484]  task_work_run+0x130/0x1a0
[ 1185.587075][T21484]  exit_to_user_mode_loop+0x1f4/0x6f0
[ 1185.592457][T21484]  do_syscall_64+0x232/0x3b0
[ 1185.597054][T21484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1185.602941][T21484] 
[ 1185.605266][T21484] value changed: 0xffff88810048a928 -> 0x0000000000000000
[ 1185.612380][T21484] 
[ 1185.614712][T21484] Reported by Kernel Concurrency Sanitizer on:
[ 1185.620881][T21484] CPU: 0 UID: 0 PID: 21484 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[ 1185.632056][T21484] Tainted: [W]=WARN
[ 1185.635850][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1185.645985][T21484] ==================================================================
[ 1185.664676][T24083] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1185.674148][T24083] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1185.683065][T24083] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1185.744447][T21484] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1185.756547][T30629] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[ 1185.777650][   T28] kauditd_printk_skb: 339 callbacks suppressed
[ 1185.777737][   T28] audit: type=1400 audit(2984.744:85639): avc:  denied  { read write } for  pid=23005 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1185.807808][   T28] audit: type=1400 audit(2984.744:85640): avc:  denied  { open } for  pid=23005 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1185.833950][T30629] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.6909: inode has both inline data and extents flags
[ 1185.838537][   T28] audit: type=1400 audit(2984.744:85641): avc:  denied  { ioctl } for  pid=23005 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1185.852329][T30629] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1185.874688][T30629] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6909: couldn't read orphan inode 13 (err -117)
[ 1185.883866][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1185.883888][    C1] EXT4-fs (loop4): initial error at time 2984: ext4_orphan_get:1397: inode 13
[ 1185.883915][    C1] EXT4-fs (loop4): last error at time 2984: ext4_orphan_get:1397: inode 13
[ 1185.902040][   T28] audit: type=1400 audit(2984.847:85642): avc:  denied  { read write } for  pid=21484 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1185.913055][T30629] loop4: lost filesystem error report for type 5 error -117
[ 1185.950393][   T28] audit: type=1400 audit(2984.847:85643): avc:  denied  { open } for  pid=21484 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1186.092935][T30645] lo: entered allmulticast mode
[ 1186.100248][T30645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30645 comm=syz.6.6915
[ 1186.159229][   T28] audit: type=1400 audit(2984.847:85644): avc:  denied  { ioctl } for  pid=21484 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1186.187576][   T28] audit: type=1400 audit(2984.950:85645): avc:  denied  { create } for  pid=30642 comm="syz.6.6915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1186.335719][   T28] audit: type=1400 audit(2984.959:85646): avc:  denied  { open } for  pid=30637 comm="syz.8.6914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1186.360325][   T28] audit: type=1400 audit(2984.959:85647): avc:  denied  { perfmon } for  pid=30637 comm="syz.8.6914" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1186.383259][   T28] audit: type=1400 audit(2984.959:85648): avc:  denied  { kernel } for  pid=30637 comm="syz.8.6914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[ 1186.404107][T30629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1186.428237][T30629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6909'.
[ 1186.437350][T30629] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6909'.
[ 1186.464177][T22380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1194.741488][   T28] kauditd_printk_skb: 26 callbacks suppressed
[ 1194.741507][   T28] audit: type=1400 audit(2993.138:85675): avc:  denied  { egress } for  pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[ 1194.773928][   T28] audit: type=1400 audit(2993.138:85676): avc:  denied  { sendto } for  pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1