last executing test programs:

8m47.083609709s ago: executing program 32 (id=598):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000400000004000004020000fb3824fe04e491a6cfcf15ba0fa1cb77537b68a997938ea39066c645729493e49338899afdf0074c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x14, 0x16, &(0x7f0000000780)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6fc5}, @generic={0x34, 0xc, 0x3, 0x3c88, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000840)='syzkaller\x00', 0x3, 0xcb, &(0x7f0000000880)=""/203, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0xc, 0x8, 0x200}, 0x10, 0x0, r1, 0x4, &(0x7f0000000b80)=[0xffffffffffffffff, r4], &(0x7f0000000bc0)=[{0x3, 0x4, 0xf, 0x6}, {0x5, 0x5, 0xb, 0xb}, {0x0, 0x1, 0x6, 0xc}, {0x2, 0x4, 0x0, 0xd}], 0x10, 0x8}, 0x94)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x200000000000006, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801)
write$tun(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x5c, 0xfffffffd, &(0x7f00000000c0)})

8m31.892870637s ago: executing program 33 (id=601):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94)
socket$inet(0x2, 0x1, 0x8)
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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")
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0xa4, 0x0, 0xe2, 0x36, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20, 0x0, 0x5, 0xffffeffe}})
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

7m57.720498677s ago: executing program 34 (id=1011):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37f", 0x3f, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)

7m38.339602457s ago: executing program 35 (id=1153):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x4, 0x1e, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)

7m7.284315837s ago: executing program 8 (id=1365):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f0000004100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x2}, 0xf8, 0x9, 0x6, 0x7, 0x4, 'syz0\x00', "2da14caf2a4f901acc73f682b78b417531174090ccd5ede3a68455b17f89d976", "56a1f28f46932d0e66abc0e73ba3e367ac7fd75b9d5430c17799d4f51e1719f2", [{0x9, 0x7, {0x2, 0x8}}, {0x10, 0x7, {0x0, 0x4}}, {0x300f, 0x6, {0x2, 0xfff}}, {0x3, 0xd, {0x1, 0x9}}, {0x2, 0x6, {0x3, 0x7}}, {0x8, 0xffff, {0x3, 0x800}}, {0x9, 0x0, {0x3, 0xffff}}, {0x1ff, 0x8, {0x2, 0x1}}, {0x7, 0x7fff, {0x3, 0x4b250720}}, {0x9, 0x6, {0x3, 0xffffffff}}, {0x7ff, 0x401, {0x1, 0x7}}, {0x7fff, 0x1, {0x1, 0xffff}}, {0x4, 0xc, {0x3, 0x7}}, {0x1, 0xfa5, {0x2, 0xfffffffc}}, {0x2, 0x8, {0x3, 0xe1}}, {0x1ff, 0x8, {0x1, 0x9}}, {0x8c, 0x0, {0x3, 0xfffffc01}}, {0x9, 0x40, {0x2, 0x5}}, {0x0, 0x5, {0x55d4b0a481a0ec98, 0x8}}, {0x40, 0x5, {0x0, 0x3}}, {0x1000, 0x2, {0x0, 0x4}}, {0x5, 0x10, {0x0, 0x60}}, {0x6ad4, 0x2, {0x1, 0x2}}, {0xbd, 0x0, {0x1, 0xd81}}, {0x9, 0x2, {0x2, 0x9}}, {0xfffd, 0x4e67, {0x3, 0x772b}}, {0x2, 0xff5c, {0x2, 0x6}}, {0x3, 0x1ff, {0x0, 0x4}}, {0xfff, 0x2, {0x0, 0x1f2}}, {0xd, 0x8, {0x3, 0x1ff}}, {0x1, 0x2, {0x1, 0x5}}, {0x6453, 0x2, {0x1, 0x1f4}}, {0x4fb, 0x3, {0x3, 0x2}}, {0x7, 0x6, {0x1, 0x7}}, {0x1190, 0x4, {0x0, 0xdd8}}, {0x4eaf, 0x9, {0x3, 0xffffff80}}, {0x3, 0x4d, {0x0, 0x8}}, {0x7fff, 0xfeed, {0x2, 0x2b7}}, {0x6, 0x4, {0x3, 0x1}}, {0x9, 0x5, {0x0, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x850)

7m7.22015275s ago: executing program 8 (id=1367):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x38000016)

7m7.21948404s ago: executing program 8 (id=1368):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
msgget$private(0x0, 0x8)
socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d", 0x15)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300020b0000000000000000000e000200080008000000660000000000000005000600000000000a000000000000000000000000000000000000000000000101000000000000000200010000000000000000fd00000000"], 0x58}, 0x1, 0x7}, 0x0)
fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')

7m5.949822071s ago: executing program 8 (id=1377):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0xf000, {{}, {0x0}, 0x0, 0x0, 0xf5}}], 0x48}, 0x0)

7m4.697546851s ago: executing program 8 (id=1393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x1}}, 0x18)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x194, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0xab}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xe1df}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x4}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044008}, 0x4840)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r4 = dup(r0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @loopback}}, 0xfffeffff, 0x8001, 0x7, 0x7, 0x20, 0x4, 0x2}, 0x9c)
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10)
bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket(0x1d, 0x2, 0x6)
r9 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000001840)={0x90000001})

7m4.401967045s ago: executing program 8 (id=1394):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000f80)={[{@nogrpid}, {@nodioread_nolock}, {@resgid}, {@mblk_io_submit}, {@block_validity}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7c3, &(0x7f0000001900)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31Jlso1KWHUmgg0J56SGpkxaSWrWDJITamTSiFXgpt6a295Nz0x6X02h+HXtr/oySkrROa0kNxGVmyZVtyrMSWkubzgUnem3mj977zRm9eNBMpgMfWaPpHJuJIRLydRAzX1icR0VtNZSMm18vdXV3Jp0sSa2sv/JhUy9xZXclHwz6pQ7XM3yPiqzcijmV21lteWp6dKhYLC7X8WGXu4lh5afn4hbmpmcJMYf7k+MTEiVP/O3XyPoLq3UgNNq7++bvlwzffefbfH0/++vrfPnnr6yQm43BtW2Mc+2U0RmvHpDc9hFs8s9+Vdc1nr+6hUMMZkD3IxtCmtGN6ar1yJIajZ7f+GexkywCAg/JaRKy10tNyCwDwSEvWr/9PdbsdAECn1D8HuLO6kq8v3f1EorNuPR0RAwO13Pr9zfV0tnbPbqB6O3HoTrLlzkgSESP7UP9o9RbM2esffH72ehzQfUiAZq5cjRiKkdGd43+y45mFdv2n+eqZxszoto3GP+icL9L5z/+bzf8yG/OfaDL/6W/y3r0f937/Z27sQzUtpfO/JxuebbvbEH/NSE8t96fqnK83OX+hWEjHtj9HxNHo7U/z47vUcfT2b7dbbUvjT+d+6fLTu698mNaf/r1ZInMj2791n+mpytSDxNzo1tWIf2SbxZ+O//3V/k9azH/P1NJ996jjuSfefL/VtjT+NN76sjP+g7V2LeJfTfs/2SiT7Pp84lj1dBirnxRNfDoZQ63qH81u9n+6pPXX/y3QCbeq1/9d4x9JGp/XLO/5pTeeFvv22vCXrQo1nv/N429+/vclL1bT9XPv8lSlsjAe0Zc8v3P9ic196/l6+TT+o/9s/v6vj39Nzv+X0td/eY8HInvzh4/uP/6DlcY/3Vb/t52IgbuzPa3q31v/T2zZZ7fxr95He23ggxw7AAAAAAAAAAAAAAAAAAAAAAAAANirTEQcjiST20hnMrnc+m94/zWGMsVSuXLsfGlxfjqqv5U9Er2Z+lddDjd8H+p47fvw6/kT2/L/jYi/RMR7/YPVfC5fKk53O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDnU4vf/U9/3byvc040WAgAHYsCFHQAeN0k22+0mAACdNtBW6cEDawcA0DntXf8BgD8C138AePzc4/q//b8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLvOnD6dLmu/rK7k0/z0paXF2dKl49OF8mxubjGfy5cWLuZmSqWZYiGXL821fKErETEQEaXSxYmYX7w8VimUK2PlpeVzc6XF+cq5C3NTM4Vzhd5OBgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe1ReWp6dKhYLCxJdScx+s94PD0t7JNpLxJX1/ntY2rN/iejbHCUGuzM4AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwCfg8AAP//06Yc6w==")
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0xfa)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, 0x0, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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")
flock(0xffffffffffffffff, 0x8)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

6m54.951455118s ago: executing program 4 (id=1454):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016)

6m54.884373102s ago: executing program 4 (id=1455):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130823bd7000fddbdf251700090044000680"], 0x58}, 0x1, 0x0, 0x0, 0x20048044}, 0x20008000)
syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x200000000000014c, &(0x7f0000000080)=[{0x2, 0x8, 0x24, 0x800}, {0x403, 0x2, 0x5, 0x7}, {0x3, 0x8, 0x8, 0x6}, {0x100, 0x48, 0x6, 0xb8}, {0x3, 0x93, 0x3}, {0x0, 0x4, 0x1, 0x1}, {0xf004, 0x51, 0x2, 0x10001}, {0x3, 0x29, 0x6, 0x11}]}, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)

6m54.834570754s ago: executing program 4 (id=1456):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$key(r0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x7, 0x14, 0xd437}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
ioctl$USBDEVFS_REAPURB(r1, 0x4004550d, &(0x7f0000001080))

6m54.679005091s ago: executing program 4 (id=1457):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8de1ed46eb0200000600148000"], 0x1c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$eJzs3d1rXGkZAPDnTGby0UYTdS9WYdfiFtpFmzRbdzeIbCuIdwvKKnhXYzoNoZNMSSbbJiyS4h8giOiCN3rljeAfIEgvvFeEBfdeXFGKdhXcC90j52OaJpkx0+5MJkx+P3hz3nPeM+d53jPJmfOVOQGcWuci4lpEjEXEixExU06vlCV2i5LN9/7Dt5azkkSavvH3JJJyWjZbUpbM2fJlk8Vgn/PlcHN759ZSo1HfKMfnW2u35ze3dy6tri2t1Ffq61euLLyy+Oriy4uX+9LPrF+vffUvP/7BL7722m++cOdP1/928XtZvtNle7sf/Vask1q2Lh6pRsTGIIINwVjZn1q0fwAAcJJl+/ifjIjP5fv/MzGW7811N/5YPRl4dgAAAEA/pFen4z9JRAoAAACMrEp+D2xSmSvvBZiOSmVurriH95k4U2k0N1ufv9ncWr9R3Cs7G7XKzdVG/XLEuZliPMnGFx6dUSjGX8rbspLsuwf4RzNTefvccrNxYxgnPAAAAOAUOnvg+P9fM8XxPwAAADBiZoedAAAAADBwjv8BAABg9D3F8f/4IPIAAAAABuLrr7+elbT9/Osbb25v3Wq+eelGffPW3NrW8txyc+P23EqzudJIJyLWjlpeo9m8/cVY37o736pvtuY3t3eurzW31lvXV/c9ArttbCCdAgAAAPb5xGfvv5tExO6XpvIS7Wv73Y7M/a8AjIxKj/Ol2Y/3BpsLcLycgIfTq/r/m93mCyOsVgySYecBDM9RG4DJbnP8fhDZAAAAg3Dh0/ffTZPD1/+re+cGgBHV6/V/YPR0uf6fzhx3IsCxO+L6PzDCau4AhFPv8NX9iX1jnb68I1dc/792dIQ0PXJZAADAQE3nJanMldcCp6PyQVqI2aglN1cb9csR8fGI+ONMbSIbX8hfmfinAQAAAAAAAAAAAAAAAAAAAAAAAADoUZomkT6F6lO9CgAAABiGiMpfk/L5Xxdmzk8fPD8wnnyQPwr4wzRN7/z0jZ/cXWq1Nhay6f/Ip49HROvtcvpLwziDAQAAALS1n/JfHKfXhpwNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKPq/YdvLbfLccZ98JWImO0UvxqT+XAyahFx5p9JVB97XRIRY32Iv3svIp7tFD/J0orZMouD8SsRMZVnMfD4z6Vp2jH+2Y8cHU63+9n259qhv7/xvTk6//1Xi3L1o8bvvv2rPNr+jR2MXy22fx/rMcZn3vnV/GOj39qrThTt1c7bn3b8pMv294VOwaqHJ33nmzs73XJLfx5xoePnT7Iv1nxr7fb85vbOpdW1pZX6Sn39ypWFVxZfXXx58fL8zdVGvfzZMcYPn/v1h93iP/htxJkyfvtNT8sPltli8OWy/0sH+38+q9S6LXnPf9+5+/BTRbV2YBHx4F7ExRc6v//P5sOO6/9n/05z+edA1n6h/ExIdot6RJxrz/z8L//wfNf+35ssa0/+/l88uuu5F7/x/T/3OCsAcAw2t3duLTUa9Y0+VbJ9hENN370T0Xg7TdPelpPtlfYeNInYPdiU7cD1t18bUxHRpalzrOh1yc90TfW9qQ4r82RUrj7JzOnEE/2yJbsDTD7L44Ssw5NaGc9/IX/37SFvmgAAgD7b2/sfdiYAAAAAAAAAAAAAAAAAAABwenX8GrDJPn6d2MThmLvD6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBH+FwAA//8xsdFY")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r0, 0x5, 0x4)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000700))
ptrace$cont(0x21, r1, 0x80000001, 0x4)

6m54.199113675s ago: executing program 4 (id=1461):
r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0xffffffff, 0x4, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x40800)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000480), &(0x7f00000005c0)=0x8)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0xc}}}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r8)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda533cf3b0b381b8aeb5020d8404464a2dd024e928fe3713504"], 0x60}}, 0x200040c0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

6m53.712339968s ago: executing program 4 (id=1465):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0xf000, {{}, {0x0}, 0x0, 0x0, 0xf5}}], 0x48}, 0x0)

6m53.710982608s ago: executing program 36 (id=1465):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0xf000, {{}, {0x0}, 0x0, 0x0, 0xf5}}], 0x48}, 0x0)

6m49.269629641s ago: executing program 37 (id=1394):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000f80)={[{@nogrpid}, {@nodioread_nolock}, {@resgid}, {@mblk_io_submit}, {@block_validity}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7c3, &(0x7f0000001900)="$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")
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0xfa)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, 0x0, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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")
flock(0xffffffffffffffff, 0x8)
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

5m50.289613534s ago: executing program 2 (id=1907):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x5c, r3, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
close(0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r11, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r12 = getpgrp(0x0)
perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x8, 0x81, 0xff, 0x4, 0x0, 0x73db8758, 0x10420, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x11de, 0x41}, 0x4400, 0x1a6, 0xff, 0x2, 0x4, 0xfffffffb, 0x8, 0x0, 0x1, 0x0, 0x8}, r12, 0x0, 0xffffffffffffffff, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r10, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}}, 0x18}}, 0x0)

5m49.666286033s ago: executing program 2 (id=1912):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000900000000850000000c000000b700000000000000950000000000f3e97ab52a0000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/204)

5m47.097522891s ago: executing program 2 (id=1920):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x18)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2, 0x6, 0x2, 0xfff, 0xffffffff, 0x40000c})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r3, 0x40099d}}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000ff440000000000000000000e0001006e657464657673696d0000000f0002006e657464657673ed39f4a50d"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
syz_genetlink_get_family_id$tipc2(0x0, r6)
sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x25)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, 0x0, 0x5c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x410}, 0x40c0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5m45.83714582s ago: executing program 2 (id=1936):
r0 = socket(0x23, 0x5, 0x9)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000440)={0x3ff, 0x8201, 0x7, 0x1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r2 = syz_open_dev$loop(&(0x7f0000007a40), 0x5, 0x800)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f000000aac0))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x3})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
read$eventfd(r0, &(0x7f00000000c0), 0x8)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde05, 0x8000)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r7, 0x838a3000)
syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r6, 0x0, 0x2)
fchdir(r8)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000000)='./file0/file0\x00', 0x305043, 0x1a0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r9, r9)
setpgid(0x0, r9)
lchown(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0)
write$rfkill(r4, 0x0, 0x700)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})

5m45.610403527s ago: executing program 2 (id=1940):
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create(0x200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b50400bd4aae9e0a6bed471dcc727e790000040000000400000005000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r6=>0xffffffffffffffff}, 0x0, &(0x7f00000004c0)=r1}, 0x20)
pwritev2(r6, &(0x7f0000000540)=[{&(0x7f0000000340)="50690b4b28ff1c36dc7ed3ff313239ec8601fb2a541d242db38c12d47049b26878842682f2c87c8aefa698ecad6fb3ba5d151b8fa60b829f0081d65e6129f5e236ba75fbd93447132c8b81007ea958eac2306290ab0a97058795a670c3cc854ad92986b8f5260e4bf6d52b5ed4177a8a21e7ed0f64114a2f552f9adfe7121f91d172647a67169b61befe8398a8e2c16b42c82e7553cfe708b27c4c6c95e0c5f53a30860b68380caa1fe945c7", 0xac}, {&(0x7f0000000400)="c92d", 0x2}, {&(0x7f0000000440)="79c37136fb320bf9c72099eb2d885441e9d28fbc5c73d477e40695e6cada641b731c8ec3f36af24633975fbee991bb8048ef4edd86983c9792b35afbc51fc3daa152973c645e56dddc19ace026be1543029be41746afb56513", 0x59}], 0x3, 0x4, 0x9, 0x2)

5m44.806968861s ago: executing program 2 (id=1946):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x2010004, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES16=0x0], 0x1, 0x2c3, &(0x7f0000000ac0)="$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")
syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10)
write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m44.768275033s ago: executing program 38 (id=1946):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x2010004, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRES16=0x0], 0x1, 0x2c3, &(0x7f0000000ac0)="$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")
syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10)
write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m47.270955731s ago: executing program 7 (id=2653):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)

2m47.251424162s ago: executing program 7 (id=2655):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x298, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "01460c340bb13e06bf523a4ebf9425b2c2795e4eee4903e5e5c1e64db03f6fe9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a4fed6c5871fe3824ea84dbaa902f644"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "73c097bd175eecb1fd7f98a0184a8a5152e0a562136c11ddbbe4eb7e6e7a7e34"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1702a65814d8145f466652efd2b53ea0"}]}, @NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3173959707144e5de6f06cac93279efd"}, @NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xf0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "06d53fc3e6c12c0da9d6eca500b7312a"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4b9d59146bc1e7f876314833c3525a6f3acc3a85ea5bbbe21a7e1f22c3874d85"}]}, @NL802154_ATTR_SEC_KEY={0x78, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c11128ce9c8736d2dc4fee6a33997f4a3c1a7431aba89aae0848dfa0431444ce"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d8f9681114d1fefc568d312e2075486f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aed1ce08b328ced31d6793f330c4ed71"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x800)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r4], 0x20}}, 0x44800)

2m47.206774144s ago: executing program 7 (id=2656):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x18)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2, 0x6, 0x2, 0xfff, 0xffffffff, 0x40000c})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r3, 0x40099d}}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
syz_genetlink_get_family_id$tipc2(0x0, r5)
sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x25)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x5c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r8 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x410}, 0x40c0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2m46.223563043s ago: executing program 7 (id=2661):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000100)=ANY=[], 0x2, 0x5be, &(0x7f0000000c40)="$eJzs3V1vG1kZwPFnEqcxAVUIUFVFbfdsClIqZd3xZOMq2qthfOzMrj1jzYxXyVUVEaeK6hTUFInkhvSmagV8BaR+CG75MlxXXIMERvMWnPgtrdOYlv8v2p0T+/E5z3GteXqmMx4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiOFXTLBvScL32thrNqQZ+c8zzeX8Pzm3GjCtixP9JsSi304du/+y/T9+K/7cid9Lf7kgx3hTl5Ie3fvzNTwtz+evHJHQtjo5Pnu52u53nl4wvzDzjq1XXnhv6btOua+WGvtqsVMyHW7VQ1dyGDnfCSDeVE2g78gO16jxQ5c3NdaVLO37bq1fths4ffPSVZZoV9W2ppe0g9L2H35ZCZ8ttNFyvnsTET8cxj+IP4ndupCJtN5XaP+h21iclGQeVs/bFP4DT/iBrUk+WaVnlgohUNm5kH1TLKpctq1zZ2Nx4ZJoF8wJZvBjR96Gt/yPt4z3fdHzarmrXDUxtLqv/0hBXPGnLtqihP45UJRBfmiOez+T1/xcP9dhx++t/XuVv+z/In16WpP7fS3+7N6r+i5LFEflcz8+RHMuJPJVd6UpXOvJ8uv7m8vnPck4qfnNPLxdZFy2euBKKL640xU4eUeJKUXxRsikVqYgpj2VLahKKkpq40hAtoexIKJHo5BPlSCBabInEl0CUrIojD0RJUm1lXZRoKcmO+NIWT+pSFTvpZV8Okvd9fUyOZ0HlywRZY4KS+t9fzAceGKj/AxGz/0srZutqd+DAFHp5/QcAAAAAAJ8tIzn6Hq//F+Ru0qq5DW3OOi0AAAAAAHCFXteS8+uNeP0vInfFGLn+P80OFAAAAAAAgE+MkVxjFy/rl+SLtJVfCXV2EGButikCAAAAAIApJf+gfy/eLMWtL8QYXP8PSr79rHhtSQIAAAAAgKlEr7PGyO/YD1uLxl//LkGwYLxsbf/cOLTjOPtwPn3d/ECPtWXpLabtpK9KIevS0XeM7Nsvz74E8126KUivNz4PY2wChfMJGDezV59PQP4oX8YRf5Mv99LYvfyZdJSlmtvQJcdvfFMW2745F+nt6LfPDn4nyfTfeM04yYNup/SrX3f3klxexr28PMyuixi4PGJMLi/y4yd3h894IbkQIxt3yZD9g27H7J9/dlrGwNkZY8Z8JStpzMpSul06P/9iPGa5NGr2aRYLMuXMX8n9NOb+6v10MyQLa0IWHas/iw96Ly6RxfqkLNanzAIAZmU/+dafoVUo36VfrLsfsJfbn3Qnn/HV/ZKjvJLVNGZ1OdmxFpaH7NHNSXt0s7WdV+a0ut0YW93kVGT4Hv3sHkijamw87p/Oxi0ns3/7exF5m1fVgemHDcuI38L5F4e/kVtHxydfHRzuPuk86TyzrPWK+bVpbliykEwj21B7AABDTL7HzsQI4+t0VS3JqvpfvVRfxftJdkpBflSgK3uyllxtkJxxUJTFc73+4c/xSrzvNIS1i6vWgvRX1F5eLP/Z6/XWJqzq0n5zl4lNby8DAMDnZKW/Do+t/1nckPq/lh8KGLHuPl/LL94heFRseUTGb7gcEQCAKeng3b+zFXvrcXlzs2xHW1oFvvOdCtxqXSvXi3TgbNleXatW4Ee+48/Hje/dqg5V2G61/CBSNT9QLT90t5M7v6vs1u+hbtpe5Dphq6HtUCvH9yLbiVTVDR3Vav+y4YZbOkheHLa049Zcx45c31Oh3w4cXVIq1Lov0K1qL3Jrbtz0VCtwm3awo773G+2mVlUdOoHbivy0w3ws16v5QTPu9sas32sAAP5XHB2fPN3tdjvPP2Jj1nMEAADnvU+V5owxAAAAAAAAAAAAAAAAAAAAAABmY/R1e/NyDZcGZo2//EjkusYa3VgQkdmNTuP/snHzijssyhV1OGnPcXo9OygAH81/AgAA///lXV5a")
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x200, 0x103)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x10, r7}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000740)={&(0x7f0000000780), 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x54, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x40000c0)

2m46.116395357s ago: executing program 7 (id=2663):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x5e25, @loopback}, 0x4, 0x2, 0x4, 0x5}}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48)
sendmmsg$inet(r0, &(0x7f0000006e00)=[{{&(0x7f0000003f00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000003f40)="b5b800ef09c5c1251a15a97568f2fe6de33bb5d3613c4c19e0acf02ac361a6b6e99efd2724ecf46181cb4db4e1807226a45045", 0x33}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="7c0000000000000000000000070000004424c230000000010000010000000078fffffffb51ccf31300003ba500000001000000038604a06f0717f7ffffffffac1414bbac141440ffffffff000000000194040100442464afac1414aa000000026401010200000007ac1e00010000a87ce9c4998d0002ac1e0001000007ff000000000000000014000000000000000000000001000000ff070000000000001c000000000000000000000008000000", @ANYRESOCT=r0, @ANYBLOB="e0000001ac1414aa00000000"], 0xb8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8040)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3, <r3=>0x0}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x4}, 0x8020, 0x400001, 0xfffffffd, 0x7, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$kcm(0x1e, 0x4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080))
write$cgroup_int(r5, &(0x7f00000000c0)=0x150, 0x12)

2m45.777219057s ago: executing program 7 (id=2664):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC=r0, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)

2m45.776574567s ago: executing program 39 (id=2664):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC=r0, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)

36.875268509s ago: executing program 1 (id=3391):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
stat(&(0x7f00000034c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000202050000000000303d00000700000108000840000000010600074000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059f"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019200)={0x3, 0xc, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000001c0)={0x206, 0x1000, 0x7, 0x0, 0x4002, 0x4})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r6, 0x107, 0x7, 0x0, &(0x7f00000002c0))
syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[], 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, 0x0, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/102379, 0x18feb, 0x94d)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$inet(0x2, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000019140)=ANY=[@ANYRES32], &(0x7f0000019100)='GPL\x00', 0x0, 0xfffffffffffffd1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)

36.712629656s ago: executing program 1 (id=3393):
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create(0x200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b50400bd4aae9e0a6bed471dcc727e790000040000000400000005000100000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe)
sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xffdc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10}, @timestamp], 0x2)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911073000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r7=>0xffffffffffffffff}, 0x0, &(0x7f00000004c0)=r1}, 0x20)
pwritev2(r7, &(0x7f0000000540)=[{&(0x7f0000000340)="50690b4b28ff1c36dc7ed3ff313239ec8601fb2a541d242db38c12d47049b26878842682f2c87c8aefa698ecad6fb3ba5d151b8fa60b829f0081d65e6129f5e236ba75fbd93447132c8b81007ea958eac2306290ab0a97058795a670c3cc854ad92986b8f5260e4bf6d52b5ed4177a8a21e7ed0f64114a2f552f9adfe7121f91d172647a67169b61befe8398a8e2c16b42c82e7553cfe708b27c4c6c95e0c5f53a30860b68380caa1fe945c7", 0xac}, {&(0x7f0000000400)="c92d", 0x2}, {&(0x7f0000000440)="79c37136fb320bf9c72099eb2d885441e9d28fbc5c73d477e40695e6cada641b731c8ec3f36af24633975fbee991bb8048ef4edd86983c9792b35afbc51fc3daa152973c645e56dddc19ace026be1543029be41746afb56513", 0x59}], 0x3, 0x4, 0x9, 0x2)

36.191256636s ago: executing program 1 (id=3395):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0], 0x28}}, 0x802)

36.135999788s ago: executing program 1 (id=3396):
r0 = epoll_create(0x7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_winnt}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r4 = syz_clone(0x201ac100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0))
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
ioprio_set$pid(0x1, r4, 0x4007)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000012, 0x700, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
epoll_create(0x7) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@utf8no}, {@rodir}, {@numtail}, {@shortname_mixed}, {@shortname_winnt}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) (async)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async)
syz_clone(0x201ac100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_pidfd_open(r5, 0x0) (async)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) (async)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) (async)
ioprio_set$pid(0x1, r4, 0x4007) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000012, 0x700, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)

35.688333146s ago: executing program 1 (id=3398):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7e}, 0x39)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000}, 0x100})
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L@', @ANYRES16=r4, @ANYBLOB="080025bd7000fedbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00db0900000600110002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000004c0)='./file0\x00', 0x4804, &(0x7f0000001400)={[{@nojoliet}, {@hide}, {@map_acorn}, {@check_relaxed}]}, 0x1, 0x52a, &(0x7f0000000a80)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

35.497221413s ago: executing program 1 (id=3399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x8, 0x2)
fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000012c0), 0x8, 0x8000)
ioctl$BLKDISCARDZEROES(r2, 0x127c, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x21240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xd}, 0x80, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xc)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x28)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r5, 0x6}, 0x8)
r6 = open(&(0x7f0000000280)='./file0/file0\x00', 0x20000, 0xc4)
bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x2}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='.'], 0x20)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000c001c"], 0xc4}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61703d69636f726e2c703d61636f726e2c6d6f64653d3078303030303030050030303030383030302c757466382c6769643d00"/62, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x54a, &(0x7f0000000580)="$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")

35.430485326s ago: executing program 40 (id=3399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
mknodat(r1, &(0x7f0000000300)='./file1\x00', 0x8, 0x2)
fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000012c0), 0x8, 0x8000)
ioctl$BLKDISCARDZEROES(r2, 0x127c, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x21240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xd}, 0x80, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xc)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x28)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r5, 0x6}, 0x8)
r6 = open(&(0x7f0000000280)='./file0/file0\x00', 0x20000, 0xc4)
bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r5, 0x2}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='.'], 0x20)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffff000000000000000001000000000000000c001c"], 0xc4}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000380)=ANY=[@ANYBLOB="6d61703d69636f726e2c703d61636f726e2c6d6f64653d3078303030303030050030303030383030302c757466382c6769643d00"/62, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x54a, &(0x7f0000000580)="$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")

4.351117172s ago: executing program 3 (id=3578):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec"])
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0)
r1 = syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x49, &(0x7f00000006c0)={0x5, 0xf, 0x49, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xc0, "602888cb94853cdda0870a3e401ebb82"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x81, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x27, 0x3, 0xfcf, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x6, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x7, 0xd}]}, 0x1, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x82c}}]})
syz_usb_ep_read(r1, 0x0, 0xcf, &(0x7f00000007c0)=""/207)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000003000/0x2000)=nil)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000000, &(0x7f00000001c0), 0x25, 0x4b6, &(0x7f0000000540)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a090000000000000000000200000009000200200000010000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0)

4.160304019s ago: executing program 5 (id=3582):
socket$nl_route(0x10, 0x3, 0x0)
r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x1)

3.386592699s ago: executing program 3 (id=3583):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x200000000000016e, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x99f}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
pipe2(&(0x7f0000001180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)="ca", 0x1}], 0x2, 0x0)
fcntl$setpipe(r2, 0x407, 0x5)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000f80)={[{@nogrpid}, {@nodioread_nolock}, {@resgid}, {@mblk_io_submit}, {@block_validity}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7c3, &(0x7f0000001900)="$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")
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80540, 0x0)
r3 = inotify_init()
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0)
write$cgroup_subtree(r4, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x5, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100aa97}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x813)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r5, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x7fffffff, 0x20000000, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f00000003c0))

3.255068614s ago: executing program 5 (id=3584):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x18)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2, 0x6, 0x2, 0xfff, 0xffffffff, 0x40000c})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r3, 0x40099d}}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000ff440000000000000000000e0001006e657464657673696d0000000f0002006e657464657673ed39f4a50d"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
syz_genetlink_get_family_id$tipc2(0x0, r6)
sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x25)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, 0x0, 0x5c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x410}, 0x40c0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.616354309s ago: executing program 3 (id=3591):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000840)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x73, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r3 = dup(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1)
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000180))
keyctl$link(0x8, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x2400c8a0)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8)
ioctl$TUNSETOWNER(r6, 0x400454cc, r7)
pipe2(&(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r10, 0x0, 0xb8f9, 0x0)
splice(r9, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0)
write(r0, &(0x7f0000000040), 0xffffff4a)

2.599868389s ago: executing program 0 (id=3592):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000012f11867248c689649000000ac141400000000000000000000000000f3ff000000003c0014000e007f0000010000000000000000000000000c0015000000000000000000"], 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_TXQLEN={0x8, 0xd, 0xe5}]}, 0x28}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3f, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80440, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x16, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000033a400010000000085100000060000002737c0ff000000", @ANYBLOB="0000000000000000186200000a00000000000000ff030000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r0, 0x19}, 0x94)
fstat(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$bpf(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80800, &(0x7f0000000600)={[{@gid={'gid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x3}}]})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40000120)
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1}, 0x48844)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000140), &(0x7f00000001c0)=""/5}, 0x20)
recvmsg(r3, 0x0, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040054}, 0x800)

2.522580412s ago: executing program 0 (id=3594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0xb4}, 0x1, 0x0, 0x0, 0x24000851}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000508000a4a0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000060c38ebd50bb5ebe4a2014000380100000800c000500010000000000140000001100010000000000000000000100000a0000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0xa2040, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x28c, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x1e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_IE={0x16d, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @measure_req={0x26, 0xc5, {0x7, 0x4, 0xe, "314ea475bec961942eff7e2bf095d0fe71f11c465c784a4176193f21f0b568831335efcb638ca37c1a9d336c19f7119669ff85fe9e14f25854f7bfaecb57f82dcdcbd16f62c0223ab78ea2741bf62184196df4329bdb0ddaac27de8bf5a9c9383717c818fcb79d6d6d5e755a1fc28fa5eaa3029fd27ebefbc381ab23ff8923981c530add41f3e6909b89349ae7ecfed62e19e423b57251e10adb44e990361333930df057d63cce225665cb45cab431442fb0d3172e67571420e80db155a3fc2e573b"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x21, 0x9, @broadcast, 0xca7, @value, 0x109f, 0x80000000, @device_a, 0x1c6d}}, @cf={0x4, 0x6, {0x9, 0x0, 0x1, 0x2}}, @chsw_timing={0x68, 0x4, {0x3}}, @measure_req={0x26, 0x68, {0x5c, 0x3, 0x8, "7e9c31d128bd0f95d90ed0346afb7fafff89eb9c8f93f64f06e9d337548fcb8d19f6a3383ad2386046cda9cc3d6fb958ae3e91bb90e40773254f8ca2a0cf6850679e29fb98c8f5dc625d3b7d806641c37ccf4c752c9622d5d7c5fc933b5a4d7ccfdca4d474"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_IE={0x10, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x3, 0x9, 0x6}}, @ibss={0x6, 0x2, 0x8}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xb2, 0x2a, [@gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x69, 0xc1, @broadcast, 0x8001, 0x1, 0xfffffff7}}, @perr={0x84, 0xf, {0x5, 0x1, [{{}, @broadcast, 0x9, @void, 0x11}]}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x94, 0xd, 0xd}}, @mesh_chsw={0x76, 0x6, {0x2, 0xf9, 0xa, 0x5}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @random_vendor={0xdd, 0x54, "5c97f48faa6b0330191cbf3e044fc0f9a31adf8c36304fad6908544e0ace9064384ed9904642f541401dd9777b9e711ba94690053b408f23c552f163300054515f1239dc29d212b074029b9e75b00a46bccf65f0"}, @supported_rates={0x1, 0x1, [{0x30}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x80}, 0x8805)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0xa600bea0ffbc01e6, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1)

2.420670246s ago: executing program 0 (id=3595):
syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[], 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36)
timer_create(0x2, 0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x60382, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x16a, 0x4)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.360823549s ago: executing program 5 (id=3596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.31727896s ago: executing program 5 (id=3597):
io_uring_setup(0x7c9d, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1})
inotify_init1(0x80000)
bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket(0x2, 0xa, 0x300)
syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2720, &(0x7f0000032580)=""/102400, &(0x7f0000000040)=0x19000)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
exit(0x100000000000035)
getdents(r7, 0x0, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa0800456c00b000000000fb01907864010102ac1414aa030090780324000045000b0000010000000100077f000001640100fe8677ffffffff000e08c82ce8da6ee06cb8dd94520709020007651442eb011274b000561de584b703c87214d42243b60009e706d30bd224f80207cfa11cab1a001084a4913275be675de6a70a05a0dc060aed54fe6655490000021273bc23f9ffffffa30900a301c8460028000cc8bf6909a79ea788f03d860600000020000000"], 0x0)

1.763276992s ago: executing program 6 (id=3599):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x44081)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x3}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 3)

1.500654902s ago: executing program 6 (id=3601):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 3)

1.480641243s ago: executing program 6 (id=3602):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x8000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24040884)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r3], 0x20}}, 0x44800)

1.412720295s ago: executing program 3 (id=3603):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r2, &(0x7f00000001c0)="654d823ecb8d845b5f928d73b3a2e2b718658de17679", 0x16, 0xfbf453219a8e5d08, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810)

1.412464066s ago: executing program 9 (id=3604):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000001000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x80, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x3, 0x1, 0x3, 0x100000000010000, 0x7fffffff, 0x7, 0x3, 0x1]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
tkill(r0, 0x39)
r1 = io_uring_setup(0x7025, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55407}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
recvfrom(r2, &(0x7f00000002c0)=""/21, 0x15, 0x2020, &(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000100)=""/140, 0x19})
io_uring_enter(r1, 0x2219, 0x7721, 0x52, 0x0, 0x0)

1.401972996s ago: executing program 0 (id=3605):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2)

1.358789257s ago: executing program 3 (id=3606):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14"], 0x18}}], 0x1, 0x44081)
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r2=>0x0})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000380))
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17)
read(r1, &(0x7f0000002fc0)=""/52, 0x34)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r0})
keyctl$get_keyring_id(0x0, r0, 0xfffffffffffffffe)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x3}}, 0x20)
r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="a2bd296d", 0x4}], 0x1, 0x8, 0xb)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200)
readv(r5, &(0x7f0000003a80)=[{&(0x7f0000000040)=""/7, 0x7}, {0x0}], 0x2)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r7=>r1, {0x8}}, './file0\x00'})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000e6ffffff0000000000800000000000004cb252ae2e7220c6313449b9de5224b6ed8309c075b996a017418eede83c14f7763a965d6111b22984f4dbb693e620a4a3176fe13a0904060b65ff466396144587f5fd0e8a548ecdc90be0f64592353a7509bf81dabfc89c04c7776e363f35a68ff642f4053c2e48a0cb2a8d486b332abf2c8d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x68}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xa7}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.358409457s ago: executing program 6 (id=3607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.348804368s ago: executing program 5 (id=3608):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
close(0xffffffffffffffff)
getsockopt(0xffffffffffffffff, 0x401005, 0x4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
sendfile(r6, r6, 0x0, 0xe3aa6ea)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

1.343350948s ago: executing program 0 (id=3609):
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@remote, @loopback, 0x1, "042a4b649ad2157fd6817c9b1f7e5182ec859f8c06da45ad817af953fbf93b2a", 0x2eaf, 0x7, 0x1}, 0x3c)
syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa440800450000780000000000019078ac1e0001ac1414aa0c019078e00000e04f0000000000000000110000ac1414aaac1414008303030a01012f00000000ac1414aa00000000aa0a000100000000ac1414bb000000007f00000100000000ac14142b00000800e0000002000000000000056afae1bad048b9b017964b4a6ad6281b2f68bce4cf198cdd13bc0a8bf4bf649a3a17a9380e90bf046cb9a4641b62329233bc88acafce30d02984869c69ee879c154c64733600000000000000000000005f66b97e6137895e981dd8ceb71ee04327a1023b02f3339d3a37e0481d814f99bd13a3c92b15cd2668c9afce061b2e00b4653ee65aee934c8262ea666df5f44bc91bdb06549bbdfe2bac5e6ff26901b3c61d9bfaf8f6715b8391fbb8cd4319fffdbcaa77a8774e48a6ad4cfb4e7ac030c4a29605a295cfb5395e272d54cf17d107d23c22439f0f768257cb57b3889e9cc950e4df4936319967da6f1a9a05252d9cd2d73ec3f3203b7c09f2ba"], 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x58, 0x6, 0x3, "60ef53a68f9c31a4f613db761382496804bd7ab14962d798b322f4cf234b57d29021bbeae6440f4162fd2037c45fc8c0842c7df4b4ee4ecc24bde613e83f272cf644edfafc1e355546e3683ceb9db426b109e2f6de4cbd81"})
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x4000)
setresuid(r2, r2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x1000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
keyctl$session_to_parent(0x12)
listen(r0, 0x6)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
socketpair(0x3, 0xa, 0x1, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000200)={0x32, 0x8, 0x7, 0x6, 0x5, 0x81})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = syz_open_dev$usbfs(0x0, 0x7, 0x8000)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000480)={{{0x1, 0x1}}, 0x14, 0x3, &(0x7f0000000380)="3627da4c60166efc07013efc41d8b2bb2414949d"})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r4], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4)
sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000010000000000000000000000c00000000000000000000000d0035"], 0x30}], 0x1}, 0x0)
syz_read_part_table(0x105d, &(0x7f0000002700)="$eJzsz7FtwkAYBeDnS2L5lCJVRogyETUlEiUs4IaKgjlgEyZhDCOwzQhA8X3Nnd6TnvSHl2rarJcf/0lqkv4RT+/n0CQlh813ku0qSTsWNanlL0n5uXzdgm4/FufjvNHOI+maod4/fbrsfjNMeVmcnnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy9awAAAP//h8AL7A==")
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000)

1.228640662s ago: executing program 6 (id=3610):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x40820)
socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r0, 0x0, r1, 0x0, 0xf36, 0x3)
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = creat(0x0, 0xa8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@jqfmt_vfsold}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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")
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x4040084)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8)
r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x20182)
ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010426bd7000fddb5f2500000000", @ANYRES32=0x0, @ANYBLOB="5a15000001c904003c00128009000100626f6e64000000002c0002800800036e4b07830e3bae7fe900000005000e000000000008001c009e4a897b41609e44faf48ffdefd72890b541870298430f8868908e9612c948cc5aeab4a81041875add01e1cbdd2456c9483e5e1fb3d890be043db978b4843b0506a1"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044)

839.093958ms ago: executing program 9 (id=3611):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)

777.16853ms ago: executing program 9 (id=3612):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36)

645.821575ms ago: executing program 9 (id=3613):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000040, 0x0, 0x0)

584.751878ms ago: executing program 9 (id=3614):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="b5bc1480bb74", 0x6}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0)

582.836558ms ago: executing program 3 (id=3615):
syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36)
timer_create(0x2, 0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x60382, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x16a, 0x4)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

232.381651ms ago: executing program 9 (id=3616):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
timer_create(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000100), 0x0}, 0x20)
timer_settime(0x0, 0x1, 0x0, 0x0)
timer_create(0x7, &(0x7f00000001c0)={0x0, 0x11, 0x4, @thr={&(0x7f0000000080)="4a2505a8aa21588e54849279e031d8b0f09e4fa1b29d9353414cdba82433f2a8fb1d01ed064a4706f44b3a1a16f6fe2513199a78635c69cca6336d6552e384b29f0a384ee9bf6e22", &(0x7f0000000100)="733326edac36348abf9a7cf8c5294e7a9380a8b03a6e7dfac4273a963b669a30e9d88e58b92bf241ac2289ba937c720d6f1c4eb8c3ee77c6e71720b7bad635bbdbf0e025c406dc7514ef8c4ad37f2f69ccc12dec0a5bf87972baecd66c4f71da5984121a9e742a092ed63870c3446dbec0f828359675eadbde268a590cefd6224b41ae0aeb3d8172d90ecd03cf265014b354c2311fe22d31c8cccdba235330df5637722bb8c640e663beda49806519c6e07a09d9d09105b2f7e29a5ecd9481"}}, &(0x7f0000000200)=<r5=>0x0)
dup3(r1, r1, 0x0)
timer_getoverrun(r5)
bind$can_j1939(r0, 0x0, 0x0)

230.109041ms ago: executing program 6 (id=3617):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1fc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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")
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(r2, r2, 0x0, 0x80000000)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

77.345317ms ago: executing program 5 (id=3618):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x8000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24040884)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r3], 0x20}}, 0x44800)

0s ago: executing program 0 (id=3619):
io_uring_setup(0x7c9d, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1})
inotify_init1(0x80000)
bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket(0x2, 0xa, 0x300)
syz_emit_ethernet(0x80d, &(0x7f0000003600)=ANY=[], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2720, &(0x7f0000032580)=""/102400, &(0x7f0000000040)=0x19000)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
exit(0x100000000000035)
getdents(r7, 0x0, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa0800456c00b000000000fb01907864010102ac1414aa030090780324000045000b0000010000000100077f000001640100fe8677ffffffff000e08c82ce8da6ee06cb8dd94520709020007651442eb011274b000561de584b703c87214d42243b60009e706d30bd224f80207cfa11cab1a001084a4913275be675de6a70a05a0dc060aed54fe6655490000021273bc23f9ffffffa30900a301c8460028000cc8bf6909a79ea788f03d860600000020000000"], 0x0)

kernel console output (not intermixed with test programs):

128 R14: 00007f4018fd6090 R15: 00007ffcb42ceae8
[  597.561578][T16775]  </TASK>
[  597.829275][T16777] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.836594][T16777] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.905796][T16777] bridge_slave_0: left allmulticast mode
[  597.914329][T16777] bridge_slave_0: left promiscuous mode
[  597.928839][T16777] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.950575][T16777] bridge_slave_1: left allmulticast mode
[  597.966470][T16777] bridge_slave_1: left promiscuous mode
[  597.972341][T16777] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.995737][T16777] bond0: (slave bond_slave_0): Releasing backup interface
[  598.012764][T16777] bond0: (slave bond_slave_1): Releasing backup interface
[  598.038445][T16777] team0: Port device team_slave_0 removed
[  598.063046][T16777] team0: Port device team_slave_1 removed
[  598.081408][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  598.102795][T16777] batman_adv: batadv0: Removing interface: batadv_slave_0
[  598.121880][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  598.140823][T16777] batman_adv: batadv0: Removing interface: batadv_slave_1
[  598.158891][T16777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  598.311052][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.347532][T16784] syzkaller0: entered promiscuous mode
[  598.366905][   T28] audit: type=1326 audit(597.827:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.9.3301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c0934ce59 code=0x0
[  598.375948][T16795] ALSA: seq fatal error: cannot create timer (-22)
[  598.402749][T16793] loop0: detected capacity change from 0 to 512
[  598.429837][T16795] loop1: detected capacity change from 0 to 736
[  598.472023][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  598.491378][T16793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.511374][   T28] audit: type=1400 audit(597.937:4473): avc:  denied  { write } for  pid=16792 comm="syz.0.3300" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  598.535470][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'.
[  598.763216][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3305'.
[  599.126539][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.180702][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.240665][T16816] loop0: detected capacity change from 0 to 512
[  599.248404][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3307'.
[  599.257409][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3307'.
[  599.275141][T16816] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  599.293496][T16816] EXT4-fs (loop0): 1 truncate cleaned up
[  599.312736][T16819] loop9: detected capacity change from 0 to 512
[  599.319340][T16816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.355806][T16821] FAULT_INJECTION: forcing a failure.
[  599.355806][T16821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  599.368897][T16821] CPU: 1 UID: 0 PID: 16821 Comm: syz.3.3310 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  599.368934][T16821] Tainted: [W]=WARN
[  599.368941][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  599.368956][T16821] Call Trace:
[  599.368965][T16821]  <TASK>
[  599.368974][T16821]  __dump_stack+0x1d/0x30
[  599.369002][T16821]  dump_stack_lvl+0x95/0xd0
[  599.369078][T16821]  dump_stack+0x15/0x1b
[  599.369098][T16821]  should_fail_ex+0x263/0x280
[  599.369130][T16821]  should_fail+0xb/0x20
[  599.369235][T16821]  should_fail_usercopy+0x1a/0x20
[  599.369267][T16821]  _copy_to_user+0x20/0xa0
[  599.369359][T16821]  bpf_prog_test_run_raw_tp+0x3a5/0x410
[  599.369397][T16821]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  599.369469][T16821]  bpf_prog_test_run+0x204/0x340
[  599.369501][T16821]  __sys_bpf+0x52e/0x7e0
[  599.369536][T16821]  __x64_sys_bpf+0x41/0x50
[  599.369593][T16821]  x64_sys_call+0x10cb/0x3020
[  599.369620][T16821]  do_syscall_64+0x12c/0x3b0
[  599.369655][T16821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.369682][T16821] RIP: 0033:0x7f5dd82ece59
[  599.369706][T16821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.369807][T16821] RSP: 002b:00007f5dd6d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  599.369833][T16821] RAX: ffffffffffffffda RBX: 00007f5dd8565fa0 RCX: 00007f5dd82ece59
[  599.369851][T16821] RDX: 000000000000000c RSI: 00002000000003c0 RDI: 000000000000000a
[  599.369909][T16821] RBP: 00007f5dd6d47090 R08: 0000000000000000 R09: 0000000000000000
[  599.369928][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.370023][T16821] R13: 00007f5dd8566038 R14: 00007f5dd8565fa0 R15: 00007ffc78483d58
[  599.370118][T16821]  </TASK>
[  599.376182][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.397023][T16819] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3309: bg 0: block 393: padding at end of block bitmap is not set
[  599.608221][T16826] loop3: detected capacity change from 0 to 128
[  599.615813][T16819] loop9: lost filesystem error report for type 5 error -117
[  599.616204][T16819] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  599.623628][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  599.623654][    C0] EXT4-fs (loop9): initial error at time 599: ext4_validate_block_bitmap:441
[  599.623683][    C0] EXT4-fs (loop9): last error at time 599: ext4_validate_block_bitmap:441
[  599.662570][T16819] loop9: lost filesystem error report for type 5 error -117
[  599.662821][T16819] EXT4-fs (loop9): 2 truncates cleaned up
[  599.676232][T16827] loop0: detected capacity change from 0 to 512
[  599.677190][T16819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.685311][T16826] EXT4-fs: Ignoring removed nobh option
[  599.706912][T16829] ALSA: seq fatal error: cannot create timer (-22)
[  599.718710][T16829] loop1: detected capacity change from 0 to 736
[  599.735644][T16826] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  599.777424][T16824] 9p: Bad value for 'wfdno'
[  599.817071][T11223] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  599.825544][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'.
[  599.862433][T16833] ALSA: seq fatal error: cannot create timer (-22)
[  599.873519][T16833] loop3: detected capacity change from 0 to 736
[  599.938783][T16827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.965577][T16827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.996195][T16827] bond0 (unregistering): Released all slaves
[  600.059552][T16830] loop0: detected capacity change from 0 to 512
[  600.112196][T16830] EXT4-fs (loop0): bad geometry: block count 117440768 exceeds size of device (256 blocks)
[  600.212795][T16837] gre0 speed is unknown, defaulting to 1000
[  600.233058][T16841] loop0: detected capacity change from 0 to 512
[  600.250651][T16841] EXT4-fs: Ignoring removed nobh option
[  600.273396][T16841] journal_path: Non-blockdev passed as './file0'
[  600.287915][T16841] EXT4-fs: error: could not find journal device path
[  600.434000][T16837] hsr0 speed is unknown, defaulting to 1000
[  600.566344][T16847] EXT4-fs: Ignoring removed orlov option
[  600.580249][T16847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  600.591160][T16849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  600.608590][T16849] EXT4-fs (loop6): 1 truncate cleaned up
[  600.614810][T16849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  600.650256][T16847] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3315: invalid indirect mapped block 32768 (level 2)
[  600.691051][T16847] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  600.698657][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  600.714431][    C0] EXT4-fs (loop1): initial error at time 600: ext4_free_branches:1023: inode 16
[  600.723549][    C0] EXT4-fs (loop1): last error at time 600: ext4_free_branches:1023: inode 16
[  600.749468][T16847] EXT4-fs (loop1): 1 orphan inode deleted
[  600.755263][T16847] EXT4-fs (loop1): 1 truncate cleaned up
[  600.775354][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.798957][T16847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.094302][T16865] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  601.114512][T16865] EXT4-fs (loop9): 1 truncate cleaned up
[  601.120747][T16865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.139734][   T28] kauditd_printk_skb: 218 callbacks suppressed
[  601.139751][   T28] audit: type=1400 audit(600.607:4692): avc:  denied  { write } for  pid=16864 comm="syz.9.3324" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  601.167497][   T28] audit: type=1400 audit(600.627:4693): avc:  denied  { write } for  pid=16864 comm="syz.9.3324" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  601.234776][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.249520][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.267852][T16868] FAULT_INJECTION: forcing a failure.
[  601.267852][T16868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  601.281573][T16868] CPU: 0 UID: 0 PID: 16868 Comm: syz.0.3327 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  601.281629][T16868] Tainted: [W]=WARN
[  601.281639][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  601.281656][T16868] Call Trace:
[  601.281663][T16868]  <TASK>
[  601.281682][T16868]  __dump_stack+0x1d/0x30
[  601.281760][T16868]  dump_stack_lvl+0x95/0xd0
[  601.281788][T16868]  dump_stack+0x15/0x1b
[  601.281813][T16868]  should_fail_ex+0x263/0x280
[  601.281927][T16868]  ? __pfx_ucma_resolve_route+0x10/0x10
[  601.281961][T16868]  should_fail+0xb/0x20
[  601.281991][T16868]  should_fail_usercopy+0x1a/0x20
[  601.282090][T16868]  _copy_from_user+0x1c/0xb0
[  601.282125][T16868]  ucma_resolve_route+0x4b/0x370
[  601.282188][T16868]  ? __pfx_ucma_resolve_route+0x10/0x10
[  601.282225][T16868]  ucma_write+0x1c9/0x260
[  601.282269][T16868]  ? __pfx_ucma_write+0x10/0x10
[  601.282304][T16868]  vfs_write+0x269/0x9f0
[  601.282402][T16868]  ? __rcu_read_unlock+0x4e/0x70
[  601.282427][T16868]  ? __fget_files+0x184/0x1c0
[  601.282454][T16868]  ksys_write+0xdc/0x1a0
[  601.282504][T16868]  __x64_sys_write+0x40/0x50
[  601.282540][T16868]  x64_sys_call+0x27e1/0x3020
[  601.282573][T16868]  do_syscall_64+0x12c/0x3b0
[  601.282693][T16868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.282735][T16868] RIP: 0033:0x7f39deecce59
[  601.282755][T16868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.282854][T16868] RSP: 002b:00007f39dd927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  601.282874][T16868] RAX: ffffffffffffffda RBX: 00007f39df145fa0 RCX: 00007f39deecce59
[  601.282891][T16868] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003
[  601.282919][T16868] RBP: 00007f39dd927090 R08: 0000000000000000 R09: 0000000000000000
[  601.282937][T16868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.282950][T16868] R13: 00007f39df146038 R14: 00007f39df145fa0 R15: 00007ffcc80a3cc8
[  601.282973][T16868]  </TASK>
[  601.705466][T16876] msdos: Bad value for 'gid'
[  601.710171][T16876] msdos: Bad value for 'gid'
[  601.729949][T16876] gre0 speed is unknown, defaulting to 1000
[  601.770211][T16876] hsr0 speed is unknown, defaulting to 1000
[  602.703118][T16616] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  603.259451][T16883] gre0 speed is unknown, defaulting to 1000
[  603.415247][T16886] gre0 speed is unknown, defaulting to 1000
[  603.421796][T16883] hsr0 speed is unknown, defaulting to 1000
[  603.452554][T16893] netlink: 'syz.6.3332': attribute type 13 has an invalid length.
[  603.476143][T16891] set_capacity_and_notify: 4 callbacks suppressed
[  603.476162][T16891] loop0: detected capacity change from 0 to 512
[  603.524662][T16894] loop6: detected capacity change from 0 to 1764
[  603.540395][T16891] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3331: bg 0: block 393: padding at end of block bitmap is not set
[  603.549440][T16894] iso9660: Unknown parameter 'T'
[  603.561769][T16891] loop0: lost filesystem error report for type 5 error -117
[  603.573301][T16891] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  603.589369][T16891] loop0: lost filesystem error report for type 5 error -117
[  603.596882][T16886] hsr0 speed is unknown, defaulting to 1000
[  603.620034][T16891] EXT4-fs (loop0): 2 truncates cleaned up
[  603.626198][T16891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.690726][   T28] audit: type=1326 audit(603.077:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deecce59 code=0x7ffc0000
[  603.713742][T16899] __nla_validate_parse: 5 callbacks suppressed
[  603.713793][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3333'.
[  603.741992][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3333'.
[  603.752918][   T28] audit: type=1326 audit(603.077:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deecce59 code=0x7ffc0000
[  603.753006][   T28] audit: type=1326 audit(603.077:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deecce59 code=0x7ffc0000
[  603.753044][   T28] audit: type=1326 audit(603.077:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f39dee8d68e code=0x7ffc0000
[  603.753166][   T28] audit: type=1326 audit(603.077:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39dee8d68e code=0x7ffc0000
[  603.899021][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3333'.
[  603.909358][   T28] audit: type=1326 audit(603.377:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deecce59 code=0x7ffc0000
[  603.934772][   T28] audit: type=1326 audit(603.377:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deecce59 code=0x7ffc0000
[  603.960933][   T28] audit: type=1326 audit(603.377:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16890 comm="syz.0.3331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deecce59 code=0x7ffc0000
[  604.015264][T16901] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3334'.
[  604.026323][T16901] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3334'.
[  604.180204][T16905] loop6: detected capacity change from 0 to 1024
[  604.192585][T16905] EXT4-fs: Ignoring removed orlov option
[  604.212799][T16905] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  604.212931][T16905] System zones: 0-1, 3-12
[  604.223831][T16905] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.345694][T16914] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3336'.
[  604.383149][T16915] loop3: detected capacity change from 0 to 2048
[  604.399971][T16915] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  604.620742][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.835636][T15598] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.873384][T16925] gre0 speed is unknown, defaulting to 1000
[  604.958299][T16931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3345'.
[  604.989268][T16931] loop1: detected capacity change from 0 to 128
[  605.025856][T16925] hsr0 speed is unknown, defaulting to 1000
[  605.086231][T16935] netlink: 'syz.1.3346': attribute type 13 has an invalid length.
[  605.121456][T16935] loop1: detected capacity change from 0 to 1764
[  605.130303][T16935] iso9660: Unknown parameter 'T'
[  605.235321][T16942] x_tables: ip6_tables: mh match: only valid for protocol 135
[  605.318747][T16944] loop0: detected capacity change from 0 to 512
[  605.340229][T16944] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  605.375082][T16944] EXT4-fs (loop0): 1 truncate cleaned up
[  605.444478][T16948] ALSA: seq fatal error: cannot create timer (-22)
[  605.464302][T16948] loop3: detected capacity change from 0 to 736
[  605.498524][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'.
[  605.689639][T16957] FAULT_INJECTION: forcing a failure.
[  605.689639][T16957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.707586][T16957] CPU: 0 UID: 0 PID: 16957 Comm: syz.3.3355 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  605.707633][T16957] Tainted: [W]=WARN
[  605.707643][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  605.707673][T16957] Call Trace:
[  605.707681][T16957]  <TASK>
[  605.707690][T16957]  __dump_stack+0x1d/0x30
[  605.707721][T16957]  dump_stack_lvl+0x95/0xd0
[  605.707746][T16957]  dump_stack+0x15/0x1b
[  605.707829][T16957]  should_fail_ex+0x263/0x280
[  605.707861][T16957]  should_fail+0xb/0x20
[  605.707893][T16957]  should_fail_usercopy+0x1a/0x20
[  605.707961][T16957]  _copy_from_user+0x1c/0xb0
[  605.708003][T16957]  sg_io+0x1e8/0x460
[  605.708043][T16957]  scsi_ioctl+0x101b/0x1750
[  605.708091][T16957]  ? scsi_block_when_processing_errors+0x1fa/0x230
[  605.708137][T16957]  sg_ioctl+0xb56/0x1340
[  605.708167][T16957]  ? mutex_lock+0x57/0x90
[  605.708273][T16957]  ? __pfx_sg_ioctl+0x10/0x10
[  605.708354][T16957]  __se_sys_ioctl+0xce/0x140
[  605.708393][T16957]  __x64_sys_ioctl+0x43/0x50
[  605.708428][T16957]  x64_sys_call+0x1563/0x3020
[  605.708459][T16957]  do_syscall_64+0x12c/0x3b0
[  605.708498][T16957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.708521][T16957] RIP: 0033:0x7f5dd82ece59
[  605.708540][T16957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.708574][T16957] RSP: 002b:00007f5dd6d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  605.708600][T16957] RAX: ffffffffffffffda RBX: 00007f5dd8565fa0 RCX: 00007f5dd82ece59
[  605.708617][T16957] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003
[  605.708633][T16957] RBP: 00007f5dd6d47090 R08: 0000000000000000 R09: 0000000000000000
[  605.708669][T16957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.708695][T16957] R13: 00007f5dd8566038 R14: 00007f5dd8565fa0 R15: 00007ffc78483d58
[  605.708784][T16957]  </TASK>
[  606.487158][T16970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3357'.
[  606.488500][T16971] ALSA: seq fatal error: cannot create timer (-22)
[  606.503102][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3358'.
[  606.514783][T16971] loop9: detected capacity change from 0 to 736
[  606.522551][T16967] gre0 speed is unknown, defaulting to 1000
[  606.556268][T16970] loop3: detected capacity change from 0 to 128
[  606.571297][T16973] ALSA: seq fatal error: cannot create timer (-22)
[  606.672015][T16977] ALSA: seq fatal error: cannot create timer (-22)
[  606.720578][T16965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  606.735937][T16965] EXT4-fs (loop1): 1 truncate cleaned up
[  606.764163][T16967] hsr0 speed is unknown, defaulting to 1000
[  606.798784][   T28] kauditd_printk_skb: 80 callbacks suppressed
[  606.798805][   T28] audit: type=1400 audit(606.257:4782): avc:  denied  { write } for  pid=16958 comm="syz.1.3356" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  606.852121][T16981] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.900096][T16981] bridge_slave_1: left promiscuous mode
[  606.905872][T16981] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.961350][T16981] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  607.151404][   T28] audit: type=1400 audit(606.607:4783): avc:  denied  { write } for  pid=16997 comm="syz.9.3368" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  607.579523][T17014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  607.624603][T17014] EXT4-fs (loop3): 1 truncate cleaned up
[  607.637025][   T28] audit: type=1400 audit(607.097:4784): avc:  denied  { write } for  pid=16993 comm="syz.3.3367" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  607.733640][T17016] EXT4-fs: Ignoring removed orlov option
[  607.739583][T17016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  607.872509][T17016] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3371: invalid indirect mapped block 32768 (level 2)
[  607.992809][T17016] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  607.998663][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  608.014418][    C0] EXT4-fs (loop0): initial error at time 607: ext4_free_branches:1023: inode 16
[  608.023534][    C0] EXT4-fs (loop0): last error at time 607: ext4_free_branches:1023: inode 16
[  608.050944][T17023] ALSA: seq fatal error: cannot create timer (-22)
[  608.172960][T17016] EXT4-fs (loop0): 1 orphan inode deleted
[  608.178852][T17016] EXT4-fs (loop0): 1 truncate cleaned up
[  608.439158][T17028] syzkaller0: entered promiscuous mode
[  608.468731][T16896] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  608.869984][T17030] set_capacity_and_notify: 7 callbacks suppressed
[  608.870007][T17030] loop6: detected capacity change from 0 to 512
[  608.952515][T17030] EXT4-fs: Ignoring removed orlov option
[  608.966234][T17030] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  608.996326][T17030] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3373: invalid indirect mapped block 32768 (level 2)
[  609.050582][T17030] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  609.058685][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  609.074376][    C1] EXT4-fs (loop6): initial error at time 608: ext4_free_branches:1023: inode 16
[  609.083489][    C1] EXT4-fs (loop6): last error at time 608: ext4_free_branches:1023: inode 16
[  609.104052][T17030] EXT4-fs (loop6): 1 orphan inode deleted
[  609.168886][T17030] EXT4-fs (loop6): 1 truncate cleaned up
[  609.327577][T17034] ALSA: seq fatal error: cannot create timer (-22)
[  609.497770][T17034] loop9: detected capacity change from 0 to 736
[  609.534013][T17034] __nla_validate_parse: 6 callbacks suppressed
[  609.534029][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3378'.
[  609.558945][T17036] ALSA: seq fatal error: cannot create timer (-22)
[  609.621907][T17036] loop1: detected capacity change from 0 to 736
[  609.923825][T17039] gre0 speed is unknown, defaulting to 1000
[  610.025474][T17039] hsr0 speed is unknown, defaulting to 1000
[  610.189689][T17043] loop9: detected capacity change from 0 to 1024
[  610.239953][T17043] EXT4-fs: Ignoring removed orlov option
[  610.281373][T17046] FAULT_INJECTION: forcing a failure.
[  610.281373][T17046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  610.298847][T17046] CPU: 0 UID: 0 PID: 17046 Comm: syz.6.3381 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  610.298882][T17046] Tainted: [W]=WARN
[  610.298891][T17046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  610.298908][T17046] Call Trace:
[  610.298917][T17046]  <TASK>
[  610.298928][T17046]  __dump_stack+0x1d/0x30
[  610.299050][T17046]  dump_stack_lvl+0x95/0xd0
[  610.299157][T17046]  dump_stack+0x15/0x1b
[  610.299187][T17046]  should_fail_ex+0x263/0x280
[  610.299227][T17046]  should_fail+0xb/0x20
[  610.299259][T17046]  should_fail_usercopy+0x1a/0x20
[  610.299340][T17046]  _copy_from_user+0x1c/0xb0
[  610.299438][T17046]  memdup_user+0x5e/0xd0
[  610.299475][T17046]  strndup_user+0x68/0xb0
[  610.299514][T17046]  __se_sys_mount+0x4d/0x2e0
[  610.299575][T17046]  ? fput+0x8f/0xc0
[  610.299600][T17046]  ? ksys_write+0x194/0x1a0
[  610.299692][T17046]  __x64_sys_mount+0x67/0x80
[  610.299747][T17046]  x64_sys_call+0x2d61/0x3020
[  610.299777][T17046]  do_syscall_64+0x12c/0x3b0
[  610.299877][T17046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.299974][T17046] RIP: 0033:0x7f4018d5ce59
[  610.300003][T17046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.300028][T17046] RSP: 002b:00007f40177af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  610.300049][T17046] RAX: ffffffffffffffda RBX: 00007f4018fd5fa0 RCX: 00007f4018d5ce59
[  610.300064][T17046] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000
[  610.300128][T17046] RBP: 00007f40177af090 R08: 0000200000002780 R09: 0000000000000000
[  610.300147][T17046] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000001
[  610.300164][T17046] R13: 00007f4018fd6038 R14: 00007f4018fd5fa0 R15: 00007ffcb42ceae8
[  610.300191][T17046]  </TASK>
[  610.494796][   T28] audit: type=1400 audit(609.957:4785): avc:  denied  { write } for  pid=17042 comm="syz.9.3380" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  610.518834][T17043] EXT4-fs error (device loop9): ext4_free_inode:354: comm syz.9.3380: bit already cleared for inode 13
[  610.535125][T17050] ALSA: seq fatal error: cannot create timer (-22)
[  610.553522][   T28] audit: type=1400 audit(610.007:4786): avc:  denied  { write } for  pid=17042 comm="syz.9.3380" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  610.613955][T17050] loop1: detected capacity change from 0 to 736
[  610.622833][T17053] tipc: Started in network mode
[  610.627757][T17053] tipc: Node identity e0000002, cluster identity 4711
[  610.638228][T17053] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  610.640995][   T28] audit: type=1400 audit(610.087:4787): avc:  denied  { shutdown } for  pid=17042 comm="syz.9.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  610.708540][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3382'.
[  610.797110][T17057] ALSA: seq fatal error: cannot create timer (-22)
[  610.804715][T17059] ALSA: seq fatal error: cannot create timer (-22)
[  610.857583][T17059] loop9: detected capacity change from 0 to 736
[  610.865331][T17057] loop3: detected capacity change from 0 to 736
[  610.885656][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'.
[  611.163427][T17066] loop6: detected capacity change from 0 to 512
[  611.343961][T17072] x_tables: ip6_tables: mh match: only valid for protocol 135
[  611.561809][T17066] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  611.571946][T17066] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  611.581933][T17066] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3387: Failed to acquire dquot type 1
[  611.593272][T17066] loop6: lost filesystem error report for type 5 error -117
[  611.595151][T17066] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  611.612501][T17066] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  611.618699][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  611.622412][T17066] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3387: Failed to acquire dquot type 1
[  611.628964][    C1] EXT4-fs (loop6): last error at time 611: ext4_acquire_dquot:7034
[  611.640066][T17066] loop6: lost filesystem error report for type 5 error -117
[  611.641273][T17066] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3387: bg 0: block 248: padding at end of block bitmap is not set
[  611.648047][    C1] 
[  611.655316][T17066] loop6: lost filesystem error report for type 5 error -117
[  611.655884][T17066] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  611.688278][T17066] loop6: lost filesystem error report for type 5 error -117
[  611.691253][T17066] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3387: Failed to acquire dquot type 1
[  611.710084][T17066] loop6: lost filesystem error report for type 5 error -117
[  611.710473][T17066] EXT4-fs (loop6): 1 orphan inode deleted
[  611.723994][T17066] EXT4-fs mount: 14 callbacks suppressed
[  611.724015][T17066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  611.908913][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.010377][T17089] loop3: detected capacity change from 0 to 512
[  612.034464][T17086] loop6: detected capacity change from 0 to 512
[  612.046934][T17086] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  612.073588][T17089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  612.094295][T17092] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  612.120462][T17086] EXT4-fs (loop6): 1 truncate cleaned up
[  612.152665][T17086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.215133][T17089] EXT4-fs (loop3): 1 truncate cleaned up
[  612.231427][T17089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.277182][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.348600][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  612.348618][   T28] audit: type=1400 audit(611.807:4788): avc:  denied  { write } for  pid=17073 comm="syz.3.3392" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  612.622660][ T3989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.688312][ T3989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.743189][ T3989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.916249][T17103] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  612.940063][T17103] EXT4-fs (loop6): 1 truncate cleaned up
[  612.946229][T17103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.991191][   T28] audit: type=1400 audit(612.427:4789): avc:  denied  { write } for  pid=17096 comm="syz.6.3397" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  613.016701][ T3989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.360216][ T3989] bond0 (unregistering): Released all slaves
[  613.542635][ T3989] hsr_slave_0: left promiscuous mode
[  613.576753][ T3989] hsr_slave_1: left promiscuous mode
[  613.615179][ T3989] veth1_macvtap: left promiscuous mode
[  613.636977][ T3989] veth0_macvtap: left promiscuous mode
[  613.671004][ T3989] veth1_vlan: left promiscuous mode
[  613.698143][ T3989] veth0_vlan: left promiscuous mode
[  613.719180][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.788227][   T28] audit: type=1400 audit(613.247:4790): avc:  denied  { write } for  pid=17106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.823489][   T28] audit: type=1400 audit(613.287:4791): avc:  denied  { write } for  pid=17122 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  613.880376][T17126] ALSA: seq fatal error: cannot create timer (-22)
[  613.891334][T17126] set_capacity_and_notify: 2 callbacks suppressed
[  613.891367][T17126] loop6: detected capacity change from 0 to 736
[  613.918443][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3401'.
[  613.985942][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5
[  614.016618][T17115] gre0 speed is unknown, defaulting to 1000
[  614.050450][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.074350][T17133] FAULT_INJECTION: forcing a failure.
[  614.074350][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  614.113269][T17133] CPU: 0 UID: 0 PID: 17133 Comm: syz.6.3403 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  614.113311][T17133] Tainted: [W]=WARN
[  614.113320][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  614.113335][T17133] Call Trace:
[  614.113369][T17133]  <TASK>
[  614.113380][T17133]  __dump_stack+0x1d/0x30
[  614.113468][T17133]  dump_stack_lvl+0x95/0xd0
[  614.113496][T17133]  dump_stack+0x15/0x1b
[  614.113543][T17133]  should_fail_ex+0x263/0x280
[  614.113651][T17133]  should_fail+0xb/0x20
[  614.113686][T17133]  should_fail_usercopy+0x1a/0x20
[  614.113725][T17133]  _copy_from_iter+0xcf/0xea0
[  614.113793][T17133]  ? __alloc_skb+0x4f6/0x690
[  614.113815][T17133]  ? __alloc_skb+0x200/0x690
[  614.113860][T17133]  netlink_sendmsg+0x4ae/0x6f0
[  614.113904][T17133]  ? __pfx_netlink_sendmsg+0x10/0x10
[  614.113945][T17133]  ____sys_sendmsg+0x563/0x5b0
[  614.114046][T17133]  ___sys_sendmsg+0x195/0x1e0
[  614.114172][T17133]  __x64_sys_sendmsg+0xd4/0x160
[  614.114222][T17133]  x64_sys_call+0x194c/0x3020
[  614.114315][T17133]  do_syscall_64+0x12c/0x3b0
[  614.114431][T17133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.114460][T17133] RIP: 0033:0x7f4018d5ce59
[  614.114536][T17133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.114562][T17133] RSP: 002b:00007f40177af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  614.114588][T17133] RAX: ffffffffffffffda RBX: 00007f4018fd5fa0 RCX: 00007f4018d5ce59
[  614.114607][T17133] RDX: 0000000004040014 RSI: 0000200000000480 RDI: 0000000000000003
[  614.114645][T17133] RBP: 00007f40177af090 R08: 0000000000000000 R09: 0000000000000000
[  614.114662][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.114678][T17133] R13: 00007f4018fd6038 R14: 00007f4018fd5fa0 R15: 00007ffcb42ceae8
[  614.114707][T17133]  </TASK>
[  614.168935][   T28] audit: type=1400 audit(613.577:4792): avc:  denied  { bind } for  pid=17136 comm="syz.0.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  614.338970][T17115] hsr0 speed is unknown, defaulting to 1000
[  614.451858][   T28] audit: type=1400 audit(613.917:4793): avc:  denied  { write } for  pid=17134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  614.492403][T17112] gre0 speed is unknown, defaulting to 1000
[  614.504488][T17157] loop0: detected capacity change from 0 to 512
[  614.559659][T17161] ALSA: seq fatal error: cannot create timer (-22)
[  614.565525][   T28] audit: type=1400 audit(614.007:4794): avc:  denied  { write } for  pid=17159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  614.569998][T17157] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  614.603636][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6
[  614.617761][T17161] loop6: detected capacity change from 0 to 736
[  614.629733][T17112] hsr0 speed is unknown, defaulting to 1000
[  614.726747][T17157] EXT4-fs (loop0): 1 truncate cleaned up
[  614.733020][T17157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  614.859955][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3408'.
[  614.915356][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.059064][T17173] loop0: detected capacity change from 0 to 164
[  615.153728][T17173] iso9660: Corrupted directory entry in block 4 of inode 1792
[  615.177933][   T28] audit: type=1400 audit(614.617:4795): avc:  denied  { write } for  pid=17165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.277686][   T28] audit: type=1400 audit(614.747:4796): avc:  denied  { write } for  pid=17186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  615.300485][T17175] loop9: detected capacity change from 0 to 512
[  615.341392][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7
[  615.362783][T17175] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  615.372748][T17189] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3412'.
[  615.375891][   T28] audit: type=1400 audit(614.767:4797): avc:  denied  { mounton } for  pid=17166 comm="syz.9.3409" path="/422/file1" dev="tmpfs" ino=2295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  615.387541][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'.
[  615.447188][T17175] EXT4-fs (loop9): 1 truncate cleaned up
[  615.453706][T17193] FAULT_INJECTION: forcing a failure.
[  615.453706][T17193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  615.453968][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.466775][T17193] CPU: 0 UID: 0 PID: 17193 Comm: syz.6.3414 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  615.466905][T17193] Tainted: [W]=WARN
[  615.466935][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  615.466992][T17193] Call Trace:
[  615.467014][T17193]  <TASK>
[  615.467087][T17193]  __dump_stack+0x1d/0x30
[  615.467180][T17193]  dump_stack_lvl+0x95/0xd0
[  615.467249][T17193]  dump_stack+0x15/0x1b
[  615.467320][T17193]  should_fail_ex+0x263/0x280
[  615.467439][T17193]  should_fail+0xb/0x20
[  615.467526][T17193]  should_fail_usercopy+0x1a/0x20
[  615.467637][T17193]  _copy_from_iter+0xcf/0xea0
[  615.467739][T17193]  ? __alloc_skb+0x4f6/0x690
[  615.467802][T17193]  ? __alloc_skb+0x200/0x690
[  615.467877][T17193]  netlink_sendmsg+0x4ae/0x6f0
[  615.468025][T17193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  615.468139][T17193]  ____sys_sendmsg+0x563/0x5b0
[  615.468234][T17193]  ___sys_sendmsg+0x195/0x1e0
[  615.468404][T17193]  __x64_sys_sendmsg+0xd4/0x160
[  615.468571][T17193]  x64_sys_call+0x194c/0x3020
[  615.468643][T17193]  do_syscall_64+0x12c/0x3b0
[  615.468819][T17193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.468893][T17193] RIP: 0033:0x7f4018d5ce59
[  615.468948][T17193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.469045][T17193] RSP: 002b:00007f40177af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  615.469120][T17193] RAX: ffffffffffffffda RBX: 00007f4018fd5fa0 RCX: 00007f4018d5ce59
[  615.469182][T17193] RDX: 000000000404c000 RSI: 00002000000007c0 RDI: 0000000000000006
[  615.469226][T17193] RBP: 00007f40177af090 R08: 0000000000000000 R09: 0000000000000000
[  615.469269][T17193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  615.469312][T17193] R13: 00007f4018fd6038 R14: 00007f4018fd5fa0 R15: 00007ffcb42ceae8
[  615.469427][T17193]  </TASK>
[  615.583300][T17175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.738212][T17203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3416'.
[  615.777846][T17112] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.809794][T17112] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.817521][T17112] bridge_slave_0: entered allmulticast mode
[  615.826685][T17112] bridge_slave_0: entered promiscuous mode
[  615.833078][T17200] loop3: detected capacity change from 0 to 736
[  615.834796][T17112] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.846778][T17112] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.854465][T17112] bridge_slave_1: entered allmulticast mode
[  615.861501][T17112] bridge_slave_1: entered promiscuous mode
[  615.880977][T17112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  615.891990][T17112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  615.914359][T17112] team0: Port device team_slave_0 added
[  615.922259][T17112] team0: Port device team_slave_1 added
[  615.961635][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'.
[  615.999147][T17112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.006161][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.033918][T17211] loop0: detected capacity change from 0 to 512
[  616.040581][T17112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.075274][T17112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.082374][T17112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  616.122535][T17112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.122507][T17211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.169416][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3418'.
[  616.203277][T17112] hsr_slave_0: entered promiscuous mode
[  616.234023][T17112] hsr_slave_1: entered promiscuous mode
[  616.255557][T17112] debugfs: 'hsr0' already exists in 'hsr'
[  616.286766][T17112] Cannot create hsr debugfs directory
[  616.298852][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  616.319827][T17227] loop3: detected capacity change from 0 to 512
[  616.370211][T17227] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  616.397613][T17227] EXT4-fs (loop3): 1 truncate cleaned up
[  616.403885][T17227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.457471][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.556142][T17243] FAULT_INJECTION: forcing a failure.
[  616.556142][T17243] name failslab, interval 1, probability 0, space 0, times 0
[  616.576100][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.6.3421 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  616.576196][T17243] Tainted: [W]=WARN
[  616.576204][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  616.576217][T17243] Call Trace:
[  616.576223][T17243]  <TASK>
[  616.576234][T17243]  __dump_stack+0x1d/0x30
[  616.576269][T17243]  dump_stack_lvl+0x95/0xd0
[  616.576326][T17243]  dump_stack+0x15/0x1b
[  616.576351][T17243]  should_fail_ex+0x263/0x280
[  616.576389][T17243]  should_failslab+0x8c/0xb0
[  616.576501][T17243]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  616.576536][T17243]  ? __d_alloc+0x37/0x340
[  616.576561][T17243]  __d_alloc+0x37/0x340
[  616.576637][T17243]  d_alloc+0x2e/0x100
[  616.576668][T17243]  lookup_one_qstr_excl+0x95/0x240
[  616.576701][T17243]  filename_create+0x155/0x220
[  616.576733][T17243]  filename_mkdirat+0x81/0x300
[  616.576960][T17243]  __se_sys_mkdirat+0x32/0xf0
[  616.577072][T17243]  __x64_sys_mkdirat+0x43/0x50
[  616.577112][T17243]  x64_sys_call+0x2c4e/0x3020
[  616.577202][T17243]  do_syscall_64+0x12c/0x3b0
[  616.577237][T17243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.577260][T17243] RIP: 0033:0x7f4018d5ce59
[  616.577346][T17243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.577409][T17243] RSP: 002b:00007f40177af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  616.577436][T17243] RAX: ffffffffffffffda RBX: 00007f4018fd5fa0 RCX: 00007f4018d5ce59
[  616.577459][T17243] RDX: 14e174135c0b87af RSI: 0000200000000040 RDI: ffffffffffffff9c
[  616.577560][T17243] RBP: 00007f40177af090 R08: 0000000000000000 R09: 0000000000000000
[  616.577579][T17243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.577621][T17243] R13: 00007f4018fd6038 R14: 00007f4018fd5fa0 R15: 00007ffcb42ceae8
[  616.577709][T17243]  </TASK>
[  616.801523][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.105268][T17263] loop6: detected capacity change from 0 to 512
[  617.124137][T17263] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3423: Failed to acquire dquot type 1
[  617.135638][T17263] loop6: lost filesystem error report for type 5 error -117
[  617.135958][T17263] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3423: Failed to acquire dquot type 1
[  617.143673][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  617.143695][    C0] EXT4-fs (loop6): last error at time 616: ext4_acquire_dquot:7034
[  617.170208][T17263] loop6: lost filesystem error report for type 5 error -117
[  617.177604][T17263] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3423: bg 0: block 248: padding at end of block bitmap is not set
[  617.199773][T17263] loop6: lost filesystem error report for type 5 error -117
[  617.209013][T17263] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  617.225555][T17263] loop6: lost filesystem error report for type 5 error -117
[  617.226357][T17263] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3423: Failed to acquire dquot type 1
[  617.245726][T17263] loop6: lost filesystem error report for type 5 error -117
[  617.245978][T17263] EXT4-fs (loop6): 1 orphan inode deleted
[  617.260039][T17263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.340527][T17112] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  617.371991][   T28] kauditd_printk_skb: 72 callbacks suppressed
[  617.372012][   T28] audit: type=1400 audit(616.837:4864): avc:  denied  { create } for  pid=17276 comm="syz.3.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  617.402326][T17112] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  617.432999][T17112] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  617.445272][T17112] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  617.457175][T17112] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  617.469154][T17112] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  617.484892][T17112] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  617.496507][T17112] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  617.533844][   T28] audit: type=1400 audit(616.997:4865): avc:  denied  { allowed } for  pid=17276 comm="syz.3.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  617.565161][T17286] loop3: detected capacity change from 0 to 512
[  617.571911][T17286] EXT4-fs: Ignoring removed orlov option
[  617.580459][T17286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  617.599047][   T28] audit: type=1400 audit(616.997:4866): avc:  denied  { create } for  pid=17276 comm="syz.3.3424" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  617.620271][   T28] audit: type=1400 audit(616.997:4867): avc:  denied  { map } for  pid=17276 comm="syz.3.3424" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  617.648104][T17286] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3424: invalid indirect mapped block 32768 (level 2)
[  617.661642][T17286] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  617.662212][T17286] EXT4-fs (loop3): 1 orphan inode deleted
[  617.677148][T17286] EXT4-fs (loop3): 1 truncate cleaned up
[  617.683210][T17286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.700879][   T28] audit: type=1400 audit(616.997:4868): avc:  denied  { read write } for  pid=17276 comm="syz.3.3424" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  617.732300][   T28] audit: type=1400 audit(617.117:4869): avc:  denied  { write } for  pid=17275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.777266][T17288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  617.788587][T17288] EXT4-fs (loop0): 1 truncate cleaned up
[  617.793507][T17112] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.795013][T17288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.871704][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.895149][   T28] audit: type=1400 audit(617.357:4870): avc:  denied  { write } for  pid=17299 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.910987][T17112] 8021q: adding VLAN 0 to HW filter on device team0
[  617.931983][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.939094][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.948174][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.955244][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.985342][   T28] audit: type=1400 audit(617.397:4871): avc:  denied  { write } for  pid=17250 comm="syz.0.3422" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  618.047405][   T28] audit: type=1400 audit(617.507:4872): avc:  denied  { bind } for  pid=17303 comm="syz.6.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  618.067246][   T28] audit: type=1400 audit(617.507:4873): avc:  denied  { setopt } for  pid=17303 comm="syz.6.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  618.140046][T17304] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.246606][T17304] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.281983][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.297004][T17112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.325540][T17304] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.392202][T17304] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.410283][T17326] iso9660: Corrupted directory entry in block 4 of inode 1792
[  618.502052][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'.
[  618.585789][ T2704] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.594088][ T2704] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.609097][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.618462][   T49] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.650282][   T49] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.742562][T17112] veth0_vlan: entered promiscuous mode
[  618.766884][T17112] veth1_vlan: entered promiscuous mode
[  618.828600][T17112] veth0_macvtap: entered promiscuous mode
[  618.847254][T17112] veth1_macvtap: entered promiscuous mode
[  618.859422][T17112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  618.879048][T17112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.893594][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.903379][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.967522][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.008060][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.093172][T17376] set_capacity_and_notify: 2 callbacks suppressed
[  619.093243][T17376] loop9: detected capacity change from 0 to 512
[  619.111873][T17376] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  619.126025][T17376] EXT4-fs (loop9): 1 truncate cleaned up
[  619.132220][T17376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.313542][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'.
[  619.335745][T17380] x_tables: ip6_tables: mh match: only valid for protocol 135
[  619.385538][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3431'.
[  619.432254][T17384] xt_hashlimit: overflow, try lower: 18446744073709551614/4
[  619.479735][T17379] geneve0: entered promiscuous mode
[  619.518189][T17379] geneve0: entered allmulticast mode
[  619.947777][T17403] loop3: detected capacity change from 0 to 512
[  620.045517][T17403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.198694][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.265546][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'.
[  620.375175][T17455] x_tables: ip6_tables: mh match: only valid for protocol 135
[  620.686923][T17490] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3437'.
[  620.727523][T17490] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3437'.
[  620.993983][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.140106][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.215970][T17521] xt_CT: You must specify a L4 protocol and not use inversions on it
[  621.235646][T17519] x_tables: ip6_tables: mh match: only valid for protocol 135
[  621.267429][T17521] loop0: detected capacity change from 0 to 512
[  621.282589][T17521] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  621.361321][T17524] loop3: detected capacity change from 0 to 1024
[  621.377984][T17524] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  621.428567][T17524] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869)
[  621.440787][T17524] EXT4-fs (loop3): invalid journal inode
[  621.462121][T17524] EXT4-fs (loop3): can't get journal size
[  621.495825][T17524] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.3443: blocks 3-3 from inode overlap system zone
[  621.538479][T17533] loop0: detected capacity change from 0 to 736
[  621.623809][T17539] loop9: detected capacity change from 0 to 512
[  621.630764][T17524] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  621.721002][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  621.736627][    C0] EXT4-fs (loop3): initial error at time 621: ext4_protect_reserved_inode:182: inode 2
[  621.746336][    C0] EXT4-fs (loop3): last error at time 621: ext4_protect_reserved_inode:182: inode 2
[  621.759414][T17539] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  621.776905][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'.
[  621.857023][T17524] EXT4-fs (loop3): failed to initialize system zone (-117)
[  621.867819][T17524] EXT4-fs (loop3): mount failed
[  621.880514][T17539] EXT4-fs (loop9): 1 truncate cleaned up
[  621.886616][T17539] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.091164][T17545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3446'.
[  622.388761][T17550] loop6: detected capacity change from 0 to 512
[  622.442038][T17550] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  622.502281][   T28] kauditd_printk_skb: 122 callbacks suppressed
[  622.502299][   T28] audit: type=1400 audit(621.957:4996): avc:  denied  { write } for  pid=17522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  622.546318][T17550] EXT4-fs (loop6): 1 truncate cleaned up
[  622.552541][T17550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.576928][   T28] audit: type=1400 audit(622.007:4997): avc:  denied  { write } for  pid=17554 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  622.624467][   T28] audit: type=1400 audit(622.087:4998): avc:  denied  { write } for  pid=17547 comm="syz.6.3447" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  622.751578][ T9214] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.817233][   T28] audit: type=1400 audit(622.277:4999): avc:  denied  { mount } for  pid=17560 comm="syz.9.3448" name="/" dev="ramfs" ino=58312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  622.828259][T17561] syz.9.3448 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  622.899012][   T28] audit: type=1400 audit(622.277:5000): avc:  denied  { ioctl } for  pid=17560 comm="syz.9.3448" path="socket:[58317]" dev="sockfs" ino=58317 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  622.939402][   T28] audit: type=1400 audit(622.337:5001): avc:  denied  { create } for  pid=17562 comm="syz.3.3450" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  622.960562][   T28] audit: type=1400 audit(622.337:5002): avc:  denied  { create } for  pid=17562 comm="syz.3.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  622.979702][   T28] audit: type=1400 audit(622.347:5003): avc:  denied  { getopt } for  pid=17562 comm="syz.3.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  623.061861][   T28] audit: type=1400 audit(622.347:5004): avc:  denied  { create } for  pid=17565 comm="syz.0.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  623.092662][   T28] audit: type=1400 audit(622.357:5005): avc:  denied  { unlink } for  pid=17112 comm="syz-executor" name="file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  623.146175][T17575] loop5: detected capacity change from 0 to 512
[  623.176122][T17575] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3451: Failed to acquire dquot type 1
[  623.187484][T17575] loop5: lost filesystem error report for type 5 error -117
[  623.187692][T17575] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3451: Failed to acquire dquot type 1
[  623.195054][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  623.195076][    C1] EXT4-fs (loop5): last error at time 622: ext4_acquire_dquot:7034
[  623.220802][T17575] loop5: lost filesystem error report for type 5 error -117
[  623.221737][T17575] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3451: bg 0: block 248: padding at end of block bitmap is not set
[  623.243398][T17575] loop5: lost filesystem error report for type 5 error -117
[  623.247487][T17575] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  623.263598][T17575] loop5: lost filesystem error report for type 5 error -117
[  623.269835][T17575] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3451: Failed to acquire dquot type 1
[  623.288577][T17575] loop5: lost filesystem error report for type 5 error -117
[  623.288818][T17575] EXT4-fs (loop5): 1 orphan inode deleted
[  623.302429][T17575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.349558][T17585] ALSA: seq fatal error: cannot create timer (-22)
[  623.374789][T17585] loop9: detected capacity change from 0 to 736
[  623.573258][T17595] loop0: detected capacity change from 0 to 512
[  623.580070][T17595] EXT4-fs: Ignoring removed orlov option
[  623.586315][T17595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  623.597681][T17595] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3449: invalid indirect mapped block 32768 (level 2)
[  623.611205][T17595] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  623.611798][T17595] EXT4-fs (loop0): 1 orphan inode deleted
[  623.626739][T17595] EXT4-fs (loop0): 1 truncate cleaned up
[  623.633041][T17595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  623.748221][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3454'.
[  623.930968][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.055234][T17613] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3457'.
[  624.084856][T17613] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3457'.
[  624.192661][T17617] x_tables: ip6_tables: mh match: only valid for protocol 135
[  624.335866][T17620] syzkaller0: entered promiscuous mode
[  624.529352][T17542] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  624.985441][T17633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3464'.
[  625.244057][T17637] FAULT_INJECTION: forcing a failure.
[  625.244057][T17637] name failslab, interval 1, probability 0, space 0, times 0
[  625.257052][T17637] CPU: 0 UID: 0 PID: 17637 Comm: syz.9.3465 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  625.257163][T17637] Tainted: [W]=WARN
[  625.257173][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  625.257191][T17637] Call Trace:
[  625.257200][T17637]  <TASK>
[  625.257211][T17637]  __dump_stack+0x1d/0x30
[  625.257242][T17637]  dump_stack_lvl+0x95/0xd0
[  625.257272][T17637]  dump_stack+0x15/0x1b
[  625.257291][T17637]  should_fail_ex+0x263/0x280
[  625.257588][T17637]  should_failslab+0x8c/0xb0
[  625.257626][T17637]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  625.257664][T17637]  ? alloc_vmap_area+0x1b6/0xe10
[  625.257764][T17637]  alloc_vmap_area+0x1b6/0xe10
[  625.257803][T17637]  ? should_failslab+0x8c/0xb0
[  625.257916][T17637]  ? __kmalloc_cache_node_noprof+0x211/0x470
[  625.257967][T17637]  __get_vm_area_node+0x173/0x1d0
[  625.258014][T17637]  __vmalloc_node_range_noprof+0x25a/0x11c0
[  625.258116][T17637]  ? copy_process+0x58e/0x2370
[  625.258138][T17637]  ? __rcu_read_unlock+0x4e/0x70
[  625.258172][T17637]  ? __rcu_read_unlock+0x4e/0x70
[  625.258245][T17637]  ? __memcg_slab_post_alloc_hook+0x34f/0x7d0
[  625.258359][T17637]  __vmalloc_node_noprof+0x89/0xc0
[  625.258382][T17637]  ? copy_process+0x58e/0x2370
[  625.258405][T17637]  ? copy_process+0x58e/0x2370
[  625.258427][T17637]  dup_task_struct+0x22a/0x660
[  625.258448][T17637]  ? copy_process+0x57d/0x2370
[  625.258505][T17637]  copy_process+0x58e/0x2370
[  625.258595][T17637]  ? __rcu_read_unlock+0x4e/0x70
[  625.258622][T17637]  kernel_clone+0x1a5/0x5e0
[  625.258648][T17637]  ? vfs_write+0x86e/0x9f0
[  625.258726][T17637]  __x64_sys_clone+0x143/0x180
[  625.258758][T17637]  x64_sys_call+0x1222/0x3020
[  625.258864][T17637]  do_syscall_64+0x12c/0x3b0
[  625.258938][T17637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.258966][T17637] RIP: 0033:0x7f1c0934ce59
[  625.258987][T17637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.259007][T17637] RSP: 002b:00007f1c07d64fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  625.259028][T17637] RAX: ffffffffffffffda RBX: 00007f1c095c6180 RCX: 00007f1c0934ce59
[  625.259048][T17637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  625.259098][T17637] RBP: 00007f1c07d65090 R08: 0000000000000000 R09: 0000000000000000
[  625.259127][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.259139][T17637] R13: 00007f1c095c6218 R14: 00007f1c095c6180 R15: 00007ffc5c11f3b8
[  625.259165][T17637]  </TASK>
[  625.508963][T17637] syz.9.3465: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  625.524288][T17637] CPU: 0 UID: 0 PID: 17637 Comm: syz.9.3465 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  625.524327][T17637] Tainted: [W]=WARN
[  625.524400][T17637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  625.524415][T17637] Call Trace:
[  625.524424][T17637]  <TASK>
[  625.524435][T17637]  __dump_stack+0x1d/0x30
[  625.524467][T17637]  dump_stack_lvl+0x95/0xd0
[  625.524490][T17637]  dump_stack+0x15/0x1b
[  625.524510][T17637]  warn_alloc+0x145/0x1c0
[  625.524575][T17637]  __vmalloc_node_range_noprof+0x27f/0x11c0
[  625.524605][T17637]  ? __rcu_read_unlock+0x4e/0x70
[  625.524630][T17637]  ? __rcu_read_unlock+0x4e/0x70
[  625.524650][T17637]  ? __memcg_slab_post_alloc_hook+0x34f/0x7d0
[  625.524704][T17637]  __vmalloc_node_noprof+0x89/0xc0
[  625.524732][T17637]  ? copy_process+0x58e/0x2370
[  625.524819][T17637]  ? copy_process+0x58e/0x2370
[  625.524846][T17637]  dup_task_struct+0x22a/0x660
[  625.524875][T17637]  ? copy_process+0x57d/0x2370
[  625.524897][T17637]  copy_process+0x58e/0x2370
[  625.524922][T17637]  ? __rcu_read_unlock+0x4e/0x70
[  625.525097][T17637]  kernel_clone+0x1a5/0x5e0
[  625.525127][T17637]  ? vfs_write+0x86e/0x9f0
[  625.525167][T17637]  __x64_sys_clone+0x143/0x180
[  625.525262][T17637]  x64_sys_call+0x1222/0x3020
[  625.525296][T17637]  do_syscall_64+0x12c/0x3b0
[  625.525339][T17637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.525361][T17637] RIP: 0033:0x7f1c0934ce59
[  625.525377][T17637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.525421][T17637] RSP: 002b:00007f1c07d64fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  625.525448][T17637] RAX: ffffffffffffffda RBX: 00007f1c095c6180 RCX: 00007f1c0934ce59
[  625.525467][T17637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  625.525483][T17637] RBP: 00007f1c07d65090 R08: 0000000000000000 R09: 0000000000000000
[  625.525496][T17637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.525512][T17637] R13: 00007f1c095c6218 R14: 00007f1c095c6180 R15: 00007ffc5c11f3b8
[  625.525540][T17637]  </TASK>
[  625.525569][T17637] Mem-Info:
[  625.738361][T17637] active_anon:24828 inactive_anon:2 isolated_anon:0
[  625.738361][T17637]  active_file:14228 inactive_file:14985 isolated_file:0
[  625.738361][T17637]  unevictable:0 dirty:545 writeback:0
[  625.738361][T17637]  slab_reclaimable:4001 slab_unreclaimable:60604
[  625.738361][T17637]  mapped:41713 shmem:12052 pagetables:4938
[  625.738361][T17637]  sec_pagetables:0 bounce:0
[  625.738361][T17637]  kernel_misc_reclaimable:0
[  625.738361][T17637]  free:1804586 free_pcp:3572 free_cma:0
[  625.783715][T17637] Node 0 active_anon:99312kB inactive_anon:8kB active_file:56912kB inactive_file:59940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166852kB dirty:2180kB writeback:0kB shmem:48208kB kernel_stack:5312kB pagetables:19752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  625.814208][T17637] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  625.844265][T17637] lowmem_reserve[]: 0 2878 7857 7857
[  625.849647][T17637] Node 0 DMA32 free:2944508kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948032kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[  625.881199][T17637] lowmem_reserve[]: 0 0 4978 4978
[  625.886358][T17637] Node 0 Normal free:4258476kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99312kB inactive_anon:8kB active_file:56912kB inactive_file:59940kB unevictable:0kB writepending:2180kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:10764kB local_pcp:9704kB free_cma:0kB
[  625.919527][T17637] lowmem_reserve[]: 0 0 0 0
[  625.924094][T17637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  625.936957][T17637] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944508kB
[  625.953093][T17637] Node 0 Normal: 563*4kB (UME) 619*8kB (UE) 35*16kB (UME) 189*32kB (UME) 285*64kB (UME) 253*128kB (UME) 230*256kB (UME) 184*512kB (UME) 164*1024kB (UME) 55*2048kB (UME) 918*4096kB (UM) = 4258228kB
[  625.972695][T17637] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  625.982118][T17637] 41250 total pagecache pages
[  625.986834][T17637] 2 pages in swap cache
[  625.991062][T17637] Free swap  = 124988kB
[  625.995348][T17637] Total swap = 124996kB
[  625.999555][T17637] 2097051 pages RAM
[  626.003391][T17637] 0 pages HighMem/MovableOnly
[  626.008082][T17637] 81644 pages reserved
[  626.266016][T17643] set_capacity_and_notify: 1 callbacks suppressed
[  626.266036][T17643] loop3: detected capacity change from 0 to 512
[  626.326362][T17643] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3467: Failed to acquire dquot type 1
[  626.337774][T17643] loop3: lost filesystem error report for type 5 error -117
[  626.338139][T17643] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3467: Failed to acquire dquot type 1
[  626.345565][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  626.345582][    C1] EXT4-fs (loop3): last error at time 625: ext4_acquire_dquot:7034
[  626.371396][T17643] loop3: lost filesystem error report for type 5 error -117
[  626.386785][T17643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3467: bg 0: block 248: padding at end of block bitmap is not set
[  626.389483][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.394314][T17643] loop3: lost filesystem error report for type 5 error -117
[  626.417691][T17643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  626.433829][T17643] loop3: lost filesystem error report for type 5 error -117
[  626.436566][T17643] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3467: Failed to acquire dquot type 1
[  626.455318][T17643] loop3: lost filesystem error report for type 5 error -117
[  626.456542][T17643] EXT4-fs (loop3): 1 orphan inode deleted
[  626.470152][T17643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.981653][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.060215][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'.
[  627.545515][T17672] syzkaller0: entered promiscuous mode
[  627.712484][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.831264][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  627.831280][   T28] audit: type=1400 audit(627.267:5030): avc:  denied  { write } for  pid=17678 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  627.914062][   T28] audit: type=1400 audit(627.377:5031): avc:  denied  { map } for  pid=17678 comm="syz.3.3476" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  627.955750][T17679] gre0 speed is unknown, defaulting to 1000
[  628.010229][T17679] hsr0 speed is unknown, defaulting to 1000
[  628.016663][T17682] FAULT_INJECTION: forcing a failure.
[  628.016663][T17682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.043478][T17682] CPU: 1 UID: 0 PID: 17682 Comm: syz.9.3477 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  628.043588][T17682] Tainted: [W]=WARN
[  628.043597][T17682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  628.043616][T17682] Call Trace:
[  628.043625][T17682]  <TASK>
[  628.043635][T17682]  __dump_stack+0x1d/0x30
[  628.043660][T17682]  dump_stack_lvl+0x95/0xd0
[  628.043732][T17682]  dump_stack+0x15/0x1b
[  628.043758][T17682]  should_fail_ex+0x263/0x280
[  628.043788][T17682]  should_fail+0xb/0x20
[  628.043817][T17682]  should_fail_usercopy+0x1a/0x20
[  628.043967][T17682]  strncpy_from_user+0x27/0x250
[  628.043992][T17682]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  628.044034][T17682]  do_getname+0x59/0x1c0
[  628.044059][T17682]  getname_flags+0x1d/0x30
[  628.044136][T17682]  do_sys_openat2+0x60/0x130
[  628.044245][T17682]  __x64_sys_openat+0xf2/0x120
[  628.044278][T17682]  x64_sys_call+0x1e39/0x3020
[  628.044312][T17682]  do_syscall_64+0x12c/0x3b0
[  628.044349][T17682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.044422][T17682] RIP: 0033:0x7f1c0930d68e
[  628.044456][T17682] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  628.044480][T17682] RSP: 002b:00007f1c07da4ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  628.044501][T17682] RAX: ffffffffffffffda RBX: 00007f1c07da76c0 RCX: 00007f1c0930d68e
[  628.044516][T17682] RDX: 0000000000000002 RSI: 00007f1c093e210a RDI: ffffffffffffff9c
[  628.044587][T17682] RBP: 00007f1c07da7090 R08: 0000000000000000 R09: 0000000000000000
[  628.044601][T17682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036
[  628.044614][T17682] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffc5c11f3b8
[  628.044633][T17682]  </TASK>
[  628.226110][   T28] audit: type=1400 audit(627.517:5032): avc:  denied  { create } for  pid=17678 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  628.245046][   T28] audit: type=1400 audit(627.577:5033): avc:  denied  { read write } for  pid=17678 comm="syz.3.3476" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  628.268251][   T28] audit: type=1400 audit(627.577:5034): avc:  denied  { open } for  pid=17678 comm="syz.3.3476" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  628.291357][   T28] audit: type=1400 audit(627.577:5035): avc:  denied  { create } for  pid=17678 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  628.310841][   T28] audit: type=1400 audit(627.577:5036): avc:  denied  { ioctl } for  pid=17678 comm="syz.3.3476" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  628.365416][   T28] audit: type=1400 audit(627.587:5037): avc:  denied  { connect } for  pid=17678 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  628.384699][   T28] audit: type=1400 audit(627.637:5038): avc:  denied  { write } for  pid=17678 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  628.620340][   T28] audit: type=1400 audit(628.087:5039): avc:  denied  { bind } for  pid=17697 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  628.881550][T17715] loop3: detected capacity change from 0 to 128
[  629.020115][T17717] ALSA: seq fatal error: cannot create timer (-22)
[  629.199492][T17717] loop9: detected capacity change from 0 to 736
[  629.353108][T17726] ALSA: seq fatal error: cannot create timer (-22)
[  629.422322][T17726] loop9: detected capacity change from 0 to 736
[  629.477322][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3484'.
[  629.484045][T17731] ALSA: seq fatal error: cannot create timer (-22)
[  629.559370][T17735] loop3: detected capacity change from 0 to 736
[  629.653135][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3485'.
[  629.940191][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'.
[  629.968995][T17751] macvlan0: entered promiscuous mode
[  629.991033][T17751] netlink: 'syz.3.3487': attribute type 2 has an invalid length.
[  630.003619][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3487'.
[  630.075644][T17762] syzkaller0: entered promiscuous mode
[  630.108927][T17767] FAULT_INJECTION: forcing a failure.
[  630.108927][T17767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  630.148944][T17767] CPU: 1 UID: 0 PID: 17767 Comm: syz.3.3490 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  630.149101][T17767] Tainted: [W]=WARN
[  630.149109][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  630.149132][T17767] Call Trace:
[  630.149140][T17767]  <TASK>
[  630.149153][T17767]  __dump_stack+0x1d/0x30
[  630.149224][T17767]  dump_stack_lvl+0x95/0xd0
[  630.149250][T17767]  dump_stack+0x15/0x1b
[  630.149270][T17767]  should_fail_ex+0x263/0x280
[  630.149308][T17767]  should_fail+0xb/0x20
[  630.149346][T17767]  should_fail_usercopy+0x1a/0x20
[  630.149381][T17767]  _copy_to_user+0x20/0xa0
[  630.149416][T17767]  simple_read_from_buffer+0xb5/0x130
[  630.149520][T17767]  proc_fail_nth_read+0x10e/0x150
[  630.149552][T17767]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  630.149584][T17767]  vfs_read+0x1ab/0x7f0
[  630.149654][T17767]  ? __rcu_read_unlock+0x4e/0x70
[  630.149677][T17767]  ? __fget_files+0x184/0x1c0
[  630.149763][T17767]  ? __sys_bind+0x222/0x290
[  630.149927][T17767]  ? mutex_lock+0x57/0x90
[  630.149959][T17767]  ksys_read+0xdc/0x1a0
[  630.150043][T17767]  __x64_sys_read+0x40/0x50
[  630.150102][T17767]  x64_sys_call+0x2886/0x3020
[  630.150133][T17767]  do_syscall_64+0x12c/0x3b0
[  630.150164][T17767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.150230][T17767] RIP: 0033:0x7f5dd82ad68e
[  630.150250][T17767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  630.150269][T17767] RSP: 002b:00007f5dd6d46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  630.150293][T17767] RAX: ffffffffffffffda RBX: 00007f5dd6d476c0 RCX: 00007f5dd82ad68e
[  630.150313][T17767] RDX: 000000000000000f RSI: 00007f5dd6d470a0 RDI: 0000000000000005
[  630.150396][T17767] RBP: 00007f5dd6d47090 R08: 0000000000000000 R09: 0000000000000000
[  630.150409][T17767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  630.150422][T17767] R13: 00007f5dd8566038 R14: 00007f5dd8565fa0 R15: 00007ffc78483d58
[  630.150449][T17767]  </TASK>
[  630.446631][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3492'.
[  630.739496][T17783] loop3: detected capacity change from 0 to 512
[  630.747098][T17783] EXT4-fs: Ignoring removed orlov option
[  630.755413][T17783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  630.807167][T17784] ALSA: seq fatal error: cannot create timer (-22)
[  630.832604][T17783] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3493: invalid indirect mapped block 32768 (level 2)
[  630.846228][T17783] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  630.847298][T17783] EXT4-fs (loop3): 1 orphan inode deleted
[  630.862232][T17783] EXT4-fs (loop3): 1 truncate cleaned up
[  630.868895][T17783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  630.912601][T17784] loop9: detected capacity change from 0 to 736
[  631.020244][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3496'.
[  631.146834][T17792] ALSA: seq fatal error: cannot create timer (-22)
[  631.165504][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3498'.
[  631.223123][ T4315] hid_parser_main: 62 callbacks suppressed
[  631.223167][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.278592][T17799] loop0: detected capacity change from 0 to 736
[  631.384919][T17795] siw: device registration error -23
[  631.394807][T17798] loop5: detected capacity change from 0 to 1024
[  631.401748][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.419198][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3497'.
[  631.440132][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.460254][T17798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.492782][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.524697][T17798] ext4: Unknown parameter 'ns/cgroup'
[  631.534869][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.543274][T17808] FAULT_INJECTION: forcing a failure.
[  631.543274][T17808] name failslab, interval 1, probability 0, space 0, times 0
[  631.563966][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.583819][T17808] CPU: 0 UID: 0 PID: 17808 Comm: syz.9.3502 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  631.583861][T17808] Tainted: [W]=WARN
[  631.583869][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  631.583952][T17808] Call Trace:
[  631.583961][T17808]  <TASK>
[  631.583972][T17808]  __dump_stack+0x1d/0x30
[  631.584004][T17808]  dump_stack_lvl+0x95/0xd0
[  631.584030][T17808]  dump_stack+0x15/0x1b
[  631.584050][T17808]  should_fail_ex+0x263/0x280
[  631.584102][T17808]  should_failslab+0x8c/0xb0
[  631.584141][T17808]  kmem_cache_alloc_noprof+0x66/0x3f0
[  631.584185][T17808]  ? skb_clone+0x151/0x1f0
[  631.584263][T17808]  skb_clone+0x151/0x1f0
[  631.584303][T17808]  __netlink_deliver_tap+0x2c9/0x500
[  631.584342][T17808]  netlink_dump+0x806/0x870
[  631.584463][T17808]  netlink_recvmsg+0x420/0x550
[  631.584623][T17808]  ? __pfx_netlink_recvmsg+0x10/0x10
[  631.584656][T17808]  sock_recvmsg+0xf5/0x120
[  631.584706][T17808]  ____sys_recvmsg+0xf5/0x280
[  631.584754][T17808]  ___sys_recvmsg+0x11f/0x3b0
[  631.584796][T17808]  do_recvmmsg+0x1ef/0x560
[  631.584830][T17808]  ? fput+0x8f/0xc0
[  631.584861][T17808]  __x64_sys_recvmmsg+0xe5/0x170
[  631.584897][T17808]  x64_sys_call+0x80f/0x3020
[  631.584960][T17808]  do_syscall_64+0x12c/0x3b0
[  631.585007][T17808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.585034][T17808] RIP: 0033:0x7f1c0934ce59
[  631.585055][T17808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.585074][T17808] RSP: 002b:00007f1c07da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  631.585175][T17808] RAX: ffffffffffffffda RBX: 00007f1c095c5fa0 RCX: 00007f1c0934ce59
[  631.585189][T17808] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003
[  631.585213][T17808] RBP: 00007f1c07da7090 R08: 0000000000000000 R09: 0000000000000000
[  631.585228][T17808] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001
[  631.585245][T17808] R13: 00007f1c095c6038 R14: 00007f1c095c5fa0 R15: 00007ffc5c11f3b8
[  631.585272][T17808]  </TASK>
[  631.794235][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.804664][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.812569][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.820973][ T4315] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0
[  631.828605][T17787] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  631.856333][ T4315] hid-generic 0103:0004:0000.0004: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[  631.965059][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.151346][T17831] syzkaller0: entered promiscuous mode
[  632.192008][T17833] ALSA: seq fatal error: cannot create timer (-22)
[  632.207131][T17833] loop0: detected capacity change from 0 to 736
[  632.231739][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'.
[  632.302722][T17837] gre0 speed is unknown, defaulting to 1000
[  632.353931][T17839] 9pnet_virtio: no channels available for device 127.0.0.1
[  632.375255][T17837] hsr0 speed is unknown, defaulting to 1000
[  632.776072][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.779857][T17854] fido_id[17854]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  632.866093][T17859] netlink: 'syz.5.3518': attribute type 13 has an invalid length.
[  632.923433][T17865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.934168][T17865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.944812][   T28] kauditd_printk_skb: 37 callbacks suppressed
[  632.944830][   T28] audit: type=1400 audit(632.407:5077): avc:  denied  { read } for  pid=17863 comm="syz.3.3514" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  632.975535][   T28] audit: type=1400 audit(632.447:5078): avc:  denied  { open } for  pid=17863 comm="syz.3.3514" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  633.079562][T17874] ALSA: seq fatal error: cannot create timer (-22)
[  633.096465][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3516'.
[  633.105647][T17872] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3516'.
[  633.134259][T17874] loop0: detected capacity change from 0 to 736
[  633.140992][T17859] SELinux:  Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped).
[  633.153270][   T28] audit: type=1400 audit(632.587:5079): avc:  denied  { mac_admin } for  pid=17858 comm="syz.5.3518" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  633.208351][   T28] audit: type=1400 audit(632.587:5080): avc:  denied  { relabelto } for  pid=17858 comm="syz.5.3518" name="/" dev="ramfs" ino=58628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0"
[  633.237860][T17865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.247525][   T28] audit: type=1400 audit(632.587:5081): avc:  denied  { associate } for  pid=17858 comm="syz.5.3518" name="/" dev="ramfs" ino=58628 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0"
[  633.276145][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3520'.
[  633.276982][T17865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.328914][   T28] audit: type=1400 audit(632.747:5082): avc:  denied  { write } for  pid=17863 comm="syz.3.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  633.332796][T17877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3521'.
[  633.394502][T17877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3521'.
[  633.406777][T17879] loop6: detected capacity change from 0 to 512
[  633.418045][T17879] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  633.450346][T17879] EXT4-fs (loop6): 1 truncate cleaned up
[  633.456809][T17879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.508040][   T28] audit: type=1400 audit(632.967:5083): avc:  denied  { write } for  pid=17862 comm="syz.6.3517" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  633.611519][T17885] loop5: detected capacity change from 0 to 512
[  633.638380][   T28] audit: type=1400 audit(633.067:5084): avc:  denied  { getopt } for  pid=17882 comm="syz.0.3522" lport=52715 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  633.714745][T17887] loop0: detected capacity change from 0 to 512
[  633.733466][T17885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.766711][T17887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.787236][   T28] audit: type=1400 audit(633.247:5085): avc:  denied  { write } for  pid=17884 comm="syz.5.3523" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  633.809624][   T28] audit: type=1400 audit(633.277:5086): avc:  denied  { setattr } for  pid=17884 comm="syz.5.3523" path="/9/file1/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  633.811811][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3523'.
[  633.881654][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'.
[  634.161914][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3525'.
[  634.262387][T17899] syzkaller0: entered promiscuous mode
[  634.447256][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.471284][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.504356][T17903] loop0: detected capacity change from 0 to 512
[  634.655171][T17903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.693145][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3529'.
[  634.836247][T17909] loop5: detected capacity change from 0 to 512
[  634.870711][T17909] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  634.899693][T17909] EXT4-fs (loop5): 1 truncate cleaned up
[  634.905750][T17909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  634.960380][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.074299][T17912] loop6: detected capacity change from 0 to 1024
[  635.101024][T17912] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (41728!=20869)
[  635.115950][T17912] EXT4-fs (loop6): group descriptors corrupted!
[  635.143209][T17914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  635.169199][T17914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.248772][T17787] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  635.276867][T17920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.299494][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.813392][T17928] netlink: 'syz.9.3536': attribute type 22 has an invalid length.
[  635.846068][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.038423][T17935] ALSA: seq fatal error: cannot create timer (-22)
[  636.179237][T17939] ALSA: seq fatal error: cannot create timer (-22)
[  636.293386][T17937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.306645][T17939] 1A
[  636.413947][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.429459][T17943] syzkaller0: entered promiscuous mode
[  636.491494][T17947] set_capacity_and_notify: 4 callbacks suppressed
[  636.491515][T17947] loop5: detected capacity change from 0 to 512
[  636.504631][T17947] EXT4-fs: Ignoring removed bh option
[  636.524538][T17947] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  636.535958][T17949] FAULT_INJECTION: forcing a failure.
[  636.535958][T17949] name failslab, interval 1, probability 0, space 0, times 0
[  636.548721][T17949] CPU: 0 UID: 0 PID: 17949 Comm: syz.3.3544 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  636.548782][T17949] Tainted: [W]=WARN
[  636.548791][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  636.548804][T17949] Call Trace:
[  636.548813][T17949]  <TASK>
[  636.548823][T17949]  __dump_stack+0x1d/0x30
[  636.548970][T17949]  dump_stack_lvl+0x95/0xd0
[  636.549060][T17949]  dump_stack+0x15/0x1b
[  636.549087][T17949]  should_fail_ex+0x263/0x280
[  636.549123][T17949]  should_failslab+0x8c/0xb0
[  636.549222][T17949]  __kmalloc_node_noprof+0xc8/0x550
[  636.549266][T17949]  ? __vmalloc_node_range_noprof+0x3f2/0x11c0
[  636.549337][T17949]  __vmalloc_node_range_noprof+0x3f2/0x11c0
[  636.549379][T17949]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  636.549483][T17949]  __vmalloc_noprof+0xa4/0xf0
[  636.549504][T17949]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  636.549536][T17949]  bpf_prog_alloc_no_stats+0x47/0x390
[  636.549572][T17949]  ? bpf_prog_alloc+0x2a/0x150
[  636.549595][T17949]  bpf_prog_alloc+0x3c/0x150
[  636.549619][T17949]  bpf_prog_load+0x50d/0x1030
[  636.549731][T17949]  ? security_bpf+0x2b/0x90
[  636.549760][T17949]  __sys_bpf+0x505/0x7e0
[  636.549801][T17949]  __x64_sys_bpf+0x41/0x50
[  636.549899][T17949]  x64_sys_call+0x10cb/0x3020
[  636.549935][T17949]  do_syscall_64+0x12c/0x3b0
[  636.550055][T17949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.550087][T17949] RIP: 0033:0x7f5dd82ece59
[  636.550109][T17949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.550215][T17949] RSP: 002b:00007f5dd6d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  636.550243][T17949] RAX: ffffffffffffffda RBX: 00007f5dd8565fa0 RCX: 00007f5dd82ece59
[  636.550264][T17949] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005
[  636.550283][T17949] RBP: 00007f5dd6d47090 R08: 0000000000000000 R09: 0000000000000000
[  636.550301][T17949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.550318][T17949] R13: 00007f5dd8566038 R14: 00007f5dd8565fa0 R15: 00007ffc78483d58
[  636.550407][T17949]  </TASK>
[  636.569719][T17949] syz.3.3544: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  636.582064][T17947] EXT4-fs (loop5): 1 truncate cleaned up
[  636.583484][T17947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  636.587447][T17949] ,cpuset=
[  636.604156][T17947] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.3545: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  636.606491][T17949] /,mems_allowed=0
[  636.825383][T17949] CPU: 0 UID: 0 PID: 17949 Comm: syz.3.3544 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  636.825557][T17949] Tainted: [W]=WARN
[  636.825566][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  636.825583][T17949] Call Trace:
[  636.825592][T17949]  <TASK>
[  636.825604][T17949]  __dump_stack+0x1d/0x30
[  636.825637][T17949]  dump_stack_lvl+0x95/0xd0
[  636.825665][T17949]  dump_stack+0x15/0x1b
[  636.825699][T17949]  warn_alloc+0x145/0x1c0
[  636.825770][T17949]  ? __vmalloc_node_range_noprof+0x3f5/0x11c0
[  636.825797][T17949]  __vmalloc_node_range_noprof+0x7ef/0x11c0
[  636.825833][T17949]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  636.825864][T17949]  __vmalloc_noprof+0xa4/0xf0
[  636.825887][T17949]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  636.825916][T17949]  bpf_prog_alloc_no_stats+0x47/0x390
[  636.825951][T17949]  ? bpf_prog_alloc+0x2a/0x150
[  636.825978][T17949]  bpf_prog_alloc+0x3c/0x150
[  636.826050][T17949]  bpf_prog_load+0x50d/0x1030
[  636.826089][T17949]  ? security_bpf+0x2b/0x90
[  636.826114][T17949]  __sys_bpf+0x505/0x7e0
[  636.826275][T17949]  __x64_sys_bpf+0x41/0x50
[  636.826300][T17949]  x64_sys_call+0x10cb/0x3020
[  636.826377][T17949]  do_syscall_64+0x12c/0x3b0
[  636.826413][T17949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.826439][T17949] RIP: 0033:0x7f5dd82ece59
[  636.826512][T17949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.826534][T17949] RSP: 002b:00007f5dd6d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  636.826558][T17949] RAX: ffffffffffffffda RBX: 00007f5dd8565fa0 RCX: 00007f5dd82ece59
[  636.826575][T17949] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005
[  636.826666][T17949] RBP: 00007f5dd6d47090 R08: 0000000000000000 R09: 0000000000000000
[  636.826690][T17949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.826705][T17949] R13: 00007f5dd8566038 R14: 00007f5dd8565fa0 R15: 00007ffc78483d58
[  636.826762][T17949]  </TASK>
[  636.826770][T17949] Mem-Info:
[  636.883462][T17947] netlink: 'syz.5.3545': attribute type 1 has an invalid length.
[  636.915048][T17949] active_anon:13442 inactive_anon:2 isolated_anon:0
[  636.915048][T17949]  active_file:14229 inactive_file:14891 isolated_file:0
[  636.915048][T17949]  unevictable:0 dirty:646 writeback:0
[  636.915048][T17949]  slab_reclaimable:4001 slab_unreclaimable:62021
[  636.915048][T17949]  mapped:30506 shmem:571 pagetables:4952
[  636.915048][T17949]  sec_pagetables:0 bounce:0
[  636.915048][T17949]  kernel_misc_reclaimable:0
[  636.915048][T17949]  free:1813220 free_pcp:5184 free_cma:0
[  637.093540][T17949] Node 0 active_anon:53768kB inactive_anon:8kB active_file:56916kB inactive_file:59564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121908kB dirty:2584kB writeback:0kB shmem:2284kB kernel_stack:5424kB pagetables:19808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  637.124624][T17949] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  637.158410][T17949] lowmem_reserve[]: 0 2878 7857 7857
[  637.160924][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.164522][T17949] Node 0 DMA32 free:2944508kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948032kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB
[  637.206903][T17949] lowmem_reserve[]: 0 0 4978 4978
[  637.226917][T17949] Node 0 Normal free:4293028kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53248kB inactive_anon:8kB active_file:56916kB inactive_file:59596kB unevictable:0kB writepending:2480kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:18064kB local_pcp:4292kB free_cma:0kB
[  637.336826][T17949] lowmem_reserve[]: 0 0 0 0
[  637.347360][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.373949][T17949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  637.400668][T17949] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944508kB
[  637.417890][T17949] Node 0 Normal: 1920*4kB (UME) 955*8kB (UME) 769*16kB (UME) 469*32kB (UME) 286*64kB (UME) 264*128kB (UME) 229*256kB (UME) 188*512kB (UME) 165*1024kB (UME) 56*2048kB (UME) 919*4096kB (UM) = 4297480kB
[  637.438312][T17949] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  637.448384][T17949] 32498 total pagecache pages
[  637.453168][T17949] 2 pages in swap cache
[  637.492085][T17949] Free swap  = 124988kB
[  637.526478][T17969] loop6: detected capacity change from 0 to 256
[  637.533984][T17969] msdos: Bad value for 'gid'
[  637.538709][T17969] msdos: Bad value for 'gid'
[  637.569905][T17969] gre0 speed is unknown, defaulting to 1000
[  637.654437][T17969] hsr0 speed is unknown, defaulting to 1000
[  637.735519][T17949] Total swap = 124996kB
[  637.774677][T17972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.781989][T17972] IPv6: NLM_F_CREATE should be set when creating new route
[  637.789226][T17972] IPv6: NLM_F_CREATE should be set when creating new route
[  637.805664][T17949] 2097051 pages RAM
[  637.814283][T17949] 0 pages HighMem/MovableOnly
[  637.846689][T17949] 81644 pages reserved
[  637.940898][T17974] ALSA: seq fatal error: cannot create timer (-22)
[  638.033392][T17980] sit0: entered promiscuous mode
[  638.064760][T17980] netlink: 'syz.5.3550': attribute type 1 has an invalid length.
[  638.096693][T17980] __nla_validate_parse: 8 callbacks suppressed
[  638.096723][T17980] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3550'.
[  638.118533][T17974] loop0: detected capacity change from 0 to 736
[  638.244808][T17972] io-wq is not configured for unbound workers
[  638.245520][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  638.245534][   T28] audit: type=1400 audit(637.707:5098): avc:  denied  { ioctl } for  pid=17968 comm="syz.5.3550" path="socket:[58927]" dev="sockfs" ino=58927 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  638.292235][   T28] audit: type=1400 audit(637.747:5099): avc:  denied  { watch } for  pid=17968 comm="syz.5.3550" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  638.361717][   T28] audit: type=1326 audit(637.807:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.0.3553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39deecce59 code=0x0
[  638.465741][T17989] ALSA: seq fatal error: cannot create timer (-22)
[  638.483646][T17989] loop3: detected capacity change from 0 to 736
[  638.499154][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'.
[  638.925236][T17997] loop3: detected capacity change from 0 to 512
[  638.957121][T17998] loop5: detected capacity change from 0 to 512
[  638.965103][T17998] EXT4-fs: Ignoring removed orlov option
[  639.418786][T17998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  639.452979][T17998] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3556: invalid indirect mapped block 32768 (level 2)
[  639.456026][T17997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.466567][T17998] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  639.537216][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  639.552824][    C1] EXT4-fs (loop5): initial error at time 638: ext4_free_branches:1023: inode 16
[  639.561920][    C1] EXT4-fs (loop5): last error at time 638: ext4_free_branches:1023: inode 16
[  639.817114][   T28] audit: type=1400 audit(639.267:5101): avc:  denied  { write } for  pid=17995 comm="syz.3.3557" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  639.869887][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'.
[  640.445075][T17998] EXT4-fs (loop5): 1 orphan inode deleted
[  640.453541][T17998] EXT4-fs (loop5): 1 truncate cleaned up
[  640.465408][T17998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.892241][T18017] syzkaller0: entered promiscuous mode
[  640.919124][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.938839][T18001] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  641.040175][T18021] tipc: Started in network mode
[  641.054283][T18021] tipc: Node identity ca7609e8fa59, cluster identity 4711
[  641.081039][T18021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  641.098145][T18021] syzkaller0: entered promiscuous mode
[  641.110655][T18021] syzkaller0: entered allmulticast mode
[  641.133986][   T28] audit: type=1400 audit(640.597:5102): avc:  denied  { getopt } for  pid=18019 comm="syz.9.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  641.209646][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.230944][T18023] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3563'.
[  641.280059][   T28] audit: type=1400 audit(640.747:5103): avc:  denied  { ioctl } for  pid=18019 comm="syz.9.3563" path="socket:[59050]" dev="sockfs" ino=59050 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  641.294631][T18023] tipc: Resetting bearer <eth:syzkaller0>
[  641.386546][T18031] FAULT_INJECTION: forcing a failure.
[  641.386546][T18031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  641.400015][T18031] CPU: 1 UID: 0 PID: 18031 Comm: syz.5.3567 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  641.400057][T18031] Tainted: [W]=WARN
[  641.400066][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  641.400092][T18031] Call Trace:
[  641.400099][T18031]  <TASK>
[  641.400108][T18031]  __dump_stack+0x1d/0x30
[  641.400133][T18031]  dump_stack_lvl+0x95/0xd0
[  641.400178][T18031]  dump_stack+0x15/0x1b
[  641.400204][T18031]  should_fail_ex+0x263/0x280
[  641.400239][T18031]  should_fail+0xb/0x20
[  641.400327][T18031]  should_fail_usercopy+0x1a/0x20
[  641.400367][T18031]  _copy_to_user+0x20/0xa0
[  641.400403][T18031]  simple_read_from_buffer+0xb5/0x130
[  641.400523][T18031]  proc_fail_nth_read+0x10e/0x150
[  641.400553][T18031]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  641.400638][T18031]  vfs_read+0x1ab/0x7f0
[  641.400667][T18031]  ? __rcu_read_unlock+0x4e/0x70
[  641.400692][T18031]  ? __fget_files+0x184/0x1c0
[  641.400713][T18031]  ? mutex_lock+0x57/0x90
[  641.400771][T18031]  ksys_read+0xdc/0x1a0
[  641.400846][T18031]  __x64_sys_read+0x40/0x50
[  641.400877][T18031]  x64_sys_call+0x2886/0x3020
[  641.400931][T18031]  do_syscall_64+0x12c/0x3b0
[  641.400974][T18031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.400997][T18031] RIP: 0033:0x7f22721dd68e
[  641.401016][T18031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  641.401040][T18031] RSP: 002b:00007f2270c76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  641.401067][T18031] RAX: ffffffffffffffda RBX: 00007f2270c776c0 RCX: 00007f22721dd68e
[  641.401121][T18031] RDX: 000000000000000f RSI: 00007f2270c770a0 RDI: 0000000000000005
[  641.401135][T18031] RBP: 00007f2270c77090 R08: 0000000000000000 R09: 0000000000000000
[  641.401148][T18031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.401160][T18031] R13: 00007f2272496038 R14: 00007f2272495fa0 R15: 00007ffd254770f8
[  641.401212][T18031]  </TASK>
[  641.658951][T18019] tipc: Resetting bearer <eth:syzkaller0>
[  641.668032][T18019] tipc: Disabling bearer <eth:syzkaller0>
[  641.704600][   T28] audit: type=1326 audit(641.167:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.0.3569" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39deecce59 code=0x0
[  641.896707][T18043] loop5: detected capacity change from 0 to 256
[  641.903390][T18043] msdos: Bad value for 'gid'
[  641.908077][T18043] msdos: Bad value for 'gid'
[  641.928175][T18043] gre0 speed is unknown, defaulting to 1000
[  641.968226][T18043] hsr0 speed is unknown, defaulting to 1000
[  642.113363][   T28] audit: type=1400 audit(641.577:5105): avc:  denied  { execute } for  pid=18041 comm="syz.6.3571" path="/167/file0" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  642.184905][   T28] audit: type=1400 audit(641.577:5106): avc:  denied  { ioctl } for  pid=18041 comm="syz.6.3571" path="socket:[59084]" dev="sockfs" ino=59084 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  642.572924][T18055] loop3: detected capacity change from 0 to 1024
[  642.603716][T18055] EXT4-fs: test_dummy_encryption option not supported
[  642.771237][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  642.829382][T18059] siw: device registration error -23
[  642.841913][T18062] loop6: detected capacity change from 0 to 512
[  642.877464][T18062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  642.916331][T18062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  643.247468][   T28] audit: type=1400 audit(642.707:5107): avc:  denied  { read write } for  pid=18060 comm="syz.6.3575" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  643.306652][   T28] audit: type=1400 audit(642.707:5108): avc:  denied  { open } for  pid=18060 comm="syz.6.3575" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  643.793185][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  643.826941][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3581'.
[  643.852214][T18076] siw: device registration error -23
[  643.873573][T18072] loop3: detected capacity change from 0 to 512
[  643.984289][T18072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.017217][   T28] audit: type=1400 audit(643.477:5109): avc:  denied  { write } for  pid=18071 comm="syz.3.3578" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.103598][T18084] loop0: detected capacity change from 0 to 512
[  644.117365][T18084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  644.144165][T18084] EXT4-fs (loop0): 1 truncate cleaned up
[  644.150351][T18084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.164473][   T28] audit: type=1400 audit(643.627:5110): avc:  denied  { write } for  pid=18073 comm="syz.0.3580" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  644.259837][T18078] syzkaller0: entered promiscuous mode
[  644.753555][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.924532][   T28] audit: type=1326 audit(644.387:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18088 comm="syz.5.3584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f227221ce59 code=0x0
[  645.040700][ T9378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.053333][T18094] loop6: detected capacity change from 0 to 736
[  645.064758][T18097] loop3: detected capacity change from 0 to 2048
[  645.071724][T18097] EXT4-fs: Ignoring removed mblk_io_submit option
[  645.078277][T18097] EXT4-fs: Ignoring removed mblk_io_submit option
[  645.110200][T18099] ALSA: seq fatal error: cannot create timer (-22)
[  645.152936][T18097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.162497][T18099] loop0: detected capacity change from 0 to 736
[  645.209546][   T28] audit: type=1400 audit(644.677:5112): avc:  denied  { write } for  pid=18096 comm="syz.3.3583" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  645.224952][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'.
[  645.251596][   T28] audit: type=1400 audit(644.717:5113): avc:  denied  { create } for  pid=18102 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  645.282256][T18097] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3583: bg 0: block 234: padding at end of block bitmap is not set
[  645.288966][   T28] audit: type=1400 audit(644.727:5114): avc:  denied  { bind } for  pid=18102 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  645.297488][T18097] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  645.327763][T18097] EXT4-fs (loop3): This should not happen!! Data will be lost
[  645.327763][T18097] 
[  645.337483][T18097] EXT4-fs (loop3): Total free blocks count 0
[  645.338699][   T28] audit: type=1400 audit(644.727:5115): avc:  denied  { name_bind } for  pid=18102 comm="syz.6.3588" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  645.343536][T18097] EXT4-fs (loop3): Free/Dirty block details
[  645.343555][T18097] EXT4-fs (loop3): free_blocks=0
[  645.343573][T18097] EXT4-fs (loop3): dirty_blocks=16
[  645.385443][T18097] EXT4-fs (loop3): Block reservation details
[  645.391890][T18097] EXT4-fs (loop3): i_reserved_data_blocks=1
[  645.393122][   T28] audit: type=1400 audit(644.727:5116): avc:  denied  { node_bind } for  pid=18102 comm="syz.6.3588" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  645.428681][   T28] audit: type=1400 audit(644.727:5117): avc:  denied  { write } for  pid=18096 comm="syz.3.3583" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  645.512375][T11223] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  645.544628][T11223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.554952][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'.
[  645.580728][T18112] siw: device registration error -23
[  645.644356][T18114] loop6: detected capacity change from 0 to 512
[  645.686104][T18114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.739914][T18122] syzkaller0: entered promiscuous mode
[  645.843082][T18129] tipc: Started in network mode
[  645.848288][T18129] tipc: Node identity da8eff5846ca, cluster identity 4711
[  645.855827][T18129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.863346][T18129] syzkaller0: entered promiscuous mode
[  645.869407][T18129] syzkaller0: entered allmulticast mode
[  646.250235][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.306508][T18133] loop6: detected capacity change from 0 to 736
[  646.391560][T18135] FAULT_INJECTION: forcing a failure.
[  646.391560][T18135] name failslab, interval 1, probability 0, space 0, times 0
[  646.404814][T18135] CPU: 1 UID: 0 PID: 18135 Comm: syz.6.3599 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  646.404858][T18135] Tainted: [W]=WARN
[  646.404866][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  646.404879][T18135] Call Trace:
[  646.404886][T18135]  <TASK>
[  646.404895][T18135]  __dump_stack+0x1d/0x30
[  646.404941][T18135]  dump_stack_lvl+0x95/0xd0
[  646.404980][T18135]  dump_stack+0x15/0x1b
[  646.405039][T18135]  should_fail_ex+0x263/0x280
[  646.405122][T18135]  ? ucma_alloc_ctx+0x30/0x1d0
[  646.405243][T18135]  should_failslab+0x8c/0xb0
[  646.405287][T18135]  __kmalloc_cache_noprof+0x5f/0x400
[  646.405466][T18135]  ? should_fail_ex+0xd9/0x280
[  646.405507][T18135]  ? __pfx_ucma_create_id+0x10/0x10
[  646.405550][T18135]  ucma_alloc_ctx+0x30/0x1d0
[  646.405638][T18135]  ucma_create_id+0x15a/0x280
[  646.405668][T18135]  ? __pfx_ucma_create_id+0x10/0x10
[  646.405712][T18135]  ucma_write+0x1c9/0x260
[  646.405769][T18135]  vfs_writev+0x42b/0x900
[  646.405797][T18135]  ? __pfx_ucma_write+0x10/0x10
[  646.405840][T18135]  do_writev+0xe9/0x210
[  646.405904][T18135]  __x64_sys_writev+0x45/0x50
[  646.406028][T18135]  x64_sys_call+0x1c0c/0x3020
[  646.406132][T18135]  do_syscall_64+0x12c/0x3b0
[  646.406174][T18135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.406198][T18135] RIP: 0033:0x7f4018d5ce59
[  646.406214][T18135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.406234][T18135] RSP: 002b:00007f40177af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  646.406295][T18135] RAX: ffffffffffffffda RBX: 00007f4018fd5fa0 RCX: 00007f4018d5ce59
[  646.406310][T18135] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[  646.406324][T18135] RBP: 00007f40177af090 R08: 0000000000000000 R09: 0000000000000000
[  646.406340][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  646.406358][T18135] R13: 00007f4018fd6038 R14: 00007f4018fd5fa0 R15: 00007ffcb42ceae8
[  646.406384][T18135]  </TASK>
[  646.667571][T18128] tipc: Resetting bearer <eth:syzkaller0>
[  646.683615][T18128] tipc: Disabling bearer <eth:syzkaller0>
[  646.938858][T18159] program syz.0.3609 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  646.961255][T18162] loop6: detected capacity change from 0 to 512
[  646.981160][T18162] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  647.087181][T18166] loop5: detected capacity change from 0 to 512
[  647.094403][T18166] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  647.131297][T18166] EXT4-fs (loop5): 1 truncate cleaned up
[  647.137409][T18166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.177393][T18162] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3610: inode has both inline data and extents flags
[  647.226482][T18162] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  647.226823][T18162] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3610: couldn't read orphan inode 15 (err -117)
[  647.236108][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  647.236165][    C1] EXT4-fs (loop6): initial error at time 646: ext4_orphan_get:1397: inode 15
[  647.236247][    C1] EXT4-fs (loop6): last error at time 646: ext4_orphan_get:1397: inode 15
[  647.380796][T18169] loop0: detected capacity change from 0 to 8192
[  647.415765][T18162] loop6: lost filesystem error report for type 5 error -117
[  647.417801][T18162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.614984][T18182] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3610'.
[  647.754265][T18180] syzkaller0: entered promiscuous mode
[  647.813999][T18182] bond1: entered promiscuous mode
[  647.897766][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.953343][T18169]  loop0: p1 < > p2 p4 < p5 >
[  647.965158][T18188] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3616'.
[  647.988430][T18169] loop0: partition table partially beyond EOD, truncated
[  648.021307][T18169] loop0: p1 start 134217728 is beyond EOD, truncated
[  648.037592][T18188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  648.047103][T18169] loop0: p2 size 67072 extends beyond EOD, truncated
[  648.057467][T18169] loop0: p5 size 67072 extends beyond EOD, truncated
[  648.066604][T17112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.067413][T18190] loop6: detected capacity change from 0 to 512
[  648.088092][T18188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  648.114760][T18190] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  648.135316][T18188] bond0 (unregistering): Released all slaves
[  648.144712][T18190] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  648.155265][T18190] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3617: Corrupt directory, running e2fsck is recommended
[  648.169867][T18190] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  648.186854][T18194] tipc: Started in network mode
[  648.192081][T18194] tipc: Node identity 9e2b24521ad1, cluster identity 4711
[  648.192156][T18190] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.3617: corrupted in-inode xattr: e_name out of bounds
[  648.192341][T18194] ==================================================================
[  648.221397][T18194] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve
[  648.228504][T18194] 
[  648.230858][T18194] write to 0xffffffff86c96bf8 of 88 bytes by task 18190 on cpu 0:
[  648.236664][T18190] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  648.238690][T18194]  prb_reserve+0x6e0/0xad0
[  648.238737][T18194]  vprintk_store+0x54a/0x910
[  648.238768][T18194]  vprintk_emit+0x1a4/0x600
[  648.238792][T18194]  vprintk_default+0x26/0x30
[  648.266038][T18194]  vprintk+0x1d/0x30
[  648.269982][T18194]  _printk+0x79/0xa0
[  648.273916][T18194]  __ext4_error_inode+0x2af/0x3c0
[  648.278694][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  648.278980][T18194]  check_xattrs+0x532/0x7f0
[  648.285448][    C0] EXT4-fs (loop6): initial error at time 647: ext4_iget_extra_inode:5128
[  648.289919][T18194]  __xattr_check_inode+0x3c/0x50
[  648.289962][T18194]  ext4_iget_extra_inode+0xfb/0x1f0
[  648.298396][    C0] : inode 15
[  648.303327][T18194]  __ext4_iget+0x15cb/0x23f0
[  648.303354][T18194]  ext4_orphan_get+0x152/0x430
[  648.308590][    C0] 
[  648.311772][T18194]  ext4_orphan_cleanup+0x5fa/0x9f0
[  648.316376][    C0] EXT4-fs (loop6): last error at time 647: ext4_iget_extra_inode:5128
[  648.321161][T18194]  ext4_fill_super+0x3408/0x37c0
[  648.321189][T18194]  get_tree_bdev_flags+0x291/0x300
[  648.323551][    C0] : inode 15
[  648.328667][T18194]  get_tree_bdev+0x1f/0x30
[  648.328704][T18194]  ext4_get_tree+0x1c/0x30
[  648.341523][T18190] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3617: couldn't read orphan inode 15 (err -117)
[  648.341798][T18194]  vfs_get_tree+0x57/0x1d0
[  648.341834][T18194]  do_new_mount+0x288/0x8d0
[  648.341867][T18194]  path_mount+0x4d0/0xbc0
[  648.365079][T18190] loop6: lost filesystem error report for type 5 error -117
[  648.370854][T18194]  __se_sys_mount+0x28c/0x2e0
[  648.370905][T18194]  __x64_sys_mount+0x67/0x80
[  648.370945][T18194]  x64_sys_call+0x2d61/0x3020
[  648.388319][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  648.391539][T18194]  do_syscall_64+0x12c/0x3b0
[  648.391583][T18194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.391607][T18194] 
[  648.391614][T18194] read to 0xffffffff86c96bf8 of 8 bytes by task 18194 on cpu 1:
[  648.399671][ T7844] udevd[7844]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  648.400923][T18194]  _prb_read_valid+0x369/0x950
[  648.406637][ T3542] udevd[3542]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  648.415340][T18194]  desc_update_last_finalized+0x8f/0x170
[  648.415391][T18194]  prb_final_commit+0x111/0x150
[  648.415430][T18194]  vprintk_store+0x88b/0x910
[  648.425144][T18190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.425932][T18194]  vprintk_emit+0x1a4/0x600
[  648.492138][T18194]  vprintk_default+0x26/0x30
[  648.496743][T18194]  vprintk+0x1d/0x30
[  648.500654][T18194]  _printk+0x79/0xa0
[  648.504641][T18194]  tipc_set_node_id+0x133/0x160
[  648.509525][T18194]  tipc_net_init+0xda/0x170
[  648.514045][T18194]  tipc_enable_l2_media+0x1db/0x600
[  648.519262][T18194]  __tipc_nl_bearer_enable+0x979/0xde0
[  648.524757][T18194]  tipc_nl_compat_doit+0x281/0x370
[  648.529887][T18194]  tipc_nl_compat_recv+0x832/0xa10
[  648.535036][T18194]  genl_family_rcv_msg_doit+0x187/0x1f0
[  648.540600][T18194]  genl_rcv_msg+0x432/0x470
[  648.545110][T18194]  netlink_rcv_skb+0x123/0x220
[  648.549892][T18194]  genl_rcv+0x28/0x40
[  648.553889][T18194]  netlink_unicast+0x5a8/0x680
[  648.558691][T18194]  netlink_sendmsg+0x5c8/0x6f0
[  648.563509][T18194]  ____sys_sendmsg+0x563/0x5b0
[  648.568306][T18194]  ___sys_sendmsg+0x195/0x1e0
[  648.573002][T18194]  __x64_sys_sendmsg+0xd4/0x160
[  648.577868][T18194]  x64_sys_call+0x194c/0x3020
[  648.582582][T18194]  do_syscall_64+0x12c/0x3b0
[  648.587221][T18194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.593132][T18194] 
[  648.595462][T18194] value changed: 0x0000000000002073 -> 0x0000000000004073
[  648.602574][T18194] 
[  648.604924][T18194] Reported by Kernel Concurrency Sanitizer on:
[  648.611097][T18194] CPU: 1 UID: 0 PID: 18194 Comm: syz.0.3619 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  648.622074][T18194] Tainted: [W]=WARN
[  648.625889][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  648.635978][T18194] ==================================================================
[  648.648024][T18194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.669934][T18200] syzkaller0: entered promiscuous mode
[  648.675495][T18200] syzkaller0: entered allmulticast mode
[  648.972425][T18193] tipc: Resetting bearer <eth:syzkaller0>
[  648.981059][T18193] tipc: Disabling bearer <eth:syzkaller0>
[  648.996376][T14067] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.