last executing test programs:

11m43.475452828s ago: executing program 32 (id=670):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0xc3}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0x6c, 0x4)
recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0)

11m39.561563389s ago: executing program 33 (id=705):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0xb, @private2}, {0xa, 0x0, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, r1, 0x2}}, 0x48)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)={0x38, r3, 0x21, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={<r7=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd340}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000240)={r7, 0xe23a, 0x20, 0x10001}, &(0x7f0000000840)=0x18)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x88, r5, 0x200, 0x70fd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000dfa9be7481"], 0x24}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000080))
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000080)}, 0x2)
r9 = socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, &(0x7f0000000140), &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c4947d3"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000)
ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000000)={'syz_tun\x00'})

6m11.708327985s ago: executing program 3 (id=3097):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6m11.352205083s ago: executing program 3 (id=3099):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x18}, 0x2c)
mkdir(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0021040000000000140003006261746164763000000000000000000008000400d70000001400"], 0x50}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xdde0000}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r5, 0x0, 0x7}, 0xc)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000008c0)={0x0, 0x55, "fadd816497b0d2b98bc9c37cc3e72d914f00fdad45b602986b9da1b6b2cf4a73ddb2d8a45c9410a30721cec1beb711ed4eaabff6afe6b754205b0e48dfc8d0938c8566a2f015e1eaa3290a156e82e2ee0e214869fb"}, &(0x7f0000000940)=0x5d)
socket(0x21, 0xa, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f00000020c0)=[{&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x87, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x18, 0x2404c0c1}, {&(0x7f0000000700)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="a98f76626e9447128c52613f9cd08f10190efee01f044a29435283e29684694c906b14be3ff055f9ec41d8cc4bebffc5aa2fcacee47bec66387a2c70ad0d61d329a546ef55a6176039b1e326c0d729edf6e285988173c243c8716012fa042d9e2e0e087a0d50111d9e0452694e22044246f39aacccf2221454b1588aaf187f659988a38474ee16de8371dd5a2c705dee309b3ee5a843d0aea650153a5322947dd4a50ffa22c90340acd4bd35802a67c9e593eb70c1865df965f8b20645487f46f65b52c24356c58af88e515d07903255b1578ce17eefb61fb1e82b8ec606799ad587f8", 0xe3}], 0x1, &(0x7f0000000980)=[@init={0x18, 0x84, 0x0, {0x101, 0xffff, 0x7fff, 0x7}}], 0x18, 0x14}, {&(0x7f00000009c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001ec0), 0x0, 0x0, 0x0, 0x4}], 0x3, 0x1)
close(r2)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110c23003f)
write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, &(0x7f0000000340))
socket$inet6(0xa, 0x2, 0x0)

6m10.245470487s ago: executing program 3 (id=3101):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0)

6m9.955137433s ago: executing program 3 (id=3104):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
bind$tipc(r4, 0x0, 0x0) (async)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

6m9.840076926s ago: executing program 3 (id=3106):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x4, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x44201, 0x0)
fallocate(r1, 0x17, 0x254, 0x1250)
setsockopt$inet6_group_source_req(r1, 0x29, 0x1, &(0x7f0000000980)={0x4, {{0xa, 0x4e22, 0x3, @remote, 0xfffffffe}}, {{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x2, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2000c005)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x10)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, 0xffffffffffffffff, 0xf, 0x0, @val=@perf_event={0x1}}, 0x18)
r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r6)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)

6m9.600242771s ago: executing program 3 (id=3109):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x2, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001080)={r0, r1})
syz_read_part_table(0x104e, &(0x7f0000000000)="$eJzsz7ENwjAQBdBLHCWkQKJlMPbxJlQ0LMYKUB0yWGQChJDeK8722V/WBT81lDnKa7crQ43IzLlfTVMsUcd+2pct815qK+t8ucXSmr37yLhnRBz6++MntrZyznX7fDxdvzgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyNZwAAAP//P1oNLw==")
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x299}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x5)

6m9.598179501s ago: executing program 34 (id=3109):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x2, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001080)={r0, r1})
syz_read_part_table(0x104e, &(0x7f0000000000)="$eJzsz7ENwjAQBdBLHCWkQKJlMPbxJlQ0LMYKUB0yWGQChJDeK8722V/WBT81lDnKa7crQ43IzLlfTVMsUcd+2pct815qK+t8ucXSmr37yLhnRBz6++MntrZyznX7fDxdvzgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyNZwAAAP//P1oNLw==")
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x299}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x5)

5m55.94426328s ago: executing program 5 (id=3198):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f00000003c0)='n', 0x1}], 0x2)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0xfff9, 0x4}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

5m55.725943005s ago: executing program 5 (id=3201):
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x6, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000fd3f1400e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0xffffffffffffffff, 0x0, 0x9, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$poke(0x5, r2, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r3=>0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r3)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
socket$kcm(0x2, 0x2, 0x73)
signalfd4(r4, 0x0, 0x0, 0x80800)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r5, &(0x7f0000000880))
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080), 0x4)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x400007)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

5m55.216340866s ago: executing program 5 (id=3205):
r0 = syz_io_uring_setup(0x3e3, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_PBUF_RING(0x0, 0x3, 0x100000a, 0x30, r0, 0x867c93c8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10000d, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000380)="d2212afdcaf69468409ff94010a50c686fcf54e96ac20adb397076f6771b21c4d2ca3d3137c5ab9ffd9c0d835999524f7b1bf177b0e6cf9d61c17ae4a385c2489b1d37d106b136abe9dc06e64a0abf7d1a", 0x51)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = msgget$private(0x0, 0x0)
msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, r5, 0x0, 0xee01, 0x80, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x4809, 0x1, 0x8, 0x7, 0x3})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c87725bd70e56d0000000000406a618000a3dbd158d38008000700991a643cdb930d0000000002", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x50)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r3, 0x0, 0xfffffffffffffda1)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17)
read(r8, &(0x7f0000002fc0)=""/52, 0x34)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x5, 0x5, 0x4, 0xffff, 0x1ff}, 0x14)

5m54.880930603s ago: executing program 5 (id=3209):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x40002)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
memfd_create(0x0, 0x6)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

5m54.059890962s ago: executing program 5 (id=3213):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010102020000102505a1a44000010203010902750002010120030904000001020d0000062406009c0000000005000d240f0109000000000005000106241a07000007240a050a000508241cfcff0a7f000424020305241500000905810320000602000904010000020d0000090401010202654270e40d000009804d91008bae33058202200002"], &(0x7f0000000940)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x7, 0xfb, 0x1, 0x40, 0x81}, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x6c0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@updpolicy={0xc4, 0x19, 0x401, 0x0, 0x25dfdbfe, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0x4e25, 0x1, 0x2, 0x20, 0x20, 0x33}, {0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x8000000000, 0x2, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x36c7}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40004)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0x9, 0x2, 0x4a8, 0x41, 0x0, 0x2, 0x77c2, {r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x9, 0x6, 0x101, 0x2, 0xffff87f3}}, &(0x7f0000000340)=0xb0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f0000000900)=ANY=[], 0x26, 0x7fb, &(0x7f0000001700)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/uts\x00')
preadv(r3, 0x0, 0x0, 0x83, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000001640)={0x2, 0x14, 0x0, 0x2, 0xa, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x8, @empty, 0x2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

5m52.605910403s ago: executing program 5 (id=3219):
unshare(0x20000400)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000140)) (fail_nth: 5)

5m37.21202822s ago: executing program 35 (id=3219):
unshare(0x20000400)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000140)) (fail_nth: 5)

4m37.32940133s ago: executing program 7 (id=3933):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
io_uring_setup(0x19, 0x0)
fstat(0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0)
unshare(0x20000400)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socketpair$tipc(0x1e, 0x792932196ae4d324, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

4m37.260797752s ago: executing program 7 (id=3936):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x40084)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f00000003c0)={0x6, 0x8a, 0x0, {r1}}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r5, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x5a7, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m37.211165273s ago: executing program 7 (id=3940):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\n\t5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000197, 0x2}}}}}}}, 0x0)

4m37.148481065s ago: executing program 7 (id=3942):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00')
write$cgroup_int(r0, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0x2, 0x180, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x40000000000000d, 0xffffffffffffffff, 0x1)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1)
r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
r3 = syz_pidfd_open(0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)
setns(r3, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x8, 0xac75, 0x73, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x700, 0x9, 0x9}})
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
fchdir(r2)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5)
lseek(r5, 0x101, 0x1)
r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r6, &(0x7f00000003c0)=""/184, 0xb8)

4m36.796339062s ago: executing program 7 (id=3947):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00409914a9b1", @ANYRES64=r0], 0xb2)

4m36.358882592s ago: executing program 7 (id=3950):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
r3 = open(0x0, 0x80, 0x122)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4)
fcntl$notify(r3, 0x402, 0x8000003d)
ftruncate(0xffffffffffffffff, 0x6000000)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r8, &(0x7f0000000300)=ANY=[], 0x10)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f00000002c0)}, 0x10)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r10 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x23, 0x0, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)

4m36.358378592s ago: executing program 36 (id=3950):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
r3 = open(0x0, 0x80, 0x122)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4)
fcntl$notify(r3, 0x402, 0x8000003d)
ftruncate(0xffffffffffffffff, 0x6000000)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r8, &(0x7f0000000300)=ANY=[], 0x10)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f00000002c0)}, 0x10)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r10 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r10, 0x1, 0x23, 0x0, 0x0)
sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)

1m50.970917201s ago: executing program 6 (id=5568):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000000)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
connect$inet(r0, 0x0, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x2)
sendto$inet(r2, 0x0, 0x0, 0x20004841, 0x0, 0x0)
r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x10}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
futex(&(0x7f000000cffc)=0x40000000, 0x8, 0x1000000, 0x0, 0x0, 0x1)
write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r7 = socket(0x1, 0x2, 0x0)
getitimer(0x2, &(0x7f0000000000))
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r8, r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)

1m49.952165643s ago: executing program 6 (id=5573):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r0 = socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000000000000000000000000000d602ad13425b2b0fedcd7be5a66678e3b93074c9432c4af8891f48080bb78f5ae527bc9b53d7fae7623688c4b907424e7bcf2729eb71611b9696b99e54ba8fcda5cc3a792b6db4a180fc28991e5418d2b38fa0de75d0e1d952c4048caa1e4b4e5891de002ca8987b9a91332bf6d1e741e3e51e5e4fd125475b0e7c752355066baafe1d26b7cdb136c6524020a97aa816d0d2d62ceba4195e6b6d7dc08645b8f2c081733da3de1a2bee4241055cd1d40e7d140c9456854e881a7d8c6ffa91ed8fb9e688a1989d72a3ca1ffa86303c39e67e46e567774b100e03ea9ef32de923d8cb74e93e54dca529a9e440c913de07c448d80469f1c3402a9a430ed65dc0e0cb7a5b83732e8f070777e2f6a47c656a629c1b3ff92c35688f77", @ANYRES32=0x0], 0x30}], 0x1, 0x0)

1m49.64222122s ago: executing program 6 (id=5576):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x1f, r0, 0xa, 0xf)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0)
unshare(0xc040480)
syz_io_uring_setup(0x63f0, &(0x7f0000000000)={0x0, 0x87da, 0x2, 0x80002, 0x124}, 0x0, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x100)
ioctl$IOC_PR_REGISTER(r2, 0x401870c8, 0x0)
getpid()
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4)

1m49.388522126s ago: executing program 6 (id=5578):
socket$kcm(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

1m48.218010101s ago: executing program 6 (id=5583):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001100)=ANY=[@ANYBLOB="2000000072000103010000040400000007000000", @ANYRES32=r0, @ANYBLOB="080001"], 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x40000)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b)
mount$bpf(0x20000000f0ff, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x0, 0x8, 0x4, @loopback, @local, 0x8000, 0x7800, 0x101, 0xffffffff}})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd7000080000000100ffff0500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r4], 0x3c}, 0x1, 0x620b, 0x0, 0x1}, 0x400d0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x80000000, 0x0)
pidfd_send_signal(r5, 0xe, &(0x7f0000000300)={0x0, 0x1, 0xfffffffe}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
r6 = getpid()
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x7008b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x1, 0x200000035, 0x3, 0x9, 0xb, 0x6, 0x400, 0x0, 0xfffffff5, 0x0, 0x2009}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4)
socket$xdp(0x2c, 0x3, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000400)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000002740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000010002e800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=r8, @ANYBLOB="95ac82de6617fdd8ac25c1948d54f1cd21ade9e6860de42198d6af6741fcc3acfe78dea8f3633f2f626f1553a43785a6e473aa485bc48dd7002255954ca4272d7c2bcdfe02e3feda5314c5c98e7786fc4105fbb1bfd64b34af9a6cb2565fe798d8b8e8d8f8e170e4850e34e39a70755a1b2604102f56f4e337e4e8244c520ca672e8b698a17294bbe01abb97463449f6708692ae257bd54909b2bc9e794cfc2eab5f8d1739607e1b311f7a8a231d7c9437bb527059d2738ecfa152b8c590127aadb7074cb8f7812576a33508c0ca2941cc"], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4000001)
syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaa30047d77c9e8a94aaf503931fc21aaaaaa2af02666d6fb41020c85390992210800458e0028006400000706", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac352f752cf76dbec0cf135af039d621d3f643ce72513a338218bc00082eb87f3500ef3b8f82777c67650c1c67efb48c73cfb9b12eeb22526e0c25328cce3906000000be6e34a034698cf9ed9cc70331877b355fa9faa14b0688c0a5a775d4e3bde71be17372626ecf713257a548c3830d06c125668b615e9339a59ee05e03c02a"], 0x0)
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, &(0x7f0000000040)='))$/^\x00')

1m47.592324235s ago: executing program 6 (id=5586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

1m32.595481053s ago: executing program 37 (id=5586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

1m7.289637877s ago: executing program 4 (id=5878):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000030a0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000dfffffffffffffff00000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (fail_nth: 6)

1m6.211835151s ago: executing program 4 (id=5881):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r0 = socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000000000000000000000000000d602ad13425b2b0fedcd7be5a66678e3b93074c9432c4af8891f48080bb78f5ae527bc9b53d7fae7623688c4b907424e7bcf2729eb71611b9696b99e54ba8fcda5cc3a792b6db4a180fc28991e5418d2b38fa0de75d0e1d952c4048caa1e4b4e5891de002ca8987b9a91332bf6d1e741e3e51e5e4fd125475b0e7c752355066baafe1d26b7cdb136c6524020a97aa816d0d2d62ceba4195e6b6d7dc08645b8f2c081733da3de1a2bee4241055cd1d40e7d140c9456854e881a7d8c6ffa91ed8fb9e688a1989d72a3", @ANYRES32=0x0], 0x30}], 0x1, 0x0)

1m3.669120637s ago: executing program 4 (id=5890):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvvUGkVhB9Kqj1PcZkE0I22ZDd1CYUTfEDCCIq+OSTL4IfQJB+BBEK+i5aFNFWH3zQjuzsxDbpbpI2abZ38/vB6ZwzM3v+50yTMzuZw0wAZ9bbEXEtIoYi4p2IKBfr0yLNFqm938MHt+fbKYksu/H3JJJi3W5d7fJwRFyIiJ2IGImIb3w14tvJ03GbW9src/V6baMoV1ur69Xm1vaV5dW5pdpSbW16eur9mQ9m3puZzArH6ufFiLj65fs//sEvvnL1N5/9zh9n/3r5u+1mfeHjnXZHxPyz1Dd6xP06dZfyY7GrfYw2niXYS2yo6E+p3w0BAOBIxiPiUkR8Kv/+X46h/NscAAAAMEiyL47Gf5KIDAAAABhYaT6XNUkrxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcWOnNex6KULi7Xa5PFXOGxKCXt8lSef1x+d195OiJej4gflc/l5cp8o77Q7z9+AAAAwBlx4a291///Kqd5HgAAABgwYz0LAAAAwKBwyQ8AAACDz/U/AAAADLSvXb/eTtnue7wXbm5trjRuXlmoNVcqq5vzlfnGxnplqdFYyp/Zt3pYffVGY/1zsbZ5q9qqNVvV5tb27Gpjc601u7znFdgAAADAKXr9rbt/SCJi5/Pn8hTFcwAB9vhzvxsAnKShfjcA6JvhfjcA6JvSoXsYIWDQJYds7zl557cn3xYAAODFmPjE0/f/XzFTH84Ec30A4Ox57rt7r55sO4DTVzIDEM688c6i51n9+Pf/s+yZGwUAAJyo0TwlaaW4FzgaaVqpRLyWvxaglCwu12uTEfGRiPh9ufRquzyVfzI5dM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlkAAAAwECLSP+S5E/zj5goj4/u//vAK8m/y3G/KPzsxk9uzbVaG1Pt9f8o59sjovXTYv27mVcCAAAAwEugc51eLKf63RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs3DB7fnd9Npxv3blyJirFv84RjJlyNRiojz/0xi+InPJRExdALxd+5ExBvd4ifxKMuysaIV3eKfe8Hxx/JD0z1+GhEXTiA+nGV32+PPtW6/f2m8nS9HkqTL799wkY6r9/iX/n/8G+ox/rx2xBgX7/2q2jP+nYiLw93Hn9343frfXnfpiPG/9c3t7V7bsp9HTHQ9/yR7YlVbq+vV5tb2leXVuaXaUm1tenrq/ZkPZt6bmawuLtdrxb9dY/zwk79+dFD/z/eIP3ZI/8e7VdhlUP7vvVsPPtrJlrrFv3yp+/n3jR7x0+Lc9+ki394+sZvf6eSf9OYvf/fmQf1f6NH/w/7/L/eqdJ93vv79Px1xVwDgFDS3tlfm6vXaxgGZkSPs83yZF1ezzIcrk32v8/N4vHqO+fGnMlm/D0sfM/0emQAAgJP2+Et/v1sCAAAAAAAAAAAAAAAAAAAAZ9dpPE5sf8yd/nQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBA/wsAAP//bzveBg==")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
socket$tipc(0x1e, 0x5, 0x0)
getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800c000100636f756e746572001c0002800c00014000000000000000380c00024000000000000001000900020073797a3200000000140080001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, r3, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x106, 0x1c15c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@local, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000100)={@remote, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffffffffffff, "b2655c0bcb38a112b89d848fb97c4f219137ff9ab87b6540c45bfc217ffc3db2", 0x6, 0x1, 0x4, 0xe}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)

59.758062892s ago: executing program 4 (id=5906):
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0/file0\x00'})
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0xfff, 0xfff, 0x3, 0x5, 0x8, 0x8})
r1 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28})
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe, r3})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x3}, @TCA_CT_LABELS={0x14, 0x7, "de0b724d355a78a7fab3582b1c1974e8"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)

57.948058242s ago: executing program 4 (id=5917):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x54, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x4, 0x700000000000000}, 0x0)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xe5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040095)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000700)={'wpan1\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x200000000000011, 0x3, 0x2102)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r12=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r14=>0x0})
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff070000", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r14, @ANYBLOB="01010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x4004850)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x4048090)

57.284000176s ago: executing program 4 (id=5919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0x60, &(0x7f0000000580)=""/96, 0x41000, 0x4c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @void}, 0x10)

57.283541136s ago: executing program 38 (id=5919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x10, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0x60, &(0x7f0000000580)=""/96, 0x41000, 0x4c, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @void}, 0x10)

6.096891647s ago: executing program 2 (id=6311):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0)
mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x3000c085)
sendmsg$inet(r2, 0x0, 0x20044818)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10)
dup(r3)

5.629725367s ago: executing program 1 (id=6316):
unshare(0x22020400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x2000b3d)

5.50210729s ago: executing program 1 (id=6320):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e0000002000000000000000000000000000000000000000000000000000000000000080010000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010200000000000006000000000000000000000000000000feffff"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

5.419875921s ago: executing program 1 (id=6322):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x58)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000180))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x3c, 0x3, [{0x7, 0x11, "973e0a32b6bba9ba1ac58b3b9671b8"}, {0x2, 0x5, "53f1df"}, {0x2, 0xb, "fb7865ccc26f746541"}, {0x7, 0xf, "0ed45fd65f267780d51a60df5f"}, {0x5, 0x6, "dfe2c991"}]}]}}}}})
r5 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$unix(0x1, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r8 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r8, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"})
unshare(0x22020600)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000800)="c787cd384de11c65200034202a01b311c6f8ea28f33ef0e3608ddbac2094adf619ee507f03f961dac097b1956d09cdf3ecea521afd06ee2b87bf0ace17ced53eb651349b9f2b5161defa05d362e0ad0986eebbfc9f598ee29195d6236d49ee9f775a336699e43a9adaca9007dd6b30a12ac9dae2f787473a14f5ee499570a0ca4cfa42c7d139bdc4f2bae0e8b8549099707c4b345dd3ac0815968c510ff429f9925fd1ca22af19fb77b3a9c27df51155ce5140ba4c29e3bf435a2916b8abda5e2518c44e0eb7", 0xc6)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r5, &(0x7f0000000080)='\\\x00', 0x101542, &(0x7f00000000c0)={@align=0x8, {0x1, 0x9, 0x0, 0xdef}}, 0xf, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x100})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r9)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, r10, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff5d55}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff0e}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x4050)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0)

4.448988503s ago: executing program 1 (id=6326):
openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5)
ioperm(0x2, 0x7ff, 0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x7, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00')
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
getdents(r3, &(0x7f0000000f40)=""/243, 0xf3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x2}, 0x50)

4.426047503s ago: executing program 2 (id=6328):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={<r2=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)={r2}, &(0x7f0000000940)=0x8)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9)
fallocate(r3, 0x8, 0x4000, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890446000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
fallocate(r0, 0x20, 0x0, 0x8000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pipe2(&(0x7f0000000040), 0x0)
link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r5, 0x30})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x58, r7, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080)
sendfile(r4, r4, 0x0, 0xe3aa6ea)

4.316335476s ago: executing program 1 (id=6331):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
socket$tipc(0x1e, 0x5, 0x0)
getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800c000100636f756e746572001c0002800c00014000000000000000380c00024000000000000001000900020073797a3200000000140080001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x106, 0x1c15c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@local, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010200000000000006000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
socket$igmp(0x2, 0x3, 0x2)

3.787556857s ago: executing program 8 (id=6336):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x58)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000180))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x3c, 0x3, [{0x7, 0x11, "973e0a32b6bba9ba1ac58b3b9671b8"}, {0x2, 0x5, "53f1df"}, {0x2, 0xb, "fb7865ccc26f746541"}, {0x7, 0xf, "0ed45fd65f267780d51a60df5f"}, {0x5, 0x6, "dfe2c991"}]}]}}}}})
r5 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$unix(0x1, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r8 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r8, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"})
unshare(0x22020600)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000800)="c787cd384de11c65200034202a01b311c6f8ea28f33ef0e3608ddbac2094adf619ee507f03f961dac097b1956d09cdf3ecea521afd06ee2b87bf0ace17ced53eb651349b9f2b5161defa05d362e0ad0986eebbfc9f598ee29195d6236d49ee9f775a336699e43a9adaca9007dd6b30a12ac9dae2f787473a14f5ee499570a0ca4cfa42c7d139bdc4f2bae0e8b8549099707c4b345dd3ac0815968c510ff429f9925fd1ca22af19fb77b3a9c27df51155ce5140ba4c29e3bf435a2916b8abda5e2518c44e0eb7", 0xc6)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r5, &(0x7f0000000080)='\\\x00', 0x101542, &(0x7f00000000c0)={@align=0x8, {0x1, 0x9, 0x0, 0xdef}}, 0xf, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x100})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r9)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, r10, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff5d55}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff0e}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x4050)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0)

3.554254913s ago: executing program 2 (id=6340):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 6)

3.408449276s ago: executing program 9 (id=6342):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (fail_nth: 2)

3.378154606s ago: executing program 0 (id=6343):
socket$kcm(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], 0x0, 0x2003}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0x4)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15)
fdatasync(r2)
r4 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000480)="f8f98b11c2f1b22cc30eef4db342e052da9a4e9074c40bb29ec838963a48be20", 0x20}, {&(0x7f0000000040)="33fb3185873e5b9a210bbc1d30af79dd84b2f1a48470c5dbdd07dd", 0x1b}, {&(0x7f0000000080)="d63e6f6981d1dee1a586b60c34a7fc9b731048af18c30ba36637a90aa5f30604588aa3c2", 0x24}], 0x3, &(0x7f0000000100)=[@ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x86, 0x3, 'V'}, @noop, @end, @rr={0x7, 0x1f, 0xc0, [@loopback, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x62, [@multicast1, @empty, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x2, 0xb, "1e007c93576dd2c8d5"}, {0x7, 0xa, "d21fef92654ca138"}, {0x1, 0xe, "ad501dd6b1326ea98eb29315"}]}, @ssrr={0x89, 0xb, 0x21, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x88}}], 0x1, 0x4800)

2.891469107s ago: executing program 0 (id=6344):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010200000000000006000000000000000000000000000000feffff"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

2.519805575s ago: executing program 2 (id=6345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x63793ec925f7621f, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3d}}], 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x3d, 0x3, 0x6, 0x3, 0x9, 0xd, 0x7, 0x2, 0xe1, 0x2, 0xfb, 0x8, 0x32, 0xfa}, 0xe)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140), &(0x7f00000000c0)=0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x1, 0x1000000, 0x1, {0x6, 0x1}, 0x4, 0x800})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r7, &(0x7f0000000080), 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x40040)

2.519257325s ago: executing program 9 (id=6346):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setresuid(0xee01, 0xee01, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0)
unshare(0x22020400)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2002, 0x87, 0xffffffff, 0x40})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000040), 0x12)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x39, 0x107, 0x70bd2c, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814)

2.398075178s ago: executing program 0 (id=6347):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x0, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000520018311001f9f660fcf060800000012f691f3bd3508abca1be6eeb89c44eb33730800000000000000e92155", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="4b00004009000002", @ANYBLOB="1b00"], 0x18}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0xfffffffffffffc01, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, 0x0, 0xfe33)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
socket$inet_mptcp(0x2, 0x1, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvmmsg(r8, &(0x7f0000007c40)=[{{0x0, 0xfffffffffffffff4, 0x0}, 0x7}], 0x1, 0x80, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_getoverrun(r7)

2.394558318s ago: executing program 8 (id=6348):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/255, 0xff}, {&(0x7f0000003580)=""/4105, 0x1009}, {&(0x7f0000001840)=""/157, 0x9d}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000003440)=""/264, 0x108}, {&(0x7f0000002a00)=""/56, 0x38}, {&(0x7f0000002a40)=""/150, 0x96}], 0x9, &(0x7f0000002bc0)=""/223, 0xdf}, 0x9}, {{&(0x7f0000002cc0)=@nl=@proc, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/229, 0xe5}], 0x1, &(0x7f0000002e80)=""/212, 0xd4}, 0x5}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002f80)=""/195, 0xc3}, {&(0x7f0000003080)=""/223, 0xdf}, {&(0x7f0000003180)=""/132, 0x84}], 0x3, &(0x7f0000003280)=""/142, 0x8e}, 0x8000}], 0x3, 0x2040, &(0x7f0000003400)={0x77359400})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
timerfd_create(0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r8, 0x0, 0x0)

2.052114295s ago: executing program 9 (id=6349):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4)

1.754798542s ago: executing program 9 (id=6350):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x33, 0x81, 0x5, 0x3, 0x2}, &(0x7f0000000240)=0x98)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x83, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x6, 0x1000, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
listen(r2, 0xd)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x20002015})
shutdown(r2, 0x0)
pwrite64(r1, &(0x7f00000000c0)="0f", 0x1, 0x2)
rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00')
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e23, 0x8, @empty, 0x1}}, 0xe, 0x2}, &(0x7f0000000340)=0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001896e23dae0000000c0000000c000000020000000000000000000006ffffffff0000"], 0x0, 0x26}, 0x28)
r7 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89ee, &(0x7f0000000000))
sendmsg$sock(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xdb}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xa8}, 0x800)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080000000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000403efad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d9345", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700)
socket$kcm(0x10, 0x5, 0x10)

1.476409198s ago: executing program 0 (id=6351):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000240)=ANY=[], 0xfe, 0x2ce, &(0x7f00000008c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
fadvise64(r1, 0x10001, 0xe30, 0x0)
getdents(r0, &(0x7f0000000040)=""/49, 0x31)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r2=>0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x4)
recvmmsg(r3, &(0x7f0000001580), 0x0, 0x10040, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1ff}}, @func_proto]}, {0x0, [0x2e, 0x61, 0x5f, 0x5f]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000380)={0x8, 0x4, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000ec0)={0x7fffffff, 0xb2, 0x0, 'queue0\x00', 0xff})
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r6 = syz_ublk_setup_io_uring(0x7a9b, &(0x7f0000000180)={0x0, 0x5c80, 0x40, 0x3, 0x1a7, 0x0, r5}, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000500))
io_uring_enter(r6, 0x2219, 0x771d, 0x28, 0x0, 0x0)
syz_open_procfs$pagemap(r2, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

1.321644841s ago: executing program 8 (id=6352):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcc, 0xffff, 0x0, 0xfffffffe, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
read(0xffffffffffffffff, &(0x7f00000009c0)=""/4096, 0x1000)
socket$netlink(0x10, 0x3, 0xf)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
gettid()
timer_create(0x2, 0x0, &(0x7f0000bbdffc)=<r3=>0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x2112, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000004c0)=""/222}, 0x20)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
timer_settime(r3, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)

1.172185705s ago: executing program 0 (id=6353):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40302, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x30, 0x0]}}, &(0x7f0000000680)=""/4096, 0x1d, 0x1000, 0x1, 0x7fffffff, 0x10000}, 0x28)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6a3, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xfffffffffffffc00, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r3)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)

538.755379ms ago: executing program 2 (id=6354):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})

509.828159ms ago: executing program 1 (id=6355):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvvUGkVhB9Kqj1PcZkE0I22ZDd1CYUTfEDCCIq+OSTL4IfQJB+BBEK+i5aFNFWH3zQjuzsxDbpbpI2abZ38/vB6ZwzM3v+50yTMzuZw0wAZ9bbEXEtIoYi4p2IKBfr0yLNFqm938MHt+fbKYksu/H3JJJi3W5d7fJwRFyIiJ2IGImIb3w14tvJ03GbW9src/V6baMoV1ur69Xm1vaV5dW5pdpSbW16eur9mQ9m3puZzArH6ufFiLj65fs//sEvvnL1N5/9zh9n/3r5u+1mfeHjnXZHxPyz1Dd6xP06dZfyY7GrfYw2niXYS2yo6E+p3w0BAOBIxiPiUkR8Kv/+X46h/NscAAAAMEiyL47Gf5KIDAAAABhYaT6XNUkrxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcWOnNex6KULi7Xa5PFXOGxKCXt8lSef1x+d195OiJej4gflc/l5cp8o77Q7z9+AAAAwBlx4a291///Kqd5HgAAABgwYz0LAAAAwKBwyQ8AAACDz/U/AAAADLSvXb/eTtnue7wXbm5trjRuXlmoNVcqq5vzlfnGxnplqdFYyp/Zt3pYffVGY/1zsbZ5q9qqNVvV5tb27Gpjc601u7znFdgAAADAKXr9rbt/SCJi5/Pn8hTFcwAB9vhzvxsAnKShfjcA6JvhfjcA6JvSoXsYIWDQJYds7zl557cn3xYAAODFmPjE0/f/XzFTH84Ec30A4Ox57rt7r55sO4DTVzIDEM688c6i51n9+Pf/s+yZGwUAAJyo0TwlaaW4FzgaaVqpRLyWvxaglCwu12uTEfGRiPh9ufRquzyVfzI5dM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlkAAAAwECLSP+S5E/zj5goj4/u//vAK8m/y3G/KPzsxk9uzbVaG1Pt9f8o59sjovXTYv27mVcCAAAAwEugc51eLKf63RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs3DB7fnd9Npxv3blyJirFv84RjJlyNRiojz/0xi+InPJRExdALxd+5ExBvd4ifxKMuysaIV3eKfe8Hxx/JD0z1+GhEXTiA+nGV32+PPtW6/f2m8nS9HkqTL799wkY6r9/iX/n/8G+ox/rx2xBgX7/2q2jP+nYiLw93Hn9343frfXnfpiPG/9c3t7V7bsp9HTHQ9/yR7YlVbq+vV5tb2leXVuaXaUm1tenrq/ZkPZt6bmawuLtdrxb9dY/zwk79+dFD/z/eIP3ZI/8e7VdhlUP7vvVsPPtrJlrrFv3yp+/n3jR7x0+Lc9+ki394+sZvf6eSf9OYvf/fmQf1f6NH/w/7/L/eqdJ93vv79Px1xVwDgFDS3tlfm6vXaxgGZkSPs83yZF1ezzIcrk32v8/N4vHqO+fGnMlm/D0sfM/0emQAAgJP2+Et/v1sCAAAAAAAAAAAAAAAAAAAAZ9dpPE5sf8yd/nQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBA/wsAAP//bzveBg==")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
socket$tipc(0x1e, 0x5, 0x0)
getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800c000100636f756e746572001c0002800c00014000000000000000380c00024000000000000001000900020073797a3200000000140080001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, r3, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x106, 0x1c15c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@local, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010200000000000006000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000100)={@remote, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffffffffffff, "b2655c0bcb38a112b89d848fb97c4f219137ff9ab87b6540c45bfc217ffc3db2", 0x6, 0x1, 0x4, 0xe}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)

448.89621ms ago: executing program 9 (id=6356):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c04, &(0x7f0000000040), 0xff, 0x26e, &(0x7f00000004c0)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x62f, 0x20}, &(0x7f00000002c0)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'team0\x00', {0x2}, 0x9515})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x8000000000003, 0x0, 0x5, 0x401, 0x28af, 0x0, 0x4})
r3 = socket$inet(0x2, 0x1, 0x8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x18000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}, {@cachetag={'cachetag', 0x3d, '(--)'}}]}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8000038, 0x3, 0x2f8, 0x138, 0xffffffff, 0xffffffff, 0x0, 0x138, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x9, 0x7f, 0x3, 0x3, 0x7, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7bffffff, 0xfffffffd, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x2801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)

448.61586ms ago: executing program 8 (id=6357):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010200000000000006000000000000000000000000000000feffff"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

447.64245ms ago: executing program 2 (id=6358):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x58)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000180))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x3c, 0x3, [{0x7, 0x11, "973e0a32b6bba9ba1ac58b3b9671b8"}, {0x2, 0x5, "53f1df"}, {0x2, 0xb, "fb7865ccc26f746541"}, {0x7, 0xf, "0ed45fd65f267780d51a60df5f"}, {0x5, 0x6, "dfe2c991"}]}]}}}}})
r5 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$unix(0x1, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r8 = socket$kcm(0x29, 0x2, 0x0)
mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r8, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"})
unshare(0x22020600)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000800)="c787cd384de11c65200034202a01b311c6f8ea28f33ef0e3608ddbac2094adf619ee507f03f961dac097b1956d09cdf3ecea521afd06ee2b87bf0ace17ced53eb651349b9f2b5161defa05d362e0ad0986eebbfc9f598ee29195d6236d49ee9f775a336699e43a9adaca9007dd6b30a12ac9dae2f787473a14f5ee499570a0ca4cfa42c7d139bdc4f2bae0e8b8549099707c4b345dd3ac0815968c510ff429f9925fd1ca22af19fb77b3a9c27df51155ce5140ba4c29e3bf435a2916b8abda5e2518c44e0eb7015f041ff66fd502c8cbb66e7f71", 0xd4)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r5, &(0x7f0000000080)='\\\x00', 0x101542, &(0x7f00000000c0)={@align=0x8, {0x1, 0x9, 0x0, 0xdef}}, 0xf, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x100})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r9)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, r10, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff5d55}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff0e}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x4050)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0)

384.580031ms ago: executing program 8 (id=6359):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_clone3(&(0x7f00000004c0)={0x80, &(0x7f0000000080), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000180), {0x2b}, &(0x7f00000002c0)=""/143, 0x8f, &(0x7f0000000380)=""/218, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58)
sched_setscheduler(r2, 0x5, &(0x7f0000000540)=0x6)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c"], 0x30}, 0x890)

205.653086ms ago: executing program 0 (id=6360):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
socket$tipc(0x1e, 0x5, 0x0)
getpid()
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800c000100636f756e746572001c0002800c00014000000000000000380c00024000000000000001000900020073797a3200000000140080001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x106, 0x1c15c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@local, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010200000000000006000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
socket$igmp(0x2, 0x3, 0x2)

12.13321ms ago: executing program 9 (id=6361):
r0 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001a0046c5000000390080000002202bf4c9b36e541521d8000080084d65f3d25a220b3d00000008001300", @ANYRES32=r0, @ANYBLOB="06002a0005000000080013006d000000"], 0x44}}, 0x4000000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
rename(0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
write(0xffffffffffffffff, 0x0, 0x0)
msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000b40)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000400), 0x12)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

0s ago: executing program 8 (id=6362):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000002b00)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/255, 0xff}, {&(0x7f0000003580)=""/4105, 0x1009}, {&(0x7f0000001840)=""/157, 0x9d}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000003440)=""/264, 0x108}, {&(0x7f0000002a00)=""/56, 0x38}, {&(0x7f0000002a40)=""/150, 0x96}], 0x9, &(0x7f0000002bc0)=""/223, 0xdf}, 0x9}, {{&(0x7f0000002cc0)=@nl=@proc, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002d40)=""/229, 0xe5}], 0x1, &(0x7f0000002e80)=""/212, 0xd4}, 0x5}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002f80)=""/195, 0xc3}, {&(0x7f0000003080)=""/223, 0xdf}, {&(0x7f0000003180)=""/132, 0x84}], 0x3, &(0x7f0000003280)=""/142, 0x8e}, 0x8000}], 0x3, 0x2040, &(0x7f0000003400)={0x77359400})
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
timerfd_create(0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

kernel console output (not intermixed with test programs):

ket pid=26714 comm=syz.8.6118
[  782.948175][T26718] FAULT_INJECTION: forcing a failure.
[  782.948175][T26718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  782.972438][T26718] CPU: 0 UID: 0 PID: 26718 Comm: syz.0.6121 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  782.972513][T26718] Tainted: [W]=WARN
[  782.972562][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  782.972579][T26718] Call Trace:
[  782.972633][T26718]  <TASK>
[  782.972677][T26718]  __dump_stack+0x1d/0x30
[  782.972781][T26718]  dump_stack_lvl+0x95/0xd0
[  782.972808][T26718]  dump_stack+0x15/0x1b
[  782.972827][T26718]  should_fail_ex+0x25e/0x270
[  782.972857][T26718]  should_fail+0xb/0x20
[  782.972917][T26718]  should_fail_usercopy+0x1a/0x20
[  782.972948][T26718]  _copy_from_iter+0xcc/0xe70
[  782.973024][T26718]  ? __alloc_skb+0x511/0x6f0
[  782.973067][T26718]  ? __alloc_skb+0x205/0x6f0
[  782.973158][T26718]  netlink_sendmsg+0x4a4/0x6f0
[  782.973190][T26718]  ? __pfx_netlink_sendmsg+0x10/0x10
[  782.973219][T26718]  ____sys_sendmsg+0x532/0x580
[  782.973262][T26718]  ___sys_sendmsg+0x195/0x1e0
[  782.973359][T26718]  __x64_sys_sendmsg+0xd4/0x160
[  782.973403][T26718]  x64_sys_call+0x194c/0x3020
[  782.973475][T26718]  do_syscall_64+0x136/0x3c0
[  782.973563][T26718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.973593][T26718] RIP: 0033:0x7fb0e369de59
[  782.973611][T26718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.973631][T26718] RSP: 002b:00007fb0e20f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  782.973720][T26718] RAX: ffffffffffffffda RBX: 00007fb0e3925fa0 RCX: 00007fb0e369de59
[  782.973809][T26718] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  782.973826][T26718] RBP: 00007fb0e20f7090 R08: 0000000000000000 R09: 0000000000000000
[  782.973843][T26718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  782.973857][T26718] R13: 00007fb0e3926038 R14: 00007fb0e3925fa0 R15: 00007ffdf6a48a78
[  782.973876][T26718]  </TASK>
[  783.138761][T26716] CPU: 1 UID: 0 PID: 26716 Comm: syz.1.6119 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  783.138879][T26716] Tainted: [W]=WARN
[  783.138913][T26716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  783.139032][T26716] Call Trace:
[  783.139059][T26716]  <TASK>
[  783.139084][T26716]  __dump_stack+0x1d/0x30
[  783.139168][T26716]  dump_stack_lvl+0x95/0xd0
[  783.139245][T26716]  dump_stack+0x15/0x1b
[  783.139311][T26716]  should_fail_ex+0x25e/0x270
[  783.139431][T26716]  should_fail+0xb/0x20
[  783.139549][T26716]  should_fail_usercopy+0x1a/0x20
[  783.139633][T26716]  _copy_from_user+0x1c/0xb0
[  783.139697][T26716]  simple_transaction_get+0xee/0x130
[  783.139787][T26716]  selinux_transaction_write+0x9d/0x110
[  783.139874][T26716]  ? __pfx_selinux_transaction_write+0x10/0x10
[  783.139962][T26716]  vfs_write+0x252/0x990
[  783.140082][T26716]  ? __fget_files+0x184/0x1c0
[  783.140177][T26716]  ? mutex_lock+0x57/0x90
[  783.140320][T26716]  ksys_write+0xdc/0x1a0
[  783.140394][T26716]  __x64_sys_write+0x40/0x50
[  783.140484][T26716]  x64_sys_call+0x27e1/0x3020
[  783.140581][T26716]  do_syscall_64+0x136/0x3c0
[  783.140692][T26716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.140768][T26716] RIP: 0033:0x7fea0644de59
[  783.140879][T26716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.141014][T26716] RSP: 002b:00007fea04ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  783.141082][T26716] RAX: ffffffffffffffda RBX: 00007fea066d5fa0 RCX: 00007fea0644de59
[  783.141134][T26716] RDX: 0000000000000056 RSI: 0000000000000000 RDI: 0000000000000004
[  783.141178][T26716] RBP: 00007fea04ea7090 R08: 0000000000000000 R09: 0000000000000000
[  783.141216][T26716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  783.141260][T26716] R13: 00007fea066d6038 R14: 00007fea066d5fa0 R15: 00007ffe5f418f38
[  783.141333][T26716]  </TASK>
[  783.538247][   T28] audit: type=1400 audit(2000000164.100:8296): avc:  denied  { create } for  pid=26726 comm="syz.0.6123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  783.576308][T26729] loop2: detected capacity change from 0 to 128
[  783.634769][T26733] loop9: detected capacity change from 0 to 512
[  783.642008][T26733] EXT4-fs: Ignoring removed i_version option
[  783.648270][T26733] EXT4-fs: Ignoring removed bh option
[  783.698422][T26731] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6124'.
[  783.781714][T26729] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  783.834188][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  783.860183][T26733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  783.873582][T26733] ext4 filesystem being mounted at /411/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  783.898994][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6122'.
[  783.997632][T26734] gtp5: entered promiscuous mode
[  784.089952][T26740] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6123'.
[  784.508335][   T28] audit: type=1400 audit(2000000164.280:8297): avc:  denied  { setopt } for  pid=26726 comm="syz.0.6123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  784.528021][   T28] audit: type=1400 audit(2000000164.430:8298): avc:  denied  { mount } for  pid=26722 comm="syz.9.6122" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  784.549997][   T28] audit: type=1400 audit(2000000164.730:8299): avc:  denied  { create } for  pid=26728 comm="syz.2.6125" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  784.889936][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  784.900805][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  784.926244][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  784.950950][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  784.980666][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  785.007975][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  785.037211][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  785.071553][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  785.096199][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  785.122010][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: unknown main item tag 0x0
[  785.153935][T16574] hid-generic 0040:FFFFFF00:FFFFFFFF.0004: hidraw0: <UNKNOWN> HID vc1.55 Device [syz0] on syz1
[  785.267792][T26760] fido_id[26760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  785.411326][   T28] audit: type=1400 audit(2000000164.730:8300): avc:  denied  { map } for  pid=26728 comm="syz.2.6125" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  785.449824][T19002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.503521][T26766] loop9: detected capacity change from 0 to 512
[  785.513990][T26766] EXT4-fs (loop9): orphan cleanup on readonly fs
[  785.528678][T26766] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  785.554101][T26766] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  785.591291][T26766] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.6133: couldn't read orphan inode 26 (err -116)
[  785.684714][T26766] loop9: lost filesystem error report for type 5 error -116
[  785.694063][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  785.707914][    C0] EXT4-fs (loop9): initial error at time 2000000166: ext4_orphan_get:1404
[  785.716518][    C0] EXT4-fs (loop9): last error at time 2000000166: ext4_orphan_get:1404
[  785.725040][T26766] EXT4-fs (loop9): Remounting filesystem read-only
[  785.835707][T26766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  785.902759][T26775] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6137'.
[  786.052654][T26779] gtp3: entered promiscuous mode
[  786.097870][T26783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6138'.
[  786.163814][T26783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6138'.
[  786.554476][ T5294] page_pool_release_retry() stalled pool shutdown: id 238, 44 inflight 60 sec
[  786.635946][T19002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.773417][T26797] loop9: detected capacity change from 0 to 128
[  786.810291][T26797] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  786.859460][T26772] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.866812][T26772] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.874346][T26772] bridge_slave_0: entered allmulticast mode
[  786.881088][T26772] bridge_slave_0: entered promiscuous mode
[  786.888677][T26772] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.895854][T26772] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.903113][T26772] bridge_slave_1: entered allmulticast mode
[  786.909895][T26772] bridge_slave_1: entered promiscuous mode
[  786.929905][T26772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  786.941477][T26772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  787.070294][   T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.112422][T26772] team0: Port device team_slave_0 added
[  787.119849][T26772] team0: Port device team_slave_1 added
[  787.172683][   T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.214422][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  787.214442][   T28] audit: type=1400 audit(2000000167.770:8324): avc:  denied  { write } for  pid=26803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  787.275644][T26772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  787.290545][   T28] audit: type=1400 audit(2000000167.770:8325): avc:  denied  { add_name } for  pid=26803 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  787.315177][T26772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  787.363786][   T28] audit: type=1400 audit(2000000167.770:8326): avc:  denied  { create } for  pid=26803 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  787.388910][T26772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  787.405736][   T28] audit: type=1400 audit(2000000167.770:8327): avc:  denied  { write } for  pid=26803 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=24202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  787.432802][   T28] audit: type=1400 audit(2000000167.770:8328): avc:  denied  { append } for  pid=26803 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=24202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  787.480619][   T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.495753][   T28] audit: type=1400 audit(2000000167.850:8329): avc:  denied  { write } for  pid=26825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  787.518269][   T28] audit: type=1400 audit(2000000167.850:8330): avc:  denied  { remove_name } for  pid=26825 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=24202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  787.542381][   T28] audit: type=1400 audit(2000000167.850:8331): avc:  denied  { unlink } for  pid=26825 comm="rm" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=24202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  787.578514][T26772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  787.587076][T26830] loop1: detected capacity change from 0 to 512
[  787.595857][T26772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  787.622517][T26830] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  787.631844][   T28] audit: type=1400 audit(2000000168.140:8332): avc:  denied  { getopt } for  pid=26828 comm="syz.1.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  787.653020][T26772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  787.682506][T26772] hsr_slave_0: entered promiscuous mode
[  787.688606][T26772] hsr_slave_1: entered promiscuous mode
[  787.694776][T26772] debugfs: 'hsr0' already exists in 'hsr'
[  787.700551][T26772] Cannot create hsr debugfs directory
[  787.764245][   T28] audit: type=1400 audit(2000000168.300:8333): avc:  denied  { map } for  pid=26828 comm="syz.1.6145" path="socket:[86314]" dev="sockfs" ino=86314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  787.793938][   T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.833652][T26829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26829 comm=syz.1.6145
[  787.926940][T26842] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6147'.
[  788.022026][T26848] loop1: detected capacity change from 0 to 512
[  788.054395][T26851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=26851 comm=syz.9.6149
[  788.075627][T26848] EXT4-fs (loop1): orphan cleanup on readonly fs
[  788.094657][T26848] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  788.124715][T26848] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  788.154315][T26848] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6148: couldn't read orphan inode 26 (err -116)
[  788.168220][T26848] loop1: lost filesystem error report for type 5 error -116
[  788.168432][T26848] EXT4-fs (loop1): Remounting filesystem read-only
[  788.175809][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  788.175829][    C0] EXT4-fs (loop1): initial error at time 2000000168: ext4_orphan_get:1404
[  788.175852][    C0] EXT4-fs (loop1): last error at time 2000000168: ext4_orphan_get:1404
[  788.220476][T26848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  788.236379][   T40] bond0 (unregistering): Released all slaves
[  788.252298][   T40] bond1 (unregistering): Released all slaves
[  788.309357][   T40] hsr_slave_0: left promiscuous mode
[  788.317471][   T40] hsr_slave_1: left promiscuous mode
[  788.338912][   T40] veth1_macvtap: left promiscuous mode
[  788.346608][   T40] veth0_macvtap: left promiscuous mode
[  788.358725][   T40] veth1_vlan: left promiscuous mode
[  788.370077][   T40] veth0_vlan: left promiscuous mode
[  788.443174][T26879] FAULT_INJECTION: forcing a failure.
[  788.443174][T26879] name failslab, interval 1, probability 0, space 0, times 0
[  788.461450][T26877] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6150'.
[  788.482732][T26879] CPU: 0 UID: 0 PID: 26879 Comm: syz.9.6152 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  788.482828][T26879] Tainted: [W]=WARN
[  788.482839][T26879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  788.482860][T26879] Call Trace:
[  788.482869][T26879]  <TASK>
[  788.482881][T26879]  __dump_stack+0x1d/0x30
[  788.482914][T26879]  dump_stack_lvl+0x95/0xd0
[  788.482944][T26879]  dump_stack+0x15/0x1b
[  788.483031][T26879]  should_fail_ex+0x25e/0x270
[  788.483072][T26879]  should_failslab+0x8c/0xb0
[  788.483111][T26879]  __kmalloc_noprof+0xd4/0x4a0
[  788.483135][T26879]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  788.483227][T26879]  ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  788.483350][T26879]  genl_family_rcv_msg_attrs_parse+0x8c/0x1b0
[  788.483399][T26879]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  788.483466][T26879]  ? selinux_capable+0x31/0x40
[  788.483573][T26879]  ? security_capable+0x7b/0x90
[  788.483687][T26879]  ? ns_capable+0x80/0xb0
[  788.483735][T26879]  genl_rcv_msg+0x42f/0x470
[  788.483775][T26879]  ? __pfx_ovs_dp_cmd_del+0x10/0x10
[  788.483799][T26879]  netlink_rcv_skb+0x11e/0x220
[  788.483839][T26879]  ? __pfx_genl_rcv_msg+0x10/0x10
[  788.483886][T26879]  genl_rcv+0x28/0x40
[  788.483998][T26879]  netlink_unicast+0x5a7/0x680
[  788.484046][T26879]  netlink_sendmsg+0x5be/0x6f0
[  788.484152][T26879]  ? __pfx_netlink_sendmsg+0x10/0x10
[  788.484180][T26879]  ____sys_sendmsg+0x532/0x580
[  788.484273][T26879]  ___sys_sendmsg+0x195/0x1e0
[  788.484379][T26879]  __x64_sys_sendmsg+0xd4/0x160
[  788.484425][T26879]  x64_sys_call+0x194c/0x3020
[  788.484458][T26879]  do_syscall_64+0x136/0x3c0
[  788.484573][T26879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.484603][T26879] RIP: 0033:0x7f347f66de59
[  788.484621][T26879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  788.484696][T26879] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  788.484720][T26879] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  788.484740][T26879] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003
[  788.484757][T26879] RBP: 00007f347e0c7090 R08: 0000000000000000 R09: 0000000000000000
[  788.484774][T26879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  788.484787][T26879] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  788.484821][T26879]  </TASK>
[  788.837418][T26890] loop9: detected capacity change from 0 to 128
[  788.864259][T26890] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  788.979221][T26865] gtp0: entered promiscuous mode
[  788.988833][T26863] syz.0.6150 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  789.003198][T26863] CPU: 0 UID: 0 PID: 26863 Comm: syz.0.6150 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  789.003276][T26863] Tainted: [W]=WARN
[  789.003283][T26863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  789.003298][T26863] Call Trace:
[  789.003305][T26863]  <TASK>
[  789.003318][T26863]  __dump_stack+0x1d/0x30
[  789.003352][T26863]  dump_stack_lvl+0x95/0xd0
[  789.003457][T26863]  dump_stack+0x15/0x1b
[  789.003486][T26863]  dump_header+0x80/0x240
[  789.003565][T26863]  oom_kill_process+0x295/0x350
[  789.003680][T26863]  out_of_memory+0x981/0xbc0
[  789.003726][T26863]  try_charge_memcg+0x621/0xa00
[  789.003826][T26863]  ? __rcu_read_unlock+0x4e/0x70
[  789.003861][T26863]  __memcg_kmem_charge_page+0x199/0x3a0
[  789.003905][T26863]  __alloc_frozen_pages_noprof+0x18a/0x350
[  789.003950][T26863]  alloc_pages_mpol+0xa9/0x1d0
[  789.003988][T26863]  alloc_pages_noprof+0x8f/0x140
[  789.004144][T26863]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  789.004227][T26863]  __kvmalloc_node_noprof+0x3a0/0x590
[  789.004257][T26863]  ? futex_hash_allocate+0x192/0x920
[  789.004287][T26863]  ? futex_hash_allocate+0x192/0x920
[  789.004328][T26863]  ? futex_hash_allocate+0x192/0x920
[  789.004391][T26863]  futex_hash_allocate+0x192/0x920
[  789.004417][T26863]  ? cap_task_prctl+0x13f/0x6b0
[  789.004466][T26863]  futex_hash_prctl+0xd8/0xf0
[  789.004560][T26863]  __se_sys_prctl+0x4f4/0x13b0
[  789.004601][T26863]  __x64_sys_prctl+0x67/0x80
[  789.004700][T26863]  x64_sys_call+0x2533/0x3020
[  789.004732][T26863]  do_syscall_64+0x136/0x3c0
[  789.004798][T26863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.004829][T26863] RIP: 0033:0x7fb0e369de59
[  789.004846][T26863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  789.004867][T26863] RSP: 002b:00007fb0e20f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  789.004891][T26863] RAX: ffffffffffffffda RBX: 00007fb0e3925fa0 RCX: 00007fb0e369de59
[  789.004907][T26863] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  789.004987][T26863] RBP: 00007fb0e3733e6f R08: 0000000000000000 R09: 0000000000000000
[  789.005005][T26863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  789.005023][T26863] R13: 00007fb0e3926038 R14: 00007fb0e3925fa0 R15: 00007ffdf6a48a78
[  789.005057][T26863]  </TASK>
[  789.261411][T26863] memory: usage 307200kB, limit 307200kB, failcnt 1614
[  789.284148][T26868] gtp6: entered promiscuous mode
[  789.294134][T26863] memory+swap: usage 245216kB, limit 9007199254740988kB, failcnt 0
[  789.312655][T26863] kmem: usage 185248kB, limit 9007199254740988kB, failcnt 0
[  789.346657][T26863] Memory cgroup stats for /syz0:
[  789.346939][T26863] cache 0
[  789.387166][T26863] rss 8192
[  789.392510][T26863] shmem 0
[  789.398860][T26863] mapped_file 0
[  789.407054][T26863] dirty 0
[  789.412825][T26863] writeback 0
[  789.419893][T26863] workingset_refault_anon 355
[  789.425312][T26863] workingset_refault_file 3323
[  789.447906][T26863] swap 12136448
[  789.453750][T26863] swapcached 85037056
[  789.461551][T26863] pgpgin 971780
[  789.462489][T26894] loop2: detected capacity change from 0 to 1024
[  789.465181][T26863] pgpgout 971778
[  789.475121][T26863] pgfault 847488
[  789.478711][T26863] pgmajfault 3113
[  789.482942][T26863] inactive_anon 0
[  789.487202][T26863] active_anon 8192
[  789.495535][T26863] inactive_file 0
[  789.497217][T26894] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  789.526748][T26863] active_file 0
[  789.532994][T26863] unevictable 0
[  789.536509][T26863] hierarchical_memory_limit 314572800
[  789.542045][T26863] hierarchical_memsw_limit 9223372036854771712
[  789.548224][T26863] total_cache 0
[  789.551699][T26863] total_rss 8192
[  789.555342][T26863] total_shmem 0
[  789.580344][T26863] total_mapped_file 0
[  789.584845][T26863] total_dirty 0
[  789.588375][T26863] total_writeback 0
[  789.592222][T26863] total_workingset_refault_anon 355
[  789.598238][T26863] total_workingset_refault_file 3323
[  789.603566][T26863] total_swap 12136448
[  789.607854][T26863] total_swapcached 85037056
[  789.612615][T26863] total_pgpgin 971780
[  789.616915][T26863] total_pgpgout 971778
[  789.621035][T26863] total_pgfault 847488
[  789.626413][T26903] netlink: 'syz.2.6154': attribute type 3 has an invalid length.
[  789.634252][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'.
[  789.658697][T26863] total_pgmajfault 3113
[  789.662989][T26863] total_inactive_anon 0
[  789.667506][T26863] total_active_anon 8192
[  789.671934][T26863] total_inactive_file 0
[  789.685342][T26863] total_active_file 0
[  789.694320][T26863] total_unevictable 0
[  789.705343][T26863] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6150,pid=26861,uid=0
[  789.729579][T26863] Memory cgroup out of memory: Killed process 26861 (syz.0.6150) total-vm:94312kB, anon-rss:1244kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  789.936495][T26915] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6157'.
[  790.051961][T24707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.104411][T26772] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  790.133175][T26772] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  790.153468][T26772] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  790.180462][T26772] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  790.199228][T26772] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  790.207106][T26772] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  790.208897][   T40] IPVS: stop unused estimator thread 0...
[  790.210991][T26772] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  790.212295][T26929] loop9: detected capacity change from 0 to 8192
[  790.228282][T26772] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  790.286177][T26936] loop1: detected capacity change from 0 to 2048
[  790.299374][T26929] forcing mempool usage for bio_alloc_bioset+0x394/0x640
[  790.307686][T26936] ext4: Bad value for 'init_itable'
[  790.330865][T26926] syz.0.6160 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  790.345020][T26926] CPU: 1 UID: 0 PID: 26926 Comm: syz.0.6160 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  790.345065][T26926] Tainted: [W]=WARN
[  790.345076][T26926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  790.345152][T26926] Call Trace:
[  790.345163][T26926]  <TASK>
[  790.345174][T26926]  __dump_stack+0x1d/0x30
[  790.345207][T26926]  dump_stack_lvl+0x95/0xd0
[  790.345235][T26926]  dump_stack+0x15/0x1b
[  790.345263][T26926]  dump_header+0x80/0x240
[  790.345292][T26926]  oom_kill_process+0x295/0x350
[  790.345353][T26926]  out_of_memory+0x981/0xbc0
[  790.345462][T26926]  try_charge_memcg+0x621/0xa00
[  790.345569][T26926]  ? __rcu_read_unlock+0x4e/0x70
[  790.345611][T26926]  __memcg_kmem_charge_page+0x199/0x3a0
[  790.345653][T26926]  __alloc_frozen_pages_noprof+0x18a/0x350
[  790.345752][T26926]  alloc_pages_mpol+0xa9/0x1d0
[  790.345784][T26926]  alloc_pages_noprof+0x8f/0x140
[  790.345828][T26926]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  790.345906][T26926]  __kvmalloc_node_noprof+0x3a0/0x590
[  790.345980][T26926]  ? futex_hash_allocate+0x192/0x920
[  790.346076][T26926]  ? futex_hash_allocate+0x192/0x920
[  790.346105][T26926]  ? futex_hash_allocate+0x192/0x920
[  790.346156][T26926]  futex_hash_allocate+0x192/0x920
[  790.346206][T26926]  ? cap_task_prctl+0x13f/0x6b0
[  790.346335][T26926]  futex_hash_prctl+0xd8/0xf0
[  790.346364][T26926]  __se_sys_prctl+0x4f4/0x13b0
[  790.346474][T26926]  __x64_sys_prctl+0x67/0x80
[  790.346567][T26926]  x64_sys_call+0x2533/0x3020
[  790.346610][T26926]  do_syscall_64+0x136/0x3c0
[  790.346679][T26926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.346742][T26926] RIP: 0033:0x7fb0e369de59
[  790.346765][T26926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  790.346791][T26926] RSP: 002b:00007fb0e20f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  790.346822][T26926] RAX: ffffffffffffffda RBX: 00007fb0e3925fa0 RCX: 00007fb0e369de59
[  790.346840][T26926] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  790.346859][T26926] RBP: 00007fb0e3733e6f R08: 0000000000000000 R09: 0000000000000000
[  790.346910][T26926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  790.346924][T26926] R13: 00007fb0e3926038 R14: 00007fb0e3925fa0 R15: 00007ffdf6a48a78
[  790.347025][T26926]  </TASK>
[  790.347032][T26926] memory: usage 307200kB, limit 307200kB, failcnt 1671
[  790.649937][T26926] memory+swap: usage 318952kB, limit 9007199254740988kB, failcnt 0
[  790.679670][T26926] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  790.703147][T26926] Memory cgroup stats for /syz0:
[  790.703511][T26926] cache 0
[  790.726059][T26926] rss 4096
[  790.734458][T26926] shmem 0
[  790.744284][T26926] mapped_file 0
[  790.768251][T26926] dirty 0
[  790.775775][T26926] writeback 0
[  790.790574][T26926] workingset_refault_anon 371
[  790.803598][T26926] workingset_refault_file 3323
[  790.823942][T26926] swap 12034048
[  790.833651][T26926] swapcached 85131264
[  790.847947][T26967] loop1: detected capacity change from 0 to 128
[  790.862742][T26967] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  790.872176][T26926] pgpgin 971844
[  790.885045][T26926] pgpgout 971843
[  790.897584][T26926] pgfault 847635
[  790.927232][T26926] pgmajfault 3126
[  790.931041][T26926] inactive_anon 0
[  790.934703][T26926] active_anon 4096
[  790.938457][T26926] inactive_file 0
[  790.942120][T26926] active_file 0
[  790.945603][T26926] unevictable 0
[  790.949145][T26926] hierarchical_memory_limit 314572800
[  790.954542][T26926] hierarchical_memsw_limit 9223372036854771712
[  790.960787][T26926] total_cache 0
[  790.964333][T26926] total_rss 4096
[  790.967905][T26926] total_shmem 0
[  790.971544][T26926] total_mapped_file 0
[  790.975553][T26926] total_dirty 0
[  790.979040][T26926] total_writeback 0
[  790.982891][T26926] total_workingset_refault_anon 371
[  790.988120][T26926] total_workingset_refault_file 3323
[  790.993429][T26926] total_swap 12034048
[  790.997509][T26926] total_swapcached 85131264
[  791.002110][T26926] total_pgpgin 971844
[  791.006160][T26926] total_pgpgout 971843
[  791.010258][T26926] total_pgfault 847635
[  791.014360][T26926] total_pgmajfault 3126
[  791.018534][T26926] total_inactive_anon 0
[  791.024678][T26926] total_active_anon 4096
[  791.029535][T26926] total_inactive_file 0
[  791.033906][T26926] total_active_file 0
[  791.038646][T26926] total_unevictable 0
[  791.044332][T26926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6160,pid=26925,uid=0
[  791.053121][T26772] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.100064][T26772] 8021q: adding VLAN 0 to HW filter on device team0
[  791.111514][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.118675][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.130892][T26926] Memory cgroup out of memory: Killed process 26925 (syz.0.6160) total-vm:96096kB, anon-rss:1244kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000
[  791.206543][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.213844][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.226423][T26983] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  791.265896][T26983] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6164'.
[  791.326183][T26987] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6169'.
[  791.394889][T26992] loop1: detected capacity change from 0 to 128
[  791.431406][T26992] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  791.556276][T26772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  791.734790][T27016] FAULT_INJECTION: forcing a failure.
[  791.734790][T27016] name failslab, interval 1, probability 0, space 0, times 0
[  791.778762][T27016] CPU: 1 UID: 0 PID: 27016 Comm: syz.9.6175 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  791.778808][T27016] Tainted: [W]=WARN
[  791.778818][T27016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  791.778858][T27016] Call Trace:
[  791.778865][T27016]  <TASK>
[  791.778873][T27016]  __dump_stack+0x1d/0x30
[  791.778911][T27016]  dump_stack_lvl+0x95/0xd0
[  791.778932][T27016]  dump_stack+0x15/0x1b
[  791.778957][T27016]  should_fail_ex+0x25e/0x270
[  791.779087][T27016]  ? cgw_create_job+0x137/0x660
[  791.779109][T27016]  should_failslab+0x8c/0xb0
[  791.779135][T27016]  __kmalloc_cache_noprof+0x7b/0x3d0
[  791.779163][T27016]  ? cgw_create_job+0x137/0x660
[  791.779186][T27016]  cgw_create_job+0x137/0x660
[  791.779252][T27016]  ? __pfx_cgw_create_job+0x10/0x10
[  791.779298][T27016]  rtnetlink_rcv_msg+0x6a7/0x720
[  791.779323][T27016]  netlink_rcv_skb+0x11e/0x220
[  791.779348][T27016]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  791.779383][T27016]  rtnetlink_rcv+0x1c/0x30
[  791.779406][T27016]  netlink_unicast+0x5a7/0x680
[  791.779455][T27016]  netlink_sendmsg+0x5be/0x6f0
[  791.779483][T27016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.779567][T27016]  ____sys_sendmsg+0x532/0x580
[  791.779601][T27016]  ___sys_sendmsg+0x195/0x1e0
[  791.779654][T27016]  __x64_sys_sendmsg+0xd4/0x160
[  791.779699][T27016]  x64_sys_call+0x194c/0x3020
[  791.779727][T27016]  do_syscall_64+0x136/0x3c0
[  791.779820][T27016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.779850][T27016] RIP: 0033:0x7f347f66de59
[  791.779873][T27016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.779897][T27016] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.780005][T27016] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  791.780025][T27016] RDX: 00000000240448c8 RSI: 0000200000000000 RDI: 0000000000000003
[  791.780068][T27016] RBP: 00007f347e0c7090 R08: 0000000000000000 R09: 0000000000000000
[  791.780084][T27016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.780100][T27016] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  791.780123][T27016]  </TASK>
[  792.036190][T27018] loop9: detected capacity change from 0 to 128
[  792.048083][T27018] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  792.266994][T26772] veth0_vlan: entered promiscuous mode
[  792.281251][T26772] veth1_vlan: entered promiscuous mode
[  792.312607][T26772] veth0_macvtap: entered promiscuous mode
[  792.322456][T26772] veth1_macvtap: entered promiscuous mode
[  792.346673][T26772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  792.369937][T26772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.390014][ T5000] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.399551][ T5000] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.416413][ T5000] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.449591][   T28] kauditd_printk_skb: 27 callbacks suppressed
[  792.449612][   T28] audit: type=1400 audit(2000000173.010:8360): avc:  denied  { create } for  pid=27010 comm="syz.1.6174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1
[  792.488223][   T28] audit: type=1400 audit(2000000173.010:8361): avc:  denied  { create } for  pid=27010 comm="syz.1.6174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  792.525484][   T28] audit: type=1400 audit(2000000173.010:8362): avc:  denied  { write } for  pid=27010 comm="syz.1.6174" path="socket:[87852]" dev="sockfs" ino=87852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  792.600377][ T5000] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.614190][   T28] audit: type=1400 audit(2000000173.120:8363): avc:  denied  { create } for  pid=27010 comm="syz.1.6174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1
[  792.695394][T27030] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  792.744266][T27030] bridge1: entered promiscuous mode
[  792.749536][T27030] bridge1: entered allmulticast mode
[  792.760481][   T28] audit: type=1400 audit(2000000173.300:8364): avc:  denied  { mounton } for  pid=26772 comm="syz-executor" path="/root/syzkaller.H3YLhk/syz-tmp" dev="sda1" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  792.785129][   T28] audit: type=1400 audit(2000000173.300:8365): avc:  denied  { mount } for  pid=26772 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  792.807411][   T28] audit: type=1400 audit(2000000173.300:8366): avc:  denied  { mount } for  pid=26772 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  792.829425][   T28] audit: type=1400 audit(2000000173.300:8367): avc:  denied  { mounton } for  pid=26772 comm="syz-executor" path="/root/syzkaller.H3YLhk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  792.874958][T27037] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6179'.
[  792.915563][T27030] loop9: detected capacity change from 0 to 1024
[  792.922574][T27030] EXT4-fs: Ignoring removed bh option
[  792.929757][T27030] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  792.939810][   T28] audit: type=1400 audit(2000000173.300:8368): avc:  denied  { mounton } for  pid=26772 comm="syz-executor" path="/root/syzkaller.H3YLhk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=87887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  792.967825][   T28] audit: type=1400 audit(2000000173.410:8369): avc:  denied  { mounton } for  pid=26772 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  793.214954][T27030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  793.258964][T27030] dns_resolver: Unsupported server list version (0)
[  793.297444][T19002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.327586][T27049] loop1: detected capacity change from 0 to 512
[  793.363743][T27049] EXT4-fs (loop1): orphan cleanup on readonly fs
[  793.489265][T27049] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  793.505030][T27049] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  793.527424][T27049] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6183: couldn't read orphan inode 26 (err -116)
[  793.547238][T27049] loop1: lost filesystem error report for type 5 error -116
[  793.554048][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  793.567882][    C0] EXT4-fs (loop1): initial error at time 2000000174: ext4_orphan_get:1404
[  793.576477][    C0] EXT4-fs (loop1): last error at time 2000000174: ext4_orphan_get:1404
[  793.585228][T27049] EXT4-fs (loop1): Remounting filesystem read-only
[  793.598768][T27049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  793.637298][T27062] loop9: detected capacity change from 0 to 128
[  793.679412][T27062] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  793.708286][T27064] gtp7: entered promiscuous mode
[  793.770626][T27066] gtp1: entered promiscuous mode
[  793.778951][T27066] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6183'.
[  793.802107][T27068] FAULT_INJECTION: forcing a failure.
[  793.802107][T27068] name failslab, interval 1, probability 0, space 0, times 0
[  793.839635][T27068] CPU: 1 UID: 0 PID: 27068 Comm: syz.9.6187 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  793.839696][T27068] Tainted: [W]=WARN
[  793.839705][T27068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  793.839720][T27068] Call Trace:
[  793.839807][T27068]  <TASK>
[  793.839819][T27068]  __dump_stack+0x1d/0x30
[  793.839884][T27068]  dump_stack_lvl+0x95/0xd0
[  793.839984][T27068]  dump_stack+0x15/0x1b
[  793.840011][T27068]  should_fail_ex+0x25e/0x270
[  793.840048][T27068]  should_failslab+0x8c/0xb0
[  793.840078][T27068]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[  793.840146][T27068]  ? __alloc_skb+0x2db/0x6f0
[  793.840170][T27068]  ? __alloc_skb+0x2db/0x6f0
[  793.840197][T27068]  __alloc_skb+0x2db/0x6f0
[  793.840266][T27068]  ? __alloc_skb+0x205/0x6f0
[  793.840306][T27068]  netlink_ack+0xfd/0x530
[  793.840351][T27068]  netlink_rcv_skb+0x18d/0x220
[  793.840373][T27068]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  793.840416][T27068]  nfnetlink_rcv+0x15f/0x1740
[  793.840450][T27068]  ? __kfree_skb+0x109/0x150
[  793.840605][T27068]  ? kmem_cache_free+0xca/0x380
[  793.840633][T27068]  ? __kfree_skb+0x109/0x150
[  793.840672][T27068]  ? nlmon_xmit+0x4f/0x60
[  793.840701][T27068]  ? consume_skb+0x4b/0x130
[  793.840739][T27068]  ? nlmon_xmit+0x4f/0x60
[  793.840765][T27068]  ? __dev_queue_xmit+0xbc3/0x1e60
[  793.840808][T27068]  ? __dev_queue_xmit+0x135e/0x1e60
[  793.840838][T27068]  ? __dev_queue_xmit+0x151/0x1e60
[  793.840893][T27068]  ? ref_tracker_free+0x380/0x3f0
[  793.840929][T27068]  ? __netlink_deliver_tap+0x4e6/0x510
[  793.840958][T27068]  netlink_unicast+0x5a7/0x680
[  793.841033][T27068]  netlink_sendmsg+0x5be/0x6f0
[  793.841098][T27068]  ? __pfx_netlink_sendmsg+0x10/0x10
[  793.841124][T27068]  ____sys_sendmsg+0x532/0x580
[  793.841230][T27068]  ___sys_sendmsg+0x195/0x1e0
[  793.841321][T27068]  __x64_sys_sendmsg+0xd4/0x160
[  793.841359][T27068]  x64_sys_call+0x194c/0x3020
[  793.841395][T27068]  do_syscall_64+0x136/0x3c0
[  793.841433][T27068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.841457][T27068] RIP: 0033:0x7f347f66de59
[  793.841515][T27068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  793.841536][T27068] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  793.841559][T27068] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  793.841580][T27068] RDX: 0000000000008082 RSI: 00002000000002c0 RDI: 0000000000000003
[  793.841595][T27068] RBP: 00007f347e0c7090 R08: 0000000000000000 R09: 0000000000000000
[  793.841610][T27068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.841661][T27068] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  793.841751][T27068]  </TASK>
[  794.225340][T27073] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6189'.
[  794.310621][T27077] loop9: detected capacity change from 0 to 128
[  794.364666][T27079] FAULT_INJECTION: forcing a failure.
[  794.364666][T27079] name failslab, interval 1, probability 0, space 0, times 0
[  794.379966][T27077] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  794.406608][T27079] CPU: 0 UID: 0 PID: 27079 Comm: syz.8.6192 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  794.406653][T27079] Tainted: [W]=WARN
[  794.406660][T27079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  794.406674][T27079] Call Trace:
[  794.406740][T27079]  <TASK>
[  794.406750][T27079]  __dump_stack+0x1d/0x30
[  794.406829][T27079]  dump_stack_lvl+0x95/0xd0
[  794.406868][T27079]  dump_stack+0x15/0x1b
[  794.406893][T27079]  should_fail_ex+0x25e/0x270
[  794.406930][T27079]  should_failslab+0x8c/0xb0
[  794.406955][T27079]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[  794.406987][T27079]  ? __alloc_skb+0x2db/0x6f0
[  794.407085][T27079]  ? __alloc_skb+0x2db/0x6f0
[  794.407112][T27079]  __alloc_skb+0x2db/0x6f0
[  794.407202][T27079]  ? __alloc_skb+0x205/0x6f0
[  794.407252][T27079]  alloc_skb_with_frags+0x7e/0x3d0
[  794.407292][T27079]  ? __mod_memcg_lruvec_state+0x1bd/0x2b0
[  794.407323][T27079]  ? __rcu_read_unlock+0x33/0x70
[  794.407426][T27079]  ? folio_mark_accessed+0x12e/0x3a0
[  794.407455][T27079]  sock_alloc_send_pskb+0x44d/0x500
[  794.407508][T27079]  unix_dgram_sendmsg+0x384/0x1030
[  794.407628][T27079]  ? selinux_socket_sendmsg+0x1ab/0x1e0
[  794.407715][T27079]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  794.407755][T27079]  ____sys_sendmsg+0x532/0x580
[  794.407830][T27079]  ___sys_sendmsg+0x195/0x1e0
[  794.407885][T27079]  __sys_sendmmsg+0x185/0x320
[  794.408039][T27079]  __x64_sys_sendmmsg+0x57/0x70
[  794.408071][T27079]  x64_sys_call+0x27aa/0x3020
[  794.408121][T27079]  do_syscall_64+0x136/0x3c0
[  794.408238][T27079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.408270][T27079] RIP: 0033:0x7fd204a8de59
[  794.408291][T27079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.408313][T27079] RSP: 002b:00007fd2034e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  794.408335][T27079] RAX: ffffffffffffffda RBX: 00007fd204d15fa0 RCX: 00007fd204a8de59
[  794.408370][T27079] RDX: 0307017fdb7a66cb RSI: 0000200000002dc0 RDI: 0000000000000005
[  794.408388][T27079] RBP: 00007fd2034e7090 R08: 0000000000000000 R09: 0000000000000000
[  794.408407][T27079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.408426][T27079] R13: 00007fd204d16038 R14: 00007fd204d15fa0 R15: 00007ffe43589138
[  794.408510][T27079]  </TASK>
[  794.454594][T27058] syz.0.6185 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  794.664600][T27058] CPU: 0 UID: 0 PID: 27058 Comm: syz.0.6185 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  794.664759][T27058] Tainted: [W]=WARN
[  794.664766][T27058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  794.664860][T27058] Call Trace:
[  794.664886][T27058]  <TASK>
[  794.664898][T27058]  __dump_stack+0x1d/0x30
[  794.664924][T27058]  dump_stack_lvl+0x95/0xd0
[  794.664945][T27058]  dump_stack+0x15/0x1b
[  794.664976][T27058]  dump_header+0x80/0x240
[  794.665030][T27058]  oom_kill_process+0x295/0x350
[  794.665081][T27058]  out_of_memory+0x981/0xbc0
[  794.665127][T27058]  try_charge_memcg+0x621/0xa00
[  794.665246][T27058]  charge_memcg+0x6d/0x120
[  794.665300][T27058]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[  794.665346][T27058]  swap_cache_alloc_folio+0x47b/0x5e0
[  794.665529][T27058]  swap_cluster_readahead+0x2b1/0x460
[  794.665576][T27058]  swapin_readahead+0xd8/0x8a0
[  794.665608][T27058]  ? _raw_spin_unlock+0x9/0x30
[  794.665638][T27058]  ? swap_put_entries_cluster+0x49c/0x4c0
[  794.665765][T27058]  ? __entry_text_end+0x11248/0x102179
[  794.665801][T27058]  ? __rcu_read_unlock+0x4e/0x70
[  794.665830][T27058]  ? swap_cache_get_folio+0x1f7/0x200
[  794.665871][T27058]  do_swap_page+0x2a2/0x1ec0
[  794.665905][T27058]  ? __css_rstat_updated+0xbb/0x280
[  794.666017][T27058]  ? __rcu_read_lock+0x36/0x50
[  794.666107][T27058]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  794.666140][T27058]  handle_mm_fault+0xb3c/0x2da0
[  794.666193][T27058]  do_user_addr_fault+0x634/0x1060
[  794.666314][T27058]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  794.666354][T27058]  ? trace_page_fault_user+0x1f/0xa0
[  794.666395][T27058]  exc_page_fault+0x62/0xa0
[  794.666433][T27058]  asm_exc_page_fault+0x26/0x30
[  794.666584][T27058] RIP: 0033:0x7fb0e356b80c
[  794.666606][T27058] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  794.666632][T27058] RSP: 002b:00007ffdf6a48be0 EFLAGS: 00010202
[  794.666654][T27058] RAX: 0000000000000000 RBX: 00007fb0e3926090 RCX: 000055555e29e808
[  794.666717][T27058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  794.666731][T27058] RBP: 00007fb0e3927da0 R08: 0000000000000000 R09: 0000000000000000
[  794.666745][T27058] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000c1f18
[  794.666760][T27058] R13: 00007fb0e392609c R14: 00000000000c1c9f R15: 00007fb0e3926090
[  794.666781][T27058]  </TASK>
[  794.835612][T27058] memory: usage 258060kB, limit 307200kB, failcnt 1892
[  795.040830][T27058] memory+swap: usage 48912kB, limit 9007199254740988kB, failcnt 0
[  795.075566][T27058] kmem: usage 7980kB, limit 9007199254740988kB, failcnt 0
[  795.104461][T27058] Memory cgroup stats for /syz0:
[  795.104718][T27058] cache 0
[  795.143632][T27058] rss 0
[  795.146854][T27058] shmem 0
[  795.150000][T27084] loop8: detected capacity change from 0 to 512
[  795.250552][T27058] mapped_file 0
[  795.254103][T27058] dirty 0
[  795.257155][T27058] writeback 0
[  795.260460][T27058] workingset_refault_anon 407
[  795.265207][T27058] workingset_refault_file 3323
[  795.270000][T27058] swap 12136448
[  795.273522][T27058] swapcached 85426176
[  795.285223][T27058] pgpgin 972280
[  795.288906][T27058] pgpgout 972279
[  795.292561][T27058] pgfault 848554
[  795.296513][T27058] pgmajfault 3153
[  795.300695][T27058] inactive_anon 0
[  795.304666][T27058] active_anon 4096
[  795.308422][T27058] inactive_file 0
[  795.312079][T27058] active_file 0
[  795.315926][T27058] unevictable 0
[  795.319430][T27058] hierarchical_memory_limit 314572800
[  795.325118][T27058] hierarchical_memsw_limit 9223372036854771712
[  795.331358][T27058] total_cache 0
[  795.335049][T27058] total_rss 0
[  795.338448][T27058] total_shmem 0
[  795.342020][T27058] total_mapped_file 0
[  795.346649][T27058] total_dirty 0
[  795.350146][T27058] total_writeback 0
[  795.353970][T27058] total_workingset_refault_anon 407
[  795.359925][T27058] total_workingset_refault_file 3323
[  795.377772][T27084] ------------[ cut here ]------------
[  795.383662][T27084] EA inode 11 i_nlink=2
[  795.383881][T27084] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.8.6193/27084
[  795.400632][T27084] Modules linked in:
[  795.405471][T27084] CPU: 0 UID: 0 PID: 27084 Comm: syz.8.6193 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  795.417111][T27084] Tainted: [W]=WARN
[  795.421491][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  795.436251][T27084] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330
[  795.446579][T27084] Code: 26 c8 96 ff 49 8d 7e 40 4c 8d 2d fb 85 5a 05 e8 26 a8 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a a3 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 40 d9 03 90 90 90 90 90 90 90
[  795.467191][T27084] RSP: 0018:ffffc900001ef7f8 EFLAGS: 00010246
[  795.474291][T27084] RAX: ffff8881020272b0 RBX: ffff88811b4ec180 RCX: ffffffff81c2af36
[  795.483020][T27084] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3520
[  795.492101][T27084] RBP: 000000000000000b R08: 000188811b4ec133 R09: 0000000000000000
[  795.500461][T27084] R10: ffffc900001ef728 R11: 0001c900001ef728 R12: ffff88811b4ec130
[  795.504872][T27058] total_swap 12136448
[  795.508911][T27084] R13: ffffffff871d3520 R14: ffff88811b4ec0e8 R15: 0000000000000001
[  795.512704][T27058] total_swapcached 85426176
[  795.520652][T27084] FS:  00007fd2034e76c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000
[  795.520722][T27084] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  795.540855][T27084] CR2: 00007f5c3d06b158 CR3: 000000013742a000 CR4: 00000000003506f0
[  795.548876][T27084] DR0: 0000200000000440 DR1: 0000000000000000 DR2: 0000000000000000
[  795.556886][T27084] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  795.564944][T27084] Call Trace:
[  795.565939][T27058] total_pgpgin 972280
[  795.568261][T27084]  <TASK>
[  795.572271][T27058] total_pgpgout 972279
[  795.575218][T27084]  ext4_xattr_inode_dec_ref_all+0x579/0x8d0
[  795.579342][T27058] total_pgfault 848554
[  795.579352][T27058] total_pgmajfault 3153
[  795.579360][T27058] total_inactive_anon 0
[  795.579368][T27058] total_active_anon 4096
[  795.579376][T27058] total_inactive_file 0
[  795.579426][T27058] total_active_file 0
[  795.585305][T27084]  ext4_xattr_delete_inode+0x6b5/0x790
[  795.589652][T27058] total_unevictable 0
[  795.593572][T27084]  ext4_evict_inode+0xb18/0xdf0
[  795.597791][T27058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[  795.601996][T27084]  ? __pfx_ext4_evict_inode+0x10/0x10
[  795.602030][T27084]  evict+0x2a5/0x510
[  795.606566][T27058] ,cpuset=
[  795.611360][T27084]  iput+0x430/0x5a0
[  795.616290][T27058] syz0
[  795.619854][T27084]  ext4_process_orphan+0x1a4/0x1c0
[  795.625066][T27058] ,mems_allowed=0
[  795.631575][T27084]  ext4_orphan_cleanup+0x6a6/0xa10
[  795.637272][T27058] ,oom_memcg=
[  795.640881][T27084]  ? ext4_register_li_request+0x14c/0x440
[  795.643965][T27058] /syz0
[  795.647775][T27084]  ext4_fill_super+0x33ab/0x3760
[  795.650586][T27058] ,task_memcg=
[  795.655623][T27084]  ? set_blocksize+0x14c/0x270
[  795.659526][T27058] /syz0
[  795.664421][T27084]  ? __pfx_ext4_fill_super+0x10/0x10
[  795.692651][T27058] ,task=syz.0.6185,pid=27058,uid=0
[  795.697718][T27084]  get_tree_bdev_flags+0x291/0x300
[  795.703196][T27058] Memory cgroup out of memory: Killed process 27058 (syz.0.6185) total-vm:96228kB, anon-rss:1240kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  795.707989][T27084]  ? __pfx_ext4_fill_super+0x10/0x10
[  795.745081][T27084]  get_tree_bdev+0x1f/0x30
[  795.750451][T27084]  ext4_get_tree+0x1c/0x30
[  795.756004][T27084]  vfs_get_tree+0x57/0x1d0
[  795.762432][T27084]  do_new_mount+0x288/0x8d0
[  795.770874][T27084]  path_mount+0x4ad/0xb90
[  795.776631][T27084]  __se_sys_mount+0x28c/0x2e0
[  795.783471][T27084]  __x64_sys_mount+0x67/0x80
[  795.788830][T27084]  x64_sys_call+0x2d61/0x3020
[  795.793864][T27084]  do_syscall_64+0x136/0x3c0
[  795.799152][T27084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.805741][T27084] RIP: 0033:0x7fd204a8f0ca
[  795.810561][T27084] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.833021][T27084] RSP: 002b:00007fd2034e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  795.842281][T27084] RAX: ffffffffffffffda RBX: 00007fd2034e6ee0 RCX: 00007fd204a8f0ca
[  795.851209][T27084] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fd2034e6ea0
[  795.859480][T27084] RBP: 00002000000009c0 R08: 00007fd2034e6ee0 R09: 0000000000800718
[  795.868030][T27084] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540
[  795.876541][T27084] R13: 00007fd2034e6ea0 R14: 000000000000048d R15: 0000200000000200
[  795.885131][T27084]  </TASK>
[  795.888791][T27084] ---[ end trace 0000000000000000 ]---
[  795.898861][T27084] EXT4-fs (loop8): 1 orphan inode deleted
[  795.918120][T27084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  796.073379][T27093] loop9: detected capacity change from 0 to 128
[  796.081345][T27091] bond0: (slave bond_slave_1): Releasing backup interface
[  796.168288][T27093] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  796.201516][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.297434][T27100] loop8: detected capacity change from 0 to 4096
[  796.356800][T27100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  796.396561][T24707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.422192][T27100] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  796.431642][T27100] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  796.445940][T27100] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6198'.
[  796.472128][T27107] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6201'.
[  796.482070][T27106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6202'.
[  796.508505][T27110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  796.521185][T27110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  796.642342][T27114] loop2: detected capacity change from 0 to 128
[  796.673475][T27114] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  796.733030][T27118] loop9: detected capacity change from 0 to 512
[  796.807258][T27125] bond0: (slave syz_tun): Releasing backup interface
[  796.838931][T27125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  797.155939][T26772] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.201191][T27134] loop8: detected capacity change from 0 to 256
[  797.446592][T27142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6214'.
[  797.461082][T27140] netlink: 'syz.1.6213': attribute type 9 has an invalid length.
[  797.473834][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  797.473854][   T28] audit: type=1400 audit(2000000178.040:8394): avc:  denied  { bind } for  pid=27143 comm="syz.9.6215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  797.488416][T27140] netlink: 'syz.1.6213': attribute type 6 has an invalid length.
[  797.499517][   T28] audit: type=1400 audit(2000000178.040:8395): avc:  denied  { name_bind } for  pid=27143 comm="syz.9.6215" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  797.499553][   T28] audit: type=1400 audit(2000000178.040:8396): avc:  denied  { node_bind } for  pid=27143 comm="syz.9.6215" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  797.560835][   T28] audit: type=1400 audit(2000000178.120:8397): avc:  denied  { read write } for  pid=27145 comm="syz.0.6216" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  797.584868][   T28] audit: type=1400 audit(2000000178.120:8398): avc:  denied  { open } for  pid=27145 comm="syz.0.6216" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  797.608639][   T28] audit: type=1400 audit(2000000178.120:8399): avc:  denied  { ioctl } for  pid=27145 comm="syz.0.6216" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  797.633971][T27140] loop1: detected capacity change from 0 to 512
[  797.642329][T27140] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  797.657229][T27140] 
@0Ù: renamed from bond_slave_1 (while UP)
[  797.667023][T27140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27140 comm=syz.1.6213
[  797.696972][T27149] loop1: detected capacity change from 0 to 128
[  797.711104][T27149] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  797.765133][   T28] audit: type=1400 audit(2000000178.320:8400): avc:  denied  { setopt } for  pid=27153 comm="syz.8.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  798.306968][   T28] audit: type=1400 audit(2000000178.710:8401): avc:  denied  { map } for  pid=27153 comm="syz.8.6219" path="socket:[89140]" dev="sockfs" ino=89140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  798.420848][T27168] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6223'.
[  798.511489][T27170] FAULT_INJECTION: forcing a failure.
[  798.511489][T27170] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  798.529098][T27170] CPU: 1 UID: 0 PID: 27170 Comm: syz.9.6224 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  798.529147][T27170] Tainted: [W]=WARN
[  798.529157][T27170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  798.529252][T27170] Call Trace:
[  798.529260][T27170]  <TASK>
[  798.529268][T27170]  __dump_stack+0x1d/0x30
[  798.529297][T27170]  dump_stack_lvl+0x95/0xd0
[  798.529395][T27170]  dump_stack+0x15/0x1b
[  798.529417][T27170]  should_fail_ex+0x25e/0x270
[  798.529544][T27170]  should_fail+0xb/0x20
[  798.529574][T27170]  should_fail_usercopy+0x1a/0x20
[  798.529607][T27170]  _copy_from_user+0x1c/0xb0
[  798.529641][T27170]  ___sys_sendmsg+0xc1/0x1e0
[  798.529706][T27170]  __x64_sys_sendmsg+0xd4/0x160
[  798.529740][T27170]  x64_sys_call+0x194c/0x3020
[  798.529771][T27170]  do_syscall_64+0x136/0x3c0
[  798.529863][T27170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.529938][T27170] RIP: 0033:0x7f347f66de59
[  798.529955][T27170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.529979][T27170] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  798.530023][T27170] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  798.530038][T27170] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  798.530051][T27170] RBP: 00007f347e0c7090 R08: 0000000000000000 R09: 0000000000000000
[  798.530142][T27170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.530155][T27170] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  798.530177][T27170]  </TASK>
[  798.941922][T27173] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6226'.
[  799.010768][T27177] netlink: 'syz.2.6227': attribute type 9 has an invalid length.
[  799.025534][T27177] netlink: 'syz.2.6227': attribute type 6 has an invalid length.
[  799.062920][T27177] loop2: detected capacity change from 0 to 512
[  799.082138][T27177] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  799.249362][T27177] 
@0Ù: renamed from bond_slave_1
[  799.276540][T27177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27177 comm=syz.2.6227
[  799.402204][T27189] set_capacity_and_notify: 1 callbacks suppressed
[  799.402227][T27189] loop2: detected capacity change from 0 to 128
[  799.440122][T27189] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  799.844139][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  799.862698][T27202] FAULT_INJECTION: forcing a failure.
[  799.862698][T27202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  799.891631][T27202] CPU: 1 UID: 0 PID: 27202 Comm: syz.1.6236 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  799.891747][T27202] Tainted: [W]=WARN
[  799.891756][T27202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  799.891775][T27202] Call Trace:
[  799.891783][T27202]  <TASK>
[  799.891791][T27202]  __dump_stack+0x1d/0x30
[  799.891818][T27202]  dump_stack_lvl+0x95/0xd0
[  799.891848][T27202]  dump_stack+0x15/0x1b
[  799.891946][T27202]  should_fail_ex+0x25e/0x270
[  799.891998][T27202]  should_fail+0xb/0x20
[  799.892042][T27202]  should_fail_usercopy+0x1a/0x20
[  799.892082][T27202]  _copy_to_user+0x20/0xa0
[  799.892107][T27202]  simple_read_from_buffer+0xb5/0x130
[  799.892144][T27202]  proc_fail_nth_read+0x10e/0x150
[  799.892168][T27202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  799.892229][T27202]  vfs_read+0x18e/0x7c0
[  799.892247][T27202]  ? __rcu_read_unlock+0x4e/0x70
[  799.892359][T27202]  ? __fget_files+0x184/0x1c0
[  799.892395][T27202]  ? mutex_lock+0x57/0x90
[  799.892428][T27202]  ksys_read+0xdc/0x1a0
[  799.892470][T27202]  __x64_sys_read+0x40/0x50
[  799.892493][T27202]  x64_sys_call+0x2886/0x3020
[  799.892562][T27202]  do_syscall_64+0x136/0x3c0
[  799.892649][T27202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.892679][T27202] RIP: 0033:0x7fea0640e68e
[  799.892697][T27202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  799.892717][T27202] RSP: 002b:00007fea04ea6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  799.892764][T27202] RAX: ffffffffffffffda RBX: 00007fea04ea76c0 RCX: 00007fea0640e68e
[  799.892784][T27202] RDX: 000000000000000f RSI: 00007fea04ea70a0 RDI: 0000000000000006
[  799.892800][T27202] RBP: 00007fea04ea7090 R08: 0000000000000000 R09: 0000000000000000
[  799.892817][T27202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  799.892834][T27202] R13: 00007fea066d6038 R14: 00007fea066d5fa0 R15: 00007ffe5f418f38
[  799.892859][T27202]  </TASK>
[  800.097570][T27203] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6233'.
[  800.106861][T27200] gtp8: entered promiscuous mode
[  800.124710][T27206] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6237'.
[  800.252867][T27211] netlink: 'syz.2.6240': attribute type 9 has an invalid length.
[  800.274704][T27211] netlink: 'syz.2.6240': attribute type 6 has an invalid length.
[  800.347996][T27211] loop2: detected capacity change from 0 to 512
[  800.389449][T27217] loop1: detected capacity change from 0 to 128
[  800.397603][T27217] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  800.411734][T27211] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  800.462012][T27194] syz.0.6233 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  800.476371][T27194] CPU: 0 UID: 0 PID: 27194 Comm: syz.0.6233 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  800.476432][T27194] Tainted: [W]=WARN
[  800.476440][T27194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  800.476454][T27194] Call Trace:
[  800.476470][T27194]  <TASK>
[  800.476482][T27194]  __dump_stack+0x1d/0x30
[  800.476586][T27194]  dump_stack_lvl+0x95/0xd0
[  800.476614][T27194]  dump_stack+0x15/0x1b
[  800.476635][T27194]  dump_header+0x80/0x240
[  800.476719][T27194]  oom_kill_process+0x295/0x350
[  800.476754][T27194]  out_of_memory+0x981/0xbc0
[  800.476832][T27194]  try_charge_memcg+0x621/0xa00
[  800.476878][T27194]  ? __rcu_read_unlock+0x4e/0x70
[  800.476959][T27194]  __memcg_kmem_charge_page+0x199/0x3a0
[  800.476999][T27194]  __alloc_frozen_pages_noprof+0x18a/0x350
[  800.477031][T27194]  alloc_pages_mpol+0xa9/0x1d0
[  800.477213][T27194]  alloc_pages_noprof+0x8f/0x140
[  800.477251][T27194]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  800.477323][T27194]  __kvmalloc_node_noprof+0x3a0/0x590
[  800.477353][T27194]  ? futex_hash_allocate+0x192/0x920
[  800.477393][T27194]  ? futex_hash_allocate+0x192/0x920
[  800.477420][T27194]  ? futex_hash_allocate+0x192/0x920
[  800.477489][T27194]  futex_hash_allocate+0x192/0x920
[  800.477520][T27194]  ? cap_task_prctl+0x13f/0x6b0
[  800.477565][T27194]  futex_hash_prctl+0xd8/0xf0
[  800.477586][T27194]  __se_sys_prctl+0x4f4/0x13b0
[  800.477651][T27194]  __x64_sys_prctl+0x67/0x80
[  800.477691][T27194]  x64_sys_call+0x2533/0x3020
[  800.477738][T27194]  do_syscall_64+0x136/0x3c0
[  800.477783][T27194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  800.477814][T27194] RIP: 0033:0x7fb0e369de59
[  800.477837][T27194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  800.477864][T27194] RSP: 002b:00007fb0e20f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  800.477885][T27194] RAX: ffffffffffffffda RBX: 00007fb0e3925fa0 RCX: 00007fb0e369de59
[  800.477900][T27194] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  800.477918][T27194] RBP: 00007fb0e3733e6f R08: 0000000000000000 R09: 0000000000000000
[  800.477981][T27194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  800.477994][T27194] R13: 00007fb0e3926038 R14: 00007fb0e3925fa0 R15: 00007ffdf6a48a78
[  800.478016][T27194]  </TASK>
[  800.478023][T27194] memory: usage 307200kB, limit 307200kB, failcnt 1956
[  800.816074][T27211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27211 comm=syz.2.6240
[  800.852999][T27194] memory+swap: usage 319048kB, limit 9007199254740988kB, failcnt 0
[  800.893940][   T28] audit: type=1400 audit(2000000181.320:8402): avc:  denied  { setopt } for  pid=27198 comm="syz.9.6235" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1
[  800.931803][T27194] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0
[  800.964763][T27194] Memory cgroup stats for /syz0:
[  800.965118][T27194] cache 0
[  800.995597][   T28] audit: type=1400 audit(2000000181.560:8403): avc:  denied  { execute } for  pid=27222 comm="syz.1.6243" name="file0" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  801.002909][T27194] rss 16384
[  801.061562][T27230] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6245'.
[  801.130542][T27194] shmem 0
[  801.133935][T27194] mapped_file 0
[  801.151104][T27194] dirty 0
[  801.164251][T27236] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6250'.
[  801.169623][T27194] writeback 0
[  801.202610][T27194] workingset_refault_anon 450
[  801.210987][T27194] workingset_refault_file 3323
[  801.218054][T27194] swap 12124160
[  801.222258][T27194] swapcached 85745664
[  801.228241][T27194] pgpgin 972739
[  801.247525][T27194] pgpgout 972734
[  801.251622][T27194] pgfault 849506
[  801.255767][T27194] pgmajfault 3189
[  801.259513][T27194] inactive_anon 0
[  801.265016][T27194] active_anon 12288
[  801.268863][T27194] inactive_file 0
[  801.272567][T27194] active_file 0
[  801.276521][T27194] unevictable 0
[  801.282238][T27194] hierarchical_memory_limit 314572800
[  801.288622][T27194] hierarchical_memsw_limit 9223372036854771712
[  801.301054][T27244] loop8: detected capacity change from 0 to 128
[  801.324281][T27244] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  801.337429][T27247] netlink: 'syz.9.6254': attribute type 9 has an invalid length.
[  801.357661][T27194] total_cache 0
[  801.371567][T27194] total_rss 16384
[  801.375929][T27247] netlink: 'syz.9.6254': attribute type 6 has an invalid length.
[  801.407951][T27194] total_shmem 0
[  801.430773][T27194] total_mapped_file 0
[  801.464230][T27194] total_dirty 0
[  801.492209][T27194] total_writeback 0
[  801.498477][T27257] veth1_to_bond: entered promiscuous mode
[  801.516014][T27194] total_workingset_refault_anon 450
[  801.529231][T27257] veth1_to_bond: entered allmulticast mode
[  801.538039][T27247] loop9: detected capacity change from 0 to 512
[  801.541365][T27256] veth1_to_bond: left allmulticast mode
[  801.550648][T27256] veth1_to_bond: left promiscuous mode
[  801.565690][T27194] total_workingset_refault_file 3323
[  801.571238][T27194] total_swap 12124160
[  801.575379][T27194] total_swapcached 85745664
[  801.581292][T27194] total_pgpgin 972739
[  801.585427][T27194] total_pgpgout 972734
[  801.589634][T27194] total_pgfault 849506
[  801.595931][T27194] total_pgmajfault 3189
[  801.601041][T27194] total_inactive_anon 0
[  801.605504][T27194] total_active_anon 12288
[  801.610967][T27194] total_inactive_file 0
[  801.615295][T27194] total_active_file 0
[  801.619503][T27194] total_unevictable 0
[  801.623742][T27194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6233,pid=27193,uid=0
[  801.645499][T27247] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  801.661288][T27194] Memory cgroup out of memory: Killed process 27193 (syz.0.6233) total-vm:96360kB, anon-rss:1344kB, file-rss:22592kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  801.797291][T27265] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6260'.
[  801.836456][T27269] loop8: detected capacity change from 0 to 128
[  801.879391][T27269] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  801.889353][T27247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27247 comm=syz.9.6254
[  801.958430][T27274] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6263'.
[  802.055290][T27283] loop5: detected capacity change from 0 to 2
[  802.097895][T27254] syz.1.6257 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  802.112037][T27254] CPU: 1 UID: 0 PID: 27254 Comm: syz.1.6257 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  802.112072][T27254] Tainted: [W]=WARN
[  802.112080][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.112094][T27254] Call Trace:
[  802.112104][T27254]  <TASK>
[  802.112116][T27254]  __dump_stack+0x1d/0x30
[  802.112150][T27254]  dump_stack_lvl+0x95/0xd0
[  802.112213][T27254]  dump_stack+0x15/0x1b
[  802.112331][T27254]  dump_header+0x80/0x240
[  802.112364][T27254]  oom_kill_process+0x295/0x350
[  802.112450][T27254]  out_of_memory+0x981/0xbc0
[  802.112485][T27254]  try_charge_memcg+0x621/0xa00
[  802.112580][T27254]  ? __rcu_read_unlock+0x4e/0x70
[  802.112617][T27254]  __memcg_kmem_charge_page+0x199/0x3a0
[  802.112650][T27254]  __alloc_frozen_pages_noprof+0x18a/0x350
[  802.112762][T27254]  alloc_pages_mpol+0xa9/0x1d0
[  802.112926][T27254]  alloc_pages_noprof+0x8f/0x140
[  802.112969][T27254]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  802.113020][T27254]  __kvmalloc_node_noprof+0x3a0/0x590
[  802.113128][T27254]  ? futex_hash_allocate+0x192/0x920
[  802.113157][T27254]  ? futex_hash_allocate+0x192/0x920
[  802.113213][T27254]  ? futex_hash_allocate+0x192/0x920
[  802.113245][T27254]  futex_hash_allocate+0x192/0x920
[  802.113275][T27254]  ? cap_task_prctl+0x13f/0x6b0
[  802.113360][T27254]  futex_hash_prctl+0xd8/0xf0
[  802.113388][T27254]  __se_sys_prctl+0x4f4/0x13b0
[  802.113497][T27254]  __x64_sys_prctl+0x67/0x80
[  802.113578][T27254]  x64_sys_call+0x2533/0x3020
[  802.113614][T27254]  do_syscall_64+0x136/0x3c0
[  802.113662][T27254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.113692][T27254] RIP: 0033:0x7fea0644de59
[  802.113745][T27254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.113830][T27254] RSP: 002b:00007fea04ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  802.113863][T27254] RAX: ffffffffffffffda RBX: 00007fea066d5fa0 RCX: 00007fea0644de59
[  802.113883][T27254] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  802.113902][T27254] RBP: 00007fea064e3e6f R08: 0000000000000000 R09: 0000000000000000
[  802.113919][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.113937][T27254] R13: 00007fea066d6038 R14: 00007fea066d5fa0 R15: 00007ffe5f418f38
[  802.113965][T27254]  </TASK>
[  802.114045][T27254] memory: usage 307200kB, limit 307200kB, failcnt 944
[  802.454394][T27254] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  802.462607][T27254] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  802.470629][T27294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6269'.
[  802.483302][T27254] Memory cgroup stats for /syz1:
[  802.485788][T27254] cache 0
[  802.495385][T27254] rss 0
[  802.498437][T27254] shmem 0
[  802.501654][T27254] mapped_file 0
[  802.505926][T27254] dirty 0
[  802.509012][T27254] writeback 0
[  802.512538][T27254] workingset_refault_anon 1788
[  802.547472][T27254] workingset_refault_file 4352
[  802.574542][T27254] swap 200704
[  802.578156][T27254] swapcached 12173312
[  802.581969][T27298] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6272'.
[  802.582785][T27254] pgpgin 145591
[  802.599245][T27254] pgpgout 145590
[  802.603221][T27254] pgfault 133197
[  802.607458][T27254] pgmajfault 399
[  802.611632][T27254] inactive_anon 0
[  802.616137][T27254] active_anon 4096
[  802.620864][T27254] inactive_file 0
[  802.625352][T27254] active_file 0
[  802.629248][T27254] unevictable 0
[  802.633057][T27254] hierarchical_memory_limit 314572800
[  802.639402][T27254] hierarchical_memsw_limit 9223372036854771712
[  802.646327][T27254] total_cache 0
[  802.650405][T27254] total_rss 0
[  802.654351][T27254] total_shmem 0
[  802.658243][T27254] total_mapped_file 0
[  802.662648][T27254] total_dirty 0
[  802.666835][T27254] total_writeback 0
[  802.671279][T27254] total_workingset_refault_anon 1788
[  802.677610][T27254] total_workingset_refault_file 4352
[  802.683330][T27254] total_swap 200704
[  802.688034][T27254] total_swapcached 12173312
[  802.693224][T27254] total_pgpgin 145591
[  802.697953][T27254] total_pgpgout 145590
[  802.702332][T27254] total_pgfault 133197
[  802.710613][T27254] total_pgmajfault 399
[  802.715399][T27254] total_inactive_anon 0
[  802.719847][T27254] total_active_anon 4096
[  802.724888][T27254] total_inactive_file 0
[  802.729290][T27254] total_active_file 0
[  802.733613][T27254] total_unevictable 0
[  802.738165][T27254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6257,pid=27253,uid=0
[  802.753889][T27254] Memory cgroup out of memory: Killed process 27253 (syz.1.6257) total-vm:96228kB, anon-rss:1236kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  802.853566][T27290] syz.0.6269 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  802.897623][T27303] netlink: 'syz.2.6274': attribute type 9 has an invalid length.
[  802.907085][T27290] CPU: 0 UID: 0 PID: 27290 Comm: syz.0.6269 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  802.907193][T27290] Tainted: [W]=WARN
[  802.907203][T27290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.907221][T27290] Call Trace:
[  802.907231][T27290]  <TASK>
[  802.907242][T27290]  __dump_stack+0x1d/0x30
[  802.907364][T27290]  dump_stack_lvl+0x95/0xd0
[  802.907466][T27290]  dump_stack+0x15/0x1b
[  802.907492][T27290]  dump_header+0x80/0x240
[  802.907523][T27290]  oom_kill_process+0x295/0x350
[  802.907622][T27290]  out_of_memory+0x981/0xbc0
[  802.907666][T27290]  try_charge_memcg+0x621/0xa00
[  802.907712][T27290]  ? __rcu_read_unlock+0x4e/0x70
[  802.907763][T27290]  __memcg_kmem_charge_page+0x199/0x3a0
[  802.907893][T27290]  __alloc_frozen_pages_noprof+0x18a/0x350
[  802.907934][T27290]  alloc_pages_mpol+0xa9/0x1d0
[  802.907979][T27290]  alloc_pages_noprof+0x8f/0x140
[  802.908018][T27290]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  802.908138][T27290]  __kvmalloc_node_noprof+0x3a0/0x590
[  802.908173][T27290]  ? futex_hash_allocate+0x192/0x920
[  802.908200][T27290]  ? futex_hash_allocate+0x192/0x920
[  802.908227][T27290]  ? futex_hash_allocate+0x192/0x920
[  802.908305][T27290]  futex_hash_allocate+0x192/0x920
[  802.908334][T27290]  ? cap_task_prctl+0x13f/0x6b0
[  802.908380][T27290]  futex_hash_prctl+0xd8/0xf0
[  802.908486][T27290]  __se_sys_prctl+0x4f4/0x13b0
[  802.908526][T27290]  __x64_sys_prctl+0x67/0x80
[  802.908629][T27290]  x64_sys_call+0x2533/0x3020
[  802.908662][T27290]  do_syscall_64+0x136/0x3c0
[  802.908773][T27290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.908801][T27290] RIP: 0033:0x7fb0e369de59
[  802.908826][T27290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.908870][T27290] RSP: 002b:00007fb0e20f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  802.908897][T27290] RAX: ffffffffffffffda RBX: 00007fb0e3925fa0 RCX: 00007fb0e369de59
[  802.908979][T27290] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  802.908993][T27290] RBP: 00007fb0e3733e6f R08: 0000000000000000 R09: 0000000000000000
[  802.909057][T27290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.909074][T27290] R13: 00007fb0e3926038 R14: 00007fb0e3925fa0 R15: 00007ffdf6a48a78
[  802.909102][T27290]  </TASK>
[  802.909219][T27290] memory: usage 306968kB, limit 307200kB, failcnt 2080
[  802.939077][T27303] netlink: 'syz.2.6274': attribute type 6 has an invalid length.
[  802.946910][T27290] memory+swap: usage 318816kB, limit 9007199254740988kB, failcnt 0
[  803.095772][T27303] loop2: detected capacity change from 0 to 512
[  803.101365][T27290] kmem: usage 306960kB, limit 9007199254740988kB, failcnt 0
[  803.188997][T27303] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  803.239041][T27290] Memory cgroup stats for /syz0:
[  803.239356][T27290] cache 0
[  803.251932][T27308] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6276'.
[  803.300549][T27290] rss 28672
[  803.303991][T27290] shmem 0
[  803.307180][T27290] mapped_file 0
[  803.310761][T27290] dirty 0
[  803.313800][T27290] writeback 0
[  803.317122][T27290] workingset_refault_anon 510
[  803.321863][T27290] workingset_refault_file 3323
[  803.326756][T27290] swap 12087296
[  803.330311][T27290] swapcached 86032384
[  803.334419][T27290] pgpgin 973670
[  803.337907][T27290] pgpgout 973657
[  803.341494][T27290] pgfault 851226
[  803.345085][T27290] pgmajfault 3231
[  803.348755][T27290] inactive_anon 0
[  803.352427][T27290] active_anon 53248
[  803.356268][T27290] inactive_file 0
[  803.359936][T27290] active_file 0
[  803.363479][T27290] unevictable 0
[  803.367044][T27290] hierarchical_memory_limit 314572800
[  803.372459][T27290] hierarchical_memsw_limit 9223372036854771712
[  803.378650][T27290] total_cache 0
[  803.382155][T27290] total_rss 28672
[  803.385843][T27290] total_shmem 0
[  803.389347][T27290] total_mapped_file 0
[  803.393369][T27290] total_dirty 0
[  803.396921][T27290] total_writeback 0
[  803.484482][T27290] total_workingset_refault_anon 510
[  803.489733][T27290] total_workingset_refault_file 3323
[  803.495137][T27290] total_swap 12087296
[  803.499241][T27290] total_swapcached 86032384
[  803.503804][T27290] total_pgpgin 973670
[  803.507835][T27290] total_pgpgout 973657
[  803.511959][T27290] total_pgfault 851226
[  803.516062][T27290] total_pgmajfault 3231
[  803.520241][T27290] total_inactive_anon 0
[  803.524465][T27290] total_active_anon 53248
[  803.528817][T27290] total_inactive_file 0
[  803.533021][T27290] total_active_file 0
[  803.537052][T27290] total_unevictable 0
[  803.541077][T27290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6269,pid=27289,uid=0
[  803.570885][T27290] Memory cgroup out of memory: Killed process 27289 (syz.0.6269) total-vm:94180kB, anon-rss:1344kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  803.614210][T27309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27309 comm=syz.2.6274
[  803.624976][T26772] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  803.637783][T26772] CPU: 0 UID: 0 PID: 26772 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  803.637841][T26772] Tainted: [W]=WARN
[  803.637850][T26772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  803.637868][T26772] Call Trace:
[  803.637877][T26772]  <TASK>
[  803.637888][T26772]  __dump_stack+0x1d/0x30
[  803.637979][T26772]  dump_stack_lvl+0x95/0xd0
[  803.638008][T26772]  dump_stack+0x15/0x1b
[  803.638031][T26772]  dump_header+0x80/0x240
[  803.638092][T26772]  oom_kill_process+0x295/0x350
[  803.638136][T26772]  out_of_memory+0x981/0xbc0
[  803.638179][T26772]  try_charge_memcg+0x621/0xa00
[  803.638302][T26772]  ? should_fail_ex+0x30/0x270
[  803.638348][T26772]  charge_memcg+0x6d/0x120
[  803.638421][T26772]  __mem_cgroup_charge+0x28/0xb0
[  803.638465][T26772]  filemap_add_folio+0x110/0x350
[  803.638541][T26772]  __filemap_get_folio_mpol+0x32e/0x840
[  803.638587][T26772]  filemap_fault+0x458/0xb60
[  803.638618][T26772]  handle_mm_fault+0x167a/0x2da0
[  803.638744][T26772]  do_user_addr_fault+0x634/0x1060
[  803.638867][T26772]  ? trace_page_fault_user+0x1f/0xa0
[  803.638954][T26772]  exc_page_fault+0x62/0xa0
[  803.638987][T26772]  asm_exc_page_fault+0x26/0x30
[  803.639022][T26772] RIP: 0033:0x7fd20495be74
[  803.639043][T26772] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 99 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 98 ee 00 48 01 d1
[  803.639107][T26772] RSP: 002b:00007ffe435894a0 EFLAGS: 00010206
[  803.639128][T26772] RAX: 0000001b2dc24000 RBX: 0000000000000036 RCX: 00000000000c40b8
[  803.639144][T26772] RDX: 0000000008ca0201 RSI: 00007ffe43589530 RDI: 0000000000000001
[  803.639158][T26772] RBP: 00007ffe435894dc R08: 0000000021871946 R09: 3fffffffffffffff
[  803.639173][T26772] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  803.639224][T26772] R13: 00000000000927c0 R14: 00000000000c3fb4 R15: 00007ffe43589530
[  803.639256][T26772]  </TASK>
[  803.639289][T26772] memory: usage 307200kB, limit 307200kB, failcnt 1261
[  803.904847][T26772] memory+swap: usage 38524kB, limit 9007199254740988kB, failcnt 0
[  803.915283][T26772] kmem: usage 38300kB, limit 9007199254740988kB, failcnt 0
[  803.928937][T26772] Memory cgroup stats for /syz8:
[  803.929418][T26772] cache 0
[  803.934418][T27323] netlink: 'syz.2.6281': attribute type 21 has an invalid length.
[  803.934442][T27323] IPv6: NLM_F_CREATE should be specified when creating new route
[  803.945904][T26772] rss 8192
[  803.978975][T26772] shmem 0
[  803.983502][T26772] mapped_file 0
[  804.002470][T27323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  804.002760][T27328] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6283'.
[  804.009765][T27323] IPv6: NLM_F_CREATE should be set when creating new route
[  804.026464][T27323] IPv6: NLM_F_CREATE should be set when creating new route
[  804.033904][T27323] IPv6: NLM_F_CREATE should be set when creating new route
[  804.051692][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  804.051712][   T28] audit: type=1400 audit(2000000184.610:8412): avc:  denied  { ioctl } for  pid=27322 comm="syz.2.6281" path="socket:[88433]" dev="sockfs" ino=88433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  804.057866][T26772] dirty 0
[  804.057877][T26772] writeback 0
[  804.057941][T26772] workingset_refault_anon 1598
[  804.126997][T27323] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6281'.
[  804.134389][T26772] workingset_refault_file 1027
[  804.163451][T26772] swap 167936
[  804.176964][T26772] swapcached 134057984
[  804.181797][T26772] pgpgin 352013
[  804.187009][T26772] pgpgout 352008
[  804.191041][T26772] pgfault 372859
[  804.198993][T26772] pgmajfault 229
[  804.202809][T26772] inactive_anon 16384
[  804.218819][T27336] FAULT_INJECTION: forcing a failure.
[  804.218819][T27336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  804.241737][T26772] active_anon 4096
[  804.253951][T26772] inactive_file 0
[  804.260906][T27336] CPU: 1 UID: 0 PID: 27336 Comm: syz.1.6285 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  804.260949][T27336] Tainted: [W]=WARN
[  804.261021][T27336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  804.261040][T27336] Call Trace:
[  804.261048][T27336]  <TASK>
[  804.261058][T27336]  __dump_stack+0x1d/0x30
[  804.261090][T27336]  dump_stack_lvl+0x95/0xd0
[  804.261119][T27336]  dump_stack+0x15/0x1b
[  804.261145][T27336]  should_fail_ex+0x25e/0x270
[  804.261347][T27336]  should_fail+0xb/0x20
[  804.261373][T27336]  should_fail_usercopy+0x1a/0x20
[  804.261469][T27336]  _copy_from_iter+0xcc/0xe70
[  804.261504][T27336]  ? __kmalloc_noprof+0x3e3/0x4a0
[  804.261528][T27336]  ? kernfs_fop_write_iter+0xd4/0x2e0
[  804.261559][T27336]  ? kernfs_fop_write_iter+0xd4/0x2e0
[  804.261732][T27336]  kernfs_fop_write_iter+0x117/0x2e0
[  804.261763][T27336]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  804.261788][T27336]  vfs_write+0x57d/0x990
[  804.261838][T27336]  ksys_write+0xdc/0x1a0
[  804.261865][T27336]  __x64_sys_write+0x40/0x50
[  804.261923][T27336]  x64_sys_call+0x27e1/0x3020
[  804.261947][T27336]  do_syscall_64+0x136/0x3c0
[  804.262066][T27336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.262089][T27336] RIP: 0033:0x7fea0644de59
[  804.262122][T27336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.262148][T27336] RSP: 002b:00007fea04ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  804.262178][T27336] RAX: ffffffffffffffda RBX: 00007fea066d5fa0 RCX: 00007fea0644de59
[  804.262193][T27336] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003
[  804.262254][T27336] RBP: 00007fea04ea7090 R08: 0000000000000000 R09: 0000000000000000
[  804.262272][T27336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  804.262289][T27336] R13: 00007fea066d6038 R14: 00007fea066d5fa0 R15: 00007ffe5f418f38
[  804.262316][T27336]  </TASK>
[  804.262568][T26772] active_file 0
[  804.312599][   T28] audit: type=1400 audit(2000000184.870:8413): avc:  denied  { create } for  pid=27335 comm="syz.1.6285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  804.364412][T26772] unevictable 0
[  804.419793][   T28] audit: type=1400 audit(2000000184.980:8414): avc:  denied  { bind } for  pid=27337 comm="syz.2.6286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  804.450529][T26772] hierarchical_memory_limit 314572800
[  804.559548][T27343] loop1: detected capacity change from 0 to 512
[  804.571279][T27343] EXT4-fs (loop1): orphan cleanup on readonly fs
[  804.582068][T27343] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[  804.600161][T27343] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  804.616009][T26772] hierarchical_memsw_limit 9223372036854771712
[  804.622405][T27343] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  804.646027][T26772] total_cache 0
[  804.651034][T27343] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6287: couldn't read orphan inode 26 (err -116)
[  804.671539][T26772] total_rss 8192
[  804.679722][T27343] loop1: lost filesystem error report for type 5 error -116
[  804.679943][T27343] EXT4-fs (loop1): Remounting filesystem read-only
[  804.687427][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  804.687446][    C1] EXT4-fs (loop1): initial error at time 2000000185: ext4_orphan_get:1404
[  804.687478][    C1] EXT4-fs (loop1): last error at time 2000000185: ext4_orphan_get:1404
[  804.724569][T26772] total_shmem 0
[  804.734660][T26772] total_mapped_file 0
[  804.742087][T26772] total_dirty 0
[  804.751943][T26772] total_writeback 0
[  804.757524][T26772] total_workingset_refault_anon 1598
[  804.763039][T26772] total_workingset_refault_file 1027
[  804.768710][T26772] total_swap 167936
[  804.772641][T26772] total_swapcached 134057984
[  804.777903][T26772] total_pgpgin 352141
[  804.782417][T27343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  804.796063][T26772] total_pgpgout 352136
[  804.800276][T26772] total_pgfault 372867
[  804.804608][T26772] total_pgmajfault 230
[  804.809260][   T28] audit: type=1326 audit(2000000185.370:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27345 comm="syz.9.6288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f347f66de59 code=0x0
[  804.812025][T26772] total_inactive_anon 16384
[  804.878393][T26772] total_active_anon 4096
[  804.896832][T26772] total_inactive_file 0
[  804.904273][T26772] total_active_file 0
[  804.912489][T26772] total_unevictable 0
[  804.919780][T26772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6271,pid=27295,uid=0
[  804.937076][T27349] loop2: detected capacity change from 0 to 128
[  804.938209][T27347] gtp2: entered promiscuous mode
[  804.960531][T27349] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  804.978085][T26772] Memory cgroup out of memory: OOM victim 27295 (syz.8.6271) is already exiting. Skip killing the task
[  805.001326][T27351] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6287'.
[  805.076130][T27355] loop2: detected capacity change from 0 to 512
[  805.097199][T27355] EXT4-fs (loop2): orphan cleanup on readonly fs
[  805.106424][T27355] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[  805.118646][T27355] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  805.145554][T27355] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  805.228136][T27355] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6290: couldn't read orphan inode 26 (err -116)
[  805.241249][T27358] netlink: 'syz.8.6291': attribute type 9 has an invalid length.
[  805.253947][T27358] netlink: 'syz.8.6291': attribute type 6 has an invalid length.
[  805.277765][T27355] loop2: lost filesystem error report for type 5 error -116
[  805.278919][T27355] EXT4-fs (loop2): Remounting filesystem read-only
[  805.286398][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  805.286416][    C1] EXT4-fs (loop2): initial error at time 2000000185: ext4_orphan_get:1404
[  805.286436][    C1] EXT4-fs (loop2): last error at time 2000000185: ext4_orphan_get:1404
[  805.324366][T27355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  805.425798][T27358] loop8: detected capacity change from 0 to 512
[  805.459594][T27364] gtp2: entered promiscuous mode
[  805.464457][T27358] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  805.497663][T27367] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6290'.
[  805.588410][T27370] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6295'.
[  805.598137][T27358] 
@0Ù: renamed from bond_slave_1 (while UP)
[  805.642295][T27358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27358 comm=syz.8.6291
[  805.732933][T27372] FAULT_INJECTION: forcing a failure.
[  805.732933][T27372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  805.746317][T27372] CPU: 1 UID: 0 PID: 27372 Comm: syz.0.6297 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  805.746412][T27372] Tainted: [W]=WARN
[  805.746420][T27372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  805.746438][T27372] Call Trace:
[  805.746448][T27372]  <TASK>
[  805.746459][T27372]  __dump_stack+0x1d/0x30
[  805.746491][T27372]  dump_stack_lvl+0x95/0xd0
[  805.746581][T27372]  dump_stack+0x15/0x1b
[  805.746639][T27372]  should_fail_ex+0x25e/0x270
[  805.746711][T27372]  should_fail+0xb/0x20
[  805.746744][T27372]  should_fail_usercopy+0x1a/0x20
[  805.746811][T27372]  _copy_from_iter+0x318/0xe70
[  805.746846][T27372]  ? __alloc_skb+0x511/0x6f0
[  805.746880][T27372]  ? __alloc_skb+0x205/0x6f0
[  805.746919][T27372]  netlink_sendmsg+0x4a4/0x6f0
[  805.746946][T27372]  ? __pfx_netlink_sendmsg+0x10/0x10
[  805.746974][T27372]  ____sys_sendmsg+0x532/0x580
[  805.747044][T27372]  ___sys_sendmsg+0x195/0x1e0
[  805.747098][T27372]  __x64_sys_sendmsg+0xd4/0x160
[  805.747133][T27372]  x64_sys_call+0x194c/0x3020
[  805.747194][T27372]  do_syscall_64+0x136/0x3c0
[  805.747239][T27372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.747262][T27372] RIP: 0033:0x7fb0e369de59
[  805.747284][T27372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  805.747325][T27372] RSP: 002b:00007fb0e20f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  805.747346][T27372] RAX: ffffffffffffffda RBX: 00007fb0e3925fa0 RCX: 00007fb0e369de59
[  805.747361][T27372] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  805.747374][T27372] RBP: 00007fb0e20f7090 R08: 0000000000000000 R09: 0000000000000000
[  805.747387][T27372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  805.747404][T27372] R13: 00007fb0e3926038 R14: 00007fb0e3925fa0 R15: 00007ffdf6a48a78
[  805.747456][T27372]  </TASK>
[  805.968808][T27376] FAULT_INJECTION: forcing a failure.
[  805.968808][T27376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  805.993801][T27376] CPU: 1 UID: 0 PID: 27376 Comm: syz.9.6296 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  805.993847][T27376] Tainted: [W]=WARN
[  805.993857][T27376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  805.993871][T27376] Call Trace:
[  805.993878][T27376]  <TASK>
[  805.993887][T27376]  __dump_stack+0x1d/0x30
[  805.993938][T27376]  dump_stack_lvl+0x95/0xd0
[  805.993963][T27376]  dump_stack+0x15/0x1b
[  805.993990][T27376]  should_fail_ex+0x25e/0x270
[  805.994066][T27376]  should_fail+0xb/0x20
[  805.994096][T27376]  should_fail_usercopy+0x1a/0x20
[  805.994137][T27376]  _copy_to_user+0x20/0xa0
[  805.994208][T27376]  simple_read_from_buffer+0xb5/0x130
[  805.994239][T27376]  proc_fail_nth_read+0x10e/0x150
[  805.994262][T27376]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  805.994283][T27376]  vfs_read+0x18e/0x7c0
[  805.994364][T27376]  ? __rcu_read_unlock+0x4e/0x70
[  805.994501][T27376]  ? __fget_files+0x184/0x1c0
[  805.994527][T27376]  ? mutex_lock+0x57/0x90
[  805.994561][T27376]  ksys_read+0xdc/0x1a0
[  805.994587][T27376]  __x64_sys_read+0x40/0x50
[  805.994612][T27376]  x64_sys_call+0x2886/0x3020
[  805.994671][T27376]  do_syscall_64+0x136/0x3c0
[  805.994764][T27376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.994794][T27376] RIP: 0033:0x7f347f62e68e
[  805.994810][T27376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  805.994867][T27376] RSP: 002b:00007f347e0c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  805.994895][T27376] RAX: ffffffffffffffda RBX: 00007f347e0c76c0 RCX: 00007f347f62e68e
[  805.994914][T27376] RDX: 000000000000000f RSI: 00007f347e0c70a0 RDI: 0000000000000004
[  805.994933][T27376] RBP: 00007f347e0c7090 R08: 0000000000000000 R09: 0000000000000000
[  805.994951][T27376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  805.994967][T27376] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  805.994994][T27376]  </TASK>
[  807.705670][   T28] audit: type=1400 audit(2000000188.250:8416): avc:  denied  { mmap_zero } for  pid=27373 comm="syz.0.6299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  808.446936][T25675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.500410][T27395] FAULT_INJECTION: forcing a failure.
[  808.500410][T27395] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  808.538052][T24707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.552022][T27395] CPU: 0 UID: 0 PID: 27395 Comm: syz.9.6306 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  808.552127][T27395] Tainted: [W]=WARN
[  808.552137][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  808.552215][T27395] Call Trace:
[  808.552225][T27395]  <TASK>
[  808.552237][T27395]  __dump_stack+0x1d/0x30
[  808.552267][T27395]  dump_stack_lvl+0x95/0xd0
[  808.552289][T27395]  dump_stack+0x15/0x1b
[  808.552309][T27395]  should_fail_ex+0x25e/0x270
[  808.552342][T27395]  should_fail+0xb/0x20
[  808.552378][T27395]  should_fail_usercopy+0x1a/0x20
[  808.552422][T27395]  _copy_to_iter+0x37f/0xea0
[  808.552466][T27395]  ? ktime_expiry_to_cycles+0x1f1/0x210
[  808.552505][T27395]  ? __skb_try_recv_from_queue+0x3d6/0x440
[  808.552629][T27395]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  808.552669][T27395]  __skb_datagram_iter+0xc6/0x680
[  808.552721][T27395]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  808.552765][T27395]  skb_copy_datagram_iter+0x3f/0xf0
[  808.552865][T27395]  netlink_recvmsg+0x1a8/0x550
[  808.552901][T27395]  ? __pfx_netlink_recvmsg+0x10/0x10
[  808.552949][T27395]  sock_recvmsg+0xf5/0x120
[  808.552975][T27395]  ____sys_recvmsg+0xf5/0x280
[  808.553024][T27395]  ___sys_recvmsg+0x11f/0x3a0
[  808.553071][T27395]  do_recvmmsg+0x1e5/0x560
[  808.553122][T27395]  ? get_timespec64+0xd2/0x100
[  808.553160][T27395]  __x64_sys_recvmmsg+0xfb/0x170
[  808.553249][T27395]  x64_sys_call+0x80f/0x3020
[  808.553276][T27395]  do_syscall_64+0x136/0x3c0
[  808.553421][T27395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.553447][T27395] RIP: 0033:0x7f347f66de59
[  808.553464][T27395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  808.553488][T27395] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  808.553516][T27395] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  808.553594][T27395] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  808.553624][T27395] RBP: 00007f347e0c7090 R08: 0000200000003700 R09: 0000000000000000
[  808.553665][T27395] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[  808.553756][T27395] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  808.553779][T27395]  </TASK>
[  808.809642][T27401] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6307'.
[  808.828398][T27402] netlink: 'syz.9.6309': attribute type 9 has an invalid length.
[  808.851353][T27402] netlink: 'syz.9.6309': attribute type 6 has an invalid length.
[  809.039656][T27402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27402 comm=syz.9.6309
[  809.093764][   T28] audit: type=1400 audit(2000000189.650:8417): avc:  denied  { bind } for  pid=27407 comm="syz.2.6311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  809.156110][   T28] audit: type=1400 audit(2000000189.650:8418): avc:  denied  { name_bind } for  pid=27407 comm="syz.2.6311" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  809.203881][   T28] audit: type=1400 audit(2000000189.650:8419): avc:  denied  { node_bind } for  pid=27407 comm="syz.2.6311" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  809.339124][T27422] gtp4: entered promiscuous mode
[  809.349755][T27422] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6312'.
[  809.375333][T27426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6315'.
[  809.535066][T27436] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6320'.
[  809.551084][   T28] audit: type=1400 audit(2000000190.110:8420): avc:  denied  { ioctl } for  pid=27433 comm="syz.0.6319" path="socket:[89966]" dev="sockfs" ino=89966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  809.620884][T27441] netlink: 'syz.1.6322': attribute type 9 has an invalid length.
[  809.647156][T27441] netlink: 'syz.1.6322': attribute type 6 has an invalid length.
[  809.734991][T27416] syz.9.6312 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  809.767783][T27416] CPU: 0 UID: 0 PID: 27416 Comm: syz.9.6312 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  809.767820][T27416] Tainted: [W]=WARN
[  809.767849][T27416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  809.767868][T27416] Call Trace:
[  809.767876][T27416]  <TASK>
[  809.767885][T27416]  __dump_stack+0x1d/0x30
[  809.767919][T27416]  dump_stack_lvl+0x95/0xd0
[  809.767948][T27416]  dump_stack+0x15/0x1b
[  809.768010][T27416]  dump_header+0x80/0x240
[  809.768033][T27416]  oom_kill_process+0x295/0x350
[  809.768158][T27416]  out_of_memory+0x981/0xbc0
[  809.768198][T27416]  try_charge_memcg+0x621/0xa00
[  809.768311][T27416]  ? __rcu_read_unlock+0x4e/0x70
[  809.768387][T27416]  __memcg_kmem_charge_page+0x199/0x3a0
[  809.768428][T27416]  __alloc_frozen_pages_noprof+0x18a/0x350
[  809.768498][T27416]  alloc_pages_mpol+0xa9/0x1d0
[  809.768543][T27416]  alloc_pages_noprof+0x8f/0x140
[  809.768614][T27416]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  809.768654][T27416]  __kvmalloc_node_noprof+0x3a0/0x590
[  809.768689][T27416]  ? futex_hash_allocate+0x192/0x920
[  809.768771][T27416]  ? futex_hash_allocate+0x192/0x920
[  809.768799][T27416]  ? futex_hash_allocate+0x192/0x920
[  809.768859][T27416]  futex_hash_allocate+0x192/0x920
[  809.768892][T27416]  ? cap_task_prctl+0x13f/0x6b0
[  809.768940][T27416]  futex_hash_prctl+0xd8/0xf0
[  809.769111][T27416]  __se_sys_prctl+0x4f4/0x13b0
[  809.769143][T27416]  __x64_sys_prctl+0x67/0x80
[  809.769188][T27416]  x64_sys_call+0x2533/0x3020
[  809.769235][T27416]  do_syscall_64+0x136/0x3c0
[  809.769285][T27416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.769312][T27416] RIP: 0033:0x7f347f66de59
[  809.769336][T27416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  809.769453][T27416] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  809.769482][T27416] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  809.769503][T27416] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  809.769520][T27416] RBP: 00007f347f703e6f R08: 0000000000000000 R09: 0000000000000000
[  809.769538][T27416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  809.769556][T27416] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  809.769586][T27416]  </TASK>
[  809.770920][T27416] memory: usage 307200kB, limit 307200kB, failcnt 361
[  809.775778][T27441] loop1: detected capacity change from 0 to 512
[  809.799142][T27416] memory+swap: usage 373408kB, limit 9007199254740988kB, failcnt 0
[  809.802937][T27441] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  809.846092][T27416] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  810.049404][T27416] Memory cgroup stats for /syz9:
[  810.049698][T27416] cache 0
[  810.057908][T27416] rss 0
[  810.060708][T27416] shmem 0
[  810.063659][T27416] mapped_file 0
[  810.067164][T27416] dirty 0
[  810.070160][T27416] writeback 0
[  810.073563][T27416] workingset_refault_anon 114
[  810.079872][T27416] workingset_refault_file 0
[  810.084598][T27416] swap 67796992
[  810.088089][T27416] swapcached 100585472
[  810.092181][T27416] pgpgin 284173
[  810.095698][T27416] pgpgout 284173
[  810.099358][T27416] pgfault 277092
[  810.102957][T27416] pgmajfault 36
[  810.106478][T27416] inactive_anon 0
[  810.110190][T27416] active_anon 0
[  810.115752][T27416] inactive_file 0
[  810.121028][T27416] active_file 0
[  810.124651][T27416] unevictable 0
[  810.130871][T27416] hierarchical_memory_limit 314572800
[  810.136416][T27416] hierarchical_memsw_limit 9223372036854771712
[  810.142592][T27416] total_cache 0
[  810.146118][T27416] total_rss 0
[  810.149433][T27416] total_shmem 0
[  810.152929][T27416] total_mapped_file 0
[  810.171480][T27441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27441 comm=syz.1.6322
[  810.174296][T27416] total_dirty 0
[  810.197476][T27416] total_writeback 0
[  810.201418][T27416] total_workingset_refault_anon 114
[  810.206821][T27416] total_workingset_refault_file 0
[  810.211864][T27416] total_swap 67796992
[  810.215955][T27416] total_swapcached 100585472
[  810.220562][T27416] total_pgpgin 284173
[  810.225458][T27416] total_pgpgout 284173
[  810.229623][T27416] total_pgfault 277092
[  810.233819][T27416] total_pgmajfault 36
[  810.243677][T27416] total_inactive_anon 0
[  810.248245][T27416] total_active_anon 0
[  810.252375][T27416] total_inactive_file 0
[  810.256936][T27416] total_active_file 0
[  810.261030][T27416] total_unevictable 0
[  810.265437][T27416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6312,pid=27415,uid=0
[  810.281084][T27416] Memory cgroup out of memory: Killed process 27415 (syz.9.6312) total-vm:96228kB, anon-rss:1240kB, file-rss:22652kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  810.658791][T27458] loop8: detected capacity change from 0 to 512
[  810.665619][T27458] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  810.684893][T27463] loop2: detected capacity change from 0 to 1024
[  810.729580][T27469] loop1: detected capacity change from 0 to 512
[  810.741670][T27469] EXT4-fs (loop1): orphan cleanup on readonly fs
[  810.748727][T27469] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[  810.754437][T27468] pim6reg: entered allmulticast mode
[  810.773512][T27469] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  810.790309][T27458] netlink: 'syz.8.6327': attribute type 32 has an invalid length.
[  810.790495][T27469] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  810.805703][T27463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  810.818779][T27463] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  810.829811][T27469] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6331: couldn't read orphan inode 26 (err -116)
[  810.842147][T27469] loop1: lost filesystem error report for type 5 error -116
[  810.845462][T27469] EXT4-fs (loop1): Remounting filesystem read-only
[  810.863190][   T28] audit: type=1400 audit(2000000191.400:8421): avc:  denied  { write } for  pid=27460 comm="syz.2.6328" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  810.864062][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  810.891822][    C1] EXT4-fs (loop1): initial error at time 2000000191: ext4_orphan_get:1404
[  810.893092][T27469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  810.900420][    C1] EXT4-fs (loop1): last error at time 2000000191: ext4_orphan_get:1404
[  810.933609][T27463] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.6328: lblock 3 mapped to illegal pblock 3 (length 3)
[  810.950043][T27479] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6334'.
[  810.961734][T27463] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  810.974034][T27463] EXT4-fs (loop2): This should not happen!! Data will be lost
[  810.974034][T27463] 
[  810.987580][   T28] audit: type=1400 audit(2000000191.530:8422): avc:  denied  { lock } for  pid=27478 comm="syz.8.6334" path="socket:[90089]" dev="sockfs" ino=90089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  811.011767][   T28] audit: type=1400 audit(2000000191.530:8423): avc:  denied  { create } for  pid=27478 comm="syz.8.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  811.031882][   T28] audit: type=1400 audit(2000000191.530:8424): avc:  denied  { sys_admin } for  pid=27478 comm="syz.8.6334" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  811.086349][T27463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6328: bg 0: block 112: padding at end of block bitmap is not set
[  811.138794][T27485] gtp3: entered promiscuous mode
[  811.145414][   T28] audit: type=1400 audit(2000000191.630:8425): avc:  denied  { append } for  pid=27460 comm="syz.2.6328" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  811.181615][T27463] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28
[  811.199593][T27485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6331'.
[  811.212577][T27463] EXT4-fs (loop2): This should not happen!! Data will be lost
[  811.212577][T27463] 
[  811.213487][T27479] VFS: Mount too revealing
[  811.241591][T27463] EXT4-fs (loop2): Total free blocks count 0
[  811.263944][T27463] EXT4-fs (loop2): Free/Dirty block details
[  811.270018][T27463] EXT4-fs (loop2): free_blocks=0
[  811.274992][T27463] EXT4-fs (loop2): dirty_blocks=64
[  811.280165][T27463] EXT4-fs (loop2): Block reservation details
[  811.286403][ T4724] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8)
[  811.314516][T27463] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.6328: lblock 0 mapped to illegal pblock 0 (length 1)
[  811.422358][T27491] netlink: 'syz.8.6336': attribute type 9 has an invalid length.
[  811.430953][T27491] netlink: 'syz.8.6336': attribute type 6 has an invalid length.
[  811.475365][T27491] loop8: detected capacity change from 0 to 512
[  811.480997][T27496] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6339'.
[  811.495711][T25675] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  811.513928][T27491] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  811.559721][T27469] syz.1.6331 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  811.632491][T27505] FAULT_INJECTION: forcing a failure.
[  811.632491][T27505] name failslab, interval 1, probability 0, space 0, times 0
[  811.677375][T27505] CPU: 0 UID: 0 PID: 27505 Comm: syz.9.6342 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  811.677480][T27505] Tainted: [W]=WARN
[  811.677487][T27505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  811.677511][T27505] Call Trace:
[  811.677521][T27505]  <TASK>
[  811.677560][T27505]  __dump_stack+0x1d/0x30
[  811.677594][T27505]  dump_stack_lvl+0x95/0xd0
[  811.677625][T27505]  dump_stack+0x15/0x1b
[  811.677710][T27505]  should_fail_ex+0x25e/0x270
[  811.677751][T27505]  should_failslab+0x8c/0xb0
[  811.677784][T27505]  kmem_cache_alloc_node_noprof+0x85/0x3d0
[  811.677857][T27505]  ? __alloc_skb+0x2db/0x6f0
[  811.677889][T27505]  ? __alloc_skb+0x2db/0x6f0
[  811.677926][T27505]  __alloc_skb+0x2db/0x6f0
[  811.677960][T27505]  ? __alloc_skb+0x205/0x6f0
[  811.678046][T27505]  netlink_alloc_large_skb+0xbf/0xf0
[  811.678088][T27505]  netlink_sendmsg+0x40c/0x6f0
[  811.678124][T27505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  811.678224][T27505]  ____sys_sendmsg+0x532/0x580
[  811.678268][T27505]  ___sys_sendmsg+0x195/0x1e0
[  811.678324][T27505]  __x64_sys_sendmsg+0xd4/0x160
[  811.678404][T27505]  x64_sys_call+0x194c/0x3020
[  811.678433][T27505]  do_syscall_64+0x136/0x3c0
[  811.678584][T27505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.678615][T27505] RIP: 0033:0x7f347f66de59
[  811.678637][T27505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.678663][T27505] RSP: 002b:00007f347e0c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  811.678751][T27505] RAX: ffffffffffffffda RBX: 00007f347f8f5fa0 RCX: 00007f347f66de59
[  811.678769][T27505] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000005
[  811.678788][T27505] RBP: 00007f347e0c7090 R08: 0000000000000000 R09: 0000000000000000
[  811.678805][T27505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.678821][T27505] R13: 00007f347f8f6038 R14: 00007f347f8f5fa0 R15: 00007ffd33ec26d8
[  811.678847][T27505]  </TASK>
[  811.682305][T27503] FAULT_INJECTION: forcing a failure.
[  811.682305][T27503] name failslab, interval 1, probability 0, space 0, times 0
[  811.801622][T27469] CPU: 0 UID: 0 PID: 27469 Comm: syz.1.6331 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  811.801745][T27469] Tainted: [W]=WARN
[  811.801782][T27469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  811.801842][T27469] Call Trace:
[  811.801879][T27469]  <TASK>
[  811.801919][T27469]  __dump_stack+0x1d/0x30
[  811.802089][T27469]  dump_stack_lvl+0x95/0xd0
[  811.802165][T27469]  dump_stack+0x15/0x1b
[  811.802230][T27469]  dump_header+0x80/0x240
[  811.802305][T27469]  oom_kill_process+0x295/0x350
[  811.802553][T27469]  out_of_memory+0x981/0xbc0
[  811.802668][T27469]  try_charge_memcg+0x621/0xa00
[  811.802789][T27469]  ? __rcu_read_unlock+0x4e/0x70
[  811.802980][T27469]  __memcg_kmem_charge_page+0x199/0x3a0
[  811.803090][T27469]  __alloc_frozen_pages_noprof+0x18a/0x350
[  811.803231][T27469]  alloc_pages_mpol+0xa9/0x1d0
[  811.803410][T27469]  alloc_pages_noprof+0x8f/0x140
[  811.803546][T27469]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  811.803697][T27469]  __kvmalloc_node_noprof+0x3a0/0x590
[  811.803787][T27469]  ? futex_hash_allocate+0x192/0x920
[  811.803868][T27469]  ? futex_hash_allocate+0x192/0x920
[  811.803994][T27469]  ? futex_hash_allocate+0x192/0x920
[  811.804107][T27469]  futex_hash_allocate+0x192/0x920
[  811.804189][T27469]  ? cap_task_prctl+0x13f/0x6b0
[  811.804376][T27469]  futex_hash_prctl+0xd8/0xf0
[  811.804438][T27469]  __se_sys_prctl+0x4f4/0x13b0
[  811.804601][T27469]  __x64_sys_prctl+0x67/0x80
[  811.804715][T27469]  x64_sys_call+0x2533/0x3020
[  811.804802][T27469]  do_syscall_64+0x136/0x3c0
[  811.804912][T27469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.804959][T27469] RIP: 0033:0x7fea0644de59
[  811.805036][T27469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.805183][T27469] RSP: 002b:00007fea04ea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  811.805251][T27469] RAX: ffffffffffffffda RBX: 00007fea066d5fa0 RCX: 00007fea0644de59
[  811.805305][T27469] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  811.805350][T27469] RBP: 00007fea064e3e6f R08: 0000000000000000 R09: 0000000000000000
[  811.805534][T27469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  811.805589][T27469] R13: 00007fea066d6038 R14: 00007fea066d5fa0 R15: 00007ffe5f418f38
[  811.805656][T27469]  </TASK>
[  811.907008][T27469] memory: usage 138720kB, limit 307200kB, failcnt 1267
[  812.143250][T27503] CPU: 0 UID: 0 PID: 27503 Comm: syz.2.6340 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  812.143291][T27503] Tainted: [W]=WARN
[  812.143301][T27503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  812.143334][T27503] Call Trace:
[  812.143343][T27503]  <TASK>
[  812.143353][T27503]  __dump_stack+0x1d/0x30
[  812.143378][T27503]  dump_stack_lvl+0x95/0xd0
[  812.143405][T27503]  dump_stack+0x15/0x1b
[  812.143431][T27503]  should_fail_ex+0x25e/0x270
[  812.143518][T27503]  ? page_pool_create_percpu+0x49/0x680
[  812.143595][T27503]  should_failslab+0x8c/0xb0
[  812.143619][T27503]  __kmalloc_cache_node_noprof+0x81/0x3e0
[  812.143669][T27503]  ? page_pool_create_percpu+0x49/0x680
[  812.143709][T27503]  ? __kvmalloc_node_noprof+0x306/0x590
[  812.143748][T27503]  page_pool_create_percpu+0x49/0x680
[  812.143815][T27503]  page_pool_create+0x1a/0x30
[  812.143842][T27503]  bpf_test_run_xdp_live+0x1a5/0x1330
[  812.143870][T27503]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  812.143916][T27503]  ? __pfx_autoremove_wake_function+0x10/0x10
[  812.144018][T27503]  ? mutex_unlock+0x4e/0x90
[  812.144045][T27503]  ? 0xffffffffa0205240
[  812.144064][T27503]  ? bpf_dispatcher_change_prog+0x7b9/0x800
[  812.144172][T27503]  ? 0xffffffffa0205240
[  812.144284][T27503]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  812.144321][T27503]  bpf_prog_test_run_xdp+0x559/0x9e0
[  812.144346][T27503]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  812.144375][T27503]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  812.144429][T27503]  bpf_prog_test_run+0x208/0x340
[  812.144488][T27503]  __sys_bpf+0x8da/0xc30
[  812.144535][T27503]  ? vfs_write+0x770/0x990
[  812.144611][T27503]  __x64_sys_bpf+0x69/0x80
[  812.144647][T27503]  x64_sys_call+0x10cb/0x3020
[  812.144678][T27503]  do_syscall_64+0x136/0x3c0
[  812.144716][T27503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.144821][T27503] RIP: 0033:0x7f5c3ce1de59
[  812.144837][T27503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.144860][T27503] RSP: 002b:00007f5c3b877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  812.144886][T27503] RAX: ffffffffffffffda RBX: 00007f5c3d0a5fa0 RCX: 00007f5c3ce1de59
[  812.144942][T27503] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  812.144957][T27503] RBP: 00007f5c3b877090 R08: 0000000000000000 R09: 0000000000000000
[  812.144970][T27503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  812.144983][T27503] R13: 00007f5c3d0a6038 R14: 00007f5c3d0a5fa0 R15: 00007ffc16441608
[  812.145003][T27503]  </TASK>
[  812.398757][T27469] memory+swap: usage 139676kB, limit 9007199254740988kB, failcnt 0
[  812.412295][T27469] kmem: usage 109100kB, limit 9007199254740988kB, failcnt 0
[  812.420169][T27469] Memory cgroup stats for /syz1:
[  812.420521][T27469] cache 532480
[  812.429445][T27469] rss 24576
[  812.432983][T27469] shmem 0
[  812.436890][T27469] mapped_file 65536
[  812.441300][T27469] dirty 0
[  812.447348][T27469] writeback 0
[  812.450908][T27469] workingset_refault_anon 1960
[  812.485255][T27510] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6344'.
[  812.495400][T27469] workingset_refault_file 6284
[  812.545598][T27469] swap 446464
[  812.551899][T27469] swapcached 13500416
[  812.557988][T27469] pgpgin 148517
[  812.565686][T27469] pgpgout 148380
[  812.570836][T27469] pgfault 135266
[  812.582342][T27469] pgmajfault 520
[  812.586309][T27469] inactive_anon 12288
[  812.593991][T27469] active_anon 4096
[  812.604587][T27469] inactive_file 0
[  812.609734][T27469] active_file 532480
[  812.615304][T27469] unevictable 0
[  812.625553][T27469] hierarchical_memory_limit 314572800
[  812.672870][T27469] hierarchical_memsw_limit 9223372036854771712
[  812.679521][T27469] total_cache 532480
[  812.683824][T27469] total_rss 24576
[  812.687821][T27469] total_shmem 0
[  812.691676][T27469] total_mapped_file 65536
[  812.696466][T27469] total_dirty 0
[  812.700159][T27469] total_writeback 0
[  812.704079][T27469] total_workingset_refault_anon 1960
[  812.709578][T27469] total_workingset_refault_file 6284
[  812.748104][T27469] total_swap 446464
[  812.990151][T27469] total_swapcached 13500416
[  813.184240][T27469] total_pgpgin 148517
[  813.487542][T27469] total_pgpgout 148380
[  813.525247][T27469] total_pgfault 135266
[  813.562798][T27469] total_pgmajfault 520
[  813.638092][T27469] total_inactive_anon 12288
[  813.642723][T27469] total_active_anon 4096
[  813.647027][T27469] total_inactive_file 0
[  813.651208][T27469] total_active_file 532480
[  813.655655][T27469] total_unevictable 0
[  813.659656][T27469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6331,pid=27466,uid=0
[  813.674858][T27469] Memory cgroup out of memory: Killed process 27466 (syz.1.6331) total-vm:96228kB, anon-rss:1340kB, file-rss:22756kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  813.697056][T27528] netlink: 'syz.9.6350': attribute type 12 has an invalid length.
[  813.725721][T27528] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6350'.
[  814.520502][T24707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.562932][T27544] loop1: detected capacity change from 0 to 512
[  814.583462][T27544] EXT4-fs (loop1): orphan cleanup on readonly fs
[  814.592035][T27544] __quota_error: 8 callbacks suppressed
[  814.592053][T27544] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144).
[  814.613518][T27550] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6357'.
[  814.613499][T27551] netlink: 'syz.2.6358': attribute type 9 has an invalid length.
[  814.647008][T27544] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  814.662335][T27544] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  814.669566][T27544] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6355: couldn't read orphan inode 26 (err -116)
[  814.682394][T27544] loop1: lost filesystem error report for type 5 error -116
[  814.682600][T27551] netlink: 'syz.2.6358': attribute type 6 has an invalid length.
[  814.690056][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  814.690118][    C1] EXT4-fs (loop1): initial error at time 2000000195: ext4_orphan_get:1404
[  814.690155][    C1] EXT4-fs (loop1): last error at time 2000000195: ext4_orphan_get:1404
[  814.725838][T27544] EXT4-fs (loop1): Remounting filesystem read-only
[  814.733464][T27544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  814.876287][T27559] gtp4: entered promiscuous mode
[  814.921276][T27551] loop2: detected capacity change from 0 to 512
[  814.951225][T27551] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  814.963930][T27561] gtp9: entered promiscuous mode
[  815.124986][T27560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27560 comm=syz.2.6358
[  815.234108][T27544] ==================================================================
[  815.242255][T27544] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64
[  815.249295][T27543] syz.1.6355 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  815.252104][T27544] 
[  815.252113][T27544] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1:
[  815.263060][T27543] CPU: 1 UID: 0 PID: 27543 Comm: syz.1.6355 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  815.263190][T27543] Tainted: [W]=WARN
[  815.263229][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  815.263288][T27543] Call Trace:
[  815.263309][T27543]  <TASK>
[  815.263340][T27543]  __dump_stack+0x1d/0x30
[  815.263422][T27543]  dump_stack_lvl+0x95/0xd0
[  815.263487][T27543]  dump_stack+0x15/0x1b
[  815.263558][T27543]  dump_header+0x80/0x240
[  815.263674][T27543]  oom_kill_process+0x295/0x350
[  815.263813][T27543]  out_of_memory+0x981/0xbc0
[  815.263932][T27543]  try_charge_memcg+0x621/0xa00
[  815.264068][T27543]  charge_memcg+0x6d/0x120
[  815.264181][T27543]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[  815.264345][T27543]  swap_cache_alloc_folio+0x47b/0x5e0
[  815.264503][T27543]  swap_cluster_readahead+0x2b1/0x460
[  815.264650][T27543]  swapin_readahead+0xd8/0x8a0
[  815.264783][T27543]  ? mod_lruvec_state+0x10c/0x120
[  815.264858][T27543]  ? __rcu_read_unlock+0x33/0x70
[  815.265001][T27543]  ? lruvec_stat_mod_folio+0xbb/0x100
[  815.265093][T27543]  ? _raw_spin_unlock+0x9/0x30
[  815.265159][T27543]  ? __rcu_read_unlock+0x4e/0x70
[  815.265282][T27543]  ? swap_cache_get_folio+0x1f7/0x200
[  815.265380][T27543]  do_swap_page+0x2a2/0x1ec0
[  815.265501][T27543]  ? __css_rstat_updated+0xbb/0x280
[  815.265627][T27543]  ? __rcu_read_lock+0x36/0x50
[  815.265712][T27543]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  815.265800][T27543]  handle_mm_fault+0xb3c/0x2da0
[  815.265972][T27543]  do_user_addr_fault+0x634/0x1060
[  815.266174][T27543]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  815.266269][T27543]  ? trace_page_fault_user+0x1f/0xa0
[  815.266374][T27543]  exc_page_fault+0x62/0xa0
[  815.266469][T27543]  asm_exc_page_fault+0x26/0x30
[  815.266615][T27543] RIP: 0033:0x7fea0641cd2d
[  815.266675][T27543] Code: 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 <c5> fe 7f 07 c5 fe 7f 4f 20 c5 fe 7f 54 17 e0 c5 fe 7f 5c 17 c0 e9
[  815.266739][T27543] RSP: 002b:00007ffe5f419098 EFLAGS: 00010287
[  815.266799][T27543] RAX: 0000200000000048 RBX: 0000000000000004 RCX: 0000000000000007
[  815.266850][T27543] RDX: 0000000000000070 RSI: 0000001b338211d7 RDI: 0000200000000048
[  815.266909][T27543] RBP: fffffffffffffffe R08: 0000001b33c20000 R09: 0000000000000001
[  815.267010][T27543] R10: 0000000000000070 R11: 0000000000000001 R12: 00007ffe5f4191c0
[  815.267052][T27543] R13: 00007fea066d609c R14: 00000000000c6dbc R15: 00007fea066d6090
[  815.267122][T27543]  </TASK>
[  815.267144][T27543] memory: usage 307200kB, limit 307200kB, failcnt 1590
[  815.273474][T27544]  tick_do_update_jiffies64+0x113/0x1c0
[  815.284411][T27543] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0
[  815.288230][T27544]  tick_nohz_handler+0x88/0x380
[  815.298443][T27543] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  815.301769][T27544]  __hrtimer_run_queues+0x1f8/0x510
[  815.304718][T27543] Memory cgroup stats for /syz1
[  815.309054][T27544]  hrtimer_interrupt+0x257/0x810
[  815.313564][T27543] :
[  815.314073][T27543] cache 8192
[  815.317725][T27544]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  815.322062][T27543] rss 0
[  815.322074][T27543] shmem 0
[  815.326919][T27544]  sysvec_apic_timer_interrupt+0x6f/0x80
[  815.331522][T27543] mapped_file 0
[  815.331534][T27543] dirty 0
[  815.336374][T27544]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  815.600654][T27544]  __sanitizer_cov_trace_pc+0x5c/0x70
[  815.606080][T27544]  shrink_node+0x995/0x20f0
[  815.610629][T27544]  do_try_to_free_pages+0x408/0xc90
[  815.615862][T27544]  try_to_free_mem_cgroup_pages+0x201/0x420
[  815.621810][T27544]  try_charge_memcg+0x375/0xa00
[  815.626700][T27544]  charge_memcg+0x6d/0x120
[  815.631162][T27544]  mem_cgroup_swapin_charge_folio+0xc2/0x150
[  815.637183][T27544]  swap_cache_alloc_folio+0x47b/0x5e0
[  815.642593][T27544]  swap_cluster_readahead+0x2b1/0x460
[  815.648019][T27544]  swapin_readahead+0xd8/0x8a0
[  815.652825][T27544]  do_swap_page+0x2a2/0x1ec0
[  815.657455][T27544]  handle_mm_fault+0xb3c/0x2da0
[  815.662339][T27544]  do_user_addr_fault+0x634/0x1060
[  815.667572][T27544]  exc_page_fault+0x62/0xa0
[  815.672108][T27544]  asm_exc_page_fault+0x26/0x30
[  815.676984][T27544] 
[  815.679327][T27544] read to 0xffffffff86c07a00 of 8 bytes by task 27544 on cpu 0:
[  815.686975][T27544]  mem_cgroup_flush_stats_ratelimited+0x29/0x50
[  815.693338][T27544]  count_shadow_nodes+0x6a/0x250
[  815.698306][T27544]  do_shrink_slab+0x61/0x650
[  815.703009][T27544]  shrink_slab+0x53b/0x8e0
[  815.707457][T27544]  shrink_node+0x6d9/0x20f0
[  815.712005][T27544]  do_try_to_free_pages+0x408/0xc90
[  815.717232][T27544]  try_to_free_mem_cgroup_pages+0x201/0x420
[  815.723154][T27544]  try_charge_memcg+0x375/0xa00
[  815.728041][T27544]  __memcg_kmem_charge_page+0x199/0x3a0
[  815.733627][T27544]  __alloc_frozen_pages_noprof+0x18a/0x350
[  815.739468][T27544]  alloc_pages_mpol+0xa9/0x1d0
[  815.744264][T27544]  alloc_pages_noprof+0x8f/0x140
[  815.749232][T27544]  __vmalloc_node_range_noprof+0xae9/0x11e0
[  815.755260][T27544]  __kvmalloc_node_noprof+0x3a0/0x590
[  815.760659][T27544]  futex_hash_allocate+0x192/0x920
[  815.765802][T27544]  futex_hash_prctl+0xd8/0xf0
[  815.770761][T27544]  __se_sys_prctl+0x4f4/0x13b0
[  815.775554][T27544]  __x64_sys_prctl+0x67/0x80
[  815.780177][T27544]  x64_sys_call+0x2533/0x3020
[  815.784897][T27544]  do_syscall_64+0x136/0x3c0
[  815.789522][T27544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.795444][T27544] 
[  815.797788][T27544] value changed: 0x000000010000c903 -> 0x000000010000c904
[  815.804907][T27544] 
[  815.807243][T27544] Reported by Kernel Concurrency Sanitizer on:
[  815.813420][T27544] CPU: 0 UID: 0 PID: 27544 Comm: syz.1.6355 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  815.824390][T27544] Tainted: [W]=WARN
[  815.828301][T27544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  815.838467][T27544] ==================================================================
[  815.889040][T27543] writeback 4096
[  815.915121][T27543] workingset_refault_anon 2058
[  815.919995][T27543] workingset_refault_file 7306
[  815.925234][T27543] swap 466944
[  815.928714][T27543] swapcached 14225408
[  815.932762][T27543] pgpgin 149767
[  815.937235][T27543] pgpgout 149763
[  815.940872][T27543] pgfault 135629
[  815.944715][T27543] pgmajfault 600
[  815.948436][T27543] inactive_anon 4096
[  815.952416][T27543] active_anon 0
[  815.956323][T27543] inactive_file 0
[  815.960104][T27543] active_file 8192
[  815.963947][T27543] unevictable 0
[  815.967793][T27543] hierarchical_memory_limit 314572800
[  815.973438][T27543] hierarchical_memsw_limit 9223372036854771712
[  815.979920][T27543] total_cache 8192
[  815.983844][T27543] total_rss 0
[  815.988096][T27543] total_shmem 0
[  815.991705][T27543] total_mapped_file 0
[  815.996106][T27543] total_dirty 0
[  815.999663][T27543] total_writeback 4096
[  816.003846][T27543] total_workingset_refault_anon 2058
[  816.009507][T27543] total_workingset_refault_file 7306
[  816.014972][T27543] total_swap 466944
[  816.018844][T27543] total_swapcached 14225408
[  816.023581][T27543] total_pgpgin 149767
[  816.027922][T27543] total_pgpgout 149763
[  816.032075][T27543] total_pgfault 135629
[  816.041844][T27543] total_pgmajfault 600
[  816.046978][T27543] total_inactive_anon 4096
[  816.052525][T27543] total_active_anon 0
[  816.061013][T27543] total_inactive_file 0
[  816.069988][T27543] total_active_file 8192
[  816.091549][T27543] total_unevictable 0
[  816.105731][T27543] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6355,pid=27543,uid=0
[  816.150709][T27543] Memory cgroup out of memory: Killed process 27543 (syz.1.6355) total-vm:96228kB, anon-rss:1236kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  816.232569][T24707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.