last executing test programs:

1m18.959765399s ago: executing program 32 (id=768):
socket$inet6(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
pipe(&(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

42.266419307s ago: executing program 1 (id=1340):
socket$inet6(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
pipe2(&(0x7f0000001cc0), 0x800)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

42.265686827s ago: executing program 1 (id=1341):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0)
ioctl$TCFLSH(r4, 0x800455ca, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$TCXONC(r4, 0x540a, 0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)
io_getevents(0x0, 0x7, 0x0, 0x0, 0x0)

42.179518772s ago: executing program 1 (id=1342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r1 = syz_io_uring_setup(0x937, &(0x7f0000001200)={0x0, 0xfe21, 0x10, 0x3, 0x3c4}, &(0x7f0000002380), &(0x7f0000000140))
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x508, 0x35d3, 0x38, &(0x7f0000000000)={[0x9]}, 0x8)
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2c4, &(0x7f00000003c0)="$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")

42.111796686s ago: executing program 1 (id=1344):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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")
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110)
preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)
semctl$GETALL(0x0, 0x0, 0x12, 0xfffffffffffffffe)
bind$x25(r2, &(0x7f0000000040), 0x12)

41.951478126s ago: executing program 1 (id=1348):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1024020, &(0x7f00000000c0)={[{@favordynmods}]})

41.645156093s ago: executing program 1 (id=1357):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x36, 0x2, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000004000), 0x0}, 0x20)

41.632389244s ago: executing program 33 (id=1357):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
prctl$PR_SCHED_CORE(0x36, 0x2, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000004000), 0x0}, 0x20)

28.859637698s ago: executing program 6 (id=1585):
pipe(&(0x7f00000001c0))
unshare(0x22020600)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x208086, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@bsdgroups}, {@jqfmt_vfsold}, {@nodiscard}]}, 0x3, 0x459, &(0x7f0000000c00)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x6, 0x7ffc0001}]})
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x10)
unshare(0x20800)
quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)

27.527430036s ago: executing program 5 (id=1607):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x3, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = socket(0x15, 0x5, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6d3}}, 0xfffffc01, 0x5, 0x3, 0x0, 0x8000}, &(0x7f0000000040)=0x98)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0x0)
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000001280)=""/4096)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req={0x10, 0x3, 0x800, 0x2}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

27.45680081s ago: executing program 5 (id=1610):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x278, &(0x7f0000000500)="$eJzs3b1rJGUcB/Df7EtiTAhRGxtfQEQ0EGIhCDbaKAQkiIigQkTEShIhJthlrWws7FVS2QSxM1oe14Rr7g/I3aXINdeEKy7cwV2xx+zshs1mQ5J9mbnLfj6weebZed4W9vvsBjKTAEbWTES8HxHliJiNiGpEJO0NXs0eM83q5sTOUkS9/undpNEuq2da/SYjohYR70ZUWufWt7/cv7/70Ru/rlVf/2v7i4m8Xl+7g/29jw//XPzl34W310vN56aaZfvrGKSky3OVJOL5YUz2hEgqRa+A8/nnRpr7FyLitUb+q1FqRva31bGr1Xjrj+79xg7zXScwDPV6Nf0MrNWBkVNqfAdOSnMRkR2XSnNz2Xf4m+Ukvl9Z/XH2u5W15W+L3qmAAUhq2e+9ex/+P/7fZEf+75Sz/J/LO0NeKTAUaf4/+2TrVnp8WC56NUAuXsqKNP+zX2+8GT3n/6fBrgvITf/5B55W8g+jS/7hEugxu/IPo0v+YXTJP1xi1dZB7cSpZ5plf/l/0PwLwt6XCOTjaDuI6cZPn/8wujryX8j1uEAx2vMPAIyWpBZR8CXIQEGK3n8AAAAAAAAAAAAAAAAAAICTNid2llqPvOa89nvEwQcRUTk+/3jjbLnx/4hbdyt99l6SNjuSZN368tUrfQ7Qp78HfPX14vjF2k/fHuz8F3X95eGM+/Px6qn3tttYjqiljecrlZPv/6T5/jvTqeM/d0bH6jfnm2BQko76e5/nO3+nR1vFzr+wG3El3X/mu+1/pXixUXbff6aO3VO1Nz887HMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvM4AAD//ybEbgU=")
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x200a, 0xffff, 0x8, 0x6, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
unshare(0x400)
socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}]}, 0x1, 0x4c2, &(0x7f0000000a00)="$eJzs3c9PXFsdAPDvvUDh8XgPnr74K+qrz2o1TWdg2pKmq7rRmKaJsXHlokWYEsIMQ5ihKdgF/R9M7FZXrl2YuDDpyr073RmTujCp2miKiYsx987QUjpDiYW5DfP5JDf3nntm5nsOcM+58wXmBDC0zkbETkSciYg7ETHdPZ90t7je2bLHPX/2YHH32YPFJNrtW/9I8vrsXOx7Tub97mtORMQPvxfxk+T1uM2t7dWFWq260S2XW/X1cnNr+y8r9YXl6nJ1rVKZn5ufvXrpSuXY+vpJ/ddPv7ty40e/++1Xnvxh59s/zZo11a3b34/j1On62Is4mdGIuHESwQow0u3PmaIbwv8ljYjPRMSn2fXfLro1AMAgtNvT0Z7eXwYATrs0z4ElaambC5iKNC2VOjm8j2MyrTWarQt3G5trS51c2UyMpXdXatXZbq5wJsaSrDyXH78sVw6UL0XERxHxs/H38nJpsVFbKvLGBwCG2PsH5v9/j3fmfwDglJsougEAwMCZ/wFg+Jj/AWD4mP8BYPiY/wFg+Jj/AWD4mP8BYKj84ObNbGvvdj//eune1uZq497FpWpztVTfXCwtNjbWS8uNxnL+mT31N71erdFYn7scm/fLrWqzVW5ubd+uNzbXWrfzz/W+XR0bSK8AgMN89MnjPyURsXPtvXyLfWs5mKvhdEuLbgBQmJGiGwAUZrToBgCFGfMWAIZejyV6X9H3T4Qe9X2K9CG8485/Uf4fhpWbfxhe8v8wvOT/YXi124k1/wFgyMjxAyfw+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA49abyLUlL3bXApyJNS6WIDyJiJsaSuyu16mxEfBgRfxwfG8/Kc0U3GgB4S+nfku76X+enz00drD2T/Gc830f86nOdU62Nuez8P/fOR+vRrZ/fX2i1NiqHBrLUIAAUZG+ezvf73sg/f/ZgcW8bZHuefqezuGgWd7e7dWpGYzTfT+Q3DpP/Srrljux+ZeQY4u88jIgv9Op/kudGZrornx6Mn8X+YKDx01fip3ldZ599LT57DG2BYfM4G3+u97r+0jib73tf/xP5CPX29sa/3dfGv/TF+DfSZ/w7e9QYl3///b51DyO+NNorfvIiftIn/rkjxv/zl7/6ab+69i8izkfv+PtjlVv19XJza/viSn1hubpcXatU5ufmZ69eulIp5znq8l6m+nV/v3bhw8P6P9kn/sQb+v+NI/b/l/+98+OvHRL/W1/v/f3/+JD42Zz4zSPGX5j8Td/lu7P4S737331O//5fOGL8J3/dXjriQwGAAWhuba8u1GrVDQcDO8ju3d6BZjgo7CD7CTiO1/n8CTa16JEJOGkvL/qiWwIAAAAAAAAAAAAAAPQziH94KrqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF7/CwAA//8gsNTi")
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r3, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00')
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x28020480)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r4, &(0x7f0000000000)="3271e35589da60689e6bfaac894512c587eb726d00776ce477304f47c4fcb302ecb3e446d9d1c6eef16e5f718b24c754", 0xffffffffffffff51, 0xfecc)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

27.437690491s ago: executing program 6 (id=1611):
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

27.311687988s ago: executing program 6 (id=1613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
r1 = semget$private(0x0, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10)
semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0, {0x80000000, 0x1}}, './file0\x00'})
ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000003c0)={0x0, "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"})
semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
semtimedop(r1, &(0x7f0000000200)=[{0x4, 0x3}, {0x1, 0x3, 0x400}, {0x3, 0xcba2, 0x1800}, {0x4, 0x22a}], 0x4, &(0x7f0000000240)={0x77359400})
semtimedop(r1, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100016d900000000000000000500000a44000000090a010400000000000000000a0000040a00010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014540000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a3100000000280003802400008004000180080003"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

27.160008907s ago: executing program 0 (id=1619):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000000007, 0x441e, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x8000, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2440000011e97b045b54906b9bc4d26d3de9de49116ca32ef04d38e1ab7fc1fd0df87a0ee46694556800daf88751694b65a952a2cbcd4322b0d0acb098e2cf50499065dac3077ed75b8032549193334cacc45dc4b9bec028f56d3652b37f00"/108, @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000100001800a00010069623a6c6f000000"], 0x24}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
syz_clone3(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140))
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x2, 0x4, 0x1, 0x3, 0x28, 0x2, [@rand_addr=' \x01\x00']}], "13d86558da0a7f6b"}}}}}}}, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x110, 0x250, 0x250, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@ah={{0x30}, {[0x7, 0xbf]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8)
close(r2)

27.11351061s ago: executing program 0 (id=1622):
pipe(&(0x7f00000001c0))
unshare(0x22020600)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x208086, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@bsdgroups}, {@jqfmt_vfsold}, {@nodiscard}]}, 0x3, 0x459, &(0x7f0000000c00)="$eJzs28tvG0UYAPBvndh9k1CVRx9AoCDKK2nSUnrgAgKJQ5GQ4FCOIUmrUrdBTZBoVUFBqBxRJU5cEEck/gJOcEHACYkr3FGlCvXSwslo7d36UceJW8eG+PeT1pnZHXvm291Zz+7EAQytifQlidgeEb9HxFgt21xgovbn5vWLc39fvziXRKXy5l9JtdyN6xfn0mJbG963LfvMGI0ofJrE3jb1Lp2/cHq2XF44l+Wnls+8N7V0/sJzp87Mnlw4uXB25ujRw4emXzgy83xP4kzjurHnw8V9u197+8rrc8evvPPzt0kef0McPTTRaeMTlUqPqxusHQ3pZHSADaErI7VuGsVq/x+LkagfvLF49ZOBNg5YV6VKXZvNlyrABpaO5oFhlH/Rp/e/+dLfEchgXXupdgOUxn0zW2pbRqOQlSm23N/20kREHL/0z1fpEuvzHAIAoMn36fjn2Xbjv0Lc31DunmwOZTwi7o2InRFxJCJ2RcR9EdWyD0TEg13W3zpJcvv4p3C1MVdJuqxgFen478Vsbqt5/JeP/mJ8JMvtqMZfTE6cKi8czPbJgShuSvPTHer44ZXfPl9pW+P4L13S+vOxYNaOq6Obmt8zP7s8ezcxN7r2ccSe0Zb4j0V1Ai+fCUh3+e6I2HMnFWyOiKe/2bfS5tXj76AH80yVryOerB3/S9F0/OsnWtJ5fnJqc5QXDk7lZ8Xtfvn18hsr1X9X8fdAevy3tj3/b8U/njTO1y518+lfPpW+Xv7jsxXvabL48wrXfP6Xkreq6VK27oPZ5eVz0xGl5Fit0Y3rZ+rvzfN5+TT+A/vb9/+dUd8TeyMiPYkfioiHI+KRrO2PRsRjEbG/w1746eXH310l/oEe//mujn89UYrWNe0TI6d//K6p0vFu4k+P/+Fq6kC2Zi3Xv7W0q9uzGQAAAP6vChGxPZLC5K10oTA5Wfsf/l2xtVBeXFp+5sTi+2fna78RGI9iIX/SNdbwPHQ6u63P8zMt+UPZc+MvRrZU85Nzi+X5QQcPQ27bCv0/9efIoFsHrDu/14Lhpf/D8NL/YXit1v+LfWoH0H9t+v+WQbQD6L923/8fDaAdQP+19H/TfjBEPP+D4XUn/d81AzaGjn251L92AH21tCVW/5F8QyK/GqypsMQGTkThP9EMiXVKDPjCBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CP/BgAA///6U+dL")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x6, 0x7ffc0001}]})
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x10)
unshare(0x20800)
quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)

26.5905046s ago: executing program 5 (id=1642):
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000180)={0x8, 'nicvf0\x00', {'bridge_slave_1\x00'}, 0x7})
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x0, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x800, 0x800, 0x2, 0x9000000, 0x3, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x5, 0x6, 0xfa, 0x0, 0x2, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xee, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4022, 0x80000001, 0x5, 0x7, 0x5, 0x8000, 0x5, 0x0, 0x5, 0x0, 0x8}, r3, 0xb, r1, 0x9)
syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r2)
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd606b88ef00303a00fc010000000000000000000000000000fe80000000000097c4000000000000aa020090780000000060bdd7c3f22633ff0000000000000000000000000000000100"/102], 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
fcntl$setstatus(r4, 0x4, 0x400)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="70000000020701030000070000000000050000030c00034000000000000000062c0007800800014000000000080002"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000004)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000006, 0x110, r7, 0x10c000)
getuid()
setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000300)=0x15, 0x4)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000000080))
shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000)
shmctl$SHM_LOCK(0x0, 0xb)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0)
r9 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r9, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

26.42775143s ago: executing program 6 (id=1644):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==")
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

26.362505034s ago: executing program 5 (id=1646):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==")
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

26.285339228s ago: executing program 6 (id=1648):
syz_emit_ethernet(0xd6, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x45, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x6, "02a20948"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

26.173129115s ago: executing program 5 (id=1650):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6020400)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x36, 0x0, 0x0)

26.049247962s ago: executing program 6 (id=1651):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6020400)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D!!'], 0x38}, 0x8814)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
io_cancel(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c})
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x1, 0x26b}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xef7f, 0x1, 0x0, 0xffffffff, 0x0, 0x1, {0x1}})
io_uring_enter(r2, 0x6e2, 0x3900, 0x43, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x1, 0x2)
ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x6, 0x3})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==")
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997)
preadv2(r6, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

26.048855072s ago: executing program 34 (id=1651):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6020400)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D!!'], 0x38}, 0x8814)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
io_cancel(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c})
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x1, 0x26b}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xef7f, 0x1, 0x0, 0xffffffff, 0x0, 0x1, {0x1}})
io_uring_enter(r2, 0x6e2, 0x3900, 0x43, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x1, 0x2)
ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x6, 0x3})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997)
preadv2(r6, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

26.048235692s ago: executing program 0 (id=1653):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4d68f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0xffff}]]}}}]}, 0x48}}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@delneigh={0x2c, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x0, 0x0, r5, 0x80, 0x80, 0x1}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x2c}}, 0x0)

25.882749842s ago: executing program 5 (id=1656):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r0, 0x7000000)
r1 = dup(r0)
preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000001940), 0x0}, 0x20)

25.854709634s ago: executing program 35 (id=1656):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r0, 0x7000000)
r1 = dup(r0)
preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000001940), 0x0}, 0x20)

25.828488705s ago: executing program 0 (id=1658):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x14c)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

25.546032341s ago: executing program 0 (id=1659):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r0, &(0x7f0000001480)=""/4106, 0x100a, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x0, &(0x7f0000000440), 0x0, 0xe, 0x2, &(0x7f0000000500)=""/2, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x24e45, 0xffffffffffffffff, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=[{0x5, 0x5, 0x8, 0x4}]}, 0x94)

24.851984212s ago: executing program 0 (id=1664):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x7, 0x1}}, [@srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x36}}]}, 0xcc}}, 0x2c000010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000104730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x7, 'dummy0\x00', {0x1ff}, 0x947})
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x801c080}, 0x800)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0x15, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x300, 0x1489, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x20000000, 0x2, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x80c0)
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'bond0\x00', @random="013701369eff"})

24.849042352s ago: executing program 36 (id=1664):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x7, 0x1}}, [@srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x36}}]}, 0xcc}}, 0x2c000010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000104730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x7, 'dummy0\x00', {0x1ff}, 0x947})
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x801c080}, 0x800)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0x15, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x300, 0x1489, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x20000000, 0x2, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x80c0)
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'bond0\x00', @random="013701369eff"})

15.522122525s ago: executing program 3 (id=1778):
socket$inet6(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
pipe2(&(0x7f0000001cc0), 0x800)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

15.475120538s ago: executing program 3 (id=1779):
epoll_create1(0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x68, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0x10, 0x4}, 0x94)

15.429785151s ago: executing program 3 (id=1780):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, 0x0, 0x0, 0x20044040)

15.014733105s ago: executing program 3 (id=1783):
r0 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17ffffe, 0x13, 0xffffffffffffffff, 0x9996e000)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@broadcast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @empty}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@multicast2}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)
r1 = syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x5, <r4=>0x0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070)
syz_emit_ethernet(0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6151be0000612f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a80090000b003e000086dd000986dd", @ANYBLOB="36ed"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000000004000b0000000500000088b89453e9553bee1476370b19cdc124a38a8943f38705bc7bfc908671d65f254ee59a22b8244888b8c07e4590d7dc35213c70b0a278f4ef3d97f211c17b7a4fa577c69d314bc1bb37c89a0ed254c72810d6186e5cb442e85625ea52caea6f77eec52d3124699e9162905d7d8253485a30"], 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000007380)=ANY=[], 0x6)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010101010000000000000000020000000c00198008000100a8050000100001800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16=r9, @ANYRESOCT=r0], 0x1b0)
setresuid(0x0, 0x0, 0xee00)
r10 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r10, r10, 0x0)
r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$describe(0x6, r11, &(0x7f0000001740)=""/132, 0x84)

14.379040562s ago: executing program 3 (id=1793):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f00000015c0), 0x0, 0x20044040)

13.783401167s ago: executing program 3 (id=1805):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000000007, 0x441e, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x8000, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_clone3(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x2, 0x4, 0x1, 0x3, 0x28, 0x2, [@rand_addr=' \x01\x00']}], "13d86558da0a7f6b"}}}}}}}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x13, r1, 0x59c2a000)
close(r0)

13.615362447s ago: executing program 37 (id=1805):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000000007, 0x441e, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x8000, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_clone3(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x2, 0x4, 0x1, 0x3, 0x28, 0x2, [@rand_addr=' \x01\x00']}], "13d86558da0a7f6b"}}}}}}}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x13, r1, 0x59c2a000)
close(r0)

3.241716891s ago: executing program 2 (id=1961):
r0 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc162, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xfff, 0x2000)
r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x84000, 0x3)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESDEC=r2, @ANYBLOB="e29befe0285b64b15ef8258b97b74858260e02d7d89cb16f0f12ea08b6f058044e1baab039b99f3d9036769f4353f1376ffa20c71d17242dbb65b84ac6fe064b7c5011af96c282a112bb9eab6f8c6f12a696cbc734a1436aa3fd0bf663723736bb3118ada196078b32b8179978cd391326723b0822db031f115ca31ae613b6714fddf8503c2b7ae4ac92502af644d37948d2ccb4a030fb8a7d9eaebda7c41411220e89f1dca4ba53e1e3d555374106632c6f6f25e78e2f41e63be93dd0920fd7bf048afd3a65", @ANYBLOB="3fc4a225937b4494eacdc50bdff1938c35ff3ce969aeeec99520e962e2520dcf5a2a9a542a85acbb0189f9eba7e00e35f1d4ad9e8097c3f1dc8ba252dc761de22c8f1c24cbfc70f470a019367f770dc528031453674a41a9371cafbcf7e8a5eda1ae930f57e281e509687a4cd0a86f504f666bc6943fbf6e2c8352d9ec2681ae77c4632d0c620d09d36753e2fd5131d451d05a4e5c559a8f10c202db6d3cab78a569ac98b765610d16f3bf0d7807b1eff3a9cd8fa8d9e4c98073c954fc7fdd3b88ff9d7ad511f6d43bce01955859317cf2b97f45a9e3b08ad9e9eb6599a12df3e62b516cb0d3641a94ccc1adacfb0042dea706b2850f5e8070da52d69e417fa8527baa1f3f4210e6f0944d43270f62561b4b0ae20911e3125c58db10717829b715b6b974d97ac7a15fda771fd67388b68468bcee70c3095021f123b271c64420dcd8a075f4b57ce03192766b59cde27f100b9d76eeedbc6a78b903b76c99575bff2c0b9d1e59bb9799f9bdb58b02f4f99e28073f48452954ebe97ba989866ec472fdec31bd0d6301cfe7bde1fee794ccf4baf5d1f1b185dbd7366e99e8470659a67bf6a59e0950a9c3bcd0fab2d784f338504b4888978dbc71c851b832039e69374bcfdc917fb1807bef83dc3e0535cd938c4db924864bb074785f380cf89d856d2a2979657000c7af06a4511de3682cf931a8a17e606a269c36de7c4b576b8cb1f14d9d7d4d4400c3db7d4fe194a5b160691522ed785636592b9c6f1e2a2f74b3be65f1f6c08233ef5599173beb5cd54966e0afb8acf30f732b0444d377a3834102066bac18871e614300ada34e6bfe73bdbb75cb2bf783435d02e55c262a2143b33130f23281a7383dc4e2a800268c5b3b16754b0d2251b7835ca00899d14e24387c31c5f4002bdde4d5228a97bb5f991f9b6cc980fe3f8d713a9a581cc9c15b11dec0cd62a5f57cf16ded11f50c2f5cbbce5eefdfb388c67379c7e358c525a1cb5fa32b097c9725eb142161a154eed0a312641b50edde03cdc96f02bfb3ac91f7b95a1b32901e17c75b5d893dccef56c77886cfff001189b1e2118dc85c0d95a6ca5f07df6d80195c435784fd475e367f80f5776116c5738c2f7acebecf2db0fee4eb34e44d91055ac1f4c950a7222d32040ed4a64b5b1cdbba32b969de43009bd291821cc788dc34d8b03fd4b9822a47b48c7b0a98f8f8b3199eef23f6bd7a1dddfbb8dc11e71791a029f5bf7d456d4e953b42d644ddff134e365bd1b73c4314aff0ef13ae822c2fa23213904f56b6e027edf5cf44221c019747e9ceb798373a95902146612fd204dd94683a9bdacdf888ccad89cd1daf80a9da8768510b5c6759ecb7ab764c82832804c9d752634ea80ba8e8545e6781a0959da8cf66c7ebbcd5cf717f52bcc5c1afc756978ba76686c8ab0ba10e6855866143a49096726a4c6d168f1fa9c3ce5aac95e912bc945de1ee52f6949cdf496a14755b23667ea9065b117528e291b5f6686d7f038c63bafeb809727f94c2096592cdec67d5144c57ac697ed56dfa62c12cd8162195d874a83d51f2ed4363bebbb12408aa606b7378e532d9bf0a5bd37602fa3294d457279040ca740e136a13b401bf5425333004d2408bfbc4093333992b8921b8a701a223c4679de32222ad317375a9b7139058bd4cd3067deda6651caf3b9554cd2a56f3b061bb19c9a48dd4e93abb925cdf8dfe297afe2f30055b746352daaef4ac4672dca5fad9fd2ecfde23309e9b26769ccbdad19ce9803c4c56c31f35642e00e787299e4f70bedf2e005c07e32058e7b94547950db1978a59c2737239b0bff22d38aa5df642a76f3647228fedaf375d60bd84195c732cc1cb5d8c7517af113722bc6a77616207e55f7e666b2d32b01d5a7459d43b029eac8a65c21b0ab8562bdbc4dd7b697ee7f7ac45d3baa0722f2b7e3e0844305f6d5dbf021236214f0897eaf36e5c94f0857ee802f0d1b902c185560b7b74afc2a018c5d4a8ca10fb47616309e015324620250eeecbe5f200fba79c75b54784646cff5686e1b24a62393ed80d4ac7de9e75e6597ebb9e5e8c12484833ef683dcd00e1352efddff938d7c92e23396b50430c3019a9aabe2392ea37c1f662ccb8a85c295d711037c1edf1dd57c3b9cfa0e10b9c3ee39dadeeecfd663a7c174be4b0a090e40c95c4427efa25df4111f51fdacf460b029cfbda8bbc1b5a862561086c8f29f35f4cec673f1286066c656d6ebbdbad6261fb35447e77fdf3f78bdcf6b41fcda70e45bc02b8da16a4221f6475496bf332eba866aba12bc07749db6d9b1342b65258dabdcc5c078d0c6c91fed9cd3fb7c8d4786e5988cdb29d4504e38576813a75506f6fd545657b830e14edf34384aa7d57a19531e61094b80f735feb9f4183e73bc6e20788d86f50d9c6a834c8c72aba08abe95dabcdacb7bd3f2387e9fa485c5c79ed3232e339d889fe63775038139537ed52042c69dc9c6eaf3530597740ca4533cc76cb938d5b855d00afdbca095ad1e7b9efd57e4a9aa397bf4c8e8771b9ed1e3302bc175359eaded364ae552e65ce4650569f5e882308bb102450e02bbb6e5476a9ce38028e372b203b069b5e081790eb878eb5af52e13e0256eef8270326803099737e5e841c96db4db5944dcd041529dd5aa0935bebb72d160cd4c4b5a55ee2166b9459f921a6d1af438279fe74e8c76c04ba684b9185ee72058f0a1554498f1e6bbff06e08bd66468c5ce1b8dbbb9da18562c0efdce250f091ef0e0f3f73ac4e8711eb58968adcded397edc8bbf5675536b356ae581ef707a225872ccd3fcd386642b89f251ad3130c68e24a4c2e32f0f4b7394554fdad251869fee83e01fd4e4c8dcce57c84e17c507f852f952a26cc72722f0211cce2641bda21903c84311b29135657e46b765ec274e1f0748b7cbf1404608649531ba164908b5c62ad3f882e698cab5d740c543181fad5652c78089306f9f9f003e3c8972ff9d0184f52d8796b0d720bb0dfe3628b360ba1d36f1d96d9b8da9c687b8ced46785962c858a8d77f7fd46de1d707e653dfc751a1386dd286eee01e83af3e3e6d76d94b6150077f8ac1d4b0fef3a94db2f16b10898e0d9568b3e8fae4b31a655903effe98be557b9c07e20f4158995c8522f9b8a61f4e79488934330325ef208ae945a278c1c45cc4c0c34057f7c44759ed5ba43b98560618e0fea4089f499546dd33babb0378566f3b485a42f1f1aac2e7568ad333e35ee046db58db6f81bdd366c1f57831aea5e2c309c9b900aa2b46942a3b26e1dce9d6ca149608f25f580ad13d6962beafa24edce985acca6cda7825c249b5b26bf20b05fa5b93a465cb714b3f0832a3439c20617e57f0b3bf93a18acbb7d13f2757c306b00acbfd6d6bd3442429d4d52b35ea33a3b870cc2ae21bab469fb31ff7065fa388907e0527e8110e4d1cc74a07a5d514250b3ebeb5d99d758d6936e8debd2edca212b355e2a275b617ec4123018cf3edd07fd53168aeb2270805277518f50ff7f39a3c58646e203ac8579abd8ae2d341abdb05b368729a885e2e6ae5c67fc50f51492ec9fd53516e42a534590415f787e8bb0a4e2ca576ffb9ef575d89db165f182baa3283e1b8d226c93722bbf54a39dc6635ba4318aa9c21b65dcd6861fc901b27c0c1a2d0b2736169095f471fa176f02e6a1cffc73b551d6b9c52b267dc9331e633d2e2d5d86163c44703fff9bef1817e3c0ff4e550a1e16a2efe15b6cb23724b3955cf99b531c74fe9ed683aad1bea1c8029bfe24cc4b9b0a693ea2f95717cf6d41130ba6e780ef4df3c4e60920b01fc9cd237a8e3e6747a95d0dd0d9fce0528ef0756e5d36d8dddbb0f6249caa1e853f297b86dd88058eb5b5fbadb45ce8a38fa621fae270c8ad05dd04d9875e365d472443eb84ee88b6990089011d0b3602e8a43f2d5e873d4bf7e7164514099bf503cd717b045bd7fcc3342ee6dc9df82cd6e25b485a966fd52adadd925e2f96e5a83448e0803b28acde9859b037f7f6ddf8c25dbcd01f03e9a7821292c22bfd0721f8508fbbe0e189d025f6560ffa01af8ceb3b146a56e10d96f14a821a225ed73d8247ca5bc2eeb37f82b61df3f9a4a5deebdcdc84b1196599bdca4f779d5ec2b4ce480152ee06ded30c6d73e05c2b2f30ee081cab48a2d1b6e5536380c7ff629c140eca9e031c2c3a64b2e59668d6794a0029da9f423eea61dd96cfe6f1d25f6dbae9bf7709e255f1ce366264f7bacb3505f028cb2fda92cc08795a40ee887fa0524443b596dac3df055d6ad3bfe74e3da992c4fc69b0553b398ae6526f5be9fed3f1d8f4a76dd0aa85c2f922de2ac73a61f798c665da9c0ef35cee25a9a5e58fed7d367acb16b25c8c5a3e81dd593aab2e8b3af42cb0a258a73676f452a5a7293f4987556601fa97f3ea1ee3b7408ff3c1cd8596a00b34cf606755ce7e75b2447fa5827455f5d6837f8efbf81ba5098a55b053577e3f82259b321ac191b017f1731d678646dc8f426043ea08895fdacecefb433898f4a764c77e579b4f5f01c0f0ea8bd20d1f5ca6e20bc13cc3e6629fba316c40a43f509c7a544ed4ae80ca3a495e7ee4ad58d1da533903821e1695f4baa48512937ed0e4c841d14413a972cdc10424f506bad50c0aab72b158ade5b0c35dfb2b367618c793eb668b93dfa11b5114210363a169b2491a54d342b1eaea64325f0fdd853991a0aa6f93416359e0a5f8c520cbe480520aa1014b0e5d359ba1e86fb733682c9f5165d19cc82aa05eef1a00198ce349b2d1a843822a559e4b585ca80e92a1f9d1ae38fe188fbc545d753cc1d17e9cce78fe5733e3c6ab4ca49fb7f018e42b20b15101ed2b8f014d3dc346409e702b0e1a7f5b7a02b86fb8da5f3ffd869a30841165030605f59081c32f5eb7242a12c4cd5b2d7e419cfeebecfc0544d2b30ab65de17425f38b9b13e4e7849d2f3f57bed35298584879445fa61715e3300e12f29fa492b0a0e0e0db543ccc0763196241ed424c323d6f32da60d5edbf6d97e871ba6f6e3c4aa0cb39f9cf8dfbfe3752b08d7a7971cf620d19b1352bb363325e13374918f146a5a22fa5d423a958e22376f7c8030f574e0c986fe0deb3e4fb6eb088cb54e1efc38dfd87efe5ae0682073721fcbc399174165859f1b40669c9e22e833db80ab2ee1444624d31515f7c635c7fa4a76bdc3356e6b6451e0337bc1aabc1c5ec8ced99bc2b3a11d622cb3f9687bd1b9f93ba74c9ac7bb90e4a7d4f2283b550f64fccb85f98f813d685538884c877fb73f6bd5685844390a4f5573f5ee23534a0fbfcb74f336b928e899ad8998e25eced6c31a8852579a54adc1b6eb18d5a156d59ea088145d2c37e9c3a1c8d5562d38eab49f0bbbfaa4f80049067b0d7195b99d7718c7103cb4b51bfbc8cf48f63c6209af021136af43b2bcea03d97ff2ad1b95e20402c37630fb40050cc042866705c9b1f6d4b96da5a69364cc7c3184f39a9572300c0da696415d3ca9fd07abb343e064a9db94eb0e5db10e48caacedb0d5347cd712521b97e22b77a1b2394679d828b4d64c8feb8a49c313ed4a604fd1a043aad3f9d479cbf0a3edf2c3c6ca662d7278b3acf57cd22818d66335c35d912fd2c5be525289b85b917d75098d5655da4786a2246aaf154cbe51805726676b0f98c8679aad2f980628663e3fdd7d09c7894b297f3f3d31392a76dc6095aef27ca08fb42e5b2f8bfe5d94c367ccc0ca58f700259c16b9502c105266a909eba65d994a0da727edef8f6b42eb33c8e2236d9db64706", @ANYRES32=r3], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, 0x0, 0x4040080)
connect$pppl2tp(r7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x40, 0x1)
r11 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00')
execveat$binfmt(r5, r11, 0x0, 0x0, 0x1000)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000))

2.423585349s ago: executing program 9 (id=1971):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3b09ad809d54e7d616ac22f71147014e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea47532744268843dfad996074cb2755", 0xe2}], 0x1}, 0x4000)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
syz_emit_ethernet(0x7c, &(0x7f0000000000)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x896f, [0xfffc]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}}}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$eJzs3c9rHFUcAPDvbLL9rU2hFBWRgAcrtZsm8UcFD/WsxYLe65JsQ8mmW7Kb0sSC7cGepXgRC+JdPPdY/Ac8+DcUbKFICXrwEpnN7ObX5FezSbbdzwc2vDczu2++++a9vDdvlw2gZw2mfwoRr0fE90nE8YhIsn39ke0cXDxu/tmtsfSRxMLCl38nzePSfOu1Ws87mmVei4jfv4s4U1hbbn12brJcrVams/xQY+r6UH127uzVqfJEZaJybWR09PwHoyMff/Rhx2J999K/P37xsC/LnbiXxIU4luWWx7EDt5dnBmMwe0+KcWHVgcMdKKybJLlbf9vz82B7+rJ2Xoy0DzgefVmrB15+30bEAtCjkm23/z+Lu3MmwN5qjQNac/sOzYNfGE8/XZwArY2/f/HeSBxqzo2OzCcrZkbpfHegA+WnZTx4fP9e+ojO3YcA2NTtOxFxrr9/bf+XZP3f8zu3hWOWyli8g6j/g73zMB3/vJc3/im0xz+RM/45uqLtPr/Vr7G2/ReedKCYdaXjv09yx7/tRauBviz3SnPMV0yuXK1W0r7t1Yg4HcWDaX6j9Zzz848W1tu3fPz3oHD/Xlp+ayyYnceT/oMrnzNebpR3EvNyT+9EvJE7/k3a9Z/k1H/6flzaYhmnKvffytncHD6viP9xXvy7a+GXiHdy639pRSvZeH1yqHk9DLWuirX+uXvqj/XK3+/40/o/snH8A8ny9dr69sv4+dB/lWivJ6+0Iv7Y+vV/IPmqmT6QbbtZbjSmhyMOJJ+3txda20eWntvKt45P4z/99sb9X971fzgivt5i/HdP/vrmevu6of7Hc+u/PbtdVf/bTzz67Juf1it/8/jT+n+/mTqdbdlK/7fVE9zJewcAAAAAAADdphARxyIplNrpQqFUWvx8x8k4UqjW6o0zV2oz18aj+V3ZgSgWWivdx5d9HmI4WzFs5UdW5Ucj4kRE/NB3uJkvjdWq4/sdPAAAAAAAAAAAAAAAAAAAAHSJo+t8/z/1V99+nx2w6/zkN/SuTdt/J37pCehK/v9D79L+oXdp/9C7tH/oXdo/9C7tH3pXbvs/tPfnAew9//8BAAAAAAAAAAAAAAAAAAAAAAAAAACgoy5dvJg+Fuaf3RpL8+M3ZmcmazfOjlfqk6WpmbHSWG36emmiVpuoVkpjtanNXq9aq10fHomZm0ONSr0xVJ+duzxVm7nWuHx1qjxRuVwp7klUAAAAAAAAAAAAAAAAAAAA8GKpz85NlqvVyrTEy5xIImKXiujvigAlOp3Y754JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJb8HwAA//9jbDB1")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)

2.23756482s ago: executing program 2 (id=1976):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000008c0)='p$', 0x2}], 0x1}}], 0x1, 0x20044040)

2.110423157s ago: executing program 9 (id=1978):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80042, 0x65)
chmod(&(0x7f0000000540)='./file0\x00', 0x120)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x100)
syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x1, 0x100039}, &(0x7f0000000340), &(0x7f0000000f80))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

1.794731235s ago: executing program 8 (id=1983):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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")
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x40100, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r2, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f800228004"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x80000000}}}}}}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x240048d4)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5b)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r7=>0xffffffffffffffff])
keyctl$chown(0x4, r6, 0xee01, r7)
keyctl$setperm(0x5, r6, 0x30925)
keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, r6, 0x0)
gettid()

1.773166276s ago: executing program 9 (id=1985):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r1=>0xffffffffffffffff])
keyctl$chown(0x4, r0, 0xee01, r1)
keyctl$setperm(0x5, r0, 0x42f0803)
keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0)

1.725301799s ago: executing program 7 (id=1986):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000000007, 0x441e, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x8000, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
syz_clone3(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x2, 0x4, 0x1, 0x3, 0x28, 0x2, [@rand_addr=' \x01\x00']}], "13d86558da0a7f6b"}}}}}}}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x110, 0x250, 0x250, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@ah={{0x30}, {[0x7, 0xbf]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2f}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3f8)
close(r1)

1.671937222s ago: executing program 8 (id=1987):
socket$inet6(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

1.668377513s ago: executing program 4 (id=1988):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
eventfd2(0x401, 0x80000)
fallocate(r0, 0x34, 0x5000000000, 0x380000000000)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x803, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, {0xfffffffc, 0xfe, 0x6, 0x6f, "87c9b54778173c343869a1a839eec03e50b240ec7d0fb143fac1d7eb3736176c6ce39ece22c399b7117bf4a86098e737a7802370d62e7a919fb8e8d8865b72199b4aec009b05e1e22bbe574cb8478e116c08c1d15175d1f466f6f3901fca4f1e72a6caf7baa1392c2fbb1d749d1536"}}, 0x7b)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)

1.643621424s ago: executing program 9 (id=1989):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3b09ad809d54e7d616ac22f71147014e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea47532744268843dfad996074cb2755", 0xe2}], 0x1}, 0x4000)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
syz_emit_ethernet(0x7c, &(0x7f0000000000)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x896f, [0xfffc]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}}}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)

1.629379965s ago: executing program 8 (id=1990):
r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000040)="e5", 0x1}], 0x3)
socket$key(0xf, 0x3, 0x2)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x1d4, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xe8, 0x1, [@m_simple={0xe4, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0xa9, 0x6, "c92acebef543cf5eac95ff99fdfe71226f0f8ca3945cf1e27303fef4d7edee9dc07b9c204234f1518f815a1e6f9900be0653c30ee7044fc49940d26166aca9768a60e2633236607ed8e41497a644f35e0d2494ec2432e189bde8a31ee3c25d98a9d5eabb59832b6b5d302ef8dbee798a364094b288f82acbcd5acc3d37148318dc5491c9505a46e3387d31e31c2a8f31a806aff980e9556c76256efb4a5cd9c0b1d305d220"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xd8, 0x1, [@m_simple={0x8c, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x5d, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x48, 0x17, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x40}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x20014890)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="fb55841f20", 0x5}, {0x0}], 0x2)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@debug}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x20)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000c3010000f100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94)

1.559773029s ago: executing program 4 (id=1991):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
close(r0)
socket$key(0xf, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x95b, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffde, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4001000010000100feffffff00c8da922c5f1802e5f19bb9d3010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}})
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00')
preadv(r7, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0)
lseek(r8, 0x2040000000, 0x2)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8)

1.558099909s ago: executing program 7 (id=1992):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x400)
syz_open_pts(r0, 0x208082)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc00)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001f544f479f34487ce7ae0054240b900000000000000a728e5c53d50f0c3f7ced030e82218c428768ee5da5a79bf2d17bf25a0b240b392c23feeeb1f27eda145a64436dd4335f14fef05577c138ea7804715ee45b3f936ac9512fd47a725b75b4f735db06483233cae432aa9c72dd5ccfad2dd45e2f5233e6b75037fc03851be95529891f7746ac2395e2377298fca7da76e2b13990f580db915faf86ab72ddb054d29ee"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000", @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x110, 0xa88, 0x8406, 0x7, 0x0, 0x3, 0xffff, 0x0, 0x2, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8)
accept4(r1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_io_uring_setup(0x1206, &(0x7f0000000380)={0x0, 0x4db5, 0x800, 0x1, 0x2d1}, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, 0x0, &(0x7f0000000040))
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, 0x0, 0x2f000000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f0000000600)="5a9acf0103fa1e6211a86c0f32610bd48eb267dc51bf583e28c37e320cb2982787095ccf3b8b92ea55943b352f71168828c739762d79c596731c0a759bf5387f122369c372eccc58eb72937d7b60695ada889faa9e4f707864b2e4524d22bf16ccbfa9b19213c7950621f4a565e2012e8837f9f9c0e86a4a4397537fa9e300b1", 0x80}], 0x2}}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./file0\x00', 0x4002, &(0x7f0000000ac0)=ANY=[@ANYBLOB='rodir,rodir,discard,utf8=0,nonultail=0,\bni_xlate=0,utf8=0,shortname=win95,utf8=1,shortname=win95,shortname=mixed,shortname=mixed,shortname=lower,utf8=1,flush,uni_xlate=1%shortname=win95,tz=UTC,shortna,shortname=winnt,usefree,rodir,iocharset=macceltic,\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x37d, &(0x7f0000000c00)="$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")
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000000080)=0x2c)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

1.472058424s ago: executing program 4 (id=1993):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3)
sendmsg$nl_route(r2, 0x0, 0x8000002)
io_getevents(0x0, 0x7, 0x0, 0x0, 0x0)

1.370396381s ago: executing program 7 (id=1994):
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x278, &(0x7f0000000500)="$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")
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x200a, 0xffff, 0x8, 0x6, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
unshare(0x400)
socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@barrier}]}, 0x1, 0x4c2, &(0x7f0000000a00)="$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")
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00')
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

1.274161296s ago: executing program 2 (id=1995):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a806cb0a07eeb0d8f6a8a", 0x14}], 0x1}, 0x10)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x923, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x7f, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.273585826s ago: executing program 4 (id=1996):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000140)={0x80, 0x1})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601010000000600000000000000000e0003006269746d61703a697000000005de0300000000000900020073797a3100000000240007800c00028008000140640101010c0001800800014080ffffff050014000200000005000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0], 0x3c}}, 0x4000054)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1, 0x250, &(0x7f0000000b80)="$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")
truncate(&(0x7f0000002540)='./file2\x00', 0xe)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1024020, &(0x7f00000000c0)={[{@favordynmods}]})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x4)

1.254029957s ago: executing program 9 (id=1997):
prlimit64(0x0, 0xe, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c)
sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff", 0x9}], 0x1}}], 0x2, 0x0)
r1 = dup(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, r2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88)

868.77137ms ago: executing program 8 (id=1998):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xc, 0x100fff, {"4a0200000000000000facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10)

660.061391ms ago: executing program 8 (id=1999):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)=0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000280), &(0x7f0000002000)=0x4)

420.360605ms ago: executing program 7 (id=2000):
socket$inet6(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000))

364.799299ms ago: executing program 4 (id=2001):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x7ffc0001}]})
io_cancel(0x0, 0x0, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})

312.709622ms ago: executing program 2 (id=2002):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x7ffc0001}]})
io_cancel(0x0, 0x0, 0x0)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, <r5=>0x0})
perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xf, 0x1, 0x9, 0x4, 0x0, 0x6, 0x3040, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xd}, 0x18013, 0x7fffffffffffffff, 0x3, 0xe95a7154e4b4d51c, 0x4, 0x101, 0x4000, 0x0, 0x1, 0x0, 0x1ff}, r5, 0x9, r0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x3f7, 0x8, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x11)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9)
syz_socket_connect_nvme_tcp()

312.192332ms ago: executing program 7 (id=2003):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0)
r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000f80)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
select(0xff44, &(0x7f0000000000)={0x0, 0xc1, 0x300, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})

229.837227ms ago: executing program 8 (id=2004):
pipe(&(0x7f00000001c0))
unshare(0x22020600)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x208086, &(0x7f0000000080)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@bsdgroups}, {@jqfmt_vfsold}, {@nodiscard}]}, 0x3, 0x459, &(0x7f0000000c00)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)

228.968247ms ago: executing program 4 (id=2005):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xd08, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, 0x0}}], 0x1, 0x20044040)

155.817161ms ago: executing program 7 (id=2006):
socket$nl_generic(0x10, 0x3, 0x10)
openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x10480, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x2010000)
syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)

95.921595ms ago: executing program 2 (id=2007):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6020400)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x2c00)

82.870555ms ago: executing program 9 (id=2008):
symlinkat(&(0x7f00000042c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
rename(&(0x7f0000000dc0)='./bus\x00', &(0x7f0000000e00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456c1c8c4a4fc84fea7cabb001968d0d3591bee2f2c93453aa0e750a0b57ffb2d9eeba407a2e8b16c7b6bbeb5ff7fd5fc6c95c4169ffd42357bc6dfbcb88ca559d001460faf3504f22c5853ffa0860ad22946569f51608372adbc094dafdd94e8cc7eeb17d679ca2466e36ae023e13fb304a68f95dc1c56fd365fcf5af0a961b9a7e79e615d6c7daa97af0dca88191b4547239725d1dec265fcced6f805f894c1abdf83b56759ee877f9f220c1ef112adae061e7b6ba836f436d4d3af", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x2c020400)
unshare(0x2c020400)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000100)={0x680, 0x8, 0x7ff}, 0xfffffffffffffe7a)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sync()
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

0s ago: executing program 2 (id=2009):
syz_emit_ethernet(0xce, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

79.775070][ T7830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.806015][ T3325] tipc: Disabling bearer <udp:syz2>
[  179.811449][ T3325] tipc: Left network mode
[  179.817062][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.927569][ T7848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.931094][ T3325] hsr_slave_0: left promiscuous mode
[  179.940714][ T7848] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.981214][ T3325] hsr_slave_1: left promiscuous mode
[  179.987990][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.053087][ T7861] option changes via remount are deprecated (pid=7860 comm=syz.5.1367)
[  180.061510][ T7861] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  180.162058][ T7873] tmpfs: Bad value for 'size'
[  180.180347][ T7799] chnl_net:caif_netlink_parms(): no params data found
[  180.242572][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.249808][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.257153][ T7799] bridge_slave_0: entered allmulticast mode
[  180.267133][ T7799] bridge_slave_0: entered promiscuous mode
[  180.276919][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.284987][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.292445][ T7799] bridge_slave_1: entered allmulticast mode
[  180.299348][ T7799] bridge_slave_1: entered promiscuous mode
[  180.332787][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.346213][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.369764][ T7799] team0: Port device team_slave_0 added
[  180.378697][ T7799] team0: Port device team_slave_1 added
[  180.402726][ T7893] Unsupported NM flag settings (240)
[  180.422078][ T3325] IPVS: stop unused estimator thread 0...
[  180.453358][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.460410][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.487190][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.498830][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.505858][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.532637][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.584362][ T7799] hsr_slave_0: entered promiscuous mode
[  180.590776][ T7799] hsr_slave_1: entered promiscuous mode
[  180.596785][ T7799] debugfs: 'hsr0' already exists in 'hsr'
[  180.602633][ T7799] Cannot create hsr debugfs directory
[  180.749636][ T7922] tmpfs: Bad value for 'size'
[  180.841384][ T3325] IPVS: stop unused estimator thread 0...
[  180.882008][ T7932] set_capacity_and_notify: 5 callbacks suppressed
[  180.882025][ T7932] loop0: detected capacity change from 0 to 512
[  180.899080][ T7933] loop2: detected capacity change from 0 to 256
[  180.937053][ T7937] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7937 comm=syz.3.1389
[  180.962904][ T7932] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  181.010870][ T7932] EXT4-fs (loop0): 1 truncate cleaned up
[  181.017112][ T7799] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  181.027374][ T7799] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  181.036332][ T7799] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  181.045372][ T7799] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  181.059202][ T7932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.073468][ T7932] xt_hashlimit: size too large, truncated to 1048576
[  181.080415][ T7932] xt_hashlimit: max too large, truncated to 1048576
[  181.089194][ T7948] loop2: detected capacity change from 0 to 128
[  181.095709][ T7948] vfat: Unknown parameter ''
[  181.101275][ T7948] option changes via remount are deprecated (pid=7939 comm=syz.2.1388)
[  181.109610][ T7948] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  181.119194][ T7945] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  181.146061][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.153208][ T7799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.160593][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.167784][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.188360][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.244871][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.262451][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.271001][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.294184][ T7799] 8021q: adding VLAN 0 to HW filter on device team0
[  181.304476][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.311788][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.335833][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.342976][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.434373][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.474842][ T7958] syz.5.1391 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  181.614603][ T7799] veth0_vlan: entered promiscuous mode
[  181.626440][ T7799] veth1_vlan: entered promiscuous mode
[  181.647007][ T7799] veth0_macvtap: entered promiscuous mode
[  181.656656][ T7799] veth1_macvtap: entered promiscuous mode
[  181.671259][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.683752][ T7799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.696750][ T6190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.713163][ T6190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.737011][ T6190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.750905][ T6190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.859909][ T7999] loop5: detected capacity change from 0 to 256
[  181.891348][ T3388] kernel write not supported for file bpf-prog (pid: 3388 comm: kworker/1:3)
[  181.916050][ T8001] __nla_validate_parse: 4 callbacks suppressed
[  181.916071][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1398'.
[  181.983889][ T8010] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1399'.
[  181.993519][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1399'.
[  182.024079][ T8010] loop5: detected capacity change from 0 to 128
[  182.030643][ T8010] vfat: Unknown parameter ''
[  182.037389][ T8010] option changes via remount are deprecated (pid=8005 comm=syz.5.1399)
[  182.045789][ T8010] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  182.053986][ T8010] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  182.174482][ T8017] loop0: detected capacity change from 0 to 128
[  182.186832][ T8017] msdos: Unknown parameter 'cô¡UŒÁ…ã§ict'
[  182.462641][ T8027] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  182.485922][ T8031] loop6: detected capacity change from 0 to 512
[  182.498389][ T8027] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.520443][ T8031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.560408][ T8031] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.604507][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.801602][ T8053] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1414'.
[  182.811034][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1414'.
[  182.872593][ T8058] loop5: detected capacity change from 0 to 512
[  182.892169][ T8058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.905252][ T8058] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.942772][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.061236][ T8069] loop5: detected capacity change from 0 to 164
[  183.085274][ T8069] Unsupported NM flag settings (240)
[  183.183862][ T8073] option changes via remount are deprecated (pid=8072 comm=syz.5.1423)
[  183.192293][ T8073] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  183.365527][ T8092] FAULT_INJECTION: forcing a failure.
[  183.365527][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.378678][ T8092] CPU: 1 UID: 0 PID: 8092 Comm: syz.5.1432 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  183.378759][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  183.378777][ T8092] Call Trace:
[  183.378786][ T8092]  <TASK>
[  183.378796][ T8092]  __dump_stack+0x1d/0x30
[  183.378828][ T8092]  dump_stack_lvl+0x95/0xd0
[  183.378856][ T8092]  dump_stack+0x15/0x1b
[  183.378926][ T8092]  should_fail_ex+0x263/0x280
[  183.378968][ T8092]  should_fail+0xb/0x20
[  183.379003][ T8092]  should_fail_usercopy+0x1a/0x20
[  183.379040][ T8092]  _copy_to_user+0x20/0xa0
[  183.379141][ T8092]  simple_read_from_buffer+0xb5/0x130
[  183.379202][ T8092]  proc_fail_nth_read+0x10e/0x150
[  183.379239][ T8092]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.379326][ T8092]  vfs_read+0x1ab/0x7f0
[  183.379348][ T8092]  ? security_socket_bind+0x58/0x80
[  183.379413][ T8092]  ? __sys_bind+0x1e9/0x290
[  183.379445][ T8092]  ? ksys_read+0xb9/0x1a0
[  183.379484][ T8092]  ksys_read+0xdc/0x1a0
[  183.379508][ T8092]  __x64_sys_read+0x40/0x50
[  183.379533][ T8092]  x64_sys_call+0x2889/0x3000
[  183.379650][ T8092]  do_syscall_64+0xc0/0x2a0
[  183.379752][ T8092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.379783][ T8092] RIP: 0033:0x7f726f89b78e
[  183.379804][ T8092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  183.379828][ T8092] RSP: 002b:00007f726e32efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.379854][ T8092] RAX: ffffffffffffffda RBX: 00007f726e32f6c0 RCX: 00007f726f89b78e
[  183.379902][ T8092] RDX: 000000000000000f RSI: 00007f726e32f0a0 RDI: 0000000000000004
[  183.379992][ T8092] RBP: 00007f726e32f090 R08: 0000000000000000 R09: 0000000000000000
[  183.380009][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.380022][ T8092] R13: 00007f726fb56038 R14: 00007f726fb55fa0 R15: 00007ffda47d3148
[  183.380042][ T8092]  </TASK>
[  183.634894][ T8104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1437'.
[  183.652087][ T8103] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8103 comm=syz.6.1438
[  183.704647][ T8111] loop3: detected capacity change from 0 to 512
[  183.727610][ T8111] EXT4-fs: Ignoring removed nomblk_io_submit option
[  183.760831][ T8111] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  183.768840][ T8111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  183.780276][ T8111] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  183.790665][ T8111] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  183.808547][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  183.861489][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.877672][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'.
[  183.995907][ T3480] IPVS: starting estimator thread 0...
[  184.027820][ T8139] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1449'.
[  184.037808][ T8139] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1449'.
[  184.088326][ T8135] IPVS: using max 2208 ests per chain, 110400 per kthread
[  184.107019][ T8144] SET target dimension over the limit!
[  184.169912][ T8153] msdos: Bad value for 'errors'
[  184.230584][ T6175] IPVS: stop unused estimator thread 0...
[  184.277503][ T8164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8164 comm=syz.0.1462
[  184.426215][ T8177] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1465'.
[  184.460134][ T8177] vfat: Unknown parameter ''
[  184.467207][ T8177] option changes via remount are deprecated (pid=8169 comm=syz.3.1465)
[  184.475597][ T8177] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  184.484398][ T8177] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  184.882751][   T29] kauditd_printk_skb: 29 callbacks suppressed
[  184.882774][   T29] audit: type=1326 audit(1770578060.136:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  184.912572][   T29] audit: type=1326 audit(1770578060.136:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  184.936233][   T29] audit: type=1326 audit(1770578060.136:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  184.959789][   T29] audit: type=1326 audit(1770578060.136:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  184.984346][   T29] audit: type=1326 audit(1770578060.136:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  185.009233][   T29] audit: type=1326 audit(1770578060.136:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  185.032889][   T29] audit: type=1326 audit(1770578060.136:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  185.056927][   T29] audit: type=1326 audit(1770578060.136:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  185.081136][   T29] audit: type=1326 audit(1770578060.136:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  185.104697][   T29] audit: type=1326 audit(1770578060.136:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.6.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e09aeb9 code=0x7ffc0000
[  185.133136][ T8191] Unsupported NM flag settings (240)
[  185.251073][ T8199] netlink: 'syz.0.1475': attribute type 12 has an invalid length.
[  185.739194][ T8233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8233 comm=syz.2.1488
[  185.987648][ T8245] set_capacity_and_notify: 4 callbacks suppressed
[  185.987669][ T8245] loop2: detected capacity change from 0 to 128
[  186.002111][ T8245] vfat: Unknown parameter ''
[  186.008009][ T8245] option changes via remount are deprecated (pid=8242 comm=syz.2.1493)
[  186.017152][ T8245] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  186.025486][ T8245] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  186.140911][ T8247] loop5: detected capacity change from 0 to 1024
[  186.177162][ T8247] EXT4-fs mount: 2 callbacks suppressed
[  186.177178][ T8247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.217285][ T8247] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1494: missing EA_INODE flag
[  186.230416][ T8247] EXT4-fs (loop5): Remounting filesystem read-only
[  186.259485][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.294042][ T8256] loop6: detected capacity change from 0 to 128
[  186.300589][ T8256] vfat: Unknown parameter ''
[  186.306173][ T8256] option changes via remount are deprecated (pid=8255 comm=syz.6.1498)
[  186.315279][ T8256] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  186.323069][ T8256] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  186.422241][ T8263] loop5: detected capacity change from 0 to 512
[  186.479600][ T8263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.507814][ T8263] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.887106][ T8282] loop0: detected capacity change from 0 to 1024
[  186.940649][ T8282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.960696][ T8282] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1507: missing EA_INODE flag
[  187.000168][ T8282] EXT4-fs (loop0): Remounting filesystem read-only
[  187.023717][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.110709][ T8294] loop2: detected capacity change from 0 to 512
[  187.121349][ T8294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  187.139471][ T8294] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1511: bg 0: block 4: invalid block bitmap
[  187.187058][ T8294] EXT4-fs (loop2): 1 truncate cleaned up
[  187.200545][ T8294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.228555][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.328429][ T4077] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  187.330254][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  187.463372][ T8311] sctp: [Deprecated]: syz.2.1517 (pid 8311) Use of int in max_burst socket option.
[  187.463372][ T8311] Use struct sctp_assoc_value instead
[  187.515183][ T8311] loop2: detected capacity change from 0 to 512
[  187.541460][ T8311] EXT4-fs (loop2): orphan cleanup on readonly fs
[  187.553953][ T8311] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  187.578697][ T8311] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  187.590463][ T8311] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1517: bad orphan inode 14
[  187.601864][ T8311] ext4_test_bit(bit=13, block=18) = 1
[  187.607348][ T8311] is_bad_inode(inode)=0
[  187.611583][ T8311] NEXT_ORPHAN(inode)=0
[  187.615698][ T8311] max_ino=32
[  187.619001][ T8311] i_nlink=1
[  187.653006][ T8311] EXT4-fs (loop2): 1 truncate cleaned up
[  187.707175][ T8311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  187.767457][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.894261][ T8328] can0: slcan on ttyS3.
[  188.030363][ T8335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8335 comm=syz.0.1524
[  188.181516][ T3325] Bluetooth: hci0: Frame reassembly failed (-84)
[  188.245633][ T8319] loop3: detected capacity change from 0 to 65536
[  188.451404][ T8355] loop3: detected capacity change from 0 to 512
[  188.474257][ T8355] EXT4-fs: Ignoring removed nomblk_io_submit option
[  188.499157][ T8355] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  188.507142][ T8355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  188.531907][ T8355] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  188.541485][ T8355] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  188.559764][ T8355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  188.605559][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.675991][ T8359] team0: Port device gtp0 added
[  188.698980][ T8327] can0 (unregistered): slcan off ttyS3.
[  188.816484][ T8374] loop6: detected capacity change from 0 to 512
[  188.849927][ T8374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.863125][ T8359] syzkaller0: create flow: hash 1451823183 index 1
[  188.898337][ T3481] syzkaller0: tun_net_xmit 76
[  188.899230][ T8374] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.935866][ T8382] Unsupported NM flag settings (240)
[  188.985050][ T8358] syzkaller0: delete flow: hash 1451823183 index 1
[  188.999637][ T7799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.062888][ T8392] netlink: 'syz.6.1536': attribute type 1 has an invalid length.
[  189.078744][ T8389] __nla_validate_parse: 11 callbacks suppressed
[  189.078762][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1537'.
[  189.114719][ T8392] bond1: entered promiscuous mode
[  189.119852][ T8392] bond1: entered allmulticast mode
[  189.132113][ T8392] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.307203][ T8411] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.330036][ T8411] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  189.338049][ T8411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  189.354974][ T8411] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[  189.364592][ T8411] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features
[  189.374242][ T8411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  189.429481][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.449042][ T5911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.597950][ T8440] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1547'.
[  189.656361][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1547'.
[  189.706525][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'.
[  189.726339][ T8440] vfat: Unknown parameter ''
[  189.768426][ T8440] option changes via remount are deprecated (pid=8428 comm=syz.5.1547)
[  189.776891][ T8440] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  189.821856][ T8448] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.1553'.
[  189.845055][ T8440] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  189.959564][ T8451] Unsupported NM flag settings (240)
[  190.051248][ T8455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.070124][ T8455] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1556: missing EA_INODE flag
[  190.082239][ T8455] EXT4-fs (loop2): Remounting filesystem read-only
[  190.101775][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.166453][ T8462] journal_path: Lookup failure for './bus'
[  190.172404][ T8462] EXT4-fs: error: could not find journal device path
[  190.208965][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  190.215215][ T4077] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  190.340696][ T8468] vti0: entered allmulticast mode
[  190.360359][ T8468] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  190.389076][ T8468] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.1560: inode #0: comm syz.0.1560: iget: illegal inode #
[  190.406634][ T8468] EXT4-fs (loop0): Remounting filesystem read-only
[  190.413260][ T8468] EXT4-fs (loop0): get orphan inode failed
[  190.438967][ T8468] EXT4-fs (loop0): mount failed
[  190.593294][ T8481] Unsupported NM flag settings (240)
[  190.605524][   T29] kauditd_printk_skb: 11286 callbacks suppressed
[  190.605541][   T29] audit: type=1326 audit(1770578074.858:18747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb706aeb9 code=0x7ffc0000
[  190.696591][ T8485] netlink: 'syz.3.1567': attribute type 1 has an invalid length.
[  190.700662][   T29] audit: type=1326 audit(1770578074.898:18748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7febb706aeb9 code=0x7ffc0000
[  190.704520][ T8485] netlink: 'syz.3.1567': attribute type 1 has an invalid length.
[  190.727906][   T29] audit: type=1326 audit(1770578074.898:18749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb706aeb9 code=0x7ffc0000
[  190.735665][ T8485] netlink: 'syz.3.1567': attribute type 1 has an invalid length.
[  190.768665][   T29] audit: type=1326 audit(1770578074.898:18750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8478 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7febb706aeb9 code=0x7ffc0000
[  190.792955][   T29] audit: type=1326 audit(1770578074.908:18751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febb702b78e code=0x7ffc0000
[  190.816667][   T29] audit: type=1326 audit(1770578074.938:18752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8483 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05275daeb9 code=0x7ffc0000
[  190.832051][ T8489] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1568'.
[  190.841841][   T29] audit: type=1326 audit(1770578074.938:18753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8483 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05275daeb9 code=0x7ffc0000
[  190.873679][   T29] audit: type=1326 audit(1770578074.938:18754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8483 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05275daeb9 code=0x7ffc0000
[  190.897256][   T29] audit: type=1326 audit(1770578074.938:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8483 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05275daeb9 code=0x7ffc0000
[  190.921577][   T29] audit: type=1326 audit(1770578074.938:18756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8483 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05275daeb9 code=0x7ffc0000
[  190.993218][ T8486] FAT-fs (loop2): Directory bread(block 64) failed
[  191.004632][ T8486] FAT-fs (loop2): Directory bread(block 65) failed
[  191.018451][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1568'.
[  191.021762][ T8486] FAT-fs (loop2): Directory bread(block 66) failed
[  191.055274][ T8486] FAT-fs (loop2): Directory bread(block 67) failed
[  191.068941][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1567'.
[  191.113578][ T8486] FAT-fs (loop2): Directory bread(block 68) failed
[  191.128501][ T8486] FAT-fs (loop2): Directory bread(block 69) failed
[  191.138856][ T8486] FAT-fs (loop2): Directory bread(block 70) failed
[  191.148313][ T8486] FAT-fs (loop2): Directory bread(block 71) failed
[  191.168892][ T8486] FAT-fs (loop2): Directory bread(block 72) failed
[  191.196632][ T6186] Bluetooth: hci0: Frame reassembly failed (-84)
[  191.208354][ T8486] FAT-fs (loop2): Directory bread(block 73) failed
[  191.500680][ T8512] set_capacity_and_notify: 13 callbacks suppressed
[  191.500701][ T8512] loop3: detected capacity change from 0 to 256
[  191.551468][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'.
[  191.576716][ T8519] loop3: detected capacity change from 0 to 164
[  191.600230][ T8519] Unsupported NM flag settings (240)
[  191.691111][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'.
[  191.749571][ T8527] loop2: detected capacity change from 0 to 164
[  191.780248][ T8527] Unsupported NM flag settings (240)
[  191.837619][ T8528] loop3: detected capacity change from 0 to 2048
[  191.850937][ T8528] msdos: Unknown parameter '`÷E’àq<'
[  191.865353][ T8530] loop2: detected capacity change from 0 to 1024
[  191.911661][ T8530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.967462][ T8530] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1583: missing EA_INODE flag
[  191.981140][ T8530] EXT4-fs (loop2): Remounting filesystem read-only
[  192.070534][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.106805][ T8547] loop5: detected capacity change from 0 to 256
[  192.214561][ T8558] can0: slcan on ttyS3.
[  192.235660][ T8558] loop2: detected capacity change from 0 to 512
[  192.278585][ T8558] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  192.290238][ T8558] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  192.300508][ T8558] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1590: Corrupt directory, running e2fsck is recommended
[  192.321030][ T8537] loop6: detected capacity change from 0 to 512
[  192.353316][ T8537] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  192.355032][ T8558] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  192.372692][ T8558] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1590: corrupted in-inode xattr: e_name out of bounds
[  192.390437][ T8558] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1590: couldn't read orphan inode 15 (err -117)
[  192.405574][ T8537] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1585: bg 0: block 4: invalid block bitmap
[  192.460587][ T8558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.497410][ T8537] EXT4-fs (loop6): 1 truncate cleaned up
[  192.511854][ T8537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.539523][ T8552] can0 (unregistered): slcan off ttyS3.
[  192.581148][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.684051][ T8576] loop3: detected capacity change from 0 to 512
[  192.699691][ T8576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  192.711476][ T8576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1594: bg 0: block 4: invalid block bitmap
[  192.725002][ T8576] EXT4-fs (loop3): 1 truncate cleaned up
[  192.732126][ T8576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.734261][ T8597] devtmpfs: Too few inodes for current use
[  192.774473][ T8599] loop2: detected capacity change from 0 to 164
[  192.798821][ T8599] Unsupported NM flag settings (240)
[  192.892206][ T8601] ip6gre1: entered allmulticast mode
[  193.248199][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  193.254313][ T4077] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  193.340833][ T8537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.388867][ T8653] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  193.405915][ T8653] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  193.441602][ T8653] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.1610: reserved inode found cleared - inode=2
[  193.488283][ T8663] Unsupported NM flag settings (240)
[  193.509972][ T8576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.574303][ T8671] team0: Port device gtp1 added
[  193.854494][ T8693] vfat: Bad value for 'errors'
[  193.897041][ T8682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  193.915319][ T8682] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1622: bg 0: block 4: invalid block bitmap
[  193.928288][ T8682] EXT4-fs (loop0): 1 truncate cleaned up
[  193.934852][ T8682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.209059][ T5911] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.230495][ T8725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.249860][ T8725] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1641: missing EA_INODE flag
[  194.262096][ T8725] EXT4-fs (loop3): Remounting filesystem read-only
[  194.274361][ T8729] __nla_validate_parse: 2 callbacks suppressed
[  194.274376][ T8729] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1642'.
[  194.290963][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1642'.
[  194.301821][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.359668][ T8733] FAT-fs (loop6): Directory bread(block 64) failed
[  194.369120][ T8733] FAT-fs (loop6): Directory bread(block 65) failed
[  194.375919][ T8733] FAT-fs (loop6): Directory bread(block 66) failed
[  194.386601][ T8733] FAT-fs (loop6): Directory bread(block 67) failed
[  194.393456][ T8733] FAT-fs (loop6): Directory bread(block 68) failed
[  194.401027][ T8733] FAT-fs (loop6): Directory bread(block 69) failed
[  194.407628][ T8733] FAT-fs (loop6): Directory bread(block 70) failed
[  194.414220][ T8733] FAT-fs (loop6): Directory bread(block 71) failed
[  194.420852][ T8733] FAT-fs (loop6): Directory bread(block 72) failed
[  194.427474][ T8733] FAT-fs (loop6): Directory bread(block 73) failed
[  194.452001][ T8735] 9pnet_virtio: no channels available for device 
[  194.452001][ T8735] 
[  194.473896][ T8737] FAT-fs (loop5): Directory bread(block 64) failed
[  194.485330][ T8737] FAT-fs (loop5): Directory bread(block 65) failed
[  194.499771][ T8737] FAT-fs (loop5): Directory bread(block 66) failed
[  194.512620][ T8737] FAT-fs (loop5): Directory bread(block 67) failed
[  194.519618][ T8737] FAT-fs (loop5): Directory bread(block 68) failed
[  194.526243][ T8737] FAT-fs (loop5): Directory bread(block 69) failed
[  194.531597][ T7799] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  194.534768][ T8737] FAT-fs (loop5): Directory bread(block 70) failed
[  194.540733][ T7799] FAT-fs (loop6): Filesystem has been set read-only
[  194.555957][ T8737] FAT-fs (loop5): Directory bread(block 71) failed
[  194.562819][ T8737] FAT-fs (loop5): Directory bread(block 72) failed
[  194.570255][ T8737] FAT-fs (loop5): Directory bread(block 73) failed
[  194.627378][ T5911] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  194.635205][ T5911] FAT-fs (loop5): Filesystem has been set read-only
[  194.713598][   T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.733456][ T8682] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.807284][   T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.882587][   T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.928492][   T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.034829][ T8767] FAT-fs (loop0): Directory bread(block 64) failed
[  195.060607][   T31] bridge_slave_1: left allmulticast mode
[  195.066368][   T31] bridge_slave_1: left promiscuous mode
[  195.072358][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.073350][ T8767] FAT-fs (loop0): Directory bread(block 65) failed
[  195.086946][ T8767] FAT-fs (loop0): Directory bread(block 66) failed
[  195.087304][   T31] bridge_slave_0: left allmulticast mode
[  195.100073][   T31] bridge_slave_0: left promiscuous mode
[  195.105856][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.114797][ T8767] FAT-fs (loop0): Directory bread(block 67) failed
[  195.124273][ T8767] FAT-fs (loop0): Directory bread(block 68) failed
[  195.154720][ T8767] FAT-fs (loop0): Directory bread(block 69) failed
[  195.165035][ T8767] FAT-fs (loop0): Directory bread(block 70) failed
[  195.188505][ T8767] FAT-fs (loop0): Directory bread(block 71) failed
[  195.195333][ T8767] FAT-fs (loop0): Directory bread(block 72) failed
[  195.212317][ T8767] FAT-fs (loop0): Directory bread(block 73) failed
[  195.256050][ T3312] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  195.263987][ T3312] FAT-fs (loop0): Filesystem has been set read-only
[  195.273042][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.288487][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.301634][   T31] bond0 (unregistering): Released all slaves
[  195.309750][   T31] bond1 (unregistering): Released all slaves
[  195.451227][   T31] hsr_slave_0: left promiscuous mode
[  195.468205][   T31] hsr_slave_1: left promiscuous mode
[  195.473942][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.481400][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.496727][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.504303][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.519332][   T31] veth1_macvtap: left promiscuous mode
[  195.524922][   T31] veth0_macvtap: left promiscuous mode
[  195.541262][   T31] veth1_vlan: left promiscuous mode
[  195.546567][   T31] veth0_vlan: left promiscuous mode
[  195.640656][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1660'.
[  195.705036][   T31] team0 (unregistering): Port device team_slave_1 removed
[  195.716966][   T31] team0 (unregistering): Port device team_slave_0 removed
[  195.738206][   T29] kauditd_printk_skb: 448 callbacks suppressed
[  195.738225][   T29] audit: type=1400 audit(1770578079.988:19205): avc:  denied  { bind } for  pid=8806 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  195.813255][ T8807] 8021q: adding VLAN 0 to HW filter on device bond3
[  195.834153][ T8750] chnl_net:caif_netlink_parms(): no params data found
[  195.933038][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.991108][ T8819] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1662: missing EA_INODE flag
[  196.008367][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.015492][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.022983][ T8750] bridge_slave_0: entered allmulticast mode
[  196.029793][ T8750] bridge_slave_0: entered promiscuous mode
[  196.063837][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.071009][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.079135][ T8819] EXT4-fs (loop3): Remounting filesystem read-only
[  196.081076][ T8750] bridge_slave_1: entered allmulticast mode
[  196.098827][ T8750] bridge_slave_1: entered promiscuous mode
[  196.124900][ T8750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.145309][ T8768] chnl_net:caif_netlink_parms(): no params data found
[  196.153269][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.192338][ T8750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.237856][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1667'.
[  196.246907][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'.
[  196.278195][   T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.294392][ T8857] netlink: 'syz.3.1667': attribute type 10 has an invalid length.
[  196.309641][ T8750] team0: Port device team_slave_0 added
[  196.316542][ T8750] team0: Port device team_slave_1 added
[  196.352839][ T8857] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  196.384851][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.392065][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.413055][ T8768] bridge_slave_0: entered allmulticast mode
[  196.430661][ T8768] bridge_slave_0: entered promiscuous mode
[  196.437731][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.445588][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.453264][ T8768] bridge_slave_1: entered allmulticast mode
[  196.461711][ T8768] bridge_slave_1: entered promiscuous mode
[  196.475515][   T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.526493][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.533559][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.559573][ T8750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.575391][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.587515][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.597981][   T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.610465][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.617507][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.644340][ T8750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.660575][ T8868] program syz.3.1670 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.712886][ T8873] set_capacity_and_notify: 10 callbacks suppressed
[  196.712907][ T8873] loop3: detected capacity change from 0 to 512
[  196.728183][ T8873] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.736072][ T8873] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  196.744117][ T8873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  196.752018][ T8750] hsr_slave_0: entered promiscuous mode
[  196.753785][ T8873] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  196.767283][ T8873] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  196.768858][ T8750] hsr_slave_1: entered promiscuous mode
[  196.777577][ T8873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  196.808943][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.810037][ T8750] debugfs: 'hsr0' already exists in 'hsr'
[  196.824052][ T8750] Cannot create hsr debugfs directory
[  196.873499][ T8768] team0: Port device team_slave_0 added
[  196.904724][ T8768] team0: Port device team_slave_1 added
[  196.992572][   T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.022302][ T8892] loop3: detected capacity change from 0 to 512
[  197.024331][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.035723][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.061914][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.086139][   T29] audit: type=1400 audit(1770578099.334:19206): avc:  denied  { ioctl } for  pid=8891 comm="syz.3.1674" path="socket:[26746]" dev="sockfs" ino=26746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  197.124526][ T8888] team0: Port device gtp0 added
[  197.147175][   T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.174516][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.181549][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.207514][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.230509][ T8906] random: crng reseeded on system resumption
[  197.235725][   T29] audit: type=1400 audit(1770578099.484:19207): avc:  denied  { write } for  pid=8904 comm="syz.3.1678" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  197.271375][   T29] audit: type=1400 audit(1770578099.514:19208): avc:  denied  { ioctl } for  pid=8904 comm="syz.3.1678" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  197.308528][   T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.341160][ T8832] chnl_net:caif_netlink_parms(): no params data found
[  197.361729][ T8905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1677'.
[  197.377052][ T8911] bond4: option miimon: invalid value (18446744073709551615)
[  197.385503][ T8911] bond4: option miimon: allowed values 0 - 2147483647
[  197.394158][ T8911] bond4 (unregistering): Released all slaves
[  197.425844][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'.
[  197.437925][   T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.515670][ T8768] hsr_slave_0: entered promiscuous mode
[  197.522112][ T8768] hsr_slave_1: entered promiscuous mode
[  197.528565][ T8768] debugfs: 'hsr0' already exists in 'hsr'
[  197.534450][ T8768] Cannot create hsr debugfs directory
[  197.629816][ T8940] loop3: detected capacity change from 0 to 128
[  197.630232][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.644022][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.654065][ T8832] bridge_slave_0: entered allmulticast mode
[  197.666239][ T8832] bridge_slave_0: entered promiscuous mode
[  197.680499][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.687728][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.695361][ T8832] bridge_slave_1: entered allmulticast mode
[  197.711202][ T8832] bridge_slave_1: entered promiscuous mode
[  197.756043][ T8942] loop3: detected capacity change from 0 to 512
[  197.766406][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.766555][ T8942] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  197.798338][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.804680][ T8942] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.1684: corrupted xattr entries
[  197.814875][ T8750] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  197.827075][ T8942] EXT4-fs (loop3): Remounting filesystem read-only
[  197.835355][ T8942] EXT4-fs (loop3): 1 truncate cleaned up
[  197.842526][ T8942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.863444][ T8750] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  197.873698][   T31] bridge_slave_1: left allmulticast mode
[  197.879666][   T31] bridge_slave_1: left promiscuous mode
[  197.885782][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.894211][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.904045][   T31] bridge_slave_0: left allmulticast mode
[  197.909779][   T31] bridge_slave_0: left promiscuous mode
[  197.915668][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.041108][   T31] bond0 (unregistering): Released all slaves
[  198.051863][   T31] bond1 (unregistering): Released all slaves
[  198.066538][   T31] bond2 (unregistering): Released all slaves
[  198.121802][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.131824][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.141803][   T31] bond0 (unregistering): Released all slaves
[  198.149616][   T31] bond1 (unregistering): Released all slaves
[  198.156465][ T8954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8954 comm=syz.3.1688
[  198.182559][ T8750] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  198.194683][ T8832] team0: Port device team_slave_0 added
[  198.212352][   T31] IPVS: stopping backup sync thread 5946 ...
[  198.220820][ T8750] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  198.242503][ T8832] team0: Port device team_slave_1 added
[  198.309727][ T8768] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  198.348005][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.355053][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.381063][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.393770][ T8768] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  198.412228][   T31] hsr_slave_0: left promiscuous mode
[  198.418338][   T31] hsr_slave_1: left promiscuous mode
[  198.429782][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.437310][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.461969][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.469531][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.482626][   T31] veth1_macvtap: left promiscuous mode
[  198.493434][   T31] veth0_macvtap: left promiscuous mode
[  198.501381][   T31] veth1_vlan: left promiscuous mode
[  198.506697][   T31] veth0_vlan: left promiscuous mode
[  198.508704][   T29] audit: type=1400 audit(1770578100.754:19209): avc:  denied  { getopt } for  pid=8981 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  198.545702][   T29] audit: type=1400 audit(1770578100.794:19210): avc:  denied  { read } for  pid=8983 comm="syz.2.1693" dev="nsfs" ino=4026532439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  198.567147][   T29] audit: type=1400 audit(1770578100.794:19211): avc:  denied  { open } for  pid=8983 comm="syz.2.1693" path="net:[4026532439]" dev="nsfs" ino=4026532439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  198.590872][   T29] audit: type=1400 audit(1770578100.794:19212): avc:  denied  { write } for  pid=8981 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  198.611615][   T29] audit: type=1400 audit(1770578100.794:19213): avc:  denied  { read } for  pid=8981 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  198.632098][   T29] audit: type=1400 audit(1770578100.794:19214): avc:  denied  { open } for  pid=8981 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  198.666661][ T8984] loop2: detected capacity change from 0 to 8192
[  198.696460][ T6171] smc: removing ib device !yz!
[  198.702945][ T8984]  loop2: p1 < > p4 < >
[  198.764403][ T3783] udevd[3783]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  198.771670][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  198.797919][ T8990] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  198.832303][   T31] team0 (unregistering): Port device team_slave_1 removed
[  198.843132][   T31] team0 (unregistering): Port device team_slave_0 removed
[  198.878247][ T8768] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  198.887826][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.894926][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.920926][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.940061][ T8982] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  198.959407][ T8768] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  199.003520][ T8996] loop2: detected capacity change from 0 to 128
[  199.031419][ T8996] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  199.045932][ T8996] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  199.073869][ T8832] hsr_slave_0: entered promiscuous mode
[  199.087008][ T8832] hsr_slave_1: entered promiscuous mode
[  199.106578][ T8996] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1696: reserved inode found cleared - inode=2
[  199.133510][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.221015][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.249345][ T8750] 8021q: adding VLAN 0 to HW filter on device team0
[  199.275797][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.282911][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.312479][ T8768] 8021q: adding VLAN 0 to HW filter on device team0
[  199.331270][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.338398][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.363554][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.370699][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.421289][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.428504][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.513831][   T31] IPVS: stop unused estimator thread 0...
[  199.537296][   T31] IPVS: stop unused estimator thread 0...
[  199.567682][ T8832] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  199.600163][ T8832] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  199.624727][ T8832] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  199.646520][ T8832] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  199.670844][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.740270][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.823573][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.849503][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  199.880755][ T8832] 8021q: adding VLAN 0 to HW filter on device team0
[  199.910633][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.917823][ T6171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.964218][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.971366][ T6171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.013451][ T8832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.024093][ T8832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.166870][ T8750] veth0_vlan: entered promiscuous mode
[  200.185293][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.200666][ T8750] veth1_vlan: entered promiscuous mode
[  200.216740][ T9100] netlink: 'syz.2.1703': attribute type 1 has an invalid length.
[  200.224593][ T9100] netlink: 'syz.2.1703': attribute type 1 has an invalid length.
[  200.232461][ T9100] netlink: 'syz.2.1703': attribute type 1 has an invalid length.
[  200.246537][ T8750] veth0_macvtap: entered promiscuous mode
[  200.290871][ T8750] veth1_macvtap: entered promiscuous mode
[  200.311914][ T8768] veth0_vlan: entered promiscuous mode
[  200.335617][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.352805][ T8768] veth1_vlan: entered promiscuous mode
[  200.373642][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.407432][ T6175] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.419952][ T8768] veth0_macvtap: entered promiscuous mode
[  200.433882][ T6175] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.451994][ T8768] veth1_macvtap: entered promiscuous mode
[  200.463245][ T6175] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.487954][ T6175] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.522948][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.548786][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.574655][ T6175] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.606202][ T6175] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.639738][ T6175] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.675118][ T6175] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.727672][ T9135] loop8: detected capacity change from 0 to 256
[  200.730968][ T8832] veth0_vlan: entered promiscuous mode
[  200.745942][ T9135] 9pnet_virtio: no channels available for device 
[  200.745942][ T9135] 
[  200.754849][ T8832] veth1_vlan: entered promiscuous mode
[  200.765211][   T29] kauditd_printk_skb: 4722 callbacks suppressed
[  200.765231][   T29] audit: type=1326 audit(1770578102.994:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.794860][   T29] audit: type=1326 audit(1770578103.024:23938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.818174][   T29] audit: type=1326 audit(1770578103.024:23939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.841508][   T29] audit: type=1326 audit(1770578103.024:23940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.864806][   T29] audit: type=1326 audit(1770578103.024:23941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.888412][   T29] audit: type=1326 audit(1770578103.024:23942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.911744][   T29] audit: type=1326 audit(1770578103.024:23943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.935059][   T29] audit: type=1326 audit(1770578103.024:23944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.958568][   T29] audit: type=1326 audit(1770578103.024:23945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  200.982031][   T29] audit: type=1326 audit(1770578103.024:23946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.3.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6854aeaeb9 code=0x50000
[  201.045433][ T8832] veth0_macvtap: entered promiscuous mode
[  201.064482][ T9144] loop7: detected capacity change from 0 to 1024
[  201.083504][ T8832] veth1_macvtap: entered promiscuous mode
[  201.112771][ T9144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.140503][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.153679][ T9151] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  201.164649][ T9144] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1708: missing EA_INODE flag
[  201.167323][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.197360][ T6175] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.233050][ T9144] EXT4-fs (loop7): Remounting filesystem read-only
[  201.248766][ T3393] IPVS: starting estimator thread 0...
[  201.288298][ T6175] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.297075][ T6175] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.309809][ T9161] loop2: detected capacity change from 0 to 512
[  201.338343][ T9157] IPVS: using max 2208 ests per chain, 110400 per kthread
[  201.342757][ T6175] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.415412][ T8750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.434359][ T9161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.510203][ T9161] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.519288][ T9173] loop9: detected capacity change from 0 to 512
[  201.536540][ T9173] EXT4-fs: Ignoring removed nobh option
[  201.561609][ T9173] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  201.589529][ T9173] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.1665: inode has both inline data and extents flags
[  201.639129][ T9173] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1665: couldn't read orphan inode 13 (err -117)
[  201.654733][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.720229][ T9173] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.733745][ T9192] loop7: detected capacity change from 0 to 164
[  201.742678][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1718'.
[  201.770599][ T9192] Unsupported NM flag settings (240)
[  201.834784][ T9200] loop2: detected capacity change from 0 to 256
[  201.857824][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.860314][ T9207] loop7: detected capacity change from 0 to 1024
[  201.887968][ T9200] 9pnet_virtio: no channels available for device 
[  201.887968][ T9200] 
[  201.919524][ T9207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.979084][ T9207] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1721: missing EA_INODE flag
[  202.019823][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1723'.
[  202.029010][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1723'.
[  202.077256][ T9222] loop9: detected capacity change from 0 to 512
[  202.093471][ T9207] EXT4-fs (loop7): Remounting filesystem read-only
[  202.161589][ T9227] loop8: detected capacity change from 0 to 128
[  202.168564][ T8750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.184206][ T9222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.208214][ T9227] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  202.302201][ T9222] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.310681][ T9227] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  202.389523][ T9227] EXT4-fs error (device loop8): __ext4_new_inode:1073: comm syz.8.1727: reserved inode found cleared - inode=2
[  202.414310][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.474495][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1732'.
[  202.556863][ T9264] loop7: detected capacity change from 0 to 512
[  202.575236][ T9255] loop9: detected capacity change from 0 to 4096
[  202.595616][ T9255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.611206][ T9264] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  202.626332][ T9264] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.1736: iget: bad i_size value: 12154757448730
[  202.639716][ T9264] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1736: couldn't read orphan inode 13 (err -117)
[  202.652543][ T9264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.667344][ T9264] EXT4-fs warning (device loop7): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[  202.692532][ T9264] EXT4-fs warning (device loop7): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[  202.703418][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.780243][ T8750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.800884][ T9278] loop9: detected capacity change from 0 to 512
[  202.809340][ T9278] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.839425][ T9278] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  202.847498][ T9278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  202.948863][ T9278] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80)
[  202.958545][ T9278] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features
[  202.971263][ T9278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  202.984644][ T9292] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1739'.
[  202.993922][ T9292] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1739'.
[  203.023319][ T9292] loop7: detected capacity change from 0 to 128
[  203.029888][ T9292] vfat: Unknown parameter ''
[  203.054309][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.092013][ T8768] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.101877][ T9292] infiniband !yz!: set active
[  203.106686][ T9292] infiniband !yz!: added team_slave_0
[  203.122066][ T9292] RDS/IB: !yz!: added
[  203.126111][ T9292] smc: adding ib device !yz! with port count 1
[  203.132516][ T9292] smc:    ib device !yz! port 1 has no pnetid
[  203.257114][ T9303] loop8: detected capacity change from 0 to 128
[  203.367587][ T9303] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.390094][ T9303] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  203.588277][ T8768] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.633309][ T9332] Unsupported NM flag settings (240)
[  203.720902][ T9324] EXT4-fs: Ignoring removed nobh option
[  203.736459][ T9324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  203.778450][ T9342] FAULT_INJECTION: forcing a failure.
[  203.778450][ T9342] name failslab, interval 1, probability 0, space 0, times 0
[  203.791349][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.9.1754 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  203.791386][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  203.791403][ T9342] Call Trace:
[  203.791411][ T9342]  <TASK>
[  203.791420][ T9342]  __dump_stack+0x1d/0x30
[  203.791492][ T9342]  dump_stack_lvl+0x95/0xd0
[  203.791521][ T9342]  dump_stack+0x15/0x1b
[  203.791632][ T9342]  should_fail_ex+0x263/0x280
[  203.791724][ T9342]  should_failslab+0x8c/0xb0
[  203.791756][ T9342]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[  203.791791][ T9342]  ? __alloc_skb+0x2f0/0x4b0
[  203.791943][ T9342]  __alloc_skb+0x2f0/0x4b0
[  203.791978][ T9342]  ? __alloc_skb+0x219/0x4b0
[  203.792017][ T9342]  netlink_alloc_large_skb+0xbf/0xf0
[  203.792058][ T9342]  netlink_sendmsg+0x40c/0x6f0
[  203.792125][ T9342]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.792160][ T9342]  ____sys_sendmsg+0x5af/0x600
[  203.792191][ T9342]  ___sys_sendmsg+0x195/0x1e0
[  203.792231][ T9342]  __x64_sys_sendmsg+0xd4/0x160
[  203.792320][ T9342]  x64_sys_call+0x17ba/0x3000
[  203.792353][ T9342]  do_syscall_64+0xc0/0x2a0
[  203.792394][ T9342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.792547][ T9342] RIP: 0033:0x7f57f436aeb9
[  203.792632][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.792656][ T9342] RSP: 002b:00007f57f2dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.792682][ T9342] RAX: ffffffffffffffda RBX: 00007f57f45e5fa0 RCX: 00007f57f436aeb9
[  203.792700][ T9342] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  203.792770][ T9342] RBP: 00007f57f2dc7090 R08: 0000000000000000 R09: 0000000000000000
[  203.792788][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.792802][ T9342] R13: 00007f57f45e6038 R14: 00007f57f45e5fa0 R15: 00007ffc9cd19e58
[  203.792826][ T9342]  </TASK>
[  203.799848][ T9324] EXT4-fs (loop3): 1 truncate cleaned up
[  204.026788][ T9324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.055752][ T9324] 9p: Bad value for 'rfdno'
[  204.158939][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1760'.
[  204.202605][ T9359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9359 comm=syz.9.1759
[  204.225898][ T9366] netlink: 'syz.7.1761': attribute type 11 has an invalid length.
[  204.271327][ T9366] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.284855][ T9371] netlink: 'syz.9.1762': attribute type 11 has an invalid length.
[  204.312410][ T9366] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1761: missing EA_INODE flag
[  204.329015][ T9366] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1761: error while reading EA inode 11 err=-117
[  204.366033][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.380872][ T9371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.429855][ T9379] vfat: Unknown parameter 'sRortname'
[  204.568792][ T9390] EXT4-fs: Ignoring removed orlov option
[  204.574528][ T9390] EXT4-fs: inline encryption not supported
[  204.620326][ T9390] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  204.650661][ T9390] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  204.662491][ T9390] EXT4-fs (loop9): invalid journal inode
[  204.669422][ T9396] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.681271][ T9390] EXT4-fs (loop9): can't get journal size
[  204.709192][ T9389] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1768: bg 0: block 345: padding at end of block bitmap is not set
[  204.731326][ T9389] EXT4-fs (loop7): Remounting filesystem read-only
[  204.748032][ T9405] FAULT_INJECTION: forcing a failure.
[  204.748032][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.761196][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.2.1772 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  204.761230][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  204.761242][ T9405] Call Trace:
[  204.761272][ T9405]  <TASK>
[  204.761280][ T9405]  __dump_stack+0x1d/0x30
[  204.761391][ T9405]  dump_stack_lvl+0x95/0xd0
[  204.761414][ T9405]  dump_stack+0x15/0x1b
[  204.761438][ T9405]  should_fail_ex+0x263/0x280
[  204.761532][ T9405]  should_fail+0xb/0x20
[  204.761579][ T9405]  should_fail_usercopy+0x1a/0x20
[  204.761687][ T9405]  strncpy_from_user+0x27/0x250
[  204.761722][ T9405]  getname_flags+0xad/0x3b0
[  204.761756][ T9405]  do_sys_openat2+0x60/0x150
[  204.761830][ T9405]  __x64_sys_openat+0xf2/0x120
[  204.761866][ T9405]  x64_sys_call+0x2b07/0x3000
[  204.761895][ T9405]  do_syscall_64+0xc0/0x2a0
[  204.761972][ T9405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.762002][ T9405] RIP: 0033:0x7f052759b78e
[  204.762023][ T9405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  204.762072][ T9405] RSP: 002b:00007f052602eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  204.762099][ T9405] RAX: ffffffffffffffda RBX: 00007f052602f6c0 RCX: 00007f052759b78e
[  204.762118][ T9405] RDX: 0000000000000002 RSI: 00007f052602ef90 RDI: ffffffffffffff9c
[  204.762137][ T9405] RBP: 00007f052602f090 R08: 0000000000000000 R09: 0000000000000000
[  204.762216][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.762233][ T9405] R13: 00007f0527856038 R14: 00007f0527855fa0 R15: 00007ffd7810f1d8
[  204.762255][ T9405]  </TASK>
[  205.013735][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1767'.
[  205.023328][ T9390] netlink: 336 bytes leftover after parsing attributes in process `syz.9.1767'.
[  205.086344][ T9422] can0: slcan on ttyS3.
[  205.149048][ T9424] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1775'.
[  205.181810][ T9424] vfat: Unknown parameter ''
[  205.189043][ T9424] option changes via remount are deprecated (pid=9413 comm=syz.2.1775)
[  205.197434][ T9424] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  205.205711][ T9424] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  205.227236][ T9388] can0 (unregistered): slcan off ttyS3.
[  205.263504][ T9399] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  205.593218][ T9421] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  205.627202][ T9399] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1771: bg 0: block 4: invalid block bitmap
[  205.654358][ T9399] EXT4-fs (loop8): 1 truncate cleaned up
[  205.680522][ T9437] netlink: 'syz.9.1781': attribute type 2 has an invalid length.
[  205.688720][ T9421] EXT4-fs error (device loop7): __ext4_new_inode:1073: comm syz.7.1774: reserved inode found cleared - inode=2
[  205.704778][ T9437] netlink: 'syz.9.1781': attribute type 2 has an invalid length.
[  205.920497][   T29] kauditd_printk_skb: 4619 callbacks suppressed
[  205.920516][   T29] audit: type=1326 audit(1770578126.179:28560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfda6baeb9 code=0x7ffc0000
[  205.981073][   T29] audit: type=1326 audit(1770578126.179:28561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfda6baeb9 code=0x7ffc0000
[  206.004654][   T29] audit: type=1326 audit(1770578126.209:28562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfda6baeb9 code=0x7ffc0000
[  206.028452][   T29] audit: type=1326 audit(1770578126.209:28563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfda6baeb9 code=0x7ffc0000
[  206.037338][ T9455] netlink: 'syz.9.1786': attribute type 16 has an invalid length.
[  206.053199][   T29] audit: type=1326 audit(1770578126.209:28564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfda67b78e code=0x7ffc0000
[  206.060153][ T9455] netlink: 'syz.9.1786': attribute type 17 has an invalid length.
[  206.091974][   T29] audit: type=1400 audit(1770578126.209:28565): avc:  denied  { read write } for  pid=9398 comm="syz.8.1771" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  206.116010][   T29] audit: type=1400 audit(1770578126.209:28566): avc:  denied  { open } for  pid=9398 comm="syz.8.1771" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  206.139693][   T29] audit: type=1326 audit(1770578126.209:28567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfda6bab4b code=0x7ffc0000
[  206.163532][   T29] audit: type=1400 audit(1770578126.209:28568): avc:  denied  { ioctl } for  pid=9398 comm="syz.8.1771" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  206.188547][   T29] audit: type=1326 audit(1770578126.209:28569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9398 comm="syz.8.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfda6baeb9 code=0x7ffc0000
[  206.248133][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.258890][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.379802][ T9472] FAULT_INJECTION: forcing a failure.
[  206.379802][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.387988][ T3313] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  206.393138][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.9.1792 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  206.393298][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  206.393342][ T9472] Call Trace:
[  206.393363][ T9472]  <TASK>
[  206.393386][ T9472]  __dump_stack+0x1d/0x30
[  206.393472][ T9472]  dump_stack_lvl+0x95/0xd0
[  206.393546][ T9472]  dump_stack+0x15/0x1b
[  206.393618][ T9472]  should_fail_ex+0x263/0x280
[  206.393778][ T9472]  should_fail+0xb/0x20
[  206.393880][ T9472]  should_fail_usercopy+0x1a/0x20
[  206.393976][ T9472]  _copy_from_user+0x1c/0xb0
[  206.394049][ T9472]  get_itimerspec64+0x4c/0x1b0
[  206.394220][ T9472]  __x64_sys_timerfd_settime+0x89/0x140
[  206.394315][ T9472]  x64_sys_call+0x2b12/0x3000
[  206.394438][ T9472]  do_syscall_64+0xc0/0x2a0
[  206.394595][ T9472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.394703][ T9472] RIP: 0033:0x7f57f436aeb9
[  206.394756][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.394819][ T9472] RSP: 002b:00007f57f2dc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e
[  206.394885][ T9472] RAX: ffffffffffffffda RBX: 00007f57f45e5fa0 RCX: 00007f57f436aeb9
[  206.394929][ T9472] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  206.394972][ T9472] RBP: 00007f57f2dc7090 R08: 0000000000000000 R09: 0000000000000000
[  206.395014][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.395055][ T9472] R13: 00007f57f45e6038 R14: 00007f57f45e5fa0 R15: 00007ffc9cd19e58
[  206.395118][ T9472]  </TASK>
[  206.560877][ T3313] FAT-fs (loop3): Filesystem has been set read-only
[  206.571242][ T9475] vfat: Unknown parameter ''
[  206.576619][ T3313] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  206.614102][ T9469] option changes via remount are deprecated (pid=9458 comm=syz.2.1789)
[  206.622503][ T9469] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  206.728038][ T9469] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  206.790104][ T9487] netlink: 'syz.7.1801': attribute type 11 has an invalid length.
[  206.816368][ T9492] set_capacity_and_notify: 13 callbacks suppressed
[  206.816439][ T9492] loop9: detected capacity change from 0 to 512
[  206.839763][ T9492] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  206.850552][ T9487] loop7: detected capacity change from 0 to 1024
[  206.862319][ T9492] EXT4-fs error (device loop9): ext4_get_journal_inode:5849: inode #3: comm syz.9.1802: iget: special inode unallocated
[  206.875354][ T9492] EXT4-fs (loop9): no journal found
[  206.880650][ T9492] EXT4-fs (loop9): can't get journal size
[  206.896965][ T9492] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[  206.913099][ T9492] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #3: comm syz.9.1802: iget: special inode unallocated
[  206.960218][ T9498] FAULT_INJECTION: forcing a failure.
[  206.960218][ T9498] name failslab, interval 1, probability 0, space 0, times 0
[  206.972937][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz.8.1803 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  206.973045][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  206.973059][ T9498] Call Trace:
[  206.973066][ T9498]  <TASK>
[  206.973073][ T9498]  __dump_stack+0x1d/0x30
[  206.973111][ T9498]  dump_stack_lvl+0x95/0xd0
[  206.973139][ T9498]  dump_stack+0x15/0x1b
[  206.973164][ T9498]  should_fail_ex+0x263/0x280
[  206.973196][ T9498]  should_failslab+0x8c/0xb0
[  206.973268][ T9498]  __kmalloc_noprof+0xb8/0x580
[  206.973296][ T9498]  ? set_mcast_msfilter+0x3c/0x180
[  206.973354][ T9498]  set_mcast_msfilter+0x3c/0x180
[  206.973391][ T9498]  ip_set_mcast_msfilter+0x244/0x290
[  206.973546][ T9498]  do_ip_setsockopt+0x16c9/0x2290
[  206.973585][ T9498]  ip_setsockopt+0x58/0x110
[  206.973621][ T9498]  udp_setsockopt+0x99/0xb0
[  206.973672][ T9498]  sock_common_setsockopt+0x69/0x80
[  206.973723][ T9498]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  206.973759][ T9498]  __sys_setsockopt+0x184/0x200
[  206.973801][ T9498]  __x64_sys_setsockopt+0x64/0x80
[  206.973890][ T9498]  x64_sys_call+0x21d5/0x3000
[  206.973922][ T9498]  do_syscall_64+0xc0/0x2a0
[  206.973963][ T9498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.974070][ T9498] RIP: 0033:0x7fdfda6baeb9
[  206.974091][ T9498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.974112][ T9498] RSP: 002b:00007fdfd910f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  206.974132][ T9498] RAX: ffffffffffffffda RBX: 00007fdfda935fa0 RCX: 00007fdfda6baeb9
[  206.974146][ T9498] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004
[  206.974160][ T9498] RBP: 00007fdfd910f090 R08: 0000000000000310 R09: 0000000000000000
[  206.974220][ T9498] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000001
[  206.974294][ T9498] R13: 00007fdfda936038 R14: 00007fdfda935fa0 R15: 00007ffd1d73eee8
[  206.974320][ T9498]  </TASK>
[  206.974582][ T9492] EXT4-fs (loop9): failed to initialize system zone (-117)
[  207.240116][ T9492] EXT4-fs (loop9): mount failed
[  207.470594][ T9521] loop7: detected capacity change from 0 to 512
[  207.479557][ T9521] EXT4-fs: Ignoring removed nomblk_io_submit option
[  207.514859][ T6175] team0: Port device gtp1 removed
[  207.520397][ T9521] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  207.528402][ T9521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  207.541192][ T9521] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  207.541222][ T9521] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  207.542920][ T9531] netlink: 'syz.8.1814': attribute type 11 has an invalid length.
[  207.548254][ T6175] team0: Port device gtp0 removed
[  207.576869][ T6175] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  207.628828][ T9538] Cannot find add_set index 0 as target
[  207.629552][ T6175] bond0 (unregistering): Released all slaves
[  207.631382][ T6175] bond1 (unregistering): Released all slaves
[  207.634433][ T6175] bond2 (unregistering): Released all slaves
[  207.636776][ T9536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9536 comm=syz.7.1815
[  207.667764][ T6175] bond3 (unregistering): Released all slaves
[  207.678669][ T9531] loop8: detected capacity change from 0 to 1024
[  207.751654][ T6175] tipc: Disabling bearer <udp:syz2>
[  207.751685][ T6175] tipc: Left network mode
[  207.859250][ T9557] __nla_validate_parse: 6 callbacks suppressed
[  207.859351][ T9557] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1818'.
[  207.874806][ T9557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1818'.
[  207.979877][ T9567] loop2: detected capacity change from 0 to 128
[  207.986326][ T9567] vfat: Unknown parameter ''
[  208.022790][ T6175] hsr_slave_0: left promiscuous mode
[  208.049620][ T9567] option changes via remount are deprecated (pid=9549 comm=syz.2.1818)
[  208.057937][ T9567] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  208.073024][ T9572] loop7: detected capacity change from 0 to 1024
[  208.080185][ T6175] hsr_slave_1: left promiscuous mode
[  208.125093][ T9577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9577 comm=syz.8.1826
[  208.179936][ T9567] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  208.225946][ T9582] loop7: detected capacity change from 0 to 1024
[  208.426991][ T9593] netlink: 'syz.8.1830': attribute type 11 has an invalid length.
[  208.476657][ T9593] loop8: detected capacity change from 0 to 1024
[  208.489845][ T9504] chnl_net:caif_netlink_parms(): no params data found
[  208.534023][ T6175] IPVS: stop unused estimator thread 0...
[  208.542530][ T9593] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1830: missing EA_INODE flag
[  208.597464][ T9593] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1830: error while reading EA inode 11 err=-117
[  208.607500][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.616896][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.624495][ T9504] bridge_slave_0: entered allmulticast mode
[  208.631290][ T9504] bridge_slave_0: entered promiscuous mode
[  208.638690][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.645807][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.653521][ T9504] bridge_slave_1: entered allmulticast mode
[  208.660296][ T9504] bridge_slave_1: entered promiscuous mode
[  208.679695][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.691764][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.722909][ T9504] team0: Port device team_slave_0 added
[  208.730768][ T9504] team0: Port device team_slave_1 added
[  208.759860][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.766886][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.793018][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.830631][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1831'.
[  208.848958][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.855981][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.882407][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.964674][ T9504] hsr_slave_0: entered promiscuous mode
[  208.978928][ T9504] hsr_slave_1: entered promiscuous mode
[  209.018713][ T9504] debugfs: 'hsr0' already exists in 'hsr'
[  209.024606][ T9504] Cannot create hsr debugfs directory
[  209.032322][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1834'.
[  209.092534][ T6190] Bluetooth: hci1: Frame reassembly failed (-84)
[  209.289321][ T3421] kernel read not supported for file /85/wchan (pid: 3421 comm: kworker/1:5)
[  209.364002][ T9672] loop9: detected capacity change from 0 to 256
[  209.416767][ T9504] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  209.428771][ T9504] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  209.436213][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1841'.
[  209.447750][ T9504] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  209.461858][ T9676] vxlan0: entered promiscuous mode
[  209.467119][ T9676] vxlan0: entered allmulticast mode
[  209.474456][ T6171] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.483360][ T9504] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  209.501089][ T6171] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.510065][ T6171] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.521422][ T6171] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.564522][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.580836][ T9504] 8021q: adding VLAN 0 to HW filter on device team0
[  209.597750][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.604940][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.619267][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.626446][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.717123][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.869799][ T9504] veth0_vlan: entered promiscuous mode
[  209.880017][ T9504] veth1_vlan: entered promiscuous mode
[  209.899437][ T9504] veth0_macvtap: entered promiscuous mode
[  209.907666][ T9504] veth1_macvtap: entered promiscuous mode
[  209.923490][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.937956][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.951268][ T6190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.969441][ T6190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.981489][ T6190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.017702][ T6190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.022641][ T9746] loop2: detected capacity change from 0 to 128
[  210.338777][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'.
[  210.394082][ T9791] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.528659][ T3511] Bluetooth: hci0: command 0x1003 tx timeout
[  210.529492][ T4077] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  210.718444][ T9840] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1860'.
[  210.769544][ T3388] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  210.920225][ T9862] Unsupported NM flag settings (240)
[  210.930277][   T29] kauditd_printk_skb: 125 callbacks suppressed
[  210.930291][   T29] audit: type=1400 audit(1770578140.185:28695): avc:  denied  { ioctl } for  pid=9861 comm="syz.9.1864" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  211.000474][   T29] audit: type=1400 audit(1770578140.225:28696): avc:  denied  { mounton } for  pid=9861 comm="syz.9.1864" path="/51/file0/file0/file0" dev="loop9" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1
[  211.025299][   T29] audit: type=1400 audit(1770578140.235:28697): avc:  denied  { bind } for  pid=9865 comm="syz.9.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  211.048341][   T29] audit: type=1400 audit(1770578140.305:28698): avc:  denied  { setopt } for  pid=9865 comm="syz.9.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  211.051038][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1865'.
[  211.083572][ T9866] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.094659][ T9866] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.168401][ T4077] Bluetooth: hci1: command 0x1003 tx timeout
[  211.174612][   T44] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  211.199818][ T9875] FAULT_INJECTION: forcing a failure.
[  211.199818][ T9875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  211.211210][ T9866] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.213105][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.7.1866 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  211.213185][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  211.213291][ T9875] Call Trace:
[  211.213319][ T9875]  <TASK>
[  211.213342][ T9875]  __dump_stack+0x1d/0x30
[  211.213426][ T9875]  dump_stack_lvl+0x95/0xd0
[  211.213501][ T9875]  dump_stack+0x15/0x1b
[  211.213589][ T9875]  should_fail_ex+0x263/0x280
[  211.213695][ T9875]  should_fail+0xb/0x20
[  211.213861][ T9875]  should_fail_usercopy+0x1a/0x20
[  211.214016][ T9875]  _copy_from_user+0x1c/0xb0
[  211.214089][ T9875]  sctp_setsockopt+0x164/0xea0
[  211.214198][ T9875]  sock_common_setsockopt+0x69/0x80
[  211.214282][ T9875]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  211.214378][ T9875]  __sys_setsockopt+0x184/0x200
[  211.214519][ T9875]  __x64_sys_setsockopt+0x64/0x80
[  211.214698][ T9875]  x64_sys_call+0x21d5/0x3000
[  211.214817][ T9875]  do_syscall_64+0xc0/0x2a0
[  211.214935][ T9875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.215012][ T9875] RIP: 0033:0x7fbe49d7aeb9
[  211.215064][ T9875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.215121][ T9875] RSP: 002b:00007fbe487cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  211.215229][ T9875] RAX: ffffffffffffffda RBX: 00007fbe49ff5fa0 RCX: 00007fbe49d7aeb9
[  211.215273][ T9875] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005
[  211.215316][ T9875] RBP: 00007fbe487cf090 R08: 000000000000009c R09: 0000000000000000
[  211.215367][ T9875] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  211.215419][ T9875] R13: 00007fbe49ff6038 R14: 00007fbe49ff5fa0 R15: 00007fff0719a548
[  211.215513][ T9875]  </TASK>
[  211.413995][ T9866] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.436180][ T3481] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  211.449837][ T6171] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  211.485281][ T9866] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.495721][ T9866] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.518280][ T9887] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1869'.
[  211.527557][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1869'.
[  211.566794][ T9887] vfat: Unknown parameter ''
[  211.573486][ T9887] option changes via remount are deprecated (pid=9883 comm=syz.8.1869)
[  211.582240][ T9887] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  211.590117][ T9887] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  211.618814][ T9866] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.629353][ T9866] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.679103][ T6171] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  211.687429][ T6171] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.706726][ T6171] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  211.715262][ T6171] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.724991][ T6171] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  211.733297][ T6171] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.753107][ T6171] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.762125][ T6171] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.777551][ T9899] program syz.4.1872 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.798375][ T9897] program syz.4.1872 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.905513][   T29] audit: type=1400 audit(1770578141.155:28699): avc:  denied  { write } for  pid=9912 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  211.926589][   T29] audit: type=1400 audit(1770578141.155:28700): avc:  denied  { nlmsg_write } for  pid=9912 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  212.024607][ T9921] set_capacity_and_notify: 6 callbacks suppressed
[  212.024628][ T9921] loop9: detected capacity change from 0 to 128
[  212.038800][ T9921] vfat: Unknown parameter ''
[  212.044818][ T9921] option changes via remount are deprecated (pid=9910 comm=syz.9.1874)
[  212.053932][ T9921] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  212.061828][ T9921] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  212.084004][ T9913] loop2: detected capacity change from 0 to 512
[  212.188535][ T9913] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  212.308440][ T9913] EXT4-fs (loop2): orphan cleanup on readonly fs
[  212.401672][ T9913] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1876: corrupted inode contents
[  212.506367][ T9913] EXT4-fs (loop2): Remounting filesystem read-only
[  212.528842][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.538290][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  212.560814][   T29] audit: type=1400 audit(1770578141.645:28701): avc:  denied  { nlmsg_read } for  pid=9931 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  212.581671][ T9913] EXT4-fs (loop2): 1 truncate cleaned up
[  212.581855][ T6186] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  212.581881][ T6186] Quota error (device loop2): write_blk: dquota write failed
[  212.581932][ T6186] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  212.581969][ T6186] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  212.582031][ T6186] Quota error (device loop2): write_blk: dquota write failed
[  212.582068][ T6186] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  212.717876][ T9934] loop8: detected capacity change from 0 to 512
[  212.766043][ T9934] EXT4-fs: Ignoring removed nobh option
[  212.816289][ T9952] loop2: detected capacity change from 0 to 128
[  212.834719][ T9934] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  212.879599][ T9952] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.933699][ T9952] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1882: reserved inode found cleared - inode=2
[  212.960836][ T9934] EXT4-fs (loop8): 1 truncate cleaned up
[  212.966155][ T9961] __nla_validate_parse: 2 callbacks suppressed
[  212.966171][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'.
[  213.000466][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.007918][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.062810][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.070359][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.165085][ T9981] netlink: 'syz.2.1887': attribute type 27 has an invalid length.
[  213.255777][ T9981] ip6gre1: left allmulticast mode
[  213.439357][T10015] loop8: detected capacity change from 0 to 128
[  213.503829][T10021] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1893'.
[  213.514359][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1893'.
[  213.549286][T10021] loop9: detected capacity change from 0 to 128
[  213.556214][T10021] vfat: Unknown parameter ''
[  213.563336][T10021] option changes via remount are deprecated (pid=10007 comm=syz.9.1893)
[  213.573501][T10021] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  213.582154][T10021] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  213.595807][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  213.650294][T10015] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  213.771918][T10025] loop7: detected capacity change from 0 to 256
[  213.855536][T10015] EXT4-fs error (device loop8): __ext4_new_inode:1073: comm syz.8.1895: reserved inode found cleared - inode=2
[  213.881690][T10025] FAT-fs (loop7): IO charset iso8859-5 not found
[  213.916178][T10025] tipc: Started in network mode
[  213.922060][T10025] tipc: Node identity 5f786c6174653d3, cluster identity 4711
[  213.929578][T10025] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.999897][T10025] can0: slcan on ttyS3.
[  214.043708][ T9016] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  214.088805][T10030] bond0: option all_slaves_active: invalid value (5)
[  214.108645][T10024] can0 (unregistered): slcan off ttyS3.
[  214.286164][T10055] loop9: detected capacity change from 0 to 256
[  214.357672][T10055] 9p: Bad value for 'source'
[  214.372567][ T6186] Bluetooth: hci0: Frame reassembly failed (-84)
[  214.444955][T10071] loop9: detected capacity change from 0 to 128
[  214.481134][T10074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1910'.
[  214.559418][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1912'.
[  214.568594][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1912'.
[  214.588223][T10085] loop2: detected capacity change from 0 to 136
[  214.743909][T10097] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1914'.
[  214.753479][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1914'.
[  214.809445][T10099] vfat: Unknown parameter ''
[  214.816750][T10099] option changes via remount are deprecated (pid=10087 comm=syz.9.1914)
[  214.825179][T10099] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  214.833352][T10099] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  215.285899][T10110] bond0: option all_slaves_active: invalid value (5)
[  215.505485][T10141] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  215.555594][T10141] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.1921: reserved inode found cleared - inode=2
[  215.645219][T10155] netlink: 'syz.4.1925': attribute type 11 has an invalid length.
[  215.844128][T10161] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1927: missing EA_INODE flag
[  215.871368][T10161] EXT4-fs (loop4): Remounting filesystem read-only
[  215.954511][T10167] netem: change failed
[  216.188356][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  216.188445][   T29] audit: type=1400 audit(1770578145.445:28731): avc:  denied  { execute } for  pid=10180 comm="syz.4.1931" name="cgroup" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  216.219403][   T29] audit: type=1326 audit(1770578145.445:28732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10180 comm="syz.4.1931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d9bf0aeb9 code=0x0
[  216.288224][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  216.331490][ T8832] EXT4-fs unmount: 35 callbacks suppressed
[  216.331506][ T8832] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.369936][T10192] EXT4-fs: Ignoring removed nobh option
[  216.383862][T10192] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  216.403145][T10192] EXT4-fs (loop2): 1 truncate cleaned up
[  216.410175][T10192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.448177][ T4077] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  216.448184][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[  216.500675][T10201] tQ±6ã×\b‹¡Y­4: renamed from lo (while UP)
[  216.502505][   T29] audit: type=1400 audit(1770578145.755:28733): avc:  denied  { write } for  pid=10200 comm="syz.9.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  216.577205][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1940'.
[  216.608067][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.644061][   T29] audit: type=1400 audit(1770578145.895:28734): avc:  denied  { create } for  pid=10210 comm="syz.2.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  216.707055][T10215] macsec0: entered promiscuous mode
[  216.713063][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1943'.
[  216.724485][   T29] audit: type=1400 audit(1770578145.895:28735): avc:  denied  { bind } for  pid=10210 comm="syz.2.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  216.724781][T10215] veth1_macvtap: left promiscuous mode
[  216.744848][   T29] audit: type=1400 audit(1770578145.895:28736): avc:  denied  { connect } for  pid=10210 comm="syz.2.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  216.779339][T10219] Cannot find del_set index 0 as target
[  216.790982][T10215] macsec0 (unregistering): left promiscuous mode
[  216.792508][   T29] audit: type=1400 audit(1770578146.025:28737): avc:  denied  { bind } for  pid=10216 comm="syz.8.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  216.817544][   T29] audit: type=1400 audit(1770578146.025:28738): avc:  denied  { name_bind } for  pid=10216 comm="syz.8.1945" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  216.838774][   T29] audit: type=1400 audit(1770578146.035:28739): avc:  denied  { node_bind } for  pid=10216 comm="syz.8.1945" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  216.903991][   T29] audit: type=1326 audit(1770578146.155:28740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.8.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfda6baeb9 code=0x7ffc0000
[  216.989738][T10224] netlink: 'syz.4.1947': attribute type 1 has an invalid length.
[  217.011087][T10218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  217.038786][T10218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1944: bg 0: block 4: invalid block bitmap
[  217.052884][T10218] EXT4-fs (loop2): 1 truncate cleaned up
[  217.059358][T10218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.072083][T10229] ------------[ cut here ]------------
[  217.072098][T10229] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  217.072180][T10229] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.7.1949/10229
[  217.072239][T10229] Modules linked in:
[  217.072258][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.7.1949 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  217.072289][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  217.072307][T10229] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660
[  217.144492][T10229] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08
[  217.144565][T10229] RSP: 0018:ffffc9001300f388 EFLAGS: 00010246
[  217.144587][T10229] RAX: ffff88810ac6ab90 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd
[  217.144602][T10229] RDX: ffffffff867f0c86 RSI: ffffffff866bb997 RDI: ffffffff86fb99b0
[  217.144617][T10229] RBP: ffff88811aea9a70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[  217.144633][T10229] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811aea9a30
[  217.144647][T10229] R13: 00000000ffffdfcc R14: ffff88811aea9a7c R15: ffff88811aea9a68
[  217.144663][T10229] FS:  00007fbe487cf6c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000
[  217.144739][T10229] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  217.144756][T10229] CR2: 0000200000001000 CR3: 000000010c92e000 CR4: 00000000003506f0
[  217.144779][T10229] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000
[  217.144798][T10229] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  217.144814][T10229] Call Trace:
[  217.144822][T10229]  <TASK>
[  217.144869][T10229]  reg_set_min_max+0x1c8/0x260
[  217.144918][T10229]  check_cond_jmp_op+0x13bd/0x1a80
[  217.144959][T10229]  do_check+0x440c/0x9060
[  217.145045][T10229]  do_check_common+0xd0f/0x1630
[  217.145095][T10229]  bpf_check+0x2f6d/0xc7e0
[  217.145123][T10229]  ? __alloc_frozen_pages_noprof+0x18a/0x350
[  217.145228][T10229]  ? alloc_pages_bulk_noprof+0x4a1/0x520
[  217.145267][T10229]  ? __vmap_pages_range_noflush+0xb9c/0xcc0
[  217.145300][T10229]  ? pcpu_block_refresh_hint+0x10b/0x170
[  217.145435][T10229]  ? pcpu_block_update_hint_alloc+0x640/0x660
[  217.145545][T10229]  ? pcpu_next_fit_region+0x16a/0x380
[  217.145588][T10229]  ? pcpu_block_update_hint_alloc+0x640/0x660
[  217.145634][T10229]  ? css_rstat_updated+0xbb/0x280
[  217.145751][T10229]  ? mod_memcg_state+0x182/0x260
[  217.145803][T10229]  ? __rcu_read_unlock+0x4e/0x70
[  217.145843][T10229]  ? pcpu_memcg_post_alloc_hook+0xec/0x170
[  217.145958][T10229]  ? pcpu_alloc_noprof+0xb08/0x1010
[  217.145987][T10229]  ? should_fail_ex+0x30/0x280
[  217.146020][T10229]  ? __kmalloc_noprof+0x2a3/0x580
[  217.146051][T10229]  ? security_bpf_prog_load+0x60/0x140
[  217.146165][T10229]  ? selinux_bpf_prog_load+0xac/0xd0
[  217.146200][T10229]  ? security_bpf_prog_load+0x9e/0x140
[  217.146226][T10229]  bpf_prog_load+0xf76/0x1140
[  217.146267][T10229]  ? security_bpf+0x2b/0x90
[  217.146343][T10229]  __sys_bpf+0x469/0x7b0
[  217.146398][T10229]  __x64_sys_bpf+0x41/0x50
[  217.146501][T10229]  x64_sys_call+0x28e1/0x3000
[  217.146580][T10229]  do_syscall_64+0xc0/0x2a0
[  217.146665][T10229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.146688][T10229] RIP: 0033:0x7fbe49d7aeb9
[  217.146707][T10229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.146730][T10229] RSP: 002b:00007fbe487cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  217.146843][T10229] RAX: ffffffffffffffda RBX: 00007fbe49ff5fa0 RCX: 00007fbe49d7aeb9
[  217.146914][T10229] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005
[  217.146932][T10229] RBP: 00007fbe49de8c1f R08: 0000000000000000 R09: 0000000000000000
[  217.146950][T10229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.146967][T10229] R13: 00007fbe49ff6038 R14: 00007fbe49ff5fa0 R15: 00007fff0719a548
[  217.147005][T10229]  </TASK>
[  217.147026][T10229] ---[ end trace 0000000000000000 ]---
[  217.196274][T10218] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.327254][T10241] netlink: 'syz.7.1952': attribute type 11 has an invalid length.
[  217.354853][T10243] xfrm0: entered promiscuous mode
[  217.390420][T10250] set_capacity_and_notify: 6 callbacks suppressed
[  217.390480][T10250] loop7: detected capacity change from 0 to 1024
[  217.426775][T10254] loop9: detected capacity change from 0 to 512
[  217.429743][T10254] EXT4-fs (loop9): 1 truncate cleaned up
[  217.430387][T10254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.433016][T10250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.437793][T10254] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  217.438238][T10241] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1952: missing EA_INODE flag
[  217.439234][T10241] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1952: error while reading EA inode 11 err=-117
[  217.455056][T10258] loop8: detected capacity change from 0 to 164
[  217.473886][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.477495][T10258] Unsupported NM flag settings (240)
[  217.477629][T10258] Unsupported NM flag settings (240)
[  217.540955][ T8750] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.738180][T10297] FAULT_INJECTION: forcing a failure.
[  217.738180][T10297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.738233][T10297] CPU: 0 UID: 0 PID: 10297 Comm: syz.8.1966 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  217.738267][T10297] Tainted: [W]=WARN
[  217.738274][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  217.738287][T10297] Call Trace:
[  217.738295][T10297]  <TASK>
[  217.738303][T10297]  __dump_stack+0x1d/0x30
[  217.738341][T10297]  dump_stack_lvl+0x95/0xd0
[  217.738363][T10297]  dump_stack+0x15/0x1b
[  217.738386][T10297]  should_fail_ex+0x263/0x280
[  217.738439][T10297]  should_fail+0xb/0x20
[  217.738544][T10297]  should_fail_usercopy+0x1a/0x20
[  217.738645][T10297]  _copy_from_user+0x1c/0xb0
[  217.738677][T10297]  ___sys_sendmsg+0xc1/0x1e0
[  217.738711][T10297]  __x64_sys_sendmsg+0xd4/0x160
[  217.738735][T10297]  x64_sys_call+0x17ba/0x3000
[  217.738767][T10297]  do_syscall_64+0xc0/0x2a0
[  217.738842][T10297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.738937][T10297] RIP: 0033:0x7fdfda6baeb9
[  217.738957][T10297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.738980][T10297] RSP: 002b:00007fdfd910f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.739006][T10297] RAX: ffffffffffffffda RBX: 00007fdfda935fa0 RCX: 00007fdfda6baeb9
[  217.739025][T10297] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  217.739043][T10297] RBP: 00007fdfd910f090 R08: 0000000000000000 R09: 0000000000000000
[  217.739060][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.739088][T10297] R13: 00007fdfda936038 R14: 00007fdfda935fa0 R15: 00007ffd1d73eee8
[  217.739109][T10297]  </TASK>
[  217.766276][T10293] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  218.256619][T10313] loop7: detected capacity change from 0 to 164
[  218.262539][T10293] vhci_hcd vhci_hcd.2: invalid port number 96
[  218.269070][T10293] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7
[  218.287916][T10313] Unsupported NM flag settings (240)
[  218.305728][T10313] Unsupported NM flag settings (240)
[  218.336881][T10320] netlink: 'syz.9.1971': attribute type 11 has an invalid length.
[  218.425973][T10320] loop9: detected capacity change from 0 to 1024
[  218.492685][T10320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.532388][T10320] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1971: missing EA_INODE flag
[  218.544970][T10339] loop7: detected capacity change from 0 to 1024
[  218.556621][T10320] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.1971: error while reading EA inode 11 err=-117
[  218.575678][T10339] EXT4-fs: Mount option(s) incompatible with ext3
[  218.579672][T10343] bond1: option all_slaves_active: invalid value (5)
[  218.601498][T10343] bond1 (unregistering): Released all slaves
[  218.660504][T10352] netlink: 'syz.7.1977': attribute type 30 has an invalid length.
[  218.684914][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.760724][T10360] loop9: detected capacity change from 0 to 128
[  218.787142][T10363] __nla_validate_parse: 3 callbacks suppressed
[  218.787159][T10363] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1980'.
[  218.819714][T10360] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.841532][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'.
[  218.903264][T10360] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  218.939155][T10366] bond1: Unable to set down delay as MII monitoring is disabled
[  218.949846][T10366] bond1 (unregistering): Released all slaves
[  218.969976][T10382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10382 comm=syz.4.1981
[  219.014618][T10385] loop8: detected capacity change from 0 to 164
[  219.022717][ T8832] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.035104][T10385] Unsupported NM flag settings (240)
[  219.049087][T10385] Unsupported NM flag settings (240)
[  219.194600][T10405] netlink: 'syz.9.1989': attribute type 11 has an invalid length.
[  219.249428][T10408] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1991'.
[  219.260077][T10408] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1991'.
[  219.297431][T10410] loop8: detected capacity change from 0 to 512
[  219.304643][T10405] loop9: detected capacity change from 0 to 1024
[  219.330949][T10410] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  219.359085][T10405] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.433646][T10405] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1989: missing EA_INODE flag
[  219.446510][T10410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  219.455515][T10410] System zones: 1-12
[  219.461331][T10410] EXT4-fs (loop8): 1 truncate cleaned up
[  219.470529][T10405] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.1989: error while reading EA inode 11 err=-117
[  219.471310][T10410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.545372][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.584537][T10431] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.619062][T10431] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  219.674810][T10441] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1996'.
[  219.685318][T10441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1996'.
[  219.720494][T10441] vfat: Unknown parameter ''
[  219.727633][T10441] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  219.927676][ T8768] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.940940][T10431] EXT4-fs error (device loop7): __ext4_new_inode:1073: comm syz.7.1994: reserved inode found cleared - inode=2
[  220.374487][ T8750] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.777373][T10499] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  220.779493][T10496] EXT4-fs: Ignoring removed orlov option
[  220.800694][ T3783] ==================================================================
[  220.808831][ T3783] BUG: KCSAN: data-race in drop_nlink / generic_fillattr
[  220.815993][ T3783] 
[  220.818348][ T3783] write to 0xffff88810d0ba978 of 4 bytes by task 3304 on cpu 1:
[  220.826001][ T3783]  drop_nlink+0x3d/0xa0
[  220.830196][ T3783]  simple_unlink+0x60/0x80
[  220.834655][ T3783]  shmem_unlink+0x12d/0x140
[  220.839199][ T3783]  shmem_rename2+0x18e/0x310
[  220.843817][ T3783]  vfs_rename+0xa9e/0xbf0
[  220.848179][ T3783]  do_renameat2+0x39a/0x850
[  220.852810][ T3783]  __x64_sys_rename+0x58/0x70
[  220.857516][ T3783]  x64_sys_call+0x24e/0x3000
[  220.862154][ T3783]  do_syscall_64+0xc0/0x2a0
[  220.866773][ T3783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.872691][ T3783] 
[  220.875036][ T3783] read to 0xffff88810d0ba978 of 4 bytes by task 3783 on cpu 0:
[  220.882610][ T3783]  generic_fillattr+0xfb/0x340
[  220.887413][ T3783]  shmem_getattr+0x181/0x200
[  220.892045][ T3783]  vfs_getattr_nosec+0x146/0x1e0
[  220.897018][ T3783]  __se_sys_newfstat+0x96/0x460
[  220.901906][ T3783]  __x64_sys_newfstat+0x31/0x40
[  220.906805][ T3783]  x64_sys_call+0x2c51/0x3000
[  220.911517][ T3783]  do_syscall_64+0xc0/0x2a0
[  220.916065][ T3783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.921994][ T3783] 
[  220.924336][ T3783] value changed: 0x00000001 -> 0x00000000
[  220.930070][ T3783] 
[  220.932410][ T3783] Reported by Kernel Concurrency Sanitizer on:
[  220.938582][ T3783] CPU: 0 UID: 0 PID: 3783 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  220.949463][ T3783] Tainted: [W]=WARN
[  220.953294][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  220.963383][ T3783] ==================================================================
[  220.994992][T10499] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2004: bg 0: block 4: invalid block bitmap
[  221.019494][T10499] EXT4-fs (loop8): 1 truncate cleaned up
[  221.040648][T10501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.046397][T10499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.061461][T10496] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.074874][T10501] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.171411][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.234452][ T8832] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.267306][ T8768] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.448239][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!