last executing test programs:

3m3.816117268s ago: executing program 1 (id=239):
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000009)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_misc(r1, &(0x7f0000000300)="65f38e", 0x3)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r3 = dup2(r0, r0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
write$binfmt_misc(r3, &(0x7f0000000000)="e69e21", 0x3)

3m3.518234193s ago: executing program 1 (id=246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d30000000fc00000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3m3.426305691s ago: executing program 1 (id=249):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100))
socket$inet_sctp(0x2, 0x1, 0x84)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xf0e7, 0x60000)
syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xffff7ffe, 0x400, 0x3, 0x8000031c}, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
socket(0x1e, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0xfe0f000000000000, 0x8811}, 0x0)

3m3.360415358s ago: executing program 1 (id=252):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000fc0))
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x4008040)
renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)

3m2.857988302s ago: executing program 1 (id=256):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0xe4ff}}}}]}]}, 0x78}}, 0x0)

3m0.731400709s ago: executing program 1 (id=270):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x62, 0xf9, 0x9, 0x0, 0x9, 0x20, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080)}, 0x810, 0x2, 0x80, 0xf, 0x80000000, 0x9cd, 0x5, 0x0, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0xb, r0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'], 0x48)
timer_delete(0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@private, @dev, <r5=>0x0}, &(0x7f0000000380)=0xc)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_DST={0x8, 0x1, @local}, @RTA_OIF={0x8, 0x4, r4}, @RTA_IIF={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=@ipv6_newroute={0x30, 0x18, 0xa01, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfc, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x30}, 0x1, 0x2, 0x0, 0x20008000}, 0x10)
connect$pppoe(r2, &(0x7f0000000480)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x11343a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='/dev/ppp\x00', &(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa', 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
unshare(0x2c020400)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000900)={0x0, 0xb6})
r10 = socket(0x10, 0x3, 0x0)
connect$pppl2tp(r10, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000050000d381a7fa2c5d757100611108000000000085000000c60000007e0949ee6523fcc9355e0e9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94)

3m0.700815452s ago: executing program 32 (id=270):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x62, 0xf9, 0x9, 0x0, 0x9, 0x20, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080)}, 0x810, 0x2, 0x80, 0xf, 0x80000000, 0x9cd, 0x5, 0x0, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0xb, r0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'], 0x48)
timer_delete(0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@private, @dev, <r5=>0x0}, &(0x7f0000000380)=0xc)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_DST={0x8, 0x1, @local}, @RTA_OIF={0x8, 0x4, r4}, @RTA_IIF={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=@ipv6_newroute={0x30, 0x18, 0xa01, 0x70bd25, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfc, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x30}, 0x1, 0x2, 0x0, 0x20008000}, 0x10)
connect$pppoe(r2, &(0x7f0000000480)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x11343a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='/dev/ppp\x00', &(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa', 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
unshare(0x2c020400)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000900)={0x0, 0xb6})
r10 = socket(0x10, 0x3, 0x0)
connect$pppl2tp(r10, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000050000d381a7fa2c5d757100611108000000000085000000c60000007e0949ee6523fcc9355e0e9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94)

1m50.617196458s ago: executing program 5 (id=928):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000300)={0x20000002})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000080)={0x28000006})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a23f4}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
close(0x3)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000d0601080000000000000000020007000000f9ff000007000000d80d5b7ffdd904dbd26c4e5e9facff0bb14dadd2a0e70f6227e09240d901d9f3c60b278b3861c41689a4b99eb67a687326ceca1484606d697683ae64a9b15dfeb422a4afd420457c7353d7b8efbc3d124bcd50b4965f605baf2618de89918fd28608e71205930adcae9a479bdec08580605553eff26f495cd7ed122d4b9ee75efde1c7c85cbed6ea9c89069a2531f9a4fd4656d9a61ef13feb8020efa09b995d91e086962d619e625abd07240ebffd33f89e0079cad922"], 0x2c}}, 0x24008000)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000240)=0x7f, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfffffffd, 0x0, &(0x7f0000000080), 0x1, 0x1}]})

1m50.199074245s ago: executing program 5 (id=937):
r0 = socket$inet6(0xa, 0x80001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x1, 0x336, &(0x7f0000000e00)="$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")
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
socket(0x10, 0x3, 0x6)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e0000000000ff0100e8ffffffffffffff00000000010000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90)

1m48.166103293s ago: executing program 5 (id=953):
r0 = syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001)
r2 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4)
syz_io_uring_submit(r3, r4, 0x0)
io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x200000, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x21, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000004000000000000004703000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001f7400000400000018320000040000000000000000000000089908002c0d0000180000000800000000000000020000009500000000000000ea8cb7ae348450f9bcb12dd5e02a7e2d31009c7eab315b16a5c6aea20c676ce2639e1312427d46667583aa7b54c2d66e6482b176537ee3005421a19787af1b60c108a5e1114faed2"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x38, &(0x7f0000000180)=""/56, 0x41100, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x6, 0xb3c}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x5, 0x4, 0xd, 0x4}], 0x10, 0x48b}, 0x94)

1m48.031465175s ago: executing program 5 (id=956):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
lstat(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80a718, &(0x7f0000000400)={[{@nodioread_nolock}, {@min_batch_time}, {@nodioread_nolock}, {@nouid32}, {@resgid={'resgid', 0x3d, r0}}, {@journal_async_commit}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x4, 0x49b, &(0x7f0000000ec0)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xb}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f00000004c0)=@ll={0x11, 0x3, r3, 0x1, 0x1a}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="3e0b2edafeec76cd4af7cd64e0e55cddaef049f98d2087d47c01eeb5f820df11683fee680c2218c0d047bfc6d5acc86f15f5", 0x32}, {&(0x7f0000000600)="13dfc4f23a3c600e1ea18abfcd37c470674ede278dbe021fd324a63548a66f5d5d9275f5acb008ec699231fe06f17627f27cbfde4718db62b554773617df0fd9fb1f7a1e29ec0f44d13b70be4dd7278765aa67837f33b6394c7ca2d7468880441ee7d300c2d343ed47266c7d5e59e37729ee81f319a89b9a193c08d201847d93cf6c4f615622328f52a3da4fedcbdb288ec9bd5f6400fe1ac8979c7621ca017ff99919558c60167937e3de72847e57cb3a0b6241411a06b54a87e90a9b30b81140e5640da1a1", 0xc6}, {&(0x7f0000000700)="63c9fb28e6de70c451a3bb707387598034e86b772781e5c0607be952adf4e08d4a3c469d6a788d08d715d6532671782c18c3f516a3169c6d44a08f9b48937dfba1aad32ab357f6466cf45297a99c0c3c646fee0dbc516385a48f063bc08311f7f730b97699a465a6914b71c6a8082501f2795f26434b793754c3ec83405c5844335bd566aaf139107558819f8ae0a5a76b0a4f127605c56c07", 0x99}], 0x3, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}], 0x30}, 0x4000)

1m47.926451394s ago: executing program 5 (id=958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x100e4ff}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

1m47.215477357s ago: executing program 5 (id=964):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x814)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24000000)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x9, 0xe6, 0x5, 0x0, 0x7, 0x748, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x8000000000000000, 0x2}, 0x0, 0x7, 0x0, 0x3, 0x101, 0xf682, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socket$igmp(0x2, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000180)=""/53, 0x35)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r3)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x22d00a4, &(0x7f00000001c0)='\x91s\x99\xd1\xc2NAv\xc1\x1c_f\xaa\xbe\xbef\xcb\xe84D\xc9 \x91\xb9\x86\xa2x\xee\xd4\xf0T')
close(0x3)
readv(r4, &(0x7f0000000140), 0x0)
mq_notify(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f"], 0x168}}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m46.490720101s ago: executing program 33 (id=964):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x814)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24000000)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0x9, 0xe6, 0x5, 0x0, 0x7, 0x748, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x8000000000000000, 0x2}, 0x0, 0x7, 0x0, 0x3, 0x101, 0xf682, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
socket$igmp(0x2, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000180)=""/53, 0x35)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r3)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x22d00a4, &(0x7f00000001c0)='\x91s\x99\xd1\xc2NAv\xc1\x1c_f\xaa\xbe\xbef\xcb\xe84D\xc9 \x91\xb9\x86\xa2x\xee\xd4\xf0T')
close(0x3)
readv(r4, &(0x7f0000000140), 0x0)
mq_notify(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f"], 0x168}}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

56.72017833s ago: executing program 4 (id=1342):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0xce24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="e0", 0x1}], 0x1}}], 0x1, 0x4004041)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x100}, 0xc)
r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x800, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1})
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x2, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xd}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x240008d1)
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000002440)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000080)={r8, 0x7f}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r8, 0x6, 0xfffffffe}, 0xc)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

55.999693194s ago: executing program 4 (id=1350):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb8)
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) (async)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)

55.746347916s ago: executing program 4 (id=1351):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
ioctl$EVIOCRMFF(r1, 0x5509, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0xfd46, 0x8, 0x2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0xbcba}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000180)="9fa0", 0x2, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback={0xf00000000000000}, 0xc5f}, 0x1c)

54.954449175s ago: executing program 4 (id=1359):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
timer_create(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getrlimit(0x9, &(0x7f0000000000))
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
tkill(r0, 0x12)

54.708414297s ago: executing program 4 (id=1361):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x11000000, 0x0, 0x4010}, 0x0)

54.298020753s ago: executing program 4 (id=1363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000300)={0x20000002})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000080)={0x28000006})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a23f4}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000d0601080000000000000000020007000000f9ff000007000000d80d5b7ffdd904dbd26c4e5e9facff0bb14dadd2a0e70f6227e09240d901d9f3c60b278b3861c41689a4b99eb67a687326ceca1484606d697683ae64a9b15dfeb422a4afd420457c7353d7b8efbc3d124bcd50b4965f605baf2618de89918fd28608e71205930adcae9a479bdec08580605553eff26f495cd7ed122d4b9ee75efde1c7c85cbed6ea9c89069a2531f9a4fd4656d9a61ef13feb8020efa09b995d91e086962d619e625abd07240ebffd33f89e0079cad922"], 0x2c}}, 0x24008000)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000240)=0x7f, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfffffffd, 0x0, &(0x7f0000000080), 0x1, 0x1}]})

54.265918116s ago: executing program 34 (id=1363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000300)={0x20000002})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000080)={0x28000006})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a23f4}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000d0601080000000000000000020007000000f9ff000007000000d80d5b7ffdd904dbd26c4e5e9facff0bb14dadd2a0e70f6227e09240d901d9f3c60b278b3861c41689a4b99eb67a687326ceca1484606d697683ae64a9b15dfeb422a4afd420457c7353d7b8efbc3d124bcd50b4965f605baf2618de89918fd28608e71205930adcae9a479bdec08580605553eff26f495cd7ed122d4b9ee75efde1c7c85cbed6ea9c89069a2531f9a4fd4656d9a61ef13feb8020efa09b995d91e086962d619e625abd07240ebffd33f89e0079cad922"], 0x2c}}, 0x24008000)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000240)=0x7f, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfffffffd, 0x0, &(0x7f0000000080), 0x1, 0x1}]})

4.702236247s ago: executing program 6 (id=1803):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
r4 = getpid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x200, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f00000024c0)='.\x00', 0x400000c)
r6 = getegid()
statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x1, 0x0, r6, r7, r8, 0x3, 0xa3a}, 0x2, 0x4, 0xffffffffffffffff, 0x0, r0, r4, 0x5})
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x18, 0x1402, 0x1, 0x4f9, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000082)
poll(0x0, 0x0, 0x9)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r10, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b)

4.505655344s ago: executing program 0 (id=1806):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x80000003, 0x4)

4.504703634s ago: executing program 0 (id=1807):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x4, 0x2, 0x7ffffffd, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x0, 0x1000000}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4})
io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000002c0)={0x5, r4, 'id0\x00'})
statx(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x4000, 0x100, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1000410, &(0x7f0000000080)={[], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r5}}, {@permit_directio}, {@flag='dirsync'}, {@subj_role={'subj_role', 0x3d, ':)+!-'}}, {@appraise_type}]}, 0x6, 0x52d, &(0x7f0000000ac0)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x4, 0x2, 0x7ffffffd, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async)
syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x0, 0x1000000}, &(0x7f00000001c0), &(0x7f0000000580)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) (async)
io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000002c0)={0x5, r4, 'id0\x00'}) (async)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x4000, 0x100, &(0x7f0000000140)) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x1000410, &(0x7f0000000080)={[], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r5}}, {@permit_directio}, {@flag='dirsync'}, {@subj_role={'subj_role', 0x3d, ':)+!-'}}, {@appraise_type}]}, 0x6, 0x52d, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPBvpnGTdt1NF/YACNiyLBRU6jTpbrVaDnRPCK0qIVZISBy6UeKNotp1VafL2lQiPXLghsRKnOBP4MYBaU8cuHGDGxcuSAUq0AaJw6AZTxM3ceKwG9ut/ftJk5n3npPvPbvvPc9LnRfAzLoQEdsRcToi3omIxTI/KY+43jvyx3306P7azqP7a0lk2dv/SIryPC/6vif3XPkzFyLie9/uK+jT7nRvrTYa9btlemmreWep3ele3kzLnJVry9euvH71tZVB1Z77OG19qfmbhz+be+v7v/vtF/76x+2v/zivVvWn54qy/nacpF7TK1Hty8sr/9Yogk3IXPnvh2dP3ts+FREvF/1/MU59vK4FADxDsmwxssX+NAAw7fL7/2okaa1cC6hGmtZqvTW8F+Ns2mi1ty4ttu7dXo9iDet8VNJ3Nxv1K+Va4fmoJHl6ubjeS6/sS1+NiBci4ufzZ4p0ba3VWJ/kGx8AmGHP7Zv//z3fm/8BgCm3MOkKAABjZ/4HgNlj/geA2fN/zP8+HQgAU8L9PwDMHvM/AMyeofP/g/HUAwAYi+/euJEf2U7596/X3+vc+2b1vcvr9fatWvPeWm2tdfdObaPV2mjUa2tZNuznNVqtO8uv7ibbne7NZuve7a2bm83VjfrNemXE7QEAhnvhpQ//nETE9htniiP69nIwV8N0S59IDdioB5hapyZdAWBifJ4HZtcx7vEtA8CUG3bnf+h/EfrA5q/wrLr4Wev/MKvSw4tujLMewPgNWv8/M/S7vjWSugDjZf0fZleWJfb8B4AZs7fGf8RKIDDVhvX+Qb///0GUv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAGVUtjiStFXuAbOdf01ot4lxEnI9K8u5mo34lIp6PiD/NV+bz9PKkKw0AfELp35KIyI+Li69U95eeTv4zX5wj4ke/fPsX769ubd1dzvP/uZu/9UGZv3J6Eg0AAPpdP5jVm6fLc9+N/EeP7q89PsZZxYdv9jYXzePulEevZC7mivNCVCLi7L+SMt2Tv185dQLxtx9ExGf22v9+X4RqsQbS2/l0f/w89rkRxN97/pPIsizbi58+ET8t6pafK8Vz8enjhcuy7CcnUGuYDh++2Rsn83535tH9vIuV/S+NC8V5cP9fKEaoT+7x+LdzYPxLd8e/UwfiJ0Wfv7CbPromD1/9/XcOZGaLvbIHEZ+b2x8/K2I8jp8cMv6+csw2/uXzX3z5sLLsVxEXY1D7k/IRzWKYXdpq3llqd7qXN5urG/WN+u2VlWvL1668fvW1laVijbr39Q+DYvz9jUvPHxY/b//ZQ+IvDGn/V47Z/l//950ffumI+F/78uDX/8Uj4udz4lePGX/17PVB23fvxl8/pP3DXv9LQyMn5YvYXT9mVQGAMWh3urdWG4363SEX+XvNYY9x8TReLAx9TGxHPJETc72LdGQV+8ZCxFPy/LgYfDHpkQkYtXanexLL6AAAAAAAAAAAAAAAwAi1O91b8zHajxNNuo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMr/8FAAD///evzqw=") (async)

3.814146375s ago: executing program 0 (id=1808):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5)
r1 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8d24, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
open(0x0, 0x64842, 0x82)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000001a00)=""/4113, 0x41100, 0xd}, 0x94)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000000c0)=0x80000003, 0x4)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000200))
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x29b1e9ea29480a83, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3.792253507s ago: executing program 6 (id=1811):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0x1, {0x4}}, 0x0)
r2 = fsopen(&(0x7f0000000040)='gadgetfs\x00', 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES32=r3, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYBLOB="c9a2f38b26a884c477a27d5b22e913d952c9dfab9b42630abde5ffbe40333594b6176d4a3415907a7eabf876f1567112d8e62023cb07aa698b819053db47425c00a0c03117618d2ecd3c2a9796903e3573", @ANYRES32=r3], 0x7c}}, 0x0)
unshare(0x2040400)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x85, &(0x7f0000000040)}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000000)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000080)='(\x00', &(0x7f00000000c0)="856ce3df652be5fc3058506c96b1aa40d6be1d92ad25596a4b9382f096ac7aa4513545e8489cc8772549b580fa60676cf4e18cedbc16e3f5ecb4242ae680ccaeb92805048568", 0x46)

3.771313648s ago: executing program 6 (id=1812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000"], 0x122}}, 0x0)

3.630332761s ago: executing program 6 (id=1814):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)={0x604, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40051)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00"], 0xdc}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@map_acorn}, {@check_relaxed}, {@nojoliet}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x54d, &(0x7f0000000580)="$eJzs3VFP21YbwPHHFN7StEKvtqmqEG1P6SaBRFMntKmi3sxzTsJpEzuynQquKlSgQg3tVDppcDP1ptuk7UP0dh9iH2GX077Brqp9gE1jsp3QAAmhUAhC/1/U+mA/9nlOFPnRgdgWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAglluy7ZwlVeM15lVvbinwa/tsbx9v+p+xZNG1sz/W3/crYsX/ZHRUrqSrrnz2PvJy/N+kTKQ/TchovBiVzYuX/3//0+Gh9v77JHQi1jc2ny02m8svB53IgFS0Z0Lf1JyKVib0VbFQsG/PlUNVNlUdLnz3m64pN9BO5Adqyp1WuWJxVunsgt/wKiWnqtsr793K23ZBPcjWtROEvnf7QTZ050y1arxKEhNvjmPuxR/EhyZSkXZqSq2sNpdn+yUZB+UOEpTvF5S38/lcLp/PFe4W796z7eE9K+xdZE/E4D+0GKzjOZEDhzDUqv9SFSOeNGReVNeXKyUJxJdaj+0trcI//cVtvW+/nfW/XeWvvN88Lkn9v5b+dK1X/e+Ry8m91mVDNuWZLEpTmrIsLwee0cm+KqLFEyOh+GKkJk6yRrXWKClKQQpiy2OZk7KEoqQsRv4nWkJZkFAi0cknypVAtDgSiS+BKJkSV6ZFSU6KUpRZUaIlKwviS0M8qUhJHKmKlhVZTd732X1y3A7KHSQov08Q9R97DLdOWQfe4eOewIEj2GrXfwAAAAAAcGZZyW/f4/n/iFxNWmVT1fag0wIAAAAAAB9R8pf/iXgxEreuisX8HwAAAACAs8ZKrrGzRCQj19NW+0oofgkAAAAAAMAZkfz9/1q8yMSt62Ix/wcAAAAA4Kz5oe899sP6eevXvyQIRqzX9fnPrTUnjnPWzqX7ndt9xKg8fvHvrcRwcqzCcOuQrp6wLqVB2zfBfNdarPTLw/qQBKyx1t47E5Cf5EYac2MpXS61t6S9ZMqmqrOuX72fE8cZG4r0fPTN89VvJRn+j15tzJKV1eZy9smL5lKSy+v4KK/XWjdQ3HMfxX1yeZXcbyG55qLriEeSCzFa/WbSfu3O8Q+luw99QJ9vZDKNmcyky8zO8Y/GfeayvUbfyiJ3xJG/kZtpzM2pm+miSxb5flnkO7M41HtxgCxm+2Uxe8QsAGBQVnpXoX/TIr61u+4e4ix3MtX9jUylMVPjyYl1eLzLGd3ud0a3j1jdftl+BkI7uFeNjfv9eVdVfRvv8LZnv2E1b8Vv4blXa1/L5fWNzVura4tPl58uP8/nZwv2Hdu+m5eRZBitBbUHANBFt2fstGtuOv/v+xQe606fWfUn218pyMoTeSFNWZKZ5GqD5BsHXY+aSfa5kHwNYabPrDXT8YSXmT6zukzHg146Yv/8PW3tiLU6Hi8DAMBZMtmnDh+k/s/0mXdnOr5SONNndtxZywEAwPHQwTsrE31vBYGpP84VizknmtMq8N2HKjClilbGi3TgzjleRat64Ee+61fjxiNT0qEKG/W6H0Sq7Aeq7odmPnnyuwoXwkjXVKhrjhcZN6xXtRNq5fpe5LiRKpnQVfXGV1UTzukg2Tmsa9eUjetExvdU6DcCV2eVCrXuCDQl7UWmbOKmp+qBqTnBgnrkVxs1rUo6dANTj/z0gO2+jFf2g1py2Oyg32wAAE6J9Y3NZ4vN5vLLfo0vDxDTozHoMQIAgJ2o0gAAAAAAAAAAAAAAAAAAAAAAnH6HvKTv7DUufawDbu0Tc0FOwUgP0Tjf/ricknxoHH9jsOclAMfvvwAAAP///GpgUQ==")
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffff888237d17250)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
gettid()
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f0000000040)=0x1, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)=0x2, 0x1)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x40, 0x1100, 0x800, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x27, 0x5, 0x2f, 0x0, @empty, @private}}}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000d4d70703000000000000000000020000050900010073797a31000000000800054000000000db73ead6aa0c0f7d7598abd9d7a59b065ad9709116cab035d4b25249a44103632f7a7d1babedc4efeb359efe4b4c42140644"], 0x28}, 0x1, 0x0, 0x0, 0x20040001}, 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x3a, 0x1a, ""/26}, &(0x7f00000000c0)=0x3a, 0x1)

2.606561291s ago: executing program 6 (id=1818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f00000003c0))
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x5, 0x1, [0x40]}, 0xa)
sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0)

2.057526539s ago: executing program 2 (id=1822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x5000000, 0x0, 0x20000000000000}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@remote, 0x4d5, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x1bc}}, 0x4080)

2.0553533s ago: executing program 7 (id=1823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x5}, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x38, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0xc0010)
sendmmsg$inet(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001580)="e3", 0x1}], 0x1}}], 0x1, 0x41)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xe9a8b70, 0x4)
mprotect(&(0x7f0000b07000/0x7000)=nil, 0x7000, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea9}, 0x94)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.942144789s ago: executing program 2 (id=1824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7db94805ecf3e6a6eb00000700000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x87}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x9, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a0000000b000000420000000000000000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000003c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r11)

1.94161139s ago: executing program 6 (id=1825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000300)={0x20000002})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000080)={0x28000006})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
close(0x3)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000d0601080000000000000000020007000000f9ff000007000000d80d5b7ffdd904dbd26c4e5e9facff0bb14dadd2a0e70f6227e09240d901d9f3c60b278b3861c41689a4b99eb67a687326ceca1484606d697683ae64a9b15dfeb422a4afd420457c7353d7b8efbc3d124bcd50b4965f605baf2618de89918fd28608e71205930adcae9a479bdec08580605553eff26f495cd7ed122d4b9ee75efde1c7c85cbed6ea9c89069a2531f9a4fd4656d9a61ef13feb8020efa09b995d91e086962d619e625abd07240ebffd33f89e0079cad922"], 0x2c}}, 0x24008000)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000240)=0x7f, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfffffffd, 0x0, &(0x7f0000000080), 0x1, 0x1}]})

1.928083701s ago: executing program 35 (id=1825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000300)={0x20000002})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000080)={0x28000006})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
close(0x3)
socket$phonet(0x23, 0x2, 0x1)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000d0601080000000000000000020007000000f9ff000007000000d80d5b7ffdd904dbd26c4e5e9facff0bb14dadd2a0e70f6227e09240d901d9f3c60b278b3861c41689a4b99eb67a687326ceca1484606d697683ae64a9b15dfeb422a4afd420457c7353d7b8efbc3d124bcd50b4965f605baf2618de89918fd28608e71205930adcae9a479bdec08580605553eff26f495cd7ed122d4b9ee75efde1c7c85cbed6ea9c89069a2531f9a4fd4656d9a61ef13feb8020efa09b995d91e086962d619e625abd07240ebffd33f89e0079cad922"], 0x2c}}, 0x24008000)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000240)=0x7f, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xfffffffd, 0x0, &(0x7f0000000080), 0x1, 0x1}]})

1.666055604s ago: executing program 2 (id=1827):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x8084, &(0x7f0000000000)=ANY=[], 0x1, 0x16b, &(0x7f0000000180)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0xa000000, 0x0, 0x0)

1.542203055s ago: executing program 2 (id=1828):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r9, @ANYBLOB="08000b000000000008000200ac"], 0x54}}, 0x4000000)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000c00)={@dev, <r12=>0x0}, &(0x7f0000000c40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x168, 0x0, 0x810, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xea7330abcf81e86e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40840}, 0x2004041)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
recvmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000140), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000008c0)=""/119, 0x77}], 0x4, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x21)

1.503103498s ago: executing program 7 (id=1830):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x2}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x400)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

1.386634528s ago: executing program 3 (id=1832):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.314987685s ago: executing program 3 (id=1833):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
syz_emit_ethernet(0x6a, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402401, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffe)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f000000000000080003a1"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.094699134s ago: executing program 3 (id=1834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}, 0x1, 0x0, 0xf5, 0x4000000}, 0x0)

1.03415214s ago: executing program 3 (id=1835):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x80000000, 0x4ecd, 0x3, 0x7fffffff, 0xfffffffe, 0x7, 0x8}, 0x1c)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000003c0)="b6a242")
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d00)=""/209, 0xd1}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000002b80)=""/4116, 0x1014}, {&(0x7f0000000e00)=""/4080, 0xff0}, {&(0x7f0000000980)=""/129, 0x81}, {&(0x7f0000000680)=""/71, 0x47}], 0x7}, 0x3}], 0x2, 0x120, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002c0c0e0180050002000100"/26], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpid()
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='wtrfs.%\x00'])
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000001e00)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x5, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb66, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed0, 0x8, 0x8000100, 0x3, 0x800, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x99, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100001, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x5, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x6, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffb, 0x2003, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff], "663d5d7f3d099cacaad9ca8b8dc6685f8cadf46742053972e620"}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="09c48d4454eb2c8ed0578eaca8b0bfcae3d02aff54baa05a0056f17146da1664609a40ea0c6f633054310c02284afa064441bbd7e5eaa9d2b089c00de1bb0e07b1e9480631f3997db31791be624a651a51fe6bbafacce0c37c442dc43da5752a107f1ff969fb6da114fe3a3c5b620a35686620791650438e17ab9d46924a1506b070737202ff7c5a545fd7a5e675367d2b1b2f692be027399563fcb383b4bc20a1e7ba487e9e45ed23987a9aab259b0de0abff61fa978e698c82739e07963603c2762f995dae38a44bcc7a2f091c148c86e095c2771f3f5d15e17d7729f1eddd467b15", &(0x7f0000000240)=""/154}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000080004000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000022095c2233004014be28499778976917e5a19187318edeb5020f10d4341aa740d4049d1a3ecbac60409f3681976d8a3edbd77f6c261151ecd310ad7563565d0891eaadc1879231d679f70306fec53fef790e9980efc2803bac0d1c78"], 0x50)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)

957.905546ms ago: executing program 0 (id=1836):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x5}, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x38, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0xc0010)
sendmmsg$inet(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001580)="e3", 0x1}], 0x1}}], 0x1, 0x41)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xe9a8b70, 0x4)
mprotect(&(0x7f0000b07000/0x7000)=nil, 0x7000, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea9}, 0x94)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

889.999642ms ago: executing program 3 (id=1837):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$eJzs3U9vI2cZAPBnJvGS7aYkpRxKpZaKFu1WsPamgTbi0BYJcasEKvclSrwhihNHsdNuQoVS8QGQEIJKnDhxQeIDIKHyDapKK8EdAQIh2MIBIWDQ2OPdxBpvEjW2I/v3k8bzzuuZeZ53HI/nX2YCmFrPRcTrETETES9GxEJRnxZdHHW7fLyP7r+zlnfxQRJv/i2JpKiLTumha8Vkc91eqdbB4dZqo1HfK4Zr7e3dWuvg8Obm9upGfaO+s7y89PLKKysxd2vQLL5znnbm7Xr1a3/68Q9+/vVXf/3Ft39/+y83vpdnPV+8323Ho6UnhmbOFLe7ZCr5ssjd+3dRv3ee5C+xpFi2lXEnAgDAmTwZEZ+KiM91tv8XYiZme2/ZpAMAAIAJkb02H/9JIjIAAABgYr3WuQY2SavF9a3zkabVavca3k/HY2mj2Wp/4U5zf2e9e63sYlTSO5uN+q3ius/FqCT58FKn/HD4pb7h5Yh4IiJ+tHC1M1xdazbWx33wAwAAAKbEtb79/38udPf/AQAAgAmzOO4EAAAAgKEbtP+fjDgPAAAAYHic/wcAAICJ9o033si7rPf86/W3Dva3mm/dXK+3tqrb+2vVtebebnWj2dzo3LNv+7T5NZrN3S/Fzv7dWrveatdaB4e3t5v7O+3bm71HYAMAAACj9sRn3/9dEhFHX7na6XJX8peZARO4VgAmRnqekf84vDyA0Rv0Mw9MvtlxJwCMz1Gxvw9MrRO3+ijZKDh+8c6JYwYfDC8nAADgYl3/TPn5/3wXoDLu5IChOtf5f2CiOP8P06vs/P9vBo/+4TBzAUarYgsApt5pj/oYePOOM5//z7JT5wUAAAzVfL7tfxRRLc4FzkeaVqsRj3f+1b+S3Nls1G9FxCcj4rcLlU/kw0udKROPBwQAAAAAAAAAAAAAAAAAAAAAAACAM8qyJDIAAABgokWkf06K539dX3hhvv/4wJXkXwudfkS8/dM3f3J3td3eW8rr//6gvv1eUf/SOI5gAAAAwNSb7a/o7af39uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CJ9dP+dtV43yrh//WpELJbFn425Tn8uKhHx2D+SmD02XRIRMxcQ/+jdiHiqLH6SpxWLRRb98dOIuDqa+M9kWZZGSfxrFxAfptn7+frn9bLvXxrPdfrl3//Zovu4Bq//0gfrv5kB67/Hzxjj6Xu/rA2M/27E07Pl659e/GRA/OfLZliyUL79rcPDQfGzn0VcL/39SU7EqrW3d2utg8Obm9urG/WN+s7y8tLLK6+sfHnlVu3OZqNevJbG+OEzv/pfX9V/s65O+2NA/MVT2v9CXqgcb0x/mCLYvbv3n+wWK32z6MS/8Xz55//UI+LnfxOfL34H8vev98pH3fJxz/7iw2dLEyvirw9o/2mf/41BM+3z4je//4czjgoAjEDr4HBrtdGo7w298F6WZaOKdWkK2eVI41IU5i5HGgqnFy7iyBYAAHDZPNzoP8dE3x1iQgAAAAAAAAAAAAAAAAAAADCFWgeRDrwN2JWLuZ1Yf8yj8TQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/h8AAP//oszk1w==")
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054)
setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0)

840.659997ms ago: executing program 2 (id=1838):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r9, @ANYBLOB="08000b000000000008000200ac"], 0x54}}, 0x4000000)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000c00)={@dev, <r12=>0x0}, &(0x7f0000000c40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x168, 0x0, 0x810, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xea7330abcf81e86e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40840}, 0x2004041)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
recvmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000140), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000008c0)=""/119, 0x77}], 0x4, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x21)

650.123943ms ago: executing program 7 (id=1839):
listen(0xffffffffffffffff, 0x3)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = inotify_init()
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
write$eventfd(r2, &(0x7f0000000640)=0x9, 0x8)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x150, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r7, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40480d4)
close_range(r1, 0xffffffffffffffff, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f00000004c0)=0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400402, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r10}, &(0x7f0000000140)=0x8)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==")
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r11)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
getdents(0xffffffffffffffff, 0x0, 0x0)

571.77693ms ago: executing program 7 (id=1840):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x5}, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x38, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0xc0010)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001580)="e3", 0x1}], 0x1}}], 0x1, 0x41)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xe9a8b70, 0x4)
mprotect(&(0x7f0000b07000/0x7000)=nil, 0x7000, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea9}, 0x94)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

492.676287ms ago: executing program 0 (id=1841):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r5}, 0xc)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r7 = dup2(r0, r0)
write$binfmt_misc(r7, &(0x7f0000000000)="e69e21", 0x3)

296.867244ms ago: executing program 7 (id=1842):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, 0x0)
r1 = gettid()
syz_emit_ethernet(0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, 0x0, 0x4003)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7pj9fuD/EFREXRSHxpaUHl4EUTEw+amOgBj7UUgizU0JoIaWwxBC8mSsLdmHgx8S/w5ImoJxOveDckxHAB9bJm2Nllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rQPpP0nEjoi4ERFDEZGrb7C1sqTt7t6enfjr9uxEEuXyu38m6dvizu3ZiWrTJPu5vVIppB+Uu5xEsUm/0xcunhkvlSbPZ/WRmbMfjUxfuPji6bPjpyZPTZ4bO3bs6JHRV14ee6kreaYx3dn36dT+vW++f/XtieNXP/j5+0q85fK164cX5NEdAxExW1snjZ7pbmc9t7OunBR6GAgrMhgRhWxvvRFDkb+8q/baULzxWU+DA9ZUuVwuj7V+eb4M/Icl0esIgN6oHujT89/qUj8B+Gdtpx89d+u1yglQmvfdbKm8UohLWZvBhvPbbjoQEcfn//46XaLhegoAwFr4MZ3/vNBk/leMeKiu3a7s3lAxIv4fEbsj4oGI2BMRD0al7cMR8cgK+z/QUF88/8ndXF1m7Unnf69m97YWzv9qd8GK+ay2817+A8nJ06XJw9k6ORQDg2l9tOmnJxHz6c/fvmzVf/38L13S/qtzwSyOm4XBhe85MT4z3nHimVuXIvYVmuWfROF+FrE3Ivatso/Tz323f+Fv8rXS8vkvoQv3mcrfRDxb2f7z0ZB/VbL0/cmR/0Vp8vBIda9Y7Jdfr7zTqv+O8u+CdPtva7r/1/IvJvX3a6cXfcSW5fq48vvnLc9pVrv/b0neW9D5J+MzM+dHI7Ykby3+fd0F7mq92j7N/9DB5uN/d9xfE49GRLoTPxYRj0fEE1nsT0bEUxFxcIn8f3r96Q9Xn//aSvOfW9H2X3khf+b6D636b2/7H61W7gXVzvdfuwF2su4AAABgs8hFxI5IcsO1ci43PFz5//J7YluuNDU98/zJqY/Pnag8I1CMgVz1StdQ3fXQ0ezacLU+ltXnsvqR7LrxtfzWe/XhianSiV4nD31ue4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/3M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCWD6ih2EU2v2rFnGhPNdxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//EVno+A==")

59.748365ms ago: executing program 7 (id=1843):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1, 0x0, 0x0, 0x6000000}, 0x0)

57.406396ms ago: executing program 2 (id=1844):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010008506ed000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.99841ms ago: executing program 0 (id=1845):
creat(&(0x7f0000000180)='./file0\x00', 0x70)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
getsockopt$sock_cred(r0, 0x1, 0x11, 0xfffffffffffffffe, &(0x7f0000000180))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, 0x0, 0x8400)
write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
cachestat(r1, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0)

0s ago: executing program 3 (id=1846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0xd9, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x4040082)

kernel console output (not intermixed with test programs):

0: unset [1, 0] type 2 family 0 port 20001 - 0
[  175.630576][ T6043] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  175.630692][ T6043] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  175.630726][ T6043] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  175.650307][   T28] audit: type=1326 audit(1771915100.288:10715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.650425][   T28] audit: type=1326 audit(1771915100.288:10716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.675700][T11662] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004
[  175.677036][   T28] audit: type=1400 audit(1771915100.318:10717): avc:  denied  { setopt } for  pid=11651 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  175.735160][T11634] loop0: detected capacity change from 0 to 512
[  175.739207][T11634] vfat: Unknown parameter ']ªöçTôÛzæþÂÏtùû‚ÃT½ü]Ü;¸Œ0„�½‡@20#ÇY„¬ßB}�ÖÅ!'
[  175.835867][   T28] audit: type=1326 audit(1771915100.478:10718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.860652][   T28] audit: type=1326 audit(1771915100.508:10719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.860948][   T28] audit: type=1326 audit(1771915100.508:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.871408][   T28] audit: type=1326 audit(1771915100.508:10721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.871483][   T28] audit: type=1326 audit(1771915100.508:10722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  175.871510][   T28] audit: type=1326 audit(1771915100.508:10723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  176.671357][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'.
[  177.331817][T11697] loop0: detected capacity change from 0 to 128
[  177.524511][T11680] loop4: detected capacity change from 0 to 4096
[  177.723960][T11680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.784671][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.049870][T11714] 9p: Bad value for 'rfdno'
[  178.288746][T11731] loop2: detected capacity change from 0 to 128
[  178.476238][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  178.778368][T11731] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.794654][T11731] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.810846][T11742] vlan2: entered promiscuous mode
[  178.840290][T11742] hsr0: entered promiscuous mode
[  178.859345][T11731] FAULT_INJECTION: forcing a failure.
[  178.859345][T11731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.880221][T11731] CPU: 1 UID: 0 PID: 11731 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(full) 
[  178.880255][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  178.880270][T11731] Call Trace:
[  178.880333][T11731]  <TASK>
[  178.880343][T11731]  __dump_stack+0x1d/0x30
[  178.880424][T11731]  dump_stack_lvl+0x95/0xd0
[  178.880452][T11731]  dump_stack+0x15/0x1b
[  178.880478][T11731]  should_fail_ex+0x263/0x280
[  178.880650][T11731]  should_fail+0xb/0x20
[  178.880672][T11731]  should_fail_usercopy+0x1a/0x20
[  178.880775][T11731]  _copy_from_user+0x1c/0xb0
[  178.880922][T11731]  __sys_sendto+0x1ca/0x4d0
[  178.880960][T11731]  __x64_sys_sendto+0x76/0x90
[  178.880988][T11731]  x64_sys_call+0x2d35/0x3020
[  178.881064][T11731]  do_syscall_64+0x12c/0x370
[  178.881101][T11731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.881136][T11731] RIP: 0033:0x7f2e7446c629
[  178.881155][T11731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.881243][T11731] RSP: 002b:00007f2e72ec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  178.881266][T11731] RAX: ffffffffffffffda RBX: 00007f2e746e5fa0 RCX: 00007f2e7446c629
[  178.881283][T11731] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000006
[  178.881299][T11731] RBP: 00007f2e72ec7090 R08: 0000200000000200 R09: 0000000000000014
[  178.881373][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.881389][T11731] R13: 00007f2e746e6038 R14: 00007f2e746e5fa0 R15: 00007ffea0c1a658
[  178.881412][T11731]  </TASK>
[  179.103100][T11753] loop4: detected capacity change from 0 to 164
[  179.114234][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.126335][T11753] iso9660: Bad value for 'check'
[  179.186733][T11760] loop3: detected capacity change from 0 to 512
[  179.194170][T11760] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  179.221344][T11760] EXT4-fs (loop3): 1 truncate cleaned up
[  179.227716][T11760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.358608][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.601851][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'.
[  179.784747][T11786] loop2: detected capacity change from 0 to 128
[  180.164363][T11799] netlink: 'syz.0.1252': attribute type 30 has an invalid length.
[  180.348923][T11805] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1253'.
[  180.497078][T11814] loop4: detected capacity change from 0 to 512
[  180.540765][T11814] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  180.688709][ T3554] udevd[3554]: incorrect ext4 checksum on /dev/loop4
[  180.883703][   T28] kauditd_printk_skb: 164 callbacks suppressed
[  180.883722][   T28] audit: type=1326 audit(1771915105.528:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  180.969034][   T28] audit: type=1326 audit(1771915105.558:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.134798][   T28] audit: type=1326 audit(1771915105.558:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.159671][T11848] loop0: detected capacity change from 0 to 512
[  181.171861][   T28] audit: type=1326 audit(1771915105.558:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.205361][   T28] audit: type=1326 audit(1771915105.558:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.274075][T11848] EXT4-fs: Ignoring removed nobh option
[  181.289289][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'.
[  181.374651][T11848] EXT4-fs (loop0): orphan cleanup on readonly fs
[  181.436486][T11848] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1256: EA inode hash validation failed
[  181.613422][T11848] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  181.723377][   T28] audit: type=1326 audit(1771915105.558:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.740977][T11848] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1256: corrupted inode contents
[  181.759110][   T28] audit: type=1326 audit(1771915105.608:10894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.759190][   T28] audit: type=1326 audit(1771915105.608:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.759221][   T28] audit: type=1326 audit(1771915105.618:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.759303][   T28] audit: type=1326 audit(1771915105.618:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.2.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  181.866157][T11848] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  181.879986][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  181.895869][    C1] EXT4-fs (loop0): initial error at time 1771915106: ext4_do_update_inode:5569: inode 15
[  181.906059][    C1] EXT4-fs (loop0): last error at time 1771915106: ext4_do_update_inode:5569: inode 15
[  181.917852][T11848] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.1256: mark_inode_dirty error
[  181.994339][T11848] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  181.994534][T11848] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.1256: corrupted inode contents
[  182.036382][T11861] loop4: detected capacity change from 0 to 512
[  182.059341][T11867] loop2: detected capacity change from 0 to 1024
[  182.076916][T11867] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  182.087610][T11848] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  182.087806][T11848] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1256: mark_inode_dirty error
[  182.118968][T11876] loop3: detected capacity change from 0 to 2048
[  182.127689][T11861] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1264: invalid indirect mapped block 4294967295 (level 1)
[  182.145387][T11867] JBD2: no valid journal superblock found
[  182.152456][T11867] EXT4-fs (loop2): Could not load journal inode
[  182.163154][T11861] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  182.163380][T11861] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1264: invalid indirect mapped block 4294967295 (level 1)
[  182.172564][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  182.172596][    C1] EXT4-fs (loop4): initial error at time 1771915106: ext4_free_branches:1023: inode 11
[  182.172641][    C1] EXT4-fs (loop4): last error at time 1771915106: ext4_free_branches:1023: inode 11
[  182.212321][T11861] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  182.222015][T11861] EXT4-fs (loop4): 2 truncates cleaned up
[  182.226656][T11876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.250840][T11861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.254454][T11848] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  182.287444][T11848] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.1256: mark inode dirty (error -117)
[  182.311539][T11848] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  182.332384][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.352715][T11848] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117)
[  182.363829][T11848] EXT4-fs (loop0): 1 orphan inode deleted
[  182.371627][T11848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  182.401979][T11890] loop2: detected capacity change from 0 to 128
[  182.425906][T11888] 9p: Bad value for 'rfdno'
[  182.506028][T11909] loop4: detected capacity change from 0 to 764
[  182.530348][T11909] iso9660: Unknown parameter 'beock'
[  182.545199][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.571200][T11909] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1271'.
[  182.723049][T11945] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1274'.
[  182.875610][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'.
[  183.011386][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1276'.
[  183.371735][T11940] bridge0: entered allmulticast mode
[  183.454262][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'.
[  183.494827][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'.
[  183.657352][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.718218][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'.
[  183.798292][T11997] netlink: 4164 bytes leftover after parsing attributes in process `syz.6.1283'.
[  183.812332][T12004] ip6tnl2: entered promiscuous mode
[  183.839529][T12019] loop4: detected capacity change from 0 to 128
[  184.037894][T11997] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1283'.
[  184.082064][T11997] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1283'.
[  184.444622][T12062] loop6: detected capacity change from 0 to 512
[  184.530848][T12062] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  184.547539][T12062] EXT4-fs (loop6): orphan cleanup on readonly fs
[  184.560730][T12062] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1297: Failed to acquire dquot type 1
[  184.573084][T12062] loop6: lost filesystem error report for type 5 error -5
[  184.573365][T12062] EXT4-fs (loop6): Remounting filesystem read-only
[  184.580791][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  184.580823][    C1] EXT4-fs (loop6): initial error at time 1771915109: ext4_acquire_dquot:7001
[  184.580850][    C1] EXT4-fs (loop6): last error at time 1771915109: ext4_acquire_dquot:7001
[  184.615558][T12062] EXT4-fs (loop6): 1 truncate cleaned up
[  184.648633][T12062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  184.697088][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.013940][T12123] loop6: detected capacity change from 0 to 128
[  185.032651][T12130] netlink: 'syz.0.1315': attribute type 1 has an invalid length.
[  185.050470][T12130] bond3: entered promiscuous mode
[  185.055907][T12130] 8021q: adding VLAN 0 to HW filter on device bond3
[  185.074391][T12130] bond3: (slave bridge3): making interface the new active one
[  185.082030][T12130] bridge3: entered promiscuous mode
[  185.088447][T12130] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  185.132341][T12170] netlink: 'syz.0.1316': attribute type 5 has an invalid length.
[  186.345246][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  186.345267][   T28] audit: type=1400 audit(1771915110.839:10938): avc:  granted  { setsecparam } for  pid=12182 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  187.032027][T12211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=12211 comm=syz.6.1323
[  187.210469][T12225] loop4: detected capacity change from 0 to 1024
[  187.234660][T12225] EXT4-fs: dax option not supported
[  187.278367][T12235] FAULT_INJECTION: forcing a failure.
[  187.278367][T12235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.298147][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.3.1328 Not tainted syzkaller #0 PREEMPT(full) 
[  187.298221][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.298242][T12235] Call Trace:
[  187.298250][T12235]  <TASK>
[  187.298258][T12235]  __dump_stack+0x1d/0x30
[  187.298291][T12235]  dump_stack_lvl+0x95/0xd0
[  187.298319][T12235]  dump_stack+0x15/0x1b
[  187.298369][T12235]  should_fail_ex+0x263/0x280
[  187.298400][T12235]  should_fail+0xb/0x20
[  187.298419][T12235]  should_fail_usercopy+0x1a/0x20
[  187.298444][T12235]  _copy_from_user+0x1c/0xb0
[  187.298524][T12235]  ___sys_recvmsg+0xaa/0x3b0
[  187.298565][T12235]  do_recvmmsg+0x1ef/0x560
[  187.298604][T12235]  ? fput+0x8f/0xc0
[  187.298634][T12235]  __x64_sys_recvmmsg+0xe5/0x170
[  187.298716][T12235]  x64_sys_call+0x80f/0x3020
[  187.298748][T12235]  do_syscall_64+0x12c/0x370
[  187.298864][T12235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.298967][T12235] RIP: 0033:0x7fe39896c629
[  187.298987][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.299067][T12235] RSP: 002b:00007fe3973bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  187.299094][T12235] RAX: ffffffffffffffda RBX: 00007fe398be5fa0 RCX: 00007fe39896c629
[  187.299110][T12235] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000004
[  187.299127][T12235] RBP: 00007fe3973bf090 R08: 0000000000000000 R09: 0000000000000000
[  187.299182][T12235] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  187.299197][T12235] R13: 00007fe398be6038 R14: 00007fe398be5fa0 R15: 00007ffe3d3563a8
[  187.299308][T12235]  </TASK>
[  187.480606][T12242] dvmrp8: left allmulticast mode
[  188.125311][T12247] tipc: Started in network mode
[  188.137514][T12247] tipc: Node identity ba4e0e03c09e, cluster identity 4711
[  188.145141][T12247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.184367][T12258] tipc: Resetting bearer <eth:syzkaller0>
[  188.192885][T12243] tipc: Disabling bearer <eth:syzkaller0>
[  188.227688][T12278] __nla_validate_parse: 8 callbacks suppressed
[  188.227708][T12278] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1334'.
[  188.232585][T12280] IPv6: sit1: Disabled Multicast RS
[  188.349718][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1333'.
[  188.362274][T12301] netlink: 'syz.3.1338': attribute type 4 has an invalid length.
[  188.393145][T12298] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1339'.
[  188.400946][T12301] netlink: 'syz.3.1338': attribute type 4 has an invalid length.
[  188.411326][T12298] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1339'.
[  188.455157][T12311] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1341'.
[  188.504905][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1336'.
[  188.552832][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1336'.
[  188.835547][T12326] loop2: detected capacity change from 0 to 256
[  189.066526][   T28] audit: type=1400 audit(1771915113.709:10939): avc:  denied  { mounton } for  pid=12336 comm="syz.3.1346" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  189.104411][T12337] netlink: 'syz.3.1346': attribute type 1 has an invalid length.
[  189.112441][T12343] loop2: detected capacity change from 0 to 512
[  189.113267][T12343] EXT4-fs (loop2): unsupported inode size: 1
[  189.132085][T12343] EXT4-fs (loop2): blocksize: 1024
[  189.208059][T12352] program syz.2.1348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  189.227493][T12337] bond4: entered promiscuous mode
[  189.246132][T12337] 8021q: adding VLAN 0 to HW filter on device bond4
[  189.321494][T12391] bond4: (slave bridge4): making interface the new active one
[  189.335696][T12390] loop4: detected capacity change from 0 to 4096
[  189.355652][T12390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.374402][T12391] bridge4: entered promiscuous mode
[  189.383211][T12391] bridge4: left promiscuous mode
[  189.404830][T12396] loop2: detected capacity change from 0 to 512
[  189.418411][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.440742][T12396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  189.467091][T12396] EXT4-fs (loop2): 1 truncate cleaned up
[  189.486753][T12396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.605137][T12419] loop0: detected capacity change from 0 to 1024
[  189.672253][T12419] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c128, mo2=0002]
[  189.689123][T12419] System zones: 0-1, 3-12
[  189.699429][T12419] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.721123][T12419] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.1353: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0
[  189.753752][T12419] EXT4-fs (loop0): Remounting filesystem read-only
[  189.781209][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  189.865403][T12432] veth0: entered promiscuous mode
[  189.881452][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'.
[  190.061284][   T28] audit: type=1326 audit(1771915114.699:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.094628][T12447] loop0: detected capacity change from 0 to 2048
[  190.111877][   T28] audit: type=1326 audit(1771915114.699:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.139614][   T28] audit: type=1326 audit(1771915114.699:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.164267][   T28] audit: type=1326 audit(1771915114.699:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.280048][ T3554]  loop0: p3 p4 < >
[  190.289733][T12459] loop4: detected capacity change from 0 to 128
[  190.301911][ T3554] loop0: p3 start 11362048 is beyond EOD, truncated
[  190.360649][T12459] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  190.389654][   T28] audit: type=1326 audit(1771915114.699:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.417771][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.428612][T12459] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  190.443065][   T28] audit: type=1326 audit(1771915114.709:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.497712][ T3317] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory block failed checksum
[  190.511203][   T28] audit: type=1326 audit(1771915114.709:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.579724][   T28] audit: type=1326 audit(1771915114.709:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.0.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afebac629 code=0x7ffc0000
[  190.608662][ T8795] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  190.771510][T12447]  loop0: p3 p4 < >
[  190.781967][ T8795] bond0: (slave syz_tun): Releasing backup interface
[  190.796540][T12447] loop0: p3 start 11362048 is beyond EOD, truncated
[  190.832777][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  190.868966][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  191.133443][T12516] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1366'.
[  191.931511][ T6043] bridge_slave_1: left allmulticast mode
[  191.969668][ T6043] bridge_slave_1: left promiscuous mode
[  191.999554][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.082271][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'.
[  192.124014][ T6043] bridge_slave_0: left allmulticast mode
[  192.132941][ T6043] bridge_slave_0: left promiscuous mode
[  192.142056][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.172397][T12612] tmpfs: Bad value for 'mpol'
[  192.221532][T12619] loop6: detected capacity change from 0 to 128
[  192.344272][T12631] loop0: detected capacity change from 0 to 764
[  192.374548][   T28] kauditd_printk_skb: 26 callbacks suppressed
[  192.374566][   T28] audit: type=1400 audit(1771915117.019:10974): avc:  denied  { bind } for  pid=12602 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.404367][   T28] audit: type=1400 audit(1771915117.049:10975): avc:  denied  { write } for  pid=12602 comm="syz.2.1372" path="socket:[22225]" dev="sockfs" ino=22225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.450900][ T6043] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  192.461357][ T6043] bridge1 (unregistering): left promiscuous mode
[  192.471019][   T28] audit: type=1400 audit(1771915117.049:10976): avc:  denied  { setopt } for  pid=12602 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.491729][   T28] audit: type=1400 audit(1771915117.049:10977): avc:  denied  { read } for  pid=12602 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  192.513993][   T28] audit: type=1400 audit(1771915117.159:10978): avc:  denied  { accept } for  pid=12630 comm="syz.0.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  192.611771][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.621451][ T6043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.632842][ T6043] bond0 (unregistering): Released all slaves
[  192.641923][ T6043] bond1 (unregistering): Released all slaves
[  192.651482][ T6043] bond2 (unregistering): (slave bond3): Releasing backup interface
[  192.660571][ T6043] bond2 (unregistering): Released all slaves
[  192.668920][ T6043] bond3 (unregistering): Released all slaves
[  192.680592][ T6043] bond4 (unregistering): Released all slaves
[  192.688803][ T6043] bond5 (unregistering): Released all slaves
[  192.697470][ T6043] bond6 (unregistering): Released all slaves
[  192.758230][ T6043] hsr_slave_0: left promiscuous mode
[  192.769959][ T6043] hsr_slave_1: left promiscuous mode
[  192.782134][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.792155][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.827464][ T6043] team0 (unregistering): Port device team_slave_1 removed
[  192.839075][ T6043] team0 (unregistering): Port device team_slave_0 removed
[  193.032697][T12505] chnl_net:caif_netlink_parms(): no params data found
[  193.137568][ T6043] IPVS: stop unused estimator thread 0...
[  193.246584][T12505] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.254182][T12505] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.261892][T12505] bridge_slave_0: entered allmulticast mode
[  193.268631][T12505] bridge_slave_0: entered promiscuous mode
[  193.282122][T12827] bond2: (slave batadv0): Releasing active interface
[  193.295060][T12842] __nla_validate_parse: 5 callbacks suppressed
[  193.295079][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1389'.
[  193.318731][T12505] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.326190][T12505] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.333796][T12505] bridge_slave_1: entered allmulticast mode
[  193.340814][T12505] bridge_slave_1: entered promiscuous mode
[  193.369285][T12505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.380991][T12505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.403535][T12505] team0: Port device team_slave_0 added
[  193.413464][T12505] team0: Port device team_slave_1 added
[  193.477372][T12505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.496451][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.542467][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'.
[  193.551521][T12505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.566989][T12505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.573443][T12915] loop2: detected capacity change from 0 to 128
[  193.578892][T12505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.673730][T12505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.782695][T12913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1392'.
[  193.796661][T12505] hsr_slave_0: entered promiscuous mode
[  193.813490][T12505] hsr_slave_1: entered promiscuous mode
[  193.832270][T12505] debugfs: 'hsr0' already exists in 'hsr'
[  193.866999][T12505] Cannot create hsr debugfs directory
[  194.475320][T12505] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  194.491986][T12505] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  194.513181][T12505] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  194.545471][T12505] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  194.613437][T12505] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.625029][T12505] 8021q: adding VLAN 0 to HW filter on device team0
[  194.653653][T12505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.679324][T12505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.719802][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.726916][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.742725][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.750012][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.785572][T13069] loop2: detected capacity change from 0 to 4096
[  194.861159][T12505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.871035][T13069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.923390][T13069] FAULT_INJECTION: forcing a failure.
[  194.923390][T13069] name failslab, interval 1, probability 0, space 0, times 0
[  195.039428][T13069] CPU: 1 UID: 0 PID: 13069 Comm: syz.2.1400 Not tainted syzkaller #0 PREEMPT(full) 
[  195.039460][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  195.039472][T13069] Call Trace:
[  195.039478][T13069]  <TASK>
[  195.039491][T13069]  __dump_stack+0x1d/0x30
[  195.039554][T13069]  dump_stack_lvl+0x95/0xd0
[  195.039578][T13069]  dump_stack+0x15/0x1b
[  195.039598][T13069]  should_fail_ex+0x263/0x280
[  195.039620][T13069]  should_failslab+0x8c/0xb0
[  195.039716][T13069]  __kmalloc_noprof+0xb8/0x4e0
[  195.039798][T13069]  ? find_tree_dqentry+0x3e/0x8c0
[  195.039832][T13069]  find_tree_dqentry+0x3e/0x8c0
[  195.039856][T13069]  ? __brelse+0x32/0x60
[  195.039880][T13069]  ? from_kuid+0x151/0x340
[  195.039910][T13069]  ? ext4_quota_read+0x22b/0x260
[  195.040010][T13069]  find_tree_dqentry+0x4c9/0x8c0
[  195.040034][T13069]  find_tree_dqentry+0x4c9/0x8c0
[  195.040124][T13069]  qtree_read_dquot+0x35c/0x4a0
[  195.040148][T13069]  v2_read_dquot+0x97/0xd0
[  195.040185][T13069]  dquot_acquire+0xcd/0x2b0
[  195.040245][T13069]  ext4_acquire_dquot+0x15f/0x200
[  195.040277][T13069]  dqget+0x527/0x8c0
[  195.040310][T13069]  __dquot_initialize+0x27f/0x7c0
[  195.040348][T13069]  dquot_initialize+0x1a/0x30
[  195.040442][T13069]  ext4_tmpfile+0x49/0x2e0
[  195.040472][T13069]  vfs_tmpfile+0x259/0x520
[  195.040501][T13069]  do_tmpfile+0xa8/0x190
[  195.040545][T13069]  path_openat+0x1cf0/0x2050
[  195.040581][T13069]  ? _parse_integer_limit+0x170/0x190
[  195.040644][T13069]  ? _parse_integer+0x27/0x40
[  195.040694][T13069]  ? kstrtoull+0x111/0x140
[  195.040723][T13069]  ? kstrtouint+0x76/0xc0
[  195.040792][T13069]  do_file_open+0x16c/0x290
[  195.040856][T13069]  do_sys_openat2+0x94/0x130
[  195.040886][T13069]  __x64_sys_openat+0xf2/0x120
[  195.040911][T13069]  x64_sys_call+0x1e39/0x3020
[  195.040943][T13069]  do_syscall_64+0x12c/0x370
[  195.041076][T13069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.041103][T13069] RIP: 0033:0x7f2e7446c629
[  195.041123][T13069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.041145][T13069] RSP: 002b:00007f2e72ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  195.041289][T13069] RAX: ffffffffffffffda RBX: 00007f2e746e5fa0 RCX: 00007f2e7446c629
[  195.041307][T13069] RDX: 0000000000cbe082 RSI: 0000200000004280 RDI: ffffffffffffff9c
[  195.041321][T13069] RBP: 00007f2e72ec7090 R08: 0000000000000000 R09: 0000000000000000
[  195.041334][T13069] R10: 000000000000007b R11: 0000000000000246 R12: 0000000000000001
[  195.041358][T13069] R13: 00007f2e746e6038 R14: 00007f2e746e5fa0 R15: 00007ffea0c1a658
[  195.041381][T13069]  </TASK>
[  195.043635][T13069] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  195.329708][T13069] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1400: Failed to acquire dquot type 0
[  195.382151][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.418403][   T28] audit: type=1400 audit(1771915120.059:10979): avc:  denied  { write } for  pid=13100 comm="syz.6.1405" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  195.455167][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1405'.
[  195.532374][T13115] loop2: detected capacity change from 0 to 128
[  195.579915][T13120] loop2: detected capacity change from 0 to 128
[  195.675120][T12505] veth0_vlan: entered promiscuous mode
[  195.693261][T12505] veth1_vlan: entered promiscuous mode
[  195.731421][T12505] veth0_macvtap: entered promiscuous mode
[  195.738630][T13133] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  195.757132][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'.
[  195.757178][T12505] veth1_macvtap: entered promiscuous mode
[  195.798173][T12505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.807792][T12505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.836485][T13140] loop3: detected capacity change from 0 to 256
[  195.849041][ T4345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.850238][T13139] usb usb7: usbfs: process 13139 (syz.0.1410) did not claim interface 0 before use
[  195.860669][ T4345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.885447][T13140] FAT-fs (loop3): Directory bread(block 64) failed
[  195.898107][T13140] FAT-fs (loop3): Directory bread(block 65) failed
[  195.900890][ T4345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.908088][T13140] FAT-fs (loop3): Directory bread(block 66) failed
[  195.929624][T13140] FAT-fs (loop3): Directory bread(block 67) failed
[  195.934468][ T4345] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.938403][T13140] FAT-fs (loop3): Directory bread(block 68) failed
[  195.952125][T13140] FAT-fs (loop3): Directory bread(block 69) failed
[  195.962857][   T28] audit: type=1400 audit(1771915120.609:10980): avc:  denied  { getopt } for  pid=13145 comm="syz.7.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  195.975638][T13140] FAT-fs (loop3): Directory bread(block 70) failed
[  195.989959][T13140] FAT-fs (loop3): Directory bread(block 71) failed
[  195.996667][T13140] FAT-fs (loop3): Directory bread(block 72) failed
[  196.003611][T13140] FAT-fs (loop3): Directory bread(block 73) failed
[  196.139193][T13152] hub 8-0:1.0: USB hub found
[  196.144274][T13152] hub 8-0:1.0: 8 ports detected
[  196.164758][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1364'.
[  196.181886][T13152] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  196.191806][T13152] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  196.641273][   T28] audit: type=1400 audit(1771915120.769:10981): avc:  denied  { map } for  pid=13145 comm="syz.7.1364" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  196.731617][T13177] loop6: detected capacity change from 0 to 512
[  196.755517][T13177] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  196.766789][T13177] EXT4-fs (loop6): orphan cleanup on readonly fs
[  196.789283][T13177] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.1417: Block bitmap for bg 0 marked uninitialized
[  196.804221][T13189] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1419'.
[  196.834949][T13191] netlink: 'syz.2.1420': attribute type 16 has an invalid length.
[  196.841281][T13177] loop6: lost filesystem error report for type 5 error -117
[  196.842917][T13191] netlink: 'syz.2.1420': attribute type 17 has an invalid length.
[  196.848305][T13177] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  196.850250][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  196.850269][    C0] EXT4-fs (loop6): initial error at time 1771915121: ext4_read_block_bitmap_nowait:517
[  196.850295][    C0] EXT4-fs (loop6): last error at time 1771915121: ext4_read_block_bitmap_nowait:517
[  196.910700][T13191] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.925811][T13191] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.933843][T13177] loop6: lost filesystem error report for type 5 error -117
[  196.949291][T13177] EXT4-fs (loop6): 1 orphan inode deleted
[  196.963366][T13177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  196.994530][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.028174][   T28] audit: type=1400 audit(1771915121.669:10982): avc:  denied  { setopt } for  pid=13205 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  197.084111][T13218] xt_TCPMSS: Only works on TCP SYN packets
[  197.099519][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119560c00: rx timeout, send abort
[  197.107004][T13218] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1425'.
[  197.107896][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119560c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  197.164236][T13231] loop7: detected capacity change from 0 to 128
[  197.369666][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1429'.
[  197.421884][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1429'.
[  197.587262][T13252] netlink: 'syz.2.1434': attribute type 1 has an invalid length.
[  197.610721][T13253] netlink: 'syz.0.1432': attribute type 30 has an invalid length.
[  197.716310][T13252] bond3: entered promiscuous mode
[  197.758186][T13252] 8021q: adding VLAN 0 to HW filter on device bond3
[  197.823220][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  197.823235][   T28] audit: type=1400 audit(1771915122.469:10992): avc:  denied  { watch watch_reads } for  pid=13292 comm="syz.3.1435" path="/293/file0" dev="tmpfs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  197.853580][   T28] audit: type=1326 audit(1771915122.469:10993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.3.1435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe39896c629 code=0x0
[  197.855999][T13256] bond3: (slave bridge1): making interface the new active one
[  197.885946][T13256] bridge1: entered promiscuous mode
[  197.892778][T13256] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  198.129255][   T28] audit: type=1400 audit(1771915122.769:10994): avc:  denied  { create } for  pid=13353 comm="syz.7.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  198.168785][T13359] loop2: detected capacity change from 0 to 512
[  198.303256][T13359] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  198.345817][T13359] EXT4-fs (loop2): mount failed
[  198.450854][T13360] loop6: detected capacity change from 0 to 512
[  198.468579][T13360] vfat: Unknown parameter ''
[  198.521171][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1442'.
[  198.690290][T13355] loop7: detected capacity change from 0 to 32768
[  198.839013][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  198.956155][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  199.845782][T13392] SET target dimension over the limit!
[  199.891869][T13392] loop3: detected capacity change from 0 to 128
[  199.923896][T13392] FAT-fs (loop3): Directory bread(block 414) failed
[  199.941480][T13392] FAT-fs (loop3): Directory bread(block 415) failed
[  199.954197][T13392] FAT-fs (loop3): Directory bread(block 416) failed
[  199.969042][T13392] FAT-fs (loop3): Directory bread(block 417) failed
[  199.988966][T13392] FAT-fs (loop3): Directory bread(block 418) failed
[  199.995624][T13392] FAT-fs (loop3): Directory bread(block 419) failed
[  200.018955][T13392] FAT-fs (loop3): Directory bread(block 420) failed
[  200.035361][T13392] FAT-fs (loop3): Directory bread(block 421) failed
[  200.073907][T13392] FAT-fs (loop3): Directory bread(block 414) failed
[  200.102256][T13392] FAT-fs (loop3): Directory bread(block 415) failed
[  200.157154][T13415] loop2: detected capacity change from 0 to 128
[  200.227021][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1449'.
[  200.277652][T13422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1449'.
[  200.365323][T13425] loop0: detected capacity change from 0 to 128
[  200.434701][   T28] audit: type=1400 audit(1771915125.049:10995): avc:  denied  { bind } for  pid=13424 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  200.511257][T13425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  200.630109][T13425] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.654099][   T28] audit: type=1400 audit(1771915125.079:10996): avc:  denied  { node_bind } for  pid=13424 comm="syz.3.1456" saddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  200.734012][T13425] FAULT_INJECTION: forcing a failure.
[  200.734012][T13425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.771035][T13425] CPU: 0 UID: 0 PID: 13425 Comm: syz.0.1455 Not tainted syzkaller #0 PREEMPT(full) 
[  200.771131][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  200.771146][T13425] Call Trace:
[  200.771243][T13425]  <TASK>
[  200.771251][T13425]  __dump_stack+0x1d/0x30
[  200.771277][T13425]  dump_stack_lvl+0x95/0xd0
[  200.771302][T13425]  dump_stack+0x15/0x1b
[  200.771350][T13425]  should_fail_ex+0x263/0x280
[  200.771421][T13425]  should_fail+0xb/0x20
[  200.771439][T13425]  should_fail_usercopy+0x1a/0x20
[  200.771464][T13425]  _copy_to_user+0x20/0xa0
[  200.771550][T13425]  simple_read_from_buffer+0xb5/0x130
[  200.771616][T13425]  proc_fail_nth_read+0x10e/0x150
[  200.771677][T13425]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  200.771782][T13425]  vfs_read+0x1ab/0x7f0
[  200.771813][T13425]  ? __rcu_read_unlock+0x4e/0x70
[  200.771835][T13425]  ? __fget_files+0x184/0x1c0
[  200.771863][T13425]  ? mutex_lock+0x57/0x90
[  200.771974][T13425]  ksys_read+0xdc/0x1a0
[  200.772011][T13425]  __x64_sys_read+0x40/0x50
[  200.772041][T13425]  x64_sys_call+0x2886/0x3020
[  200.772103][T13425]  do_syscall_64+0x12c/0x370
[  200.772142][T13425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.772169][T13425] RIP: 0033:0x7f5afeb6cece
[  200.772189][T13425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  200.772240][T13425] RSP: 002b:00007f5afd606fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  200.772266][T13425] RAX: ffffffffffffffda RBX: 00007f5afd6076c0 RCX: 00007f5afeb6cece
[  200.772282][T13425] RDX: 000000000000000f RSI: 00007f5afd6070a0 RDI: 0000000000000008
[  200.772298][T13425] RBP: 00007f5afd607090 R08: 0000000000000000 R09: 0000000000000000
[  200.772314][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.772329][T13425] R13: 00007f5afee26038 R14: 00007f5afee25fa0 R15: 00007ffe79833f78
[  200.772397][T13425]  </TASK>
[  200.978319][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.264681][   T28] audit: type=1400 audit(1771915125.910:10997): avc:  denied  { getopt } for  pid=13455 comm="syz.0.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  201.441346][T13465] loop0: detected capacity change from 0 to 2048
[  201.455318][   T28] audit: type=1400 audit(1771915126.100:10998): avc:  denied  { getopt } for  pid=13468 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  201.558866][ T3554] GPT:first_usable_lbas don't match.
[  201.564347][ T3554] GPT:34 != 290
[  201.576256][ T3554] GPT: Use GNU Parted to correct GPT errors.
[  201.610795][   T28] audit: type=1400 audit(1771915126.220:10999): avc:  denied  { write } for  pid=13476 comm="syz.2.1466" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  201.640605][ T3554]  loop0: p1 p2 p3
[  201.674347][T13465] GPT:first_usable_lbas don't match.
[  201.679859][T13465] GPT:34 != 290
[  201.683757][T13465] GPT: Use GNU Parted to correct GPT errors.
[  201.709552][T13465]  loop0: p1 p2 p3
[  201.721598][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1468'.
[  201.866954][ T4097] udevd[4097]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  201.869031][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  201.895344][T13522] loop3: detected capacity change from 0 to 128
[  201.899537][ T3803] udevd[3803]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  202.049011][   T28] audit: type=1400 audit(1771915126.690:11000): avc:  denied  { connect } for  pid=13532 comm="syz.7.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  202.118885][   T28] audit: type=1400 audit(1771915126.740:11001): avc:  denied  { ioctl } for  pid=13532 comm="syz.7.1477" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  202.234126][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'.
[  202.281629][T13549] loop0: detected capacity change from 0 to 512
[  202.347808][T13549] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1479: invalid indirect mapped block 4294967295 (level 1)
[  202.371786][T13549] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  202.371962][T13549] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1479: invalid indirect mapped block 4294967295 (level 1)
[  202.381349][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  202.381391][    C1] EXT4-fs (loop0): initial error at time 1771915127: ext4_free_branches:1023: inode 11
[  202.381419][    C1] EXT4-fs (loop0): last error at time 1771915127: ext4_free_branches:1023: inode 11
[  202.429391][T13549] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  202.429884][T13549] EXT4-fs (loop0): 2 truncates cleaned up
[  202.446304][T13549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.473058][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.638080][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1483'.
[  202.647567][T13567] xfrm0: entered promiscuous mode
[  202.652791][T13567] xfrm0: entered allmulticast mode
[  202.999443][T13576] loop6: detected capacity change from 0 to 1024
[  203.059782][T13576] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  203.212361][T13576] JBD2: no valid journal superblock found
[  203.270329][T13576] EXT4-fs (loop6): Could not load journal inode
[  203.390521][T13593] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1489'.
[  203.606667][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1493'.
[  203.627488][T13616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1492'.
[  203.803816][T13636] ip6tnl2: entered promiscuous mode
[  204.003924][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  204.004006][   T28] audit: type=1400 audit(1771915128.650:11003): avc:  denied  { create } for  pid=13656 comm="syz.3.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  204.220421][T13677] loop6: detected capacity change from 0 to 1024
[  204.269608][T13677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c128, mo2=0002]
[  204.304947][T13677] System zones: 0-1, 3-12
[  204.315626][T13677] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.420535][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  204.532382][T13700] syzkaller0: entered promiscuous mode
[  204.537904][T13700] syzkaller0: entered allmulticast mode
[  204.538594][T13715] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1502'.
[  204.585128][T13715] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1502'.
[  204.678382][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'.
[  204.730512][T13736] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.775144][T13744] loop7: detected capacity change from 0 to 128
[  204.814893][T13736] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.855913][T13744] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  204.871442][T13744] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.941772][T13750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1509'.
[  205.194078][T13736] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.503162][T13736] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.592797][   T28] audit: type=1400 audit(1771915130.240:11004): avc:  denied  { setopt } for  pid=13779 comm="syz.0.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  205.695191][   T28] audit: type=1400 audit(1771915130.270:11005): avc:  denied  { read } for  pid=13779 comm="syz.0.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  205.761341][ T4368] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.801282][T13802] loop3: detected capacity change from 0 to 512
[  205.818021][ T4368] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.865513][T13802] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  205.898784][ T4368] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.959783][ T4368] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.885290][T12505] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.898840][T13858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.907530][T13858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.114807][   T28] audit: type=1400 audit(1771915131.760:11006): avc:  denied  { setopt } for  pid=13883 comm="syz.6.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  207.216987][T13884] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1518'.
[  207.227095][T13884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=13884 comm=syz.6.1518
[  207.291537][T13920] netlink: 'syz.7.1522': attribute type 20 has an invalid length.
[  207.299857][T13917] loop3: detected capacity change from 0 to 1764
[  207.412944][T13936] loop7: detected capacity change from 0 to 512
[  207.421416][T13936] EXT4-fs (loop7): inodes count not valid: 32 vs 76
[  207.538816][   T28] audit: type=1400 audit(1771915132.190:11007): avc:  denied  { ioctl } for  pid=13950 comm="syz.7.1527" path="socket:[24682]" dev="sockfs" ino=24682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  207.561026][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'.
[  207.615078][T13957] FAULT_INJECTION: forcing a failure.
[  207.615078][T13957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.667543][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.7.1528 Not tainted syzkaller #0 PREEMPT(full) 
[  207.667576][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  207.667677][T13957] Call Trace:
[  207.667684][T13957]  <TASK>
[  207.667766][T13957]  __dump_stack+0x1d/0x30
[  207.667799][T13957]  dump_stack_lvl+0x95/0xd0
[  207.667827][T13957]  dump_stack+0x15/0x1b
[  207.667853][T13957]  should_fail_ex+0x263/0x280
[  207.667880][T13957]  should_fail+0xb/0x20
[  207.667958][T13957]  should_fail_usercopy+0x1a/0x20
[  207.668054][T13957]  _copy_from_user+0x1c/0xb0
[  207.668184][T13957]  ___sys_recvmsg+0xaa/0x3b0
[  207.668349][T13957]  do_recvmmsg+0x1ef/0x560
[  207.668384][T13957]  ? fput+0x8f/0xc0
[  207.668409][T13957]  __x64_sys_recvmmsg+0xe5/0x170
[  207.668441][T13957]  x64_sys_call+0x80f/0x3020
[  207.668544][T13957]  do_syscall_64+0x12c/0x370
[  207.668694][T13957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.668717][T13957] RIP: 0033:0x7fb3b862c629
[  207.668736][T13957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.668757][T13957] RSP: 002b:00007fb3b707f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  207.668868][T13957] RAX: ffffffffffffffda RBX: 00007fb3b88a5fa0 RCX: 00007fb3b862c629
[  207.668885][T13957] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000004
[  207.668902][T13957] RBP: 00007fb3b707f090 R08: 0000000000000000 R09: 0000000000000000
[  207.668934][T13957] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  207.668950][T13957] R13: 00007fb3b88a6038 R14: 00007fb3b88a5fa0 R15: 00007ffee84c0098
[  207.668971][T13957]  </TASK>
[  207.881306][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1531'.
[  208.086130][T13977] loop7: detected capacity change from 0 to 512
[  208.172267][T13977] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  208.275521][T13977] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (6000000)
[  208.323787][T13933] loop3: detected capacity change from 0 to 1024
[  208.372578][T13977] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  208.520429][   T28] audit: type=1400 audit(1771915133.120:11008): avc:  denied  { ioctl } for  pid=13995 comm="syz.2.1538" path="socket:[24770]" dev="sockfs" ino=24770 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  208.713845][T14008] loop6: detected capacity change from 0 to 1024
[  208.758476][   T28] audit: type=1400 audit(1771915133.160:11009): avc:  denied  { listen } for  pid=13995 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  208.780030][T14008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  208.790179][   T28] audit: type=1400 audit(1771915133.200:11010): avc:  denied  { bind } for  pid=13970 comm="syz.7.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  208.816218][T14008] System zones: 0-1, 3-36
[  208.829440][T13933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  208.859117][T14008] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1537: bad orphan inode 134217728
[  208.860015][T13933] System zones: 
[  208.870611][T14008] loop6: lost filesystem error report for type 5 error -117
[  208.874642][T14008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.880750][T13933] 0-1, 3-36
[  208.955104][T13933] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1524: bad orphan inode 134217728
[  209.002975][T13933] loop3: lost filesystem error report for type 5 error -117
[  209.008462][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  209.022243][    C0] EXT4-fs (loop3): initial error at time 1771915133: ext4_orphan_get:1417
[  209.030816][    C0] EXT4-fs (loop3): last error at time 1771915133: ext4_orphan_get:1417
[  209.071390][T13933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.109567][   T28] audit: type=1400 audit(1771915133.760:11011): avc:  denied  { map } for  pid=13991 comm="syz.6.1537" path="/106/bus/hugetlb.1GB.usage_in_bytes" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  209.204665][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.229577][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  209.288015][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  209.288109][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  209.288122][ T3314] Call Trace:
[  209.288129][ T3314]  <TASK>
[  209.288137][ T3314]  __dump_stack+0x1d/0x30
[  209.288169][ T3314]  dump_stack_lvl+0x95/0xd0
[  209.288198][ T3314]  dump_stack+0x15/0x1b
[  209.288299][ T3314]  dump_header+0x80/0x240
[  209.288326][ T3314]  oom_kill_process+0x295/0x350
[  209.288347][ T3314]  out_of_memory+0x97d/0xb80
[  209.288516][ T3314]  try_charge_memcg+0x62e/0xa10
[  209.288551][ T3314]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  209.288585][ T3314]  __swap_cache_prepare_and_add+0x386/0x530
[  209.288630][ T3314]  swap_cache_alloc_folio+0xa2/0x120
[  209.288664][ T3314]  swap_cluster_readahead+0x36b/0x3d0
[  209.288700][ T3314]  swapin_readahead+0xde/0x840
[  209.288768][ T3314]  ? __rcu_read_unlock+0x4e/0x70
[  209.288789][ T3314]  ? __perf_event_task_sched_in+0xa65/0xad0
[  209.288811][ T3314]  ? __list_add_valid_or_report+0x38/0xe0
[  209.288937][ T3314]  ? xfd_validate_state+0x45/0xf0
[  209.289043][ T3314]  ? __rcu_read_unlock+0x4e/0x70
[  209.289067][ T3314]  ? swap_cache_get_folio+0x26f/0x280
[  209.289122][ T3314]  do_swap_page+0x309/0x2210
[  209.289160][ T3314]  ? __schedule+0x85a/0xd40
[  209.289184][ T3314]  ? __rcu_read_lock+0x36/0x50
[  209.289246][ T3314]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  209.289271][ T3314]  handle_mm_fault+0xb40/0x3020
[  209.289369][ T3314]  ? vma_start_read+0x1c7/0x2c0
[  209.289397][ T3314]  do_user_addr_fault+0x62f/0x1050
[  209.289427][ T3314]  ? trace_page_fault_user+0x1f/0xe0
[  209.289526][ T3314]  exc_page_fault+0x62/0xa0
[  209.289557][ T3314]  asm_exc_page_fault+0x26/0x30
[  209.289612][ T3314] RIP: 0033:0x7f5afeb67817
[  209.289634][ T3314] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  209.289653][ T3314] RSP: 002b:00007ffe79834270 EFLAGS: 00010202
[  209.289672][ T3314] RAX: 0000000000000000 RBX: 000055555a811500 RCX: 00007f5afeb67817
[  209.289689][ T3314] RDX: 00007ffe798342b0 RSI: 0000000000000000 RDI: 0000000000000000
[  209.289703][ T3314] RBP: 00007ffe7983431c R08: 0000000000000000 R09: 0000000000000000
[  209.289760][ T3314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  209.289777][ T3314] R13: 00000000000927c0 R14: 0000000000032cd6 R15: 00007ffe79834370
[  209.289799][ T3314]  </TASK>
[  209.589267][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 864
[  209.596207][ T3314] memory+swap: usage 307528kB, limit 9007199254740988kB, failcnt 0
[  209.604654][ T3314] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  209.612548][ T3314] Memory cgroup stats for /syz0:
[  209.613052][ T3314] cache 0
[  209.621303][ T3314] rss 0
[  209.624174][ T3314] shmem 0
[  209.627448][ T3314] mapped_file 0
[  209.631706][ T3314] dirty 0
[  209.634895][ T3314] writeback 0
[  209.638693][ T3314] workingset_refault_anon 174
[  209.643818][ T3314] workingset_refault_file 668
[  209.653831][ T3314] swap 335872
[  209.657716][ T3314] swapcached 1056768
[  209.663159][ T3314] pgpgin 178559
[  209.666796][ T3314] pgpgout 178557
[  209.671307][ T3314] pgfault 187559
[  209.675165][ T3314] pgmajfault 61
[  209.691831][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'.
[  209.757087][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'.
[  209.767263][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'.
[  210.018658][ T3314] inactive_anon 0
[  210.022502][ T3314] active_anon 0
[  210.026159][ T3314] inactive_file 0
[  210.032724][ T3314] active_file 8192
[  210.036565][ T3314] unevictable 0
[  210.040213][ T3314] hierarchical_memory_limit 314572800
[  210.045825][ T3314] hierarchical_memsw_limit 9223372036854771712
[  210.052196][ T3314] total_cache 0
[  210.055735][ T3314] total_rss 0
[  210.059101][ T3314] total_shmem 0
[  210.062652][ T3314] total_mapped_file 0
[  210.066657][ T3314] total_dirty 0
[  210.070336][ T3314] total_writeback 0
[  210.074175][ T3314] total_workingset_refault_anon 174
[  210.079523][ T3314] total_workingset_refault_file 668
[  210.084733][ T3314] total_swap 335872
[  210.089277][ T3314] total_swapcached 1056768
[  210.093900][ T3314] total_pgpgin 178559
[  210.098097][ T3314] total_pgpgout 178557
[  210.102421][ T3314] total_pgfault 187559
[  210.106510][ T3314] total_pgmajfault 61
[  210.122556][ T3314] total_inactive_anon 0
[  210.126794][ T3314] total_active_anon 0
[  210.140444][ T3314] total_inactive_file 0
[  210.147034][ T3314] total_active_file 8192
[  210.161417][ T3314] total_unevictable 0
[  210.195984][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1534,pid=13978,uid=0
[  210.256907][ T3314] Memory cgroup out of memory: Killed process 13978 (syz.0.1534) total-vm:94028kB, anon-rss:1224kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  210.282405][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.416470][T14083] loop6: detected capacity change from 0 to 256
[  210.707376][T14090] loop0: detected capacity change from 0 to 512
[  210.757323][T14090] EXT4-fs (loop0): unsupported inode size: 4
[  210.884923][T14090] EXT4-fs (loop0): blocksize: 1024
[  211.582008][T14152] hub 8-0:1.0: USB hub found
[  211.587113][T14152] hub 8-0:1.0: 8 ports detected
[  212.544561][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1562'.
[  213.226784][T14175] loop0: detected capacity change from 0 to 512
[  213.454041][T14175] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  213.497879][T14184] loop2: detected capacity change from 0 to 512
[  213.527249][T14175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.584287][T14175] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.614697][T14187] loop7: detected capacity change from 0 to 512
[  213.637347][T14184] FAT-fs (loop2): FAT read failed (blocknr 128)
[  213.725667][T14187] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1568: inode has both inline data and extents flags
[  213.751845][T14187] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  213.758187][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  213.773820][    C1] EXT4-fs (loop7): initial error at time 1771915138: ext4_orphan_get:1391: inode 15
[  213.783300][    C1] EXT4-fs (loop7): last error at time 1771915138: ext4_orphan_get:1391: inode 15
[  213.819555][T14187] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1568: couldn't read orphan inode 15 (err -117)
[  213.833910][T14187] loop7: lost filesystem error report for type 5 error -117
[  213.840822][T14248] loop2: detected capacity change from 0 to 128
[  213.844471][T14187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.885394][T14187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.034022][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.097488][T14277] SET target dimension over the limit!
[  214.182832][T14277] loop6: detected capacity change from 0 to 4096
[  214.204425][   T28] audit: type=1400 audit(1771915138.850:11012): avc:  denied  { execute_no_trans } for  pid=14186 comm="syz.7.1568" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  214.298600][T14277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  214.326970][T14277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.585872][T14295] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.929516][T14277] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1573'.
[  215.247698][T14277] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1573'.
[  215.428916][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.030605][   T28] audit: type=1400 audit(1771915140.670:11013): avc:  denied  { create } for  pid=14378 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  216.061504][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'.
[  216.150407][T14379] netlink: 'syz.2.1578': attribute type 1 has an invalid length.
[  216.201915][   T28] audit: type=1400 audit(1771915140.710:11014): avc:  denied  { write } for  pid=14378 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  216.480287][T14424] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1581'.
[  216.598934][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1583'.
[  216.769806][   T28] audit: type=1326 audit(1771915141.410:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  216.806355][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1582'.
[  216.881780][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1582'.
[  216.891804][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1582'.
[  217.123164][   T28] audit: type=1326 audit(1771915141.470:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  217.208386][   T28] audit: type=1326 audit(1771915141.470:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  217.233941][   T28] audit: type=1326 audit(1771915141.470:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  217.257840][   T28] audit: type=1326 audit(1771915141.470:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  217.338146][   T28] audit: type=1326 audit(1771915141.480:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  217.394771][   T28] audit: type=1326 audit(1771915141.480:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7446c629 code=0x7ffc0000
[  217.431487][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1588'.
[  217.475537][T14455] netlink: 'syz.0.1588': attribute type 11 has an invalid length.
[  217.486346][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  217.855219][T14509] loop6: detected capacity change from 0 to 1024
[  217.862067][T14509] EXT4-fs: dax option not supported
[  218.098061][T14518] loop0: detected capacity change from 0 to 1024
[  218.106327][T14518] EXT4-fs: inline encryption not supported
[  218.170875][T14518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.257799][T14525] EXT4-fs (loop0): shut down requested (1)
[  218.344018][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.699243][T14570] netlink: 'syz.7.1602': attribute type 11 has an invalid length.
[  219.826568][T14595] macvlan2: entered promiscuous mode
[  219.859252][T14595] bond3: (slave macvlan2): Opening slave failed
[  219.935945][T14642] FAULT_INJECTION: forcing a failure.
[  219.935945][T14642] name failslab, interval 1, probability 0, space 0, times 0
[  219.980733][T14648] loop2: detected capacity change from 0 to 128
[  219.987548][T14642] CPU: 1 UID: 0 PID: 14642 Comm: syz.3.1616 Not tainted syzkaller #0 PREEMPT(full) 
[  219.987579][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  219.987644][T14642] Call Trace:
[  219.987652][T14642]  <TASK>
[  219.987662][T14642]  __dump_stack+0x1d/0x30
[  219.987692][T14642]  dump_stack_lvl+0x95/0xd0
[  219.987717][T14642]  dump_stack+0x15/0x1b
[  219.987763][T14642]  should_fail_ex+0x263/0x280
[  219.987790][T14642]  should_failslab+0x8c/0xb0
[  219.987815][T14642]  __kmalloc_noprof+0xb8/0x4e0
[  219.987838][T14642]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  219.987877][T14642]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  219.987905][T14642]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  219.988018][T14642]  ? selinux_capable+0x31/0x40
[  219.988162][T14642]  ? security_capable+0x7b/0x90
[  219.988197][T14642]  ? ns_capable+0x7c/0xb0
[  219.988219][T14642]  genl_rcv_msg+0x432/0x470
[  219.988260][T14642]  ? __pfx_batadv_pre_doit+0x10/0x10
[  219.988337][T14642]  ? __pfx_batadv_netlink_set_mesh+0x10/0x10
[  219.988363][T14642]  ? __pfx_batadv_post_doit+0x10/0x10
[  219.988456][T14642]  netlink_rcv_skb+0x123/0x220
[  219.988486][T14642]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.988541][T14642]  genl_rcv+0x28/0x40
[  219.988573][T14642]  netlink_unicast+0x5c0/0x690
[  219.988598][T14642]  netlink_sendmsg+0x5c8/0x6f0
[  219.988626][T14642]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.988733][T14642]  ____sys_sendmsg+0x5af/0x600
[  219.988767][T14642]  ___sys_sendmsg+0x195/0x1e0
[  219.988805][T14642]  __x64_sys_sendmsg+0xd4/0x160
[  219.988972][T14642]  x64_sys_call+0x194c/0x3020
[  219.989000][T14642]  do_syscall_64+0x12c/0x370
[  219.989058][T14642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.989133][T14642] RIP: 0033:0x7fe39896c629
[  219.989149][T14642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.989221][T14642] RSP: 002b:00007fe3973bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.989246][T14642] RAX: ffffffffffffffda RBX: 00007fe398be5fa0 RCX: 00007fe39896c629
[  219.989263][T14642] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000007
[  219.989278][T14642] RBP: 00007fe3973bf090 R08: 0000000000000000 R09: 0000000000000000
[  219.989290][T14642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.989302][T14642] R13: 00007fe398be6038 R14: 00007fe398be5fa0 R15: 00007ffe3d3563a8
[  219.989389][T14642]  </TASK>
[  220.247010][T14652] hsr0: entered promiscuous mode
[  220.283629][T14664] __nla_validate_parse: 10 callbacks suppressed
[  220.283646][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'.
[  220.308470][T14664] netlink: 'syz.2.1620': attribute type 11 has an invalid length.
[  220.318093][T14664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1620'.
[  220.878593][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'.
[  221.407044][T14718] loop0: detected capacity change from 0 to 1024
[  221.424116][T14718] EXT4-fs: Ignoring removed orlov option
[  221.430201][T14718] EXT4-fs: Ignoring removed nobh option
[  221.451309][T14723] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1629'.
[  221.451522][T14727] netlink: 'syz.7.1630': attribute type 13 has an invalid length.
[  221.486222][T14718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.560590][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.604798][T14744] loop2: detected capacity change from 0 to 512
[  221.653741][T14744] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  221.681507][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'.
[  221.700446][T14744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  221.727971][T14744] EXT4-fs (loop2): orphan cleanup on readonly fs
[  221.740271][T14751] loop7: detected capacity change from 0 to 8192
[  221.747335][T14744] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1633: bad orphan inode 267
[  221.757648][T14744] loop2: lost filesystem error report for type 5 error -117
[  221.759662][T14744] EXT4-fs (loop2): Remounting filesystem read-only
[  221.773722][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  221.773743][    C0] EXT4-fs (loop2): initial error at time 1771915146: ext4_orphan_get:1417
[  221.773769][    C0] EXT4-fs (loop2): last error at time 1771915146: ext4_orphan_get:1417
[  221.797383][ T3554]  loop7: p1 < > p2 p4 < p5 >
[  221.797886][T14744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  221.816596][ T3554] loop7: partition table partially beyond EOD, truncated
[  221.817876][T14744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14744 comm=syz.2.1633
[  221.836891][ T3554] loop7: p1 start 134217728 is beyond EOD, truncated
[  221.839257][T14744] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1633: dx entry: limit 0 != root limit 125
[  221.855686][T14758] netlink: 'syz.0.1632': attribute type 11 has an invalid length.
[  221.863601][T14758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1632'.
[  221.872826][ T3554] loop7: p2 size 591360 extends beyond EOD, truncated
[  221.872936][T14744] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1633: Corrupt directory, running e2fsck is recommended
[  221.902084][ T3554] loop7: p5 size 591360 extends beyond EOD, truncated
[  221.931399][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  221.937226][T14767] loop6: detected capacity change from 0 to 4096
[  221.950827][T14751]  loop7: p1 < > p2 p4 < p5 >
[  221.955533][T14751] loop7: partition table partially beyond EOD, truncated
[  221.969741][T14769] loop0: detected capacity change from 0 to 512
[  221.976977][T14767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.991914][T14769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  222.024657][T14767] FAULT_INJECTION: forcing a failure.
[  222.024657][T14767] name failslab, interval 1, probability 0, space 0, times 0
[  222.048141][T14751] loop7: p1 start 134217728 is beyond EOD, truncated
[  222.062953][T14769] EXT4-fs (loop0): 1 truncate cleaned up
[  222.069201][T14767] CPU: 0 UID: 0 PID: 14767 Comm: syz.6.1634 Not tainted syzkaller #0 PREEMPT(full) 
[  222.069231][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  222.069245][T14767] Call Trace:
[  222.069252][T14767]  <TASK>
[  222.069262][T14767]  __dump_stack+0x1d/0x30
[  222.069293][T14767]  dump_stack_lvl+0x95/0xd0
[  222.069417][T14767]  dump_stack+0x15/0x1b
[  222.069476][T14767]  should_fail_ex+0x263/0x280
[  222.069501][T14767]  should_failslab+0x8c/0xb0
[  222.069525][T14767]  __kmalloc_noprof+0xb8/0x4e0
[  222.069589][T14767]  ? find_tree_dqentry+0x3e/0x8c0
[  222.069616][T14767]  find_tree_dqentry+0x3e/0x8c0
[  222.069640][T14767]  ? __brelse+0x32/0x60
[  222.069727][T14767]  ? from_kuid+0x151/0x340
[  222.069756][T14767]  ? ext4_quota_read+0x22b/0x260
[  222.069785][T14767]  find_tree_dqentry+0x4c9/0x8c0
[  222.069811][T14767]  find_tree_dqentry+0x4c9/0x8c0
[  222.069835][T14767]  find_tree_dqentry+0x4c9/0x8c0
[  222.069884][T14767]  qtree_read_dquot+0x35c/0x4a0
[  222.069911][T14767]  v2_read_dquot+0x97/0xd0
[  222.069947][T14767]  dquot_acquire+0xcd/0x2b0
[  222.069979][T14767]  ext4_acquire_dquot+0x15f/0x200
[  222.070083][T14767]  dqget+0x527/0x8c0
[  222.070116][T14767]  __dquot_initialize+0x27f/0x7c0
[  222.070186][T14767]  dquot_initialize+0x1a/0x30
[  222.070284][T14767]  ext4_tmpfile+0x49/0x2e0
[  222.070314][T14767]  vfs_tmpfile+0x259/0x520
[  222.070350][T14767]  do_tmpfile+0xa8/0x190
[  222.070427][T14767]  path_openat+0x1cf0/0x2050
[  222.070498][T14767]  ? _parse_integer_limit+0x170/0x190
[  222.070534][T14767]  ? _parse_integer+0x27/0x40
[  222.070570][T14767]  ? kstrtoull+0x111/0x140
[  222.070605][T14767]  ? kstrtouint+0x76/0xc0
[  222.070680][T14767]  do_file_open+0x16c/0x290
[  222.070784][T14767]  do_sys_openat2+0x94/0x130
[  222.070813][T14767]  __x64_sys_openat+0xf2/0x120
[  222.070845][T14767]  x64_sys_call+0x1e39/0x3020
[  222.070909][T14767]  do_syscall_64+0x12c/0x370
[  222.070947][T14767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.070972][T14767] RIP: 0033:0x7fe9e5b1c629
[  222.071059][T14767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.071077][T14767] RSP: 002b:00007fe9e456f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  222.071102][T14767] RAX: ffffffffffffffda RBX: 00007fe9e5d95fa0 RCX: 00007fe9e5b1c629
[  222.071119][T14767] RDX: 0000000000cbe082 RSI: 0000200000004280 RDI: ffffffffffffff9c
[  222.071182][T14767] RBP: 00007fe9e456f090 R08: 0000000000000000 R09: 0000000000000000
[  222.071195][T14767] R10: 000000000000007b R11: 0000000000000246 R12: 0000000000000002
[  222.071208][T14767] R13: 00007fe9e5d96038 R14: 00007fe9e5d95fa0 R15: 00007fff1bc908a8
[  222.071282][T14767]  </TASK>
[  222.071460][T14767] __quota_error: 64 callbacks suppressed
[  222.071471][T14767] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  222.130270][T14769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.131009][T14767] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1634: Failed to acquire dquot type 0
[  222.147836][T14751] loop7: p2 size 591360 extends beyond EOD, 
[  222.392945][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.418258][T14751] truncated
[  222.423250][T14751] loop7: p5 size 591360 extends beyond EOD, truncated
[  222.491553][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.521450][T14837] loop3: detected capacity change from 0 to 164
[  222.589002][T14837] isofs_fill_super: root inode is not a directory. Corrupted media?
[  222.616056][T14851] loop7: detected capacity change from 0 to 128
[  222.663697][ T3700] udevd[3700]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  222.677310][ T4097] udevd[4097]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  222.678830][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  222.701903][T14860] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1644'.
[  222.712882][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'.
[  222.722812][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'.
[  222.767086][T14876] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 2, id = 0
[  222.788531][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1647'.
[  222.822355][T14875] netlink: 'syz.7.1647': attribute type 6 has an invalid length.
[  222.838189][   T28] audit: type=1400 audit(1771915147.471:11086): avc:  denied  { setopt } for  pid=14862 comm="syz.0.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  222.862310][   T28] audit: type=1400 audit(1771915147.471:11087): avc:  denied  { setcheckreqprot } for  pid=14862 comm="syz.0.1646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  222.898005][T14921] loop7: detected capacity change from 0 to 128
[  222.915671][T14916] loop6: detected capacity change from 0 to 1024
[  222.928811][T14916] EXT4-fs: Ignoring removed orlov option
[  223.030923][T14916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.177112][   T28] audit: type=1400 audit(1771915147.821:11088): avc:  denied  { watch_reads } for  pid=14920 comm="syz.7.1648" path="/38" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  223.222683][T14941] netlink: 'syz.3.1651': attribute type 11 has an invalid length.
[  223.255550][T14941] loop3: detected capacity change from 0 to 512
[  223.284955][T14941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  223.304973][T14941] EXT4-fs (loop3): 1 truncate cleaned up
[  223.316129][T14941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.390385][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.541938][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.569523][T14969] loop3: detected capacity change from 0 to 2048
[  223.640982][   T28] audit: type=1400 audit(1771915148.291:11089): avc:  denied  { map } for  pid=14963 comm="syz.6.1652" path="socket:[25411]" dev="sockfs" ino=25411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  223.684228][T14983] netlink: 'syz.3.1656': attribute type 16 has an invalid length.
[  223.708003][T14985] veth7: entered promiscuous mode
[  223.709032][T14983] netlink: 'syz.3.1656': attribute type 17 has an invalid length.
[  223.714343][   T28] audit: type=1400 audit(1771915148.291:11090): avc:  denied  { read } for  pid=14963 comm="syz.6.1652" path="socket:[25411]" dev="sockfs" ino=25411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  223.880041][T15009] xt_TCPMSS: Only works on TCP SYN packets
[  223.899229][T15012] loop2: detected capacity change from 0 to 2048
[  223.942541][T15012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.004561][T15027] loop7: detected capacity change from 0 to 512
[  224.012115][T15027] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  224.032938][T15027] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1662: bg 0: block 255: padding at end of block bitmap is not set
[  224.089757][T15027] loop7: lost filesystem error report for type 5 error -117
[  224.089967][T15027] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  224.097685][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  224.097707][    C0] EXT4-fs (loop7): initial error at time 1771915148: ext4_validate_block_bitmap:441
[  224.097729][    C0] EXT4-fs (loop7): last error at time 1771915148: ext4_validate_block_bitmap:441
[  224.166567][T15027] loop7: lost filesystem error report for type 5 error -117
[  224.191570][   T50] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  224.226480][T15027] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1662: invalid indirect mapped block 1 (level 1)
[  224.235354][   T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  224.255496][T15027] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  224.256591][T15027] EXT4-fs (loop7): 1 truncate cleaned up
[  224.265298][   T50] EXT4-fs (loop2): This should not happen!! Data will be lost
[  224.265298][   T50] 
[  224.280604][T15027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.294065][   T50] EXT4-fs (loop2): Total free blocks count 0
[  224.300513][   T50] EXT4-fs (loop2): Free/Dirty block details
[  224.306793][   T50] EXT4-fs (loop2): free_blocks=2415919504
[  224.313111][   T50] EXT4-fs (loop2): dirty_blocks=48
[  224.313184][T15037] netlink: 'syz.0.1665': attribute type 1 has an invalid length.
[  224.333463][T15037] bond7: entered promiscuous mode
[  224.343469][T15037] 8021q: adding VLAN 0 to HW filter on device bond7
[  224.350601][   T50] EXT4-fs (loop2): Block reservation details
[  224.357236][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.370983][   T50] EXT4-fs (loop2): i_reserved_data_blocks=3
[  224.383279][T15037] bond7: (slave bridge5): making interface the new active one
[  224.392424][T15037] bridge5: entered promiscuous mode
[  224.392580][   T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28
[  224.399300][T15037] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  224.953374][T15149] loop0: detected capacity change from 0 to 1764
[  225.156886][T15160] loop3: detected capacity change from 0 to 512
[  225.177712][T15160] vfat: Unknown parameter ''
[  227.023587][T15183] vlan2: entered promiscuous mode
[  227.044993][T15189] loop6: detected capacity change from 0 to 164
[  227.259879][T15218] loop7: detected capacity change from 0 to 128
[  227.398807][T15218] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.573713][T15235] __nla_validate_parse: 7 callbacks suppressed
[  227.573731][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1689'.
[  228.383119][ T4481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.397417][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.397542][T15218] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.475109][T15229] support for the xor transformation has been removed.
[  228.663275][T15238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'.
[  228.700974][T15245] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1692'.
[  228.814655][T12505] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.851202][T15254] loop6: detected capacity change from 0 to 512
[  228.860819][T15254] EXT4-fs: Ignoring removed nobh option
[  228.964688][T15263] loop7: detected capacity change from 0 to 512
[  228.975897][T15254] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  228.992541][T15263] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1693: invalid indirect mapped block 4294967295 (level 1)
[  229.007913][T15263] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  229.008280][T15263] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1693: invalid indirect mapped block 4294967295 (level 1)
[  229.017796][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  229.017820][    C1] EXT4-fs (loop7): initial error at time 1771915153: ext4_free_branches:1023: inode 11
[  229.017873][    C1] EXT4-fs (loop7): last error at time 1771915153: ext4_free_branches:1023: inode 11
[  229.172579][T15272] loop0: detected capacity change from 0 to 512
[  229.191074][T15272] vfat: Unknown parameter ''
[  229.236212][T15254] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  229.411406][T15263] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  229.412149][T15263] EXT4-fs (loop7): 2 truncates cleaned up
[  229.442620][T15254] EXT4-fs (loop6): 1 truncate cleaned up
[  229.496055][T15254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.553237][T15263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.647120][T15254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.736049][T15254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.948550][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.086094][T15254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.094892][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.105052][T15254] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.284921][T15315] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1702'.
[  230.408897][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.718802][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'.
[  230.835829][T15331] loop0: detected capacity change from 0 to 1024
[  230.969360][T15331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c128, mo2=0002]
[  230.983602][T15331] System zones: 0-1, 3-12
[  231.004580][T15331] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.055629][T15331] FAULT_INJECTION: forcing a failure.
[  231.055629][T15331] name failslab, interval 1, probability 0, space 0, times 0
[  231.105732][T15331] CPU: 1 UID: 0 PID: 15331 Comm: syz.0.1706 Not tainted syzkaller #0 PREEMPT(full) 
[  231.105760][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  231.105771][T15331] Call Trace:
[  231.105834][T15331]  <TASK>
[  231.105845][T15331]  __dump_stack+0x1d/0x30
[  231.105871][T15331]  dump_stack_lvl+0x95/0xd0
[  231.105893][T15331]  dump_stack+0x15/0x1b
[  231.105915][T15331]  should_fail_ex+0x263/0x280
[  231.105991][T15331]  should_failslab+0x8c/0xb0
[  231.106010][T15331]  kmem_cache_alloc_noprof+0x66/0x400
[  231.106051][T15331]  ? do_getname+0x2e/0x1c0
[  231.106142][T15331]  do_getname+0x2e/0x1c0
[  231.106167][T15331]  getname_flags+0x1d/0x30
[  231.106313][T15331]  do_sys_openat2+0x60/0x130
[  231.106387][T15331]  __x64_sys_openat+0xf2/0x120
[  231.106419][T15331]  x64_sys_call+0x1e39/0x3020
[  231.106444][T15331]  do_syscall_64+0x12c/0x370
[  231.106556][T15331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.106577][T15331] RIP: 0033:0x7f5afebac629
[  231.106663][T15331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.106683][T15331] RSP: 002b:00007f5afd607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  231.106708][T15331] RAX: ffffffffffffffda RBX: 00007f5afee25fa0 RCX: 00007f5afebac629
[  231.106726][T15331] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  231.106739][T15331] RBP: 00007f5afd607090 R08: 0000000000000000 R09: 0000000000000000
[  231.106753][T15331] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  231.106768][T15331] R13: 00007f5afee26038 R14: 00007f5afee25fa0 R15: 00007ffe79833f78
[  231.106821][T15331]  </TASK>
[  231.108467][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.253993][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1708'.
[  231.412742][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  231.417363][ T4475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.427512][T15355] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1709'.
[  231.450405][T15355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1709'.
[  231.601316][T15343] netlink: 'syz.6.1708': attribute type 11 has an invalid length.
[  231.624446][T15343] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1708'.
[  231.672972][T15358] loop6: detected capacity change from 0 to 512
[  231.679979][T15358] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  231.701635][T15358] EXT4-fs (loop6): 1 truncate cleaned up
[  231.712860][T15358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.774833][T15388] loop0: detected capacity change from 0 to 1024
[  231.787066][T15388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  231.825809][T15388] System zones: 0-1, 3-36
[  231.854387][T15388] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1714: bad orphan inode 134217728
[  231.902208][T15388] loop0: lost filesystem error report for type 5 error -117
[  231.902695][T15388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.986565][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.112492][T15406] loop2: detected capacity change from 0 to 128
[  232.120983][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'.
[  232.137626][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.156214][T15410] netlink: 'syz.3.1717': attribute type 11 has an invalid length.
[  232.168279][T15406] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.214901][T15406] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.241077][T15415] loop3: detected capacity change from 0 to 512
[  232.248475][T15415] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  232.259177][T15403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.295227][T15403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.313756][T15403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.341981][T15403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.343045][T15415] EXT4-fs (loop3): 1 truncate cleaned up
[  232.411799][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.436851][T15415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.564796][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.713533][T15452] __nla_validate_parse: 1 callbacks suppressed
[  232.713742][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'.
[  232.830666][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.996807][T15466] loop0: detected capacity change from 0 to 512
[  233.020677][T15466] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  233.089138][T15466] EXT4-fs (loop0): 1 truncate cleaned up
[  233.111005][T15466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.160097][T15478] loop6: detected capacity change from 0 to 512
[  233.174473][T15478] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1728: inode has both inline data and extents flags
[  233.199039][T15478] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  233.201705][T15478] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1728: couldn't read orphan inode 15 (err -117)
[  233.211032][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  233.211056][    C0] EXT4-fs (loop6): initial error at time 1771915157: ext4_orphan_get:1391: inode 15
[  233.211107][    C0] EXT4-fs (loop6): last error at time 1771915157: ext4_orphan_get:1391: inode 15
[  233.233496][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1730'.
[  233.243716][T15478] loop6: lost filesystem error report for type 5 error -117
[  233.266630][T15478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  233.304279][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.387655][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  233.418558][T15504] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  233.425124][T15504] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  233.452201][T15504] vhci_hcd vhci_hcd.0: Device attached
[  233.464487][T15510] usbip_core: unknown command
[  233.477194][T15510] vhci_hcd: unknown pdu 1144415474
[  233.498483][T15510] usbip_core: unknown command
[  233.511628][  T777] vhci_hcd vhci_hcd.7: stop threads
[  233.530444][  T777] vhci_hcd vhci_hcd.7: release socket
[  233.536408][   T28] audit: type=1400 audit(1771915158.181:11091): avc:  denied  { ioctl } for  pid=15497 comm="syz.3.1736" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  233.577245][  T777] vhci_hcd vhci_hcd.7: disconnect device
[  233.593184][T15529] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1741'.
[  233.604908][   T28] audit: type=1400 audit(1771915158.251:11092): avc:  denied  { ioctl } for  pid=15532 comm="syz.6.1740" path="socket:[27752]" dev="sockfs" ino=27752 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  233.630406][ T4475] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  233.632083][T15547] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1742'.
[  233.681235][   T28] audit: type=1400 audit(1771915158.331:11093): avc:  denied  { map } for  pid=15563 comm="syz.6.1744" path="socket:[27780]" dev="sockfs" ino=27780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  233.991929][T15564] bond4: entered promiscuous mode
[  233.999851][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'.
[  234.000773][T15564] 8021q: adding VLAN 0 to HW filter on device bond4
[  234.132177][T15617] Driver unsupported XDP return value 0 on prog  (id 506) dev N/A, expect packet loss!
[  234.229121][    T9] net_ratelimit: 4 callbacks suppressed
[  234.229140][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.346359][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1750'.
[  234.355764][T15623] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.363083][T15623] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.388757][T15625] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1751'.
[  234.442144][T15627] loop7: detected capacity change from 0 to 512
[  234.457823][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'.
[  234.562968][T15627] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  234.598272][T15627] EXT4-fs (loop7): orphan file too big: 4294967295
[  234.615501][T15627] EXT4-fs (loop7): mount failed
[  234.884169][ T4481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.964982][T15641] loop7: detected capacity change from 0 to 512
[  234.990038][T15645] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1756'.
[  235.007557][T15641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.037558][T15641] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.041287][   T28] audit: type=1400 audit(1771915159.691:11094): avc:  denied  { read write } for  pid=15632 comm="syz.2.1753" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  235.067191][T15633] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  235.078915][   T28] audit: type=1400 audit(1771915159.691:11095): avc:  denied  { open } for  pid=15632 comm="syz.2.1753" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  235.096772][T15652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1757'.
[  235.161808][   T28] audit: type=1400 audit(1771915159.811:11096): avc:  denied  { remount } for  pid=15640 comm="syz.7.1755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  235.190779][T15641] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  235.241107][T15641] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  235.258054][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.270339][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.315084][T15669] netlink: 'syz.6.1757': attribute type 11 has an invalid length.
[  235.416153][T15683] tmpfs: Unknown parameter '	'
[  235.481413][T15676] 9p: Bad value for 'rfdno'
[  235.765048][T15652] loop6: detected capacity change from 0 to 512
[  235.831194][T15652] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  235.903661][T15652] EXT4-fs (loop6): 1 truncate cleaned up
[  235.922939][ T4481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.930195][T15652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.994234][   T28] audit: type=1400 audit(1771915160.641:11097): avc:  denied  { checkpoint_restore } for  pid=15730 comm="syz.2.1766" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  236.022958][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.637106][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.809260][T15752] veth0: entered promiscuous mode
[  236.853184][T15752] veth0 (unregistering): left promiscuous mode
[  237.375125][T15778] loop7: detected capacity change from 0 to 256
[  237.657571][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.683746][T15806] loop7: detected capacity change from 0 to 512
[  237.692959][T15806] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  237.713107][T15806] EXT4-fs (loop7): 1 truncate cleaned up
[  237.734559][T15806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.901943][ T4475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.131987][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.404883][T15825] loop2: detected capacity change from 0 to 512
[  238.438001][T15825] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1783: bg 0: block 5: invalid block bitmap
[  238.463260][T15825] loop2: lost filesystem error report for type 5 error -117
[  238.463748][T15825] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  238.471162][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  238.471184][    C0] EXT4-fs (loop2): initial error at time 1771915163: ext4_validate_block_bitmap:432
[  238.471210][    C0] EXT4-fs (loop2): last error at time 1771915163: ext4_validate_block_bitmap:432
[  238.523654][T15831] __nla_validate_parse: 4 callbacks suppressed
[  238.523672][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1781'.
[  238.527747][T15825] loop2: lost filesystem error report for type 5 error -117
[  238.530201][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1781'.
[  238.555856][T15825] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1783: invalid indirect mapped block 3 (level 2)
[  238.570227][T15825] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  238.570499][T15825] EXT4-fs (loop2): 1 orphan inode deleted
[  238.585951][T15825] EXT4-fs (loop2): 1 truncate cleaned up
[  238.595267][T15825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.658729][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.697031][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.725871][T15838] sctp: [Deprecated]: syz.7.1785 (pid 15838) Use of int in maxseg socket option.
[  238.725871][T15838] Use struct sctp_assoc_value instead
[  238.761132][T15853] loop6: detected capacity change from 0 to 1024
[  238.852239][T15853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  238.867208][T15853] System zones: 0-1, 3-36
[  238.895778][T15853] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1789: bad orphan inode 134217728
[  238.950141][T15864] hub 8-0:1.0: USB hub found
[  238.956182][T15864] hub 8-0:1.0: 8 ports detected
[  238.985161][T15853] loop6: lost filesystem error report for type 5 error -117
[  238.988061][T15853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.251652][T15867] bond_slave_0: entered promiscuous mode
[  239.257387][T15867] bond_slave_1: entered promiscuous mode
[  239.389680][T15867] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  239.564589][T15867] bond_slave_0: left promiscuous mode
[  239.570345][T15867] bond_slave_1: left promiscuous mode
[  239.754685][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.796931][T15870] netlink: 'syz.6.1789': attribute type 3 has an invalid length.
[  239.809687][T15870] netlink: 'syz.6.1789': attribute type 3 has an invalid length.
[  240.080210][ T9366] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.090773][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1792'.
[  240.188716][T15907] netlink: 'syz.7.1792': attribute type 11 has an invalid length.
[  240.305907][T15907] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1792'.
[  240.325437][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'.
[  240.380435][T15924] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1798'.
[  240.598404][T15943] FAULT_INJECTION: forcing a failure.
[  240.598404][T15943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.619685][T15943] CPU: 0 UID: 0 PID: 15943 Comm: syz.0.1805 Not tainted syzkaller #0 PREEMPT(full) 
[  240.619718][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  240.619731][T15943] Call Trace:
[  240.619739][T15943]  <TASK>
[  240.619748][T15943]  __dump_stack+0x1d/0x30
[  240.619837][T15943]  dump_stack_lvl+0x95/0xd0
[  240.619874][T15943]  dump_stack+0x15/0x1b
[  240.619899][T15943]  should_fail_ex+0x263/0x280
[  240.619921][T15943]  should_fail+0xb/0x20
[  240.619957][T15943]  should_fail_usercopy+0x1a/0x20
[  240.620015][T15943]  _copy_from_user+0x1c/0xb0
[  240.620056][T15943]  sk_setsockopt+0x1fa/0x2140
[  240.620086][T15943]  udp_lib_setsockopt+0x93/0x640
[  240.620106][T15943]  udpv6_setsockopt+0x77/0xb0
[  240.620165][T15943]  ? __pfx_udp_v6_push_pending_frames+0x10/0x10
[  240.620258][T15943]  sock_common_setsockopt+0x69/0x80
[  240.620294][T15943]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  240.620385][T15943]  __sys_setsockopt+0x184/0x200
[  240.620484][T15943]  __x64_sys_setsockopt+0x64/0x80
[  240.620514][T15943]  x64_sys_call+0x2327/0x3020
[  240.620545][T15943]  do_syscall_64+0x12c/0x370
[  240.620681][T15943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.620702][T15943] RIP: 0033:0x7f5afebac629
[  240.620717][T15943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.620734][T15943] RSP: 002b:00007f5afd607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  240.620757][T15943] RAX: ffffffffffffffda RBX: 00007f5afee25fa0 RCX: 00007f5afebac629
[  240.620821][T15943] RDX: 000000000000002a RSI: 0000000000000001 RDI: 0000000000000003
[  240.620837][T15943] RBP: 00007f5afd607090 R08: 0000000000000004 R09: 0000000000000000
[  240.620852][T15943] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  240.620938][T15943] R13: 00007f5afee26038 R14: 00007f5afee25fa0 R15: 00007ffe79833f78
[  240.621036][T15943]  </TASK>
[  240.647629][   T28] audit: type=1400 audit(1771915165.282:11098): avc:  denied  { create } for  pid=15945 comm="syz.2.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  240.724424][T15949] netlink: 'syz.2.1804': attribute type 29 has an invalid length.
[  240.847520][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.984583][T15954] loop0: detected capacity change from 0 to 512
[  241.016357][T15954] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  241.052658][T15879] loop7: detected capacity change from 0 to 512
[  241.155008][ T4484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.218279][T15968] netlink: 'syz.2.1804': attribute type 29 has an invalid length.
[  241.239194][   T28] audit: type=1400 audit(1771915165.282:11099): avc:  denied  { sys_admin } for  pid=15945 comm="syz.2.1804" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  241.279255][T15879] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  241.436284][T15879] EXT4-fs (loop7): 1 truncate cleaned up
[  241.459946][T15879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.504021][T15983] FAULT_INJECTION: forcing a failure.
[  241.504021][T15983] name failslab, interval 1, probability 0, space 0, times 0
[  241.557647][T15983] CPU: 1 UID: 0 PID: 15983 Comm: syz.3.1810 Not tainted syzkaller #0 PREEMPT(full) 
[  241.557674][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  241.557685][T15983] Call Trace:
[  241.557691][T15983]  <TASK>
[  241.557706][T15983]  __dump_stack+0x1d/0x30
[  241.557736][T15983]  dump_stack_lvl+0x95/0xd0
[  241.557764][T15983]  dump_stack+0x15/0x1b
[  241.557808][T15983]  should_fail_ex+0x263/0x280
[  241.557867][T15983]  should_failslab+0x8c/0xb0
[  241.557891][T15983]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  241.557917][T15983]  ? __alloc_skb+0x2d6/0x690
[  241.557995][T15983]  __alloc_skb+0x2d6/0x690
[  241.558015][T15983]  ? __alloc_skb+0x200/0x690
[  241.558035][T15983]  netlink_ack+0xfd/0x500
[  241.558062][T15983]  ? __pfx_batadv_pre_doit+0x10/0x10
[  241.558086][T15983]  ? __pfx_batadv_netlink_set_mesh+0x10/0x10
[  241.558256][T15983]  ? __pfx_batadv_post_doit+0x10/0x10
[  241.558282][T15983]  netlink_rcv_skb+0x192/0x220
[  241.558306][T15983]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.558402][T15983]  genl_rcv+0x28/0x40
[  241.558429][T15983]  netlink_unicast+0x5c0/0x690
[  241.558457][T15983]  netlink_sendmsg+0x5c8/0x6f0
[  241.558548][T15983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.558579][T15983]  ____sys_sendmsg+0x5af/0x600
[  241.558622][T15983]  ___sys_sendmsg+0x195/0x1e0
[  241.558721][T15983]  __x64_sys_sendmsg+0xd4/0x160
[  241.558845][T15983]  x64_sys_call+0x194c/0x3020
[  241.558909][T15983]  do_syscall_64+0x12c/0x370
[  241.558950][T15983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.558971][T15983] RIP: 0033:0x7fe39896c629
[  241.558987][T15983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.559069][T15983] RSP: 002b:00007fe3973bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.559094][T15983] RAX: ffffffffffffffda RBX: 00007fe398be5fa0 RCX: 00007fe39896c629
[  241.559112][T15983] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000007
[  241.559126][T15983] RBP: 00007fe3973bf090 R08: 0000000000000000 R09: 0000000000000000
[  241.559139][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.559213][T15983] R13: 00007fe398be6038 R14: 00007fe398be5fa0 R15: 00007ffe3d3563a8
[  241.559293][T15983]  </TASK>
[  241.881110][T16006] netlink: 'syz.3.1815': attribute type 13 has an invalid length.
[  241.897019][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.944652][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.958297][T16003] loop6: detected capacity change from 0 to 164
[  242.228407][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1816'.
[  242.405790][T16031] netlink: 'syz.7.1816': attribute type 11 has an invalid length.
[  242.436658][T16031] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1816'.
[  242.526448][T16072] loop7: detected capacity change from 0 to 512
[  242.576578][T16072] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  242.658409][T16072] EXT4-fs (loop7): 1 truncate cleaned up
[  242.664770][T16072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.796622][T16084] loop2: detected capacity change from 0 to 4096
[  242.805886][T16084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.837330][T16084] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0
[  242.918530][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.966738][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.048820][T16018] bridge0: port 3(syz_tun) entered disabled state
[  243.065835][T16018] syz_tun (unregistering): left allmulticast mode
[  243.096605][T16018] syz_tun (unregistering): left promiscuous mode
[  243.103064][T16018] bridge0: port 3(syz_tun) entered disabled state
[  243.169404][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.292340][ T4558] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.360373][ T4558] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.431145][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'.
[  243.568583][ T4558] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.579769][T16134] loop2: detected capacity change from 0 to 128
[  243.737454][ T4558] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.757709][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1828'.
[  243.901955][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1830'.
[  243.903268][T16184] netlink: 'syz.3.1833': attribute type 16 has an invalid length.
[  243.921867][T16184] netlink: 'syz.3.1833': attribute type 17 has an invalid length.
[  243.978803][T16192] netlink: 'syz.2.1828': attribute type 11 has an invalid length.
[  243.987186][T16192] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1828'.
[  244.046912][T16197] loop2: detected capacity change from 0 to 512
[  244.080705][T16197] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  244.101083][T16168] hsr_slave_0: left promiscuous mode
[  244.139388][T16168] hsr_slave_1: left promiscuous mode
[  244.175839][T16197] EXT4-fs (loop2): 1 truncate cleaned up
[  244.188090][T16197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.282053][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'.
[  244.381891][ T4558] bridge_slave_1: left allmulticast mode
[  244.382387][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.388752][ T4558] bridge_slave_1: left promiscuous mode
[  244.402910][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.421360][ T4558] bridge_slave_0: left allmulticast mode
[  244.427222][ T4558] bridge_slave_0: left promiscuous mode
[  244.433008][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.502166][T16230] loop3: detected capacity change from 0 to 512
[  244.521313][T16270] xt_TCPMSS: Only works on TCP SYN packets
[  244.543250][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1838'.
[  244.555670][T16270] netlink: 296 bytes leftover after parsing attributes in process `syz.7.1839'.
[  244.600698][T16230] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  244.606820][ T4558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.654150][ T4558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.673434][T16230] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[  244.697062][T16230] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.1837: inode #15: comm syz.3.1837: iget: illegal inode #
[  244.711957][T16289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1838'.
[  244.714530][ T4558] bond0 (unregistering): Released all slaves
[  244.729483][ T4558] bond1 (unregistering): Released all slaves
[  244.739023][ T4558] bond2 (unregistering): Released all slaves
[  244.747960][ T4558] bond3 (unregistering): Released all slaves
[  244.756335][ T4558] bond4 (unregistering): Released all slaves
[  244.764257][T16230] loop3: lost filesystem error report for type 5 error -117
[  244.766252][T16230] EXT4-fs (loop3): Remounting filesystem read-only
[  244.766573][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  244.770035][T16116] chnl_net:caif_netlink_parms(): no params data found
[  244.774841][    C0] EXT4-fs (loop3): initial error at time 1771915169: ext4_orphan_get:1391
[  244.797939][T16299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'.
[  244.804940][    C0] EXT4-fs (loop3): last error at time 1771915169: ext4_orphan_get:1391
[  244.828852][T16298] loop2: detected capacity change from 0 to 512
[  244.840901][T16298] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  244.909370][T16298] EXT4-fs (loop2): 1 truncate cleaned up
[  244.928652][T16315] loop7: detected capacity change from 0 to 512
[  244.942903][T16298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.955304][T16318] ieee802154 phy1 wpan1: encryption failed: -22
[  244.961837][T16315] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  244.972065][   T28] audit: type=1400 audit(1771915169.602:11100): avc:  denied  { write } for  pid=16290 comm="syz.0.1841" path="socket:[27316]" dev="sockfs" ino=27316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  245.011327][T16230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.024969][T16315] EXT4-fs (loop7): orphan cleanup on readonly fs
[  245.031538][T16315] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.1842: Block bitmap for bg 0 marked uninitialized
[  245.045310][T16315] loop7: lost filesystem error report for type 5 error -117
[  245.046460][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  245.060983][T16315] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  245.061630][    C0] EXT4-fs (loop7): initial error at time 1771915169: ext4_read_block_bitmap_nowait:517
[  245.072422][T16315] loop7: lost filesystem error report for type 5 error -117
[  245.081517][    C0] EXT4-fs (loop7): last error at time 1771915169: ext4_mb_clear_bb:517
[  245.081674][T16315] EXT4-fs (loop7): 1 orphan inode deleted
[  245.090089][T16315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  245.098277][    C0] 
[  245.149714][T12505] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.157698][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.190884][T16348] validate_nla: 1 callbacks suppressed
[  245.190902][T16348] netlink: 'syz.2.1844': attribute type 1 has an invalid length.
[  245.208792][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.218499][ T4558] hsr_slave_0: left promiscuous mode
[  245.224825][ T4558] hsr_slave_1: left promiscuous mode
[  245.246839][ T4558] veth1_macvtap: left promiscuous mode
[  245.260284][ T3554] ==================================================================
[  245.268591][ T3554] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod
[  245.275559][ T3554] 
[  245.277898][ T3554] write to 0xffff8881059c325c of 4 bytes by task 3803 on cpu 0:
[  245.285795][ T3554]  shmem_mknod+0x143/0x170
[  245.290325][ T3554]  shmem_create+0x34/0x50
[  245.294854][ T3554]  path_openat+0xd75/0x2050
[  245.299369][ T3554]  do_file_open+0x16c/0x290
[  245.303883][ T3554]  do_sys_openat2+0x94/0x130
[  245.308482][ T3554]  __x64_sys_openat+0xf2/0x120
[  245.313347][ T3554]  x64_sys_call+0x1e39/0x3020
[  245.318033][ T3554]  do_syscall_64+0x12c/0x370
[  245.322656][ T3554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.328557][ T3554] 
[  245.330882][ T3554] read to 0xffff8881059c325c of 4 bytes by task 3554 on cpu 1:
[  245.338424][ T3554]  fill_mg_cmtime+0x5b/0x270
[  245.343026][ T3554]  generic_fillattr+0x24a/0x340
[  245.347899][ T3554]  shmem_getattr+0x181/0x200
[  245.352514][ T3554]  vfs_getattr_nosec+0x146/0x1e0
[  245.357578][ T3554]  vfs_getattr+0x48/0x60
[  245.361934][ T3554]  vfs_statx_path+0x28/0x140
[  245.366547][ T3554]  vfs_statx+0xc4/0x170
[  245.370719][ T3554]  vfs_fstatat+0x118/0x170
[  245.375239][ T3554]  __se_sys_newfstatat+0x55/0x3e0
[  245.380284][ T3554]  __x64_sys_newfstatat+0x55/0x70
[  245.385334][ T3554]  x64_sys_call+0x2c64/0x3020
[  245.390024][ T3554]  do_syscall_64+0x12c/0x370
[  245.394636][ T3554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.400663][ T3554] 
[  245.402997][ T3554] value changed: 0x36ae9e80 -> 0x36b4238c
[  245.408886][ T3554] 
[  245.411209][ T3554] Reported by Kernel Concurrency Sanitizer on:
[  245.417357][ T3554] CPU: 1 UID: 0 PID: 3554 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  245.426211][ T3554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  245.436266][ T3554] ==================================================================
[  245.445078][ T4558] veth0_macvtap: left promiscuous mode
[  245.453962][ T4558] veth1_vlan: left promiscuous mode
[  245.459637][ T4558] veth0_vlan: left promiscuous mode
[  245.612022][ T4558] team0 (unregistering): Port device team_slave_1 removed
[  245.624413][ T4558] team0 (unregistering): Port device team_slave_0 removed
[  245.671296][T16348] bond5: entered promiscuous mode
[  245.676738][T16348] 8021q: adding VLAN 0 to HW filter on device bond5
[  245.693174][T16365] bond5: (slave bridge2): making interface the new active one
[  245.700738][T16365] bridge2: entered promiscuous mode
[  245.707325][T16365] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  245.766863][T16116] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.774124][T16116] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.784783][T16116] bridge_slave_0: entered allmulticast mode
[  245.792222][T16116] bridge_slave_0: entered promiscuous mode
[  245.802568][T16116] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.810116][T16116] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.817573][T16116] bridge_slave_1: entered allmulticast mode
[  245.824255][T16116] bridge_slave_1: entered promiscuous mode
[  245.847007][T16116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.858650][T16116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.878783][T16116] team0: Port device team_slave_0 added
[  245.887270][T16116] team0: Port device team_slave_1 added
[  245.903384][T16116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.910576][T16116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.936690][T16116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.948038][T16116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.955089][T16116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.983945][T16116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.019336][T16116] hsr_slave_0: entered promiscuous mode
[  246.025394][T16116] hsr_slave_1: entered promiscuous mode
[  246.031514][T16116] debugfs: 'hsr0' already exists in 'hsr'
[  246.037428][T16116] Cannot create hsr debugfs directory
[  246.129000][T16116] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  246.138773][T16116] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  246.148687][T16116] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  246.172069][T16116] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  246.192840][T16116] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.199980][T16116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.207331][T16116] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.214621][T16116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.249912][T16116] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.262375][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.270392][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.283801][T16116] 8021q: adding VLAN 0 to HW filter on device team0
[  246.294718][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.301848][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.315339][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.322501][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.399360][T16116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.502538][T16116] veth0_vlan: entered promiscuous mode
[  246.510763][T16116] veth1_vlan: entered promiscuous mode
[  246.526611][T16116] veth0_macvtap: entered promiscuous mode
[  246.534534][T16116] veth1_macvtap: entered promiscuous mode
[  246.546487][T16116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.558528][T16116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.569236][ T4339] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.578235][ T4339] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.587695][ T4339] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.596669][ T4339] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0