last executing test programs:

4m29.904493679s ago: executing program 4 (id=467):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

4m29.248247499s ago: executing program 4 (id=473):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c03000019000100000000000000000000000000000000000000000000000000ac14140d00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000008000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000100000000000000440005000000000000000000000000000000000000000002320000000a0000007f0000010000000000000000000000000000000004"], 0x38c}}, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

4m27.309196365s ago: executing program 4 (id=474):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000500)=0x1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x88001, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2)

4m26.853264091s ago: executing program 4 (id=478):
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x1, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10081, &(0x7f0000000040), 0xdd, 0x57c, &(0x7f0000000180)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xfffffffe, 0xfffffffe)

4m25.021206227s ago: executing program 4 (id=490):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, 0x0, 0x0}, 0x20)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)

4m23.420081925s ago: executing program 4 (id=501):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, 0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x4890)
io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0)

4m23.408623193s ago: executing program 32 (id=501):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, 0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x4890)
io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0)

2m45.233597782s ago: executing program 3 (id=1263):
socket$inet6(0x10, 0x3, 0x0)
r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
connect$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x1b, 0x0, 0x1, 0x6f, 0x6, @broadcast}, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2m43.887713786s ago: executing program 3 (id=1274):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d80)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r1 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0xa}, 0x106260, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_evm(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000ac0), &(0x7f0000000b00)=@ng={0x4, 0xf, "ad3057900d2978639d598c"}, 0xd, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r5 = socket(0x11, 0x3, 0x0)
setsockopt(r5, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r7=>0x0})
sendmsg(r5, &(0x7f0000000000)={&(0x7f0000000040)=@ll={0x11, 0x3, r7, 0x1, 0xed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="020400000003000000c894355e953923d254f00000008100", 0x18}], 0x1}, 0x4004)
r8 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e, 0x800)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xfffffae3, 0x8}, 0xc)
sendmmsg$unix(r8, &(0x7f0000000a40)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [r4, r2, r9, r2]}}], 0x20, 0x800}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000440)="b6ee0e63a61beaf47c20a0916756bb9c805e0b4a9d2a2f9f2ff27e59c3281ded6ead18403536f3e4889e8e1f1948f3b06db2b346de3b41adbcfffb2759ce286cbc62b1ca037deab34b3ec9a0de6701c4e9f634ad92a8792256f66cc07110805dd5b7d59d6cc9dd3c186fd0cbc49f1f526a06f0d1f5e35c02387893bdcd1be963aa9d7cef298a148a23e45bdc14ec36dafa65cf118e5e7158f58b14876602d354fa9d48241e70381c326a30de00c59b937b729d8a90256e770df7cdb2c506167ba3fd3c33d180cf240ac29261e99d0755f3450880645b3a2c33dca23a9c27b763dd64b458", 0xe4}, {&(0x7f0000000540)="3ed83c071c19ee11be57f41504000000c4f88bbbf9a85237d6401cc5c928db9ac73712b348eded1e0223bb24b97e8c86ab27cb4248841fa1ae8a", 0x3a}, {&(0x7f0000000580)="7fe46fb5e63206f776cb24f893a7e815a224de74445633af313bff03ca1c5dc695a8f68b05f5021c7e4c19ea1cc58a6a50d39b8a6c0da8381eab1f721f1b58680447da6262abc80e277d4d3324e6cd30f60e6145d0695c1bdf90ef38786a83a6cb775bc67b2377f544a2e5ee8722c56b3a5fee53291a3eca9f00575d8b4e0d061f074f0d9d2224e16906a95d1d13ae162525e5d90ec36ffb39515712be3ba2d759", 0xa1}, {&(0x7f0000000640)="c8dfa1a9ea5832644c1875754874acdcc6af612b8289227ce15adeb857b8f0b42a552f3e1fb110650ec257650651df9876d2351e9bbc062e873de8893b8473eca66c171ae20d06531ad7ecbf73cce4349b", 0x51}, {&(0x7f00000006c0)="2517f8f66cc8752ed87592fe33ac49e5ee18d80f774b658bbb017eadc1adbbba97c8fbbc7c626a94420611db1bdadbbbd4618725061101abacb4a130929886d6fb6031cfd92b2931863bc718ab0d9f0f8ed9479fd12a65f69333e70954e0058c3644", 0x62}, {&(0x7f0000000740)="3c270266eaf2e9e45e897663d3405ceb2cb161e10c2417c5764bd1c46c0fa15138ecc8e824123992f3ba1c31a0c44053bffc9faf992aa6040ae396f2ea637e14f3b01adf0361fe48df8e339b58a4c219ae0c97bab5ec02c95b9d6fc4d4bbdd01c8079fff5cfecfc0228b7617b8641de1b16c6d17c911e5403fdd9540f2060a0357e675d53e6e1203a7b135e4364f81a025c878afa9fc80e3731fdd20f989a951560bbe4042f0eef72e63e2002c6cec3b7548da8a13a1c6dbd6e7e60da57cb5742ca32be2f53f57e9c9cad4a9a98753b1922951c6b0cb0966d6d4840d0c38c841", 0xe0}, {&(0x7f0000000840)="87467cd94245e074c41963548bfde5a8bd0ce6efe4ed56242e3088d21856cce4da03e8ce3b5ad87c57", 0x29}, {&(0x7f0000000880)="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", 0xfe}], 0x8, &(0x7f0000000a00), 0x0, 0x4044000}}], 0x2, 0x40)
listen(r4, 0x2)

2m43.74716652s ago: executing program 3 (id=1278):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000000c0)="f739e1a8eba24b352e1e927ea5a553247627e98276ac8a5eedfd737083a2c568a22bb22f0e71adda3ed6abeb8b8b1308756422e2f9b7f6550739c8ba357b82b292fd8d850cc3862e3eb16bbb184c")
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000180)={r8}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

2m42.681428486s ago: executing program 3 (id=1288):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x50d, &(0x7f0000001540)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
unshare(0x60000600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010429bd700000000000006f0000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600400012800b00010067656e657665000030000280080001000100000005000c000000000014000700fc02000000"], 0x74}}, 0x2000000)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket(0x2000000000000021, 0x2, 0x3)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000000))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8}, 0x10)
r4 = fsmount(r1, 0x0, 0x82)
fchdir(r4)
inotify_init()
openat(r4, &(0x7f00000002c0)='./file1/file0\x00', 0x80040, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7f, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206}, 0x94)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m42.278960232s ago: executing program 3 (id=1291):
socketpair(0x2, 0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB="f35937f817ae485fca00000000000000000000000000000000000000006d83c8ddedfa3a58206cadd4a7567b318973dc98db67fdc607e0d042ed966de276aa5ea80c80fd0279c5054904a4e1160e2c113130c0c64a23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe1e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x66)

2m41.868469028s ago: executing program 3 (id=1298):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x542c0d59482b4a0d, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc010)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c776682744600", @ANYRESHEX=r5, @ANYBLOB=',\x00'])
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000140)=0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})

2m41.851238725s ago: executing program 33 (id=1298):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r4, 0x542c0d59482b4a0d, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc010)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c776682744600", @ANYRESHEX=r5, @ANYBLOB=',\x00'])
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000140)=0x9)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1})

1m30.780951451s ago: executing program 6 (id=1651):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0xf9, 0x1223, &(0x7f0000001840)="$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")
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62)
write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec0000e3fbad17434a85beccee10b772002100010039590c9ff148199dfc0200000000000000000000000028be7aea000000000000000000000000003a0000000000007f96e2fefa152ca757ef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000ac1414340000000000000000000000003c040000002e000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
acct(0x0)
acct(0x0)

1m25.866851205s ago: executing program 6 (id=1658):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180)=r0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x77ed}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

1m22.77112073s ago: executing program 6 (id=1664):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x7ffe}, 0x50)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000980)={[{@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@block_validity}]}, 0x1, 0x569, &(0x7f00000002c0)="$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")
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000840), &(0x7f0000000900)=ANY=[], 0x361, 0x1)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

1m21.807123274s ago: executing program 6 (id=1668):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x2)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
close(0x3)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
accept$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
accept$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080), 0x1, 0x7b9, &(0x7f00000007c0)="$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")
socket$can_bcm(0x1d, 0x2, 0x2)
socket$xdp(0x2c, 0x3, 0x0)
r7 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x3, 0x40000334}, &(0x7f00000006c0)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)

1m20.47271694s ago: executing program 6 (id=1673):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, <r1=>0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0)
writev(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000180000000700000000000000050000007a0ac0ff1000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000040)})
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000002280)='net/ip_mr_cache\x00')
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00')
clock_gettime(0x7, 0x0)
fcntl$setstatus(r9, 0x4, 0x40800)
syz_io_uring_setup(0xb99, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x1000000, {0x1c, 0x14, 0x0, 0x40, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080)
read$watch_queue(r8, &(0x7f0000000080)=""/238, 0xee)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})

1m18.702030027s ago: executing program 6 (id=1686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt(r0, 0x5, 0x80000000, &(0x7f0000000000)="619e917bc6ece596b0ba5ed00beef7775a02328557fad6517fca34ab74e7a8f114c38fb0b619a1bd49454f8aae211a04165a252a0a1c3be5b6c89cce2ecf1a46001754ae3724cb4eaf466d8cff699cd803f52abde93ee3add36c91c8d071c1f5c5faace091c184cf1058f70eca3fe4a6fe2f", 0x72)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

1m18.679586713s ago: executing program 34 (id=1686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt(r0, 0x5, 0x80000000, &(0x7f0000000000)="619e917bc6ece596b0ba5ed00beef7775a02328557fad6517fca34ab74e7a8f114c38fb0b619a1bd49454f8aae211a04165a252a0a1c3be5b6c89cce2ecf1a46001754ae3724cb4eaf466d8cff699cd803f52abde93ee3add36c91c8d071c1f5c5faace091c184cf1058f70eca3fe4a6fe2f", 0x72)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

7.132557452s ago: executing program 0 (id=2052):
socketpair(0x2, 0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xe1e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x66)

7.069033651s ago: executing program 0 (id=2053):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000008000000000000000000000085000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x92)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000200))
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4080, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x1, @perf_bp={0x0, 0x1}, 0x10a4aa, 0x10004, 0xfffffff8, 0x2, 0x100005, 0x20005, 0x19d4, 0x0, 0x0, 0x0, 0x4000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
socket$packet(0x11, 0xa, 0x300)
r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000080)={{0xff, @rand_addr=0x64010100, 0x4e21, 0x0, 'sh\x00', 0x17, 0x10, 0x4c}, {@multicast2, 0x4e21, 0x2000, 0x9, 0x100, 0x180000}}, 0x44)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xcc, 0x0, &(0x7f00000006c0)="259a53000000010200200075acf93265405332b76315b92d6895cb3207d8a9f5ebb72d85e704528c8450ffaa397470944c81f12bc30daad6b97219c12a3a752a558b1252c5f7c0d9fe5044fb4e01e9b2a3d01b8cf090a4985be90375807658a7e832154e3c25d0506c216c40e20fccfa092bef854f2b5f2b73ec1a64d7161bccb02886f4129c5fe9b73ff72846d6eb91ca8ff277ca64a29237b0d5f863ec3c79783883dbda76617d2b0b7b9a3a831efc4d44060807912e220c59619ce692b034393f516e7155d75546d1d213", 0x0, 0xfffffffc, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)

6.345935649s ago: executing program 0 (id=2064):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10)
r4 = socket$inet(0xa, 0x801, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x8, 0xfb, 0x5}, {0x84, 0x6, 0xa8, 0x4}, {0x6, 0x9, 0x4, 0x1}]})
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000440))
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x3, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x9)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000002100))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

5.179046736s ago: executing program 0 (id=2075):
perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
timer_getoverrun(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14aec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6057080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f498707000000000000cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd9432086c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5e3236dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f136174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7c85d94ffb07d9be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0xd79f6255)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', <r8=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="21000000000092000020000000000000"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf1}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x84, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x1, 0x10, 0xfe, r11}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0xfffffff5, 0x7, 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x81, 0x8, 0x11e8}}, @IFA_CACHEINFO={0x14, 0x6, {0x15e0, 0x8, 0x3, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)

5.069209116s ago: executing program 5 (id=2077):
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) (async)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0x7}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
close(r1)

3.705307807s ago: executing program 5 (id=2080):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c004d4000000000000000000c0001400000000000000000090003"], 0xd4}}, 0x8818)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x1200000000000000)

2.852980541s ago: executing program 5 (id=2085):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10)
r4 = socket$inet(0xa, 0x801, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x1, 0x8, 0xfb, 0x5}, {0x84, 0x6, 0xa8, 0x4}, {0x6, 0x9, 0x4, 0x1}]})
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000440))
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x3, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x9)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000002100))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

2.816724224s ago: executing program 0 (id=2086):
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x9dff, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {}, 0x0, 0x3ffffffc, 0x8}}}, 0x118)

2.773519687s ago: executing program 7 (id=2087):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x28, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffe4d, 0x0, 0x0}}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000000)=""/16, 0x10, 0x3ff)
name_to_handle_at(r4, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="100000000200000009000002000000"], &(0x7f00000002c0), 0x400)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r6 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, 0x0, &(0x7f00000000c0)=<r7=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff02)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
syz_usb_connect(0x3, 0x48, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.697076143s ago: executing program 0 (id=2088):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xe}, 0x1c)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x68, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x88, 0x2, 0x7, 0x1, 0x1, 0xfd, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0xc9, 0x4, 0x50, 0xd}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x1, [@generic={0x2a, 0x10, 0x1, "24c232c0ac2fea260edfee891dffb39329adaf9ef65cf7ec268c7e812ac6856353183c3fb330a1"}]}, 0x1, [{0x54, &(0x7f00000005c0)=@string={0x54, 0x3, "00b9e3d8ed71d7a5fb306725f538e89378a3dc26b5ee4f6c0274e801e3f73efcaa9058c3c63a57dc97833124b48b5d623ea3f45818599885d27876f5cbfe5db1e0b4a7eb0db1f9c367accccfb6c658f791fe"}}]})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjW1d2EXBgl2IuGhokho6/UGTgq2FJuBCQUHEbZFu/Ae6l+5dCCKoO9dCFalY0NKR+2OayWQmM/k10+R+PjCZc+85N+d8c+fknjt3ztwAKms2+5FGvB/x+moSMd2SNxVF5mxZ7sW/Hl7LHkk0Gt/9ZxJJua5ZPimfT5UL4xHxxwsRn67trHft/oMbi/VG4VHEmfWbd86s3X/w0erNxevL15dvLZz92sefzH994eOFlobu36ny+eKl73z+Fz/54VdX/lT/KIlzcWX0x0vRFsdhmY3ZeF2G2Lp+JCI+yRId/i7HzQkIodJq5etxNCI+G9NRy5cK07H686E2DjhSjVpEY3dJrwLAcaV7Q1U1xwHNc/v+zoOvHPGoZHCeny9OgHbGP1K+5TCenxtNvkhazoyK9zZOH0L9WR2vHo4/fvVw5nFsex/i5Zu9M3II9XSzsRkRn+sUf5K37XQeaRZ/uu1cP4mI+YgYK9v3rQO0IWlJH8X7MLvpM/5aFn/rfkgj4lz5nK2/sM/629/WGnT8AFTTs/PlgXwjW9o6/mVjj+b4J7bGP4+a200d/JJMbtjHv+7jv+bxfjwf96Rt47BszHK5868cbV/xt59d/FW3+ovx38zj5iOrvzkWHITnmxEzbfH/NAu2HP9k8Scdxr9Zkavn+qvj23/+x8VuecOOv/Ek4oOO5z9bo9Istcv1yTMrq/Xl+eJnxzp+9/sf/LZb/Z3jf+cIIu0s2/+TXeJv2f9p+3bZ3+RO51+52b7i6eUnN7vVP9Vz/6d/H0uK882xcs2PNtfX7y5EjCWXyiLl+sX19btnd4+3KPOykT8vFPF/+KXO/X/b678tqonmv8w+3PnejRfd8vbz+m+5mPy60WcbusniX+q9/7f6/0QzN+KXfdbxn+/f+0K3vM7xJweMCgAAAAAAAKopza/BJuncm3Sazs0V82U/E5Np/fba+pdXbt+7tRTxYf55yNE00iT/yMh0sZysrNaXF8rPwzaXz7YtfyUi3ouIX9cm8uW5a7frS8MOHgAAAAAAAAAAAAAAAAAAAN4Sp8r5/837VP+7Vsz/Byqi9w3mdtz/ATghjvIGk8DbLe//ux3i3x1cW4DBcvyH6tL/obr0f6gu/R+qS/+H6tL/obr0f6gu/R8AAAAATqT3vvjsr0lEbHxjIn9kxso8k37hZBvdU+nakbUDGDw9GqrrzaV/g32onL7G//8tvxzw6JsDDEHSaWU+OGjs3vmfddxyy+bB2wYAAAAAAAAAAAAAFD54v/v8/73NDQaOG9P+oLoOMP/fVwfAMbfvr/4fO9x2AIPnHB/oMYs/xrtl9Jr/DwAAAAAAAAAAAAAcmqn8kaRz5VzgqUjTubmIT0XE6RhNVlbry/MR8W5E/KU2+k62vDDsRgMAAAAAAAAAAAAAAAAAAMAJs3b/wY3Fen35bmvifzvWnOxE8y6ovQs3+iiza+KbscetIhn8n2UiIoa+U7Ylnpa3m93z5n8oX+ctWSMtZZKIjSx76AEWiXg7mpEnhvUfCQAAAAAAAAAAAAAAAAAAqqtl7nFnM78ZcIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPC27v/fI7E0WWzQV+HtiWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcT/8PAAD//4RxNqU=")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000a10000108fdffffff0000000800007f00", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000008001a8004002d80"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x200000, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f00000010c0)=0x3b4, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file2\x00'})
openat$cgroup_int(r7, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0)

2.687867141s ago: executing program 2 (id=2089):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)

2.586798343s ago: executing program 1 (id=2090):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006400000000000000ffffffff85000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000080000010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48850)
recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r2=>0x0, 0x203b5703}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x80, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x7}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, @in6={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x592, @mcast1, 0x2}]}, &(0x7f00000002c0)=0x10)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[], 0x9)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000ff0f000000000000dd00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000027010000f800ffffb702f33ac5847d677bf7000006000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0x80e}, 0x94)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="0e48805795e608020000007b574dc5be295a1cb62e3aac84a993a11c01c0b5eb985dac4368a3f1a6f79be1e6402dc764bc66a6acb3b1c26937", @ANYRES16=r3, @ANYBLOB="bbfb2abd7000fddbdf256700000008000100110000000c009900cb000000490000000800c400f7ffffff0800c300fffbffff"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="100027bd7000fedbdf255900000008000300", @ANYRES32=r5, @ANYBLOB="75624aeda4ffce37b471cbe99b79013f336a6a95bc08ff62470b0e71430a1df53373d07a99ed3c6652ab8a8528bb87bdabc40e47f8149fc4e949479ce9256d00000000000000ae78ed8e9f5f733a305c49d4332d25efbe7673621094a50a27d741052564ea7d60eeffeeb0c5517eb9519a5e6b"], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000)

2.501059717s ago: executing program 2 (id=2091):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6, @perf_bp={0x0, 0xf}, 0x840, 0x3, 0x0, 0x0, 0x7, 0xfffffffe, 0xfdff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 64)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) (async, rerun: 64)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00')
getdents64(r4, &(0x7f0000000000)=""/77, 0x4d) (async)
getdents64(r4, 0xffffffffffffffff, 0x43) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async, rerun: 32)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000000240)={0x0, 0x9, 0x7, {0x6}, 0xa}) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (rerun: 64)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) (async)
r9 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32)
r10 = fsmount(r9, 0x0, 0x0) (rerun: 32)
openat$cgroup_procs(r10, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) (rerun: 64)

2.397029718s ago: executing program 2 (id=2092):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$rds(0x15, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.396621668s ago: executing program 2 (id=2093):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]})

2.289126208s ago: executing program 1 (id=2094):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000140)=0x1, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r5 = socket(0x3a, 0x800, 0x3)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4020c, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpeername$l2tp(r3, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x200, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x3)
unshare(0x22020400)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000680)=""/9, 0x9}, {&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/165, 0xa5}], 0x3, 0x20033, 0x51b)

2.216826355s ago: executing program 2 (id=2095):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0xf9, 0x1223, &(0x7f0000001840)="$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")
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000000)="13475b84", 0x4}], 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62)
write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff020000000f0000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f000001000000000000000000000000020000000400"], 0xfc}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
acct(0x0)
acct(0x0)

2.142778922s ago: executing program 7 (id=2096):
r0 = socket$inet6(0xa, 0x3, 0x38)
syz_emit_ethernet(0xdc, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @igmp={{0xe, 0x4, 0x1, 0x2, 0xce, 0x67, 0x0, 0xcb, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x3a, [@dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0xb, 0x91, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x0, 0x8, 0x0, @multicast1, "f366173f266e8b47173fed4ad717fb5d78cfe41dea5b149e3a2529e95d92ec9818986510dff045e8fa18582c507c6ed40100bb9c988518a35dc297be192e80fc98e56199860e83be7db7881e95ffef825b73ff9f88dc1a313d9cf6b01c6065a0a5098ef26c14f1b32149468604cc697e6fbbb465e1957f48c7befe578844822ed06a93aabebe161f929b9130bf81"}}}}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0xc929, 0x4)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0xf, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)='\v\x00\x00\x00\x00\x00\x00\x00=', 0x9}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000060a010400000000000000000a00000a0900010073797a31000000000900020073797a3200000000380000001c0a030000000000000000000a0000060c000340e8000000000000020900020073797a32000000000900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cswp={0x58, 0x114, 0x7, {{0xfffffffe, 0xffffffb9}, 0x0, 0x0, 0x100000001, 0x2, 0x51, 0xfffffffffffffffe, 0x48, 0x100000000}}], 0x58, 0x20040001}, 0x20000000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xe0, {0x100}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast2, 0xb}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x400}, 0x1c)

1.09127056s ago: executing program 1 (id=2097):
perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
timer_getoverrun(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0xd79f6255)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', <r8=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="21000000000092000020000000000000"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, r4, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf1}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x84, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x1, 0x10, 0xfe, r11}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0xfffffff5, 0x7, 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x81, 0x8, 0x11e8}}, @IFA_CACHEINFO={0x14, 0x6, {0x15e0, 0x8, 0x3, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)

1.025258547s ago: executing program 7 (id=2098):
unshare(0x40400)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049005300c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba0000001f010580ef", @ANYRESHEX=r0], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x10)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x6)
setns(r2, 0x20000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
connect$nfc_raw(r2, &(0x7f0000000040)={0x27, r7, 0xffffffffffffffff, 0x6}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)

970.263367ms ago: executing program 5 (id=2099):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40e0)

873.10602ms ago: executing program 7 (id=2100):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670331ffe80000000004000", @ANYRESDEC], 0xffdd)

829.067662ms ago: executing program 5 (id=2101):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200), 0x0)
sendfile(r1, r0, 0x0, 0x3ffff)

750.527737ms ago: executing program 7 (id=2102):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x1008000000000000)

233.617073ms ago: executing program 1 (id=2103):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe78, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x3, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc16, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x7f, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x0, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x4, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x4, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x3}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe78}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xec00, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d)

176.807073ms ago: executing program 1 (id=2104):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2a, 0x1, 0x81, 0x0, 0x0, 0x7, 0x8191, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x3}, 0x8620856c6a312292, 0x8, 0xda, 0x5, 0xa, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2805}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$caif_stream(0x25, 0x1, 0x0)
listen(r0, 0x5)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="a617000001"])
r2 = socket$inet6(0xa, 0x802, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$kcm(0x2, 0x922000000001, 0x106)
r5 = syz_io_uring_setup(0x2e8e, &(0x7f0000000400)={0x0, 0xa815, 0x2, 0x2, 0x40024a}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0x2, 0x0, 0x4)
syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x74}, &(0x7f0000000200)=<r8=>0x0, &(0x7f0000000300))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456})
io_uring_enter(r5, 0x627, 0xc1040000, 0x43, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20009090)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888)
syz_socket_connect_nvme_tcp()

78.507755ms ago: executing program 5 (id=2105):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x8, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]})

77.974004ms ago: executing program 7 (id=2106):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x28, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffe4d, 0x0, 0x0}}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000000)=""/16, 0x10, 0x3ff)
name_to_handle_at(r4, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="100000000200000009000002000000"], &(0x7f00000002c0), 0x400)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r6 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r7=>0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff02)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
syz_usb_connect(0x3, 0x48, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)

52.09184ms ago: executing program 1 (id=2107):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvTOIkm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7dkLghih1HsVOa0EP6PyBRiRP8CRyQOCD1xJ0b3Li0B6QCFahB4mA09iRNUzvJtqlHij8faTTz5tn+vmdr3td+TvwCGFmXImIvIiYi4tOImM3PJ/kWH/a27HaPH91e3n90ezmJTueTfybd+uxcHLlP5tX8Maci4kffj/hp8mzc1s7u+lK9XtvKy5V2Y7PS2tm9utZYWq2t1jaq1cWFxfn3r71XPbe+vtX43cPvrX304z/+4av3/7z3nV9kzZrJ64724zz1ul46jJMZj4iPXkawAozl/ZkouiE8lzQiPhcRb2fXf6fo1gAAw9DpzEZn9mgZALjo0u4cWJKW87mAmUjTcrk3h/dmTKf1Zqt95UZze2OlN1c2F6X0xlq9Np/PFc5FKcnKC93jJ+XqsfK1iHgjIn45+Uq3XF5u1leKfOMDACPs1WP5/z+TvfwPAFxwU0U3AAAYOvkfAEaP/A8Ao0f+B4DRI/8DwOiR/wFg9Mj/ADBSfvjxx9nW2c9//3rl5s72evPm1ZVaa73c2F4uLze3NsurzeZq9zd7Gqc9Xr3Z3Fx4N7ZvVdq1VrvS2tm93mhub7Svd3/X+3qtNJReAQAneeOte39NImLvg1e6WxxZy0GuhostLboBQGHGim4AUJjxohsAFMZnfKDPEr1P6f8nQhMRd19Kc4AhuPwl8/8wqsz/w+jqP/8v88MoMP8Po6vTSaz5DwAjxid94Pm+/w/f/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDSZrpbkpbztcBnIk3L5YjXImIuSsmNtXptPiJej4i/TJYms/JC0Y0GAF5Q+vckX//r8uw7M8drJ5L/Tnb3EfHzX3/yq1tL7fbWQnb+X4fn23fz89Ui2g8AnOYgTx/k8QOPH91ePtiG2Z6H3+0tLprF3c+3Xs14jHf3U1GKiOl/J3m5J3u/MnYO8ffuRMQX+/U/6c6NzOUrnx6Pn8V+bajx06fip9263j57Lj5/Dm2BUXMvG38+7Hf9pXGpu+9//U91R6gXdzD+7T8z/qWH49/YgPHv0lljvPunHwysuxPx5fF+8ZPD+MmA+O+cMf7fvvK1twfVdX4TcTn6xz8aq9JubFZaO7tX1xpLq7XV2ka1uriwOP/+tfeqle4cdeVgpvpZ//jgyusn9X96QPypU/r/zTP2/7f/+/QnXz8h/re/0f/1f/OE+FlO/NYZ4y9N/37g8t1Z/JUB/T/t9b9yxvj3H+yunPGmAMAQtHZ215fq9dpWfjC+dfyMg/M+yN67FRZ9L3/hi34SLtLBg5/1ntMz36v0WW58wsEXXmK/ihyVgGF4ctEX3RIAAAAAAAAAAAAAAGCQYfybVNF9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OL6fwAAAP//M8rRSQ==")
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000002900000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff)
syz_emit_ethernet(0x7de, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r8, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)

0s ago: executing program 2 (id=2108):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x7ffe}, 0x50)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000980)={[{@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@block_validity}]}, 0x1, 0x569, &(0x7f00000002c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000900)=ANY=[], 0x361, 0x1)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

kernel console output (not intermixed with test programs):

0-0000-000000000000 r/w without journal. Quota mode: none.
[  283.154543][ T9621] ext4: Unknown parameter 'measure'
[  283.319036][ T9607] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.529898][ T8149] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.551449][ T9607] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.563620][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.612564][   T28] audit: type=1400 audit(1773265875.403:1067): avc:  denied  { accept } for  pid=9627 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  283.692932][ T9634] loop6: detected capacity change from 0 to 256
[  283.755018][ T9636] loop2: detected capacity change from 0 to 512
[  283.832666][ T4969] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.858715][ T9636] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8)
[  283.871066][ T4969] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.890551][ T9634] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  283.900085][ T9636] FAT-fs (loop2): Filesystem has been set read-only
[  283.908456][ T4969] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.939926][ T9636] FAT-fs (loop2): error, invalid access to FAT (entry 0x000000c8)
[  283.950942][ T4969] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.972149][ T9638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=9638 comm=syz.2.1671
[  284.049110][ T9633] dummy0 speed is unknown, defaulting to 1000
[  284.060237][ T9633] lo speed is unknown, defaulting to 1000
[  284.523826][ T9632] loop0: detected capacity change from 0 to 1024
[  284.577867][ T9632] EXT4-fs: Ignoring removed mblk_io_submit option
[  284.642805][ T9632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  284.658784][ T9632] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.766154][ T8149] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  284.840396][ T8149] FAT-fs (loop6): Filesystem has been set read-only
[  284.882532][ T8149] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00)
[  285.014969][ T9632] netlink: 'syz.0.1669': attribute type 12 has an invalid length.
[  285.050392][ T9652] loop5: detected capacity change from 0 to 4096
[  285.209526][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  285.237450][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1678'.
[  285.258362][   T28] audit: type=1326 audit(1773265877.054:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="syz.0.1679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc19a75c799 code=0x0
[  285.282175][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1678'.
[  285.299525][ T9656] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1678'.
[  285.449642][ T9654] EXT4-fs: Ignoring removed mblk_io_submit option
[  285.510788][ T9654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  285.660521][   T28] audit: type=1326 audit(1773265877.454:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  285.709662][   T28] audit: type=1326 audit(1773265877.454:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  285.746040][   T28] audit: type=1326 audit(1773265877.454:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  285.771886][ T9654] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.775590][    C1] net_ratelimit: 19635 callbacks suppressed
[  285.775604][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  285.798697][   T28] audit: type=1326 audit(1773265877.474:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f15a3eacfce code=0x7ffc0000
[  285.801009][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.836306][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.848648][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  285.860763][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.872916][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.885026][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.897357][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.909463][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  285.921629][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  285.935666][   T28] audit: type=1326 audit(1773265877.484:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  285.977474][ T9671] netlink: 'syz.1.1677': attribute type 12 has an invalid length.
[  286.073520][ T9670] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82
[  286.115354][   T28] audit: type=1326 audit(1773265877.625:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.5.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  286.214692][ T9673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.338337][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  286.375942][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1682'.
[  286.753601][ T9678] wireguard0: entered promiscuous mode
[  286.759477][ T9678] wireguard0: entered allmulticast mode
[  286.965119][ T9670] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1682'.
[  287.146484][ T9694] set_capacity_and_notify: 4 callbacks suppressed
[  287.146501][ T9694] loop5: detected capacity change from 0 to 512
[  287.216832][ T9694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.269956][ T9694] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.322018][ T9686] dummy0 speed is unknown, defaulting to 1000
[  287.362284][ T9689] loop1: detected capacity change from 0 to 256
[  287.502390][ T9686] lo speed is unknown, defaulting to 1000
[  287.797658][ T9686] chnl_net:caif_netlink_parms(): no params data found
[  288.246259][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.263696][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.271141][ T9686] bridge_slave_0: entered allmulticast mode
[  288.277910][ T9686] bridge_slave_0: entered promiscuous mode
[  288.329886][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.350392][ T9713] loop0: detected capacity change from 0 to 512
[  288.368258][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.397195][ T9713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.419986][ T9686] bridge_slave_1: entered allmulticast mode
[  288.487749][ T9686] bridge_slave_1: entered promiscuous mode
[  288.500524][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.509878][ T9713] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.604836][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.635532][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.679403][ T9718] loop5: detected capacity change from 0 to 1024
[  288.686837][ T9718] EXT4-fs: Ignoring removed i_version option
[  288.719618][ T9686] team0: Port device team_slave_0 added
[  288.738450][ T9718] EXT4-fs: Ignoring removed orlov option
[  288.755474][ T9686] team0: Port device team_slave_1 added
[  288.761263][ T9718] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  288.816005][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.822962][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.308554][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.321434][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.328632][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.391140][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.505497][ T9724] loop5: detected capacity change from 0 to 512
[  289.525728][ T9686] hsr_slave_0: entered promiscuous mode
[  289.551311][ T9724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  289.564991][ T9686] hsr_slave_1: entered promiscuous mode
[  289.594176][ T9686] debugfs: 'hsr0' already exists in 'hsr'
[  289.602275][ T9724] System zones: 1-12
[  289.612135][ T9686] Cannot create hsr debugfs directory
[  289.695996][ T9724] EXT4-fs (loop5): orphan cleanup on readonly fs
[  289.733022][ T9724] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1691: invalid indirect mapped block 8 (level 2)
[  289.793686][ T9724] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  289.794242][ T9724] EXT4-fs (loop5): 1 truncate cleaned up
[  289.809013][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  289.809034][    C0] EXT4-fs (loop5): initial error at time 1773265881: ext4_free_branches:1023: inode 11
[  289.809064][    C0] EXT4-fs (loop5): last error at time 1773265881: ext4_free_branches:1023: inode 11
[  289.864088][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.925617][ T9724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  289.973106][ T9686] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  290.126317][ T9686] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  290.163639][ T9686] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  290.207336][ T9686] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  290.328916][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.411109][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.473128][ T9686] 8021q: adding VLAN 0 to HW filter on device team0
[  290.483425][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  290.483440][   T28] audit: type=1326 audit(1773265882.267:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9740 comm="syz.0.1695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc19a75c799 code=0x0
[  290.524374][ T4961] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.531480][ T4961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.558303][ T4961] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.565405][ T4961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.620801][ T9686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.635874][ T9686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.755829][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.783128][    C1] net_ratelimit: 26026 callbacks suppressed
[  290.783149][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.801292][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.813483][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  290.825806][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  290.837914][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  290.850079][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.862151][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.874521][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  290.886663][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.898855][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  290.944762][ T9686] veth0_vlan: entered promiscuous mode
[  290.961959][ T9686] veth1_vlan: entered promiscuous mode
[  290.992908][ T9686] veth0_macvtap: entered promiscuous mode
[  291.008504][ T9686] veth1_macvtap: entered promiscuous mode
[  291.032054][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.053472][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.076202][ T4961] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.085285][ T4961] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.102940][ T4961] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.146665][ T4961] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.474170][ T9769] loop0: detected capacity change from 0 to 164
[  291.528583][ T9769] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82
[  291.688638][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  292.374298][ T9777] loop2: detected capacity change from 0 to 1024
[  292.421498][ T9777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.441065][ T9775] loop7: detected capacity change from 0 to 164
[  292.552911][ T9775] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82
[  292.585808][ T9782] siw: device registration error -23
[  292.605254][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.760722][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1698'.
[  292.789712][ T9785] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.013364][ T9795] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  293.020820][ T9795] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2
[  293.037084][   T28] audit: type=1400 audit(1773265884.828:1080): avc:  denied  { block_suspend } for  pid=9793 comm="syz.1.1705" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  293.087734][   T28] audit: type=1400 audit(1773265884.848:1081): avc:  denied  { setattr } for  pid=9793 comm="syz.1.1705" name="tty23" dev="devtmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  293.185379][   T28] audit: type=1400 audit(1773265884.978:1082): avc:  denied  { execute } for  pid=9796 comm="syz.1.1706" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  293.589976][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.682723][ T9787] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1698'.
[  293.704502][   T28] audit: type=1326 audit(1773265885.498:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9801 comm="syz.5.1707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x0
[  293.799324][ T9799] pimreg: entered allmulticast mode
[  294.472620][ T9809] loop1: detected capacity change from 0 to 8192
[  294.779222][ T9827] FAULT_INJECTION: forcing a failure.
[  294.779222][ T9827] name failslab, interval 1, probability 0, space 0, times 0
[  295.084196][ T9829] loop5: detected capacity change from 0 to 256
[  295.694029][ T9829] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1713'.
[  295.767088][ T9827] CPU: 0 UID: 0 PID: 9827 Comm: syz.7.1714 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  295.767122][ T9827] Tainted: [W]=WARN
[  295.767129][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  295.767142][ T9827] Call Trace:
[  295.767149][ T9827]  <TASK>
[  295.767165][ T9827]  __dump_stack+0x1d/0x30
[  295.767188][ T9827]  dump_stack_lvl+0x95/0xd0
[  295.767207][ T9827]  dump_stack+0x15/0x1b
[  295.767225][ T9827]  should_fail_ex+0x263/0x280
[  295.767270][ T9827]  should_failslab+0x8c/0xb0
[  295.767293][ T9827]  kmem_cache_alloc_noprof+0x66/0x400
[  295.767314][ T9827]  ? security_file_alloc+0x32/0xf0
[  295.767340][ T9827]  security_file_alloc+0x32/0xf0
[  295.767369][ T9827]  init_file+0x5b/0x1b0
[  295.767395][ T9827]  alloc_empty_file+0x8b/0x200
[  295.767421][ T9827]  path_openat+0x65/0x2050
[  295.767485][ T9827]  ? _parse_integer_limit+0x170/0x190
[  295.767584][ T9827]  ? _parse_integer+0x27/0x40
[  295.767600][ T9827]  ? kstrtoull+0x111/0x140
[  295.767616][ T9827]  ? kstrtouint+0x76/0xc0
[  295.767634][ T9827]  do_file_open+0x16c/0x290
[  295.767747][ T9827]  do_sys_openat2+0x94/0x130
[  295.767776][ T9827]  __x64_sys_openat+0xf2/0x120
[  295.767805][ T9827]  x64_sys_call+0x1e39/0x3020
[  295.767882][ T9827]  do_syscall_64+0x12c/0x370
[  295.767974][ T9827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.768035][ T9827] RIP: 0033:0x7f613c0acfce
[  295.768048][ T9827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  295.768064][ T9827] RSP: 002b:00007f613ab3ef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  295.768081][ T9827] RAX: ffffffffffffffda RBX: 00007f613ab3f6c0 RCX: 00007f613c0acfce
[  295.768146][ T9827] RDX: 0000000000000000 RSI: 00007f613c182330 RDI: ffffffffffffff9c
[  295.768163][ T9827] RBP: 00007f613ab3f090 R08: 0000000000000000 R09: 0000000000000000
[  295.768177][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.768195][ T9827] R13: 00007f613c366038 R14: 00007f613c365fa0 R15: 00007fff29ac8bc8
[  295.768262][ T9827]  </TASK>
[  295.790640][    C1] net_ratelimit: 22290 callbacks suppressed
[  295.790656][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  295.994087][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.006270][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.018520][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.030860][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  296.043046][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  296.055221][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.067306][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  296.079734][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  296.091947][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.082444][ T9829] dummy0 speed is unknown, defaulting to 1000
[  297.092011][ T9829] lo speed is unknown, defaulting to 1000
[  297.668121][ T9837] xt_nat: multiple ranges no longer supported
[  297.690918][   T28] audit: type=1400 audit(1773265889.490:1084): avc:  denied  { ioctl } for  pid=9836 comm="syz.7.1717" path="socket:[29355]" dev="sockfs" ino=29355 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  297.729620][ T9838] netlink: 'syz.2.1715': attribute type 1 has an invalid length.
[  297.769725][ T9839] netlink: 'syz.2.1715': attribute type 1 has an invalid length.
[  297.845361][ T9841] loop7: detected capacity change from 0 to 8192
[  298.159971][ T9841] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  298.326442][ T9848] loop2: detected capacity change from 0 to 764
[  298.338688][ T9848] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  300.224348][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1722'.
[  300.257412][   T28] audit: type=1326 audit(1773265892.052:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9855 comm="syz.2.1723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x0
[  300.798064][    C1] net_ratelimit: 26729 callbacks suppressed
[  300.798091][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  300.816477][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  300.828607][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  300.840732][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.852895][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.865348][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  300.877517][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.889693][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  300.901829][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  300.914284][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  301.469105][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1722'.
[  303.077640][ T9869] dummy0 speed is unknown, defaulting to 1000
[  303.098207][ T9869] lo speed is unknown, defaulting to 1000
[  303.111281][ T9871] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9871 comm=syz.1.1724
[  303.566560][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1731'.
[  303.694748][ T9888] loop1: detected capacity change from 0 to 512
[  303.704842][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1732'.
[  303.882193][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1732'.
[  304.004432][ T9900] loop5: detected capacity change from 0 to 764
[  304.015619][ T9900] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  304.041769][ T9888] vfat: Unknown parameter '*'
[  304.089080][ T9903] netem: invalid attributes len -9
[  304.099015][ T9903] netem: change failed
[  304.143363][ T9902] loop2: detected capacity change from 0 to 8192
[  304.216761][ T9902]  loop2: p4 < >
[  304.490748][   T28] audit: type=1400 audit(1773265896.284:1086): avc:  denied  { read } for  pid=9906 comm="syz.0.1736" dev="sockfs" ino=29594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  304.713725][ T9909] loop2: detected capacity change from 0 to 8192
[  305.509830][ T9909] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.676102][ T9920] SELinux: syz.5.1740 (9920) set checkreqprot to 1. This is no longer supported.
[  305.722788][ T9923] loop0: detected capacity change from 0 to 1024
[  305.755677][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1740'.
[  305.784507][ T9921] loop1: detected capacity change from 0 to 164
[  305.805759][    C1] net_ratelimit: 20535 callbacks suppressed
[  305.805774][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.823794][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  305.835950][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.842177][ T9921] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82
[  305.848044][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.848458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  305.880264][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.892434][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  305.904517][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.916782][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.928858][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  305.948842][ T9923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.057876][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.106236][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'.
[  306.477325][   T28] audit: type=1400 audit(1773265898.285:1087): avc:  denied  { bind } for  pid=9936 comm="syz.2.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  307.366954][ T9952] FAULT_INJECTION: forcing a failure.
[  307.366954][ T9952] name failslab, interval 1, probability 0, space 0, times 0
[  307.394785][ T9952] CPU: 0 UID: 0 PID: 9952 Comm: syz.7.1748 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  307.394867][ T9952] Tainted: [W]=WARN
[  307.394873][ T9952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  307.394883][ T9952] Call Trace:
[  307.394889][ T9952]  <TASK>
[  307.394898][ T9952]  __dump_stack+0x1d/0x30
[  307.394926][ T9952]  dump_stack_lvl+0x95/0xd0
[  307.394950][ T9952]  dump_stack+0x15/0x1b
[  307.395034][ T9952]  should_fail_ex+0x263/0x280
[  307.395182][ T9952]  should_failslab+0x8c/0xb0
[  307.395203][ T9952]  kmem_cache_alloc_noprof+0x66/0x400
[  307.395229][ T9952]  ? alloc_empty_file+0x76/0x200
[  307.395330][ T9952]  alloc_empty_file+0x76/0x200
[  307.395354][ T9952]  alloc_file_pseudo+0xf6/0x190
[  307.395384][ T9952]  sock_alloc_file+0x9c/0x1e0
[  307.395405][ T9952]  __sys_socket+0x115/0x180
[  307.395427][ T9952]  __x64_sys_socket+0x3f/0x50
[  307.395474][ T9952]  x64_sys_call+0x11fc/0x3020
[  307.395500][ T9952]  do_syscall_64+0x12c/0x370
[  307.395561][ T9952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.395584][ T9952] RIP: 0033:0x7f613c0ec799
[  307.395599][ T9952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.395618][ T9952] RSP: 002b:00007f613ab3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  307.395639][ T9952] RAX: ffffffffffffffda RBX: 00007f613c365fa0 RCX: 00007f613c0ec799
[  307.395655][ T9952] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001
[  307.395803][ T9952] RBP: 00007f613ab3f090 R08: 0000000000000000 R09: 0000000000000000
[  307.395817][ T9952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.395831][ T9952] R13: 00007f613c366038 R14: 00007f613c365fa0 R15: 00007fff29ac8bc8
[  307.395850][ T9952]  </TASK>
[  307.629499][ T9956] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  307.731195][   T28] audit: type=1400 audit(1773265899.535:1088): avc:  denied  { write } for  pid=9948 comm="syz.0.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  308.426708][T10030] FAULT_INJECTION: forcing a failure.
[  308.426708][T10030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.464118][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.0.1753 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  308.464204][T10030] Tainted: [W]=WARN
[  308.464211][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  308.464223][T10030] Call Trace:
[  308.464229][T10030]  <TASK>
[  308.464237][T10030]  __dump_stack+0x1d/0x30
[  308.464264][T10030]  dump_stack_lvl+0x95/0xd0
[  308.464313][T10030]  dump_stack+0x15/0x1b
[  308.464336][T10030]  should_fail_ex+0x263/0x280
[  308.464424][T10030]  should_fail+0xb/0x20
[  308.464516][T10030]  should_fail_usercopy+0x1a/0x20
[  308.464542][T10030]  _copy_from_user+0x1c/0xb0
[  308.464578][T10030]  do_sock_getsockopt+0xf1/0x210
[  308.464649][T10030]  __x64_sys_getsockopt+0x11d/0x1a0
[  308.464680][T10030]  x64_sys_call+0x2dcf/0x3020
[  308.464705][T10030]  do_syscall_64+0x12c/0x370
[  308.464793][T10030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.464812][T10030] RIP: 0033:0x7fc19a75c799
[  308.464829][T10030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.464849][T10030] RSP: 002b:00007fc1991b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  308.464869][T10030] RAX: ffffffffffffffda RBX: 00007fc19a9d5fa0 RCX: 00007fc19a75c799
[  308.464883][T10030] RDX: 000000000000000b RSI: 0000000000000107 RDI: 0000000000000003
[  308.464919][T10030] RBP: 00007fc1991b7090 R08: 0000000000000000 R09: 0000000000000000
[  308.464931][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.464945][T10030] R13: 00007fc19a9d6038 R14: 00007fc19a9d5fa0 R15: 00007ffcf99b41d8
[  308.465007][T10030]  </TASK>
[  309.231646][ T9928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1741'.
[  309.306270][ T9937] dummy0 speed is unknown, defaulting to 1000
[  309.312497][T10041] loop5: detected capacity change from 0 to 512
[  309.350197][T10041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  309.468837][ T9937] lo speed is unknown, defaulting to 1000
[  309.483779][T10041] System zones: 1-12
[  309.488044][T10046] SELinux: syz.7.1758 (10046) set checkreqprot to 1. This is no longer supported.
[  309.502147][T10041] EXT4-fs (loop5): orphan cleanup on readonly fs
[  310.813067][    C1] net_ratelimit: 27608 callbacks suppressed
[  310.813089][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.831069][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.843418][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  310.855645][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.867740][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.879730][T10041] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1756: invalid indirect mapped block 8 (level 2)
[  310.879830][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  310.896019][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1758'.
[  310.905197][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  310.925764][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  310.937902][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  310.950017][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  311.106209][T10041] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  311.106474][T10041] EXT4-fs (loop5): 1 truncate cleaned up
[  311.115639][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  311.115674][    C0] EXT4-fs (loop5): initial error at time 1773265902: ext4_free_branches:1023: inode 11
[  311.115703][    C0] EXT4-fs (loop5): last error at time 1773265902: ext4_free_branches:1023: inode 11
[  311.236425][T10041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  312.514676][T10060] loop1: detected capacity change from 0 to 512
[  312.934976][T10063] loop7: detected capacity change from 0 to 1024
[  313.046695][T10060] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  313.064220][T10063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.085394][T10060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  313.137045][T10060] System zones: 1-12
[  313.156589][T10060] EXT4-fs (loop1): orphan cleanup on readonly fs
[  313.185396][T10060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1762: bg 0: block 361: padding at end of block bitmap is not set
[  313.210039][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.244715][T10060] loop1: lost filesystem error report for type 5 error -117
[  313.244859][T10060] EXT4-fs (loop1): Remounting filesystem read-only
[  313.252313][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  313.252350][    C0] EXT4-fs (loop1): initial error at time 1773265905: ext4_validate_block_bitmap:441
[  313.252375][    C0] EXT4-fs (loop1): last error at time 1773265905: ext4_validate_block_bitmap:441
[  313.364061][T10060] EXT4-fs (loop1): 1 truncate cleaned up
[  313.385747][T10060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  313.432983][   T28] audit: type=1400 audit(1773265905.238:1089): avc:  denied  { setattr } for  pid=10057 comm="syz.1.1762" path="/353/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  313.485534][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  313.542214][T10076] loop2: detected capacity change from 0 to 512
[  313.595867][T10076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.610849][T10076] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.365230][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.503151][T10082] netlink: 'syz.2.1767': attribute type 4 has an invalid length.
[  314.896047][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.122691][T10085] loop0: detected capacity change from 0 to 512
[  315.139057][T10092] loop5: detected capacity change from 0 to 8192
[  315.289763][T10102] kernel profiling enabled (shift: 9)
[  315.787958][T10085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.819032][T10085] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.820539][    C1] net_ratelimit: 19763 callbacks suppressed
[  315.820553][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.847718][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  315.860063][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  315.872167][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  315.884297][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.896347][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.908544][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  315.920662][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.932785][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  315.944889][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  316.424292][T10085] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  316.490527][T10107] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  316.624999][   T28] audit: type=1400 audit(1773265908.430:1090): avc:  denied  { ioctl } for  pid=10084 comm="syz.0.1769" path="socket:[30025]" dev="sockfs" ino=30025 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  316.683001][T10115] loop1: detected capacity change from 0 to 2048
[  316.695893][T10115] EXT4-fs: dax option not supported
[  316.789869][T10118] loop2: detected capacity change from 0 to 512
[  316.804655][T10115] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.816036][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.839173][T10118] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1775: bg 0: block 393: padding at end of block bitmap is not set
[  316.894544][T10118] loop2: lost filesystem error report for type 5 error -117
[  316.900632][T10118] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  316.907948][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  316.907979][    C1] EXT4-fs (loop2): initial error at time 1773265908: ext4_validate_block_bitmap:441
[  316.908004][    C1] EXT4-fs (loop2): last error at time 1773265908: ext4_validate_block_bitmap:441
[  316.952790][   T28] audit: type=1400 audit(1773265908.760:1091): avc:  denied  { remount } for  pid=10122 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  316.980009][T10118] loop2: lost filesystem error report for type 5 error -117
[  316.980405][T10118] EXT4-fs (loop2): 2 truncates cleaned up
[  316.994285][T10118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.016705][T10115] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.032902][T10125] xt_CT: No such helper "snmp_trap"
[  317.064074][T10118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.094176][T10115] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.156239][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.186673][T10115] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.221143][T10137] loop2: detected capacity change from 0 to 512
[  317.262575][T10137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.315412][ T5010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.328154][ T5010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.344929][ T5010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.353766][ T5010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.430186][T10137] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.532859][T10141] loop0: detected capacity change from 0 to 512
[  317.559609][T10130] loop5: detected capacity change from 0 to 1024
[  317.577401][T10141] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  317.615550][T10130] EXT4-fs: Ignoring removed mblk_io_submit option
[  317.658691][T10130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  317.674714][T10130] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.895751][T10145] netlink: 'syz.2.1780': attribute type 4 has an invalid length.
[  318.178886][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  318.199517][T10148] loop7: detected capacity change from 0 to 1024
[  318.372048][T10148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.443260][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.484806][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.527329][   T28] audit: type=1326 audit(1773265910.331:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10155 comm="syz.1.1785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f67a6fe6517 code=0x0
[  318.550600][T10157] loop0: detected capacity change from 0 to 512
[  318.570389][T10157] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  318.593336][T10153] loop5: detected capacity change from 0 to 164
[  318.645725][T10157] EXT4-fs (loop0): 1 truncate cleaned up
[  318.667131][T10153] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82
[  318.731455][T10163] vfat: Unknown parameter 'shortnnnt'
[  318.737277][T10157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.834170][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1782'.
[  318.889982][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.904861][T10172] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1782'.
[  318.984959][T10174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  319.037672][T10174] EXT4-fs (loop0): 1 truncate cleaned up
[  319.054075][T10174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.125101][T10174] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.1788: invalid fast symlink length 39
[  319.218749][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.240137][T10184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1792'.
[  319.259727][T10184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1792'.
[  319.302876][T10184] EXT4-fs: inline encryption not supported
[  319.370675][   T28] audit: type=1400 audit(1773265911.181:1093): avc:  denied  { create } for  pid=10187 comm="syz.5.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  319.391972][T10184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.406010][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'.
[  319.464373][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.615026][T10189] EXT4-fs: Ignoring removed mblk_io_submit option
[  319.654360][T10189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  319.670074][T10189] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.863021][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  319.886109][T10195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.940985][T10195] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.026294][T10205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.072437][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1791'.
[  320.104035][T10213] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  320.121658][T10205] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.166123][T10213] EXT4-fs (loop7): 1 truncate cleaned up
[  320.197854][T10213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.260924][    T9] IPVS: starting estimator thread 0...
[  320.284169][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.319385][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.373214][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.382497][T10220] IPVS: using max 2544 ests per chain, 127200 per kthread
[  320.828099][    C1] net_ratelimit: 27864 callbacks suppressed
[  320.828119][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.846259][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.858434][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  320.870756][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  320.882883][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  320.895049][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.907170][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  320.910502][T10228] set_capacity_and_notify: 7 callbacks suppressed
[  320.910524][T10228] loop2: detected capacity change from 0 to 512
[  320.919256][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.944111][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  320.956373][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  320.961983][T10228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  321.023273][T10228] EXT4-fs (loop2): 1 truncate cleaned up
[  321.040177][T10228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.076845][T10226] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.1802: invalid fast symlink length 39
[  321.115382][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.134462][T10236] FAULT_INJECTION: forcing a failure.
[  321.134462][T10236] name failslab, interval 1, probability 0, space 0, times 0
[  321.152412][T10229] loop7: detected capacity change from 0 to 164
[  321.192290][   T28] audit: type=1326 audit(1773265912.992:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.0.1806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc19a75c799 code=0x0
[  321.219849][T10238] loop2: detected capacity change from 0 to 1024
[  321.229022][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz.1.1804 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  321.229174][T10236] Tainted: [W]=WARN
[  321.229181][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.229194][T10236] Call Trace:
[  321.229262][T10236]  <TASK>
[  321.229328][T10236]  __dump_stack+0x1d/0x30
[  321.229356][T10236]  dump_stack_lvl+0x95/0xd0
[  321.229389][T10236]  dump_stack+0x15/0x1b
[  321.229411][T10236]  should_fail_ex+0x263/0x280
[  321.229507][T10236]  should_failslab+0x8c/0xb0
[  321.229530][T10236]  kmem_cache_alloc_noprof+0x66/0x400
[  321.229554][T10236]  ? skb_clone+0x151/0x1f0
[  321.229583][T10236]  skb_clone+0x151/0x1f0
[  321.229661][T10236]  __netlink_deliver_tap+0x2c9/0x500
[  321.229693][T10236]  netlink_unicast+0x66b/0x690
[  321.229719][T10236]  netlink_sendmsg+0x5c8/0x6f0
[  321.229750][T10236]  ? __pfx_netlink_sendmsg+0x10/0x10
[  321.229860][T10236]  ____sys_sendmsg+0x563/0x5b0
[  321.229951][T10236]  ___sys_sendmsg+0x195/0x1e0
[  321.229994][T10236]  __x64_sys_sendmsg+0xd4/0x160
[  321.230025][T10236]  x64_sys_call+0x194c/0x3020
[  321.230129][T10236]  do_syscall_64+0x12c/0x370
[  321.230152][T10236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.230173][T10236] RIP: 0033:0x7f67a6fec799
[  321.230191][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.230209][T10236] RSP: 002b:00007f67a5a47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  321.230273][T10236] RAX: ffffffffffffffda RBX: 00007f67a7265fa0 RCX: 00007f67a6fec799
[  321.230289][T10236] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000008
[  321.230303][T10236] RBP: 00007f67a5a47090 R08: 0000000000000000 R09: 0000000000000000
[  321.230317][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.230331][T10236] R13: 00007f67a7266038 R14: 00007f67a7265fa0 R15: 00007ffe67625e88
[  321.230445][T10236]  </TASK>
[  321.231252][T10229] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82
[  321.458954][T10238] EXT4-fs: Ignoring removed orlov option
[  321.508503][T10238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.560337][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.631626][T10249] loop1: detected capacity change from 0 to 164
[  321.681291][T10249] rock: directory entry would overflow storage
[  321.687475][T10249] rock: sig=0x5252, size=5, remaining=3
[  321.698648][T10253] netlink: 'syz.5.1809': attribute type 1 has an invalid length.
[  321.765178][T10229] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1803'.
[  321.783682][T10248] infiniband !yz!: set active
[  321.819534][T10248] infiniband !yz!: added team_slave_0
[  321.836100][T10248] RDS/IB: !yz!: added
[  321.840265][T10248] smc: adding ib device !yz! with port count 1
[  321.846569][T10248] smc:    ib device !yz! port 1 has no pnetid
[  322.021773][T10251] loop2: detected capacity change from 0 to 1024
[  322.049925][T10251] EXT4-fs: Ignoring removed mblk_io_submit option
[  322.239704][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'.
[  322.279630][T10251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  322.292080][T10251] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.351304][T10263] loop1: detected capacity change from 0 to 512
[  322.398227][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  322.409882][T10263] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  322.424903][T10263] EXT4-fs (loop1): 1 truncate cleaned up
[  322.433597][T10263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.447063][   T28] audit: type=1400 audit(1773265914.253:1095): avc:  denied  { create } for  pid=10261 comm="syz.1.1811" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  322.557337][T10275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1811'.
[  322.572520][   T28] audit: type=1400 audit(1773265914.363:1096): avc:  denied  { create } for  pid=10261 comm="syz.1.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  322.661700][   T28] audit: type=1400 audit(1773265914.363:1097): avc:  denied  { bind } for  pid=10261 comm="syz.1.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  322.776961][   T28] audit: type=1326 audit(1773265914.583:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10281 comm="syz.5.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  322.805219][T10283] sctp: [Deprecated]: syz.7.1816 (pid 10283) Use of int in maxseg socket option.
[  322.805219][T10283] Use struct sctp_assoc_value instead
[  322.841348][T10285] loop5: detected capacity change from 0 to 1024
[  322.854214][   T28] audit: type=1326 audit(1773265914.613:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10281 comm="syz.5.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  322.886568][T10285] EXT4-fs: Ignoring removed orlov option
[  322.928491][T10285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.944410][   T28] audit: type=1326 audit(1773265914.613:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10281 comm="syz.5.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  322.996038][   T28] audit: type=1326 audit(1773265914.613:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10281 comm="syz.5.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  323.228846][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.526925][T10290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1819'.
[  325.016100][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.033901][T10303] FAULT_INJECTION: forcing a failure.
[  325.033901][T10303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.073330][T10303] CPU: 0 UID: 0 PID: 10303 Comm: syz.5.1821 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  325.073423][T10303] Tainted: [W]=WARN
[  325.073491][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  325.073502][T10303] Call Trace:
[  325.073507][T10303]  <TASK>
[  325.073514][T10303]  __dump_stack+0x1d/0x30
[  325.073552][T10303]  dump_stack_lvl+0x95/0xd0
[  325.073576][T10303]  dump_stack+0x15/0x1b
[  325.073670][T10303]  should_fail_ex+0x263/0x280
[  325.073718][T10303]  should_fail+0xb/0x20
[  325.073740][T10303]  should_fail_usercopy+0x1a/0x20
[  325.073820][T10303]  _copy_from_user+0x1c/0xb0
[  325.073928][T10303]  ___sys_sendmsg+0xc1/0x1e0
[  325.074060][T10303]  __x64_sys_sendmsg+0xd4/0x160
[  325.074090][T10303]  x64_sys_call+0x194c/0x3020
[  325.074116][T10303]  do_syscall_64+0x12c/0x370
[  325.074136][T10303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.074227][T10303] RIP: 0033:0x7f15a3eec799
[  325.074244][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.074262][T10303] RSP: 002b:00007f15a2947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.074362][T10303] RAX: ffffffffffffffda RBX: 00007f15a4165fa0 RCX: 00007f15a3eec799
[  325.074377][T10303] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  325.074388][T10303] RBP: 00007f15a2947090 R08: 0000000000000000 R09: 0000000000000000
[  325.074402][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.074436][T10303] R13: 00007f15a4166038 R14: 00007f15a4165fa0 R15: 00007ffe2a86dce8
[  325.074456][T10303]  </TASK>
[  325.396017][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  325.396032][   T28] audit: type=1326 audit(1773265917.174:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.7.1822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f613c0ec799 code=0x0
[  325.439399][T10311] loop2: detected capacity change from 0 to 1024
[  325.453777][T10307] loop0: detected capacity change from 0 to 1024
[  325.514282][T10307] EXT4-fs: Ignoring removed mblk_io_submit option
[  325.546106][T10311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.665935][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.685830][T10307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  325.700896][T10307] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.751185][   T28] audit: type=1326 audit(1773265917.564:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.793616][   T28] audit: type=1326 audit(1773265917.564:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.829666][   T28] audit: type=1326 audit(1773265917.564:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.835689][    C1] net_ratelimit: 27183 callbacks suppressed
[  325.835707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  325.871212][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.871232][   T28] audit: type=1326 audit(1773265917.564:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.883267][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  325.912322][   T28] audit: type=1326 audit(1773265917.564:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.918656][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  325.942311][   T28] audit: type=1326 audit(1773265917.564:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.954327][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  325.979565][   T28] audit: type=1326 audit(1773265917.584:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  325.989450][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.013084][   T28] audit: type=1326 audit(1773265917.584:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  326.024928][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  326.050124][   T28] audit: type=1326 audit(1773265917.584:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  326.060363][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  326.095882][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  326.107933][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  326.144194][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  326.726669][T10341] loop0: detected capacity change from 0 to 512
[  326.785933][T10345] netlink: 'syz.1.1834': attribute type 3 has an invalid length.
[  326.817375][T10341] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  326.869471][T10353] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  326.877846][T10353] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  326.996099][T10341] EXT4-fs (loop0): 1 truncate cleaned up
[  326.996542][T10341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.059571][T10361] loop1: detected capacity change from 0 to 512
[  327.142386][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.217451][T10366] SELinux:  Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped).
[  327.500980][T10364] loop0: detected capacity change from 0 to 1024
[  327.550349][T10364] EXT4-fs: Ignoring removed mblk_io_submit option
[  327.812291][T10374] FAULT_INJECTION: forcing a failure.
[  327.812291][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.841357][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.1.1843 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  327.841445][T10374] Tainted: [W]=WARN
[  327.841453][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  327.841466][T10374] Call Trace:
[  327.841472][T10374]  <TASK>
[  327.841479][T10374]  __dump_stack+0x1d/0x30
[  327.841581][T10374]  dump_stack_lvl+0x95/0xd0
[  327.841691][T10374]  dump_stack+0x15/0x1b
[  327.841714][T10374]  should_fail_ex+0x263/0x280
[  327.841798][T10374]  should_fail+0xb/0x20
[  327.841882][T10374]  should_fail_usercopy+0x1a/0x20
[  327.841977][T10374]  _copy_to_user+0x20/0xa0
[  327.842005][T10374]  simple_read_from_buffer+0xb5/0x130
[  327.842030][T10374]  proc_fail_nth_read+0x10e/0x150
[  327.842090][T10374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  327.842117][T10374]  vfs_read+0x1ab/0x7f0
[  327.842195][T10374]  ? __rcu_read_unlock+0x4e/0x70
[  327.842214][T10374]  ? __fget_files+0x184/0x1c0
[  327.842238][T10374]  ? mutex_lock+0x57/0x90
[  327.842266][T10374]  ksys_read+0xdc/0x1a0
[  327.842322][T10374]  __x64_sys_read+0x40/0x50
[  327.842341][T10374]  x64_sys_call+0x2886/0x3020
[  327.842371][T10374]  do_syscall_64+0x12c/0x370
[  327.842474][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.842497][T10374] RIP: 0033:0x7f67a6facfce
[  327.842514][T10374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  327.842533][T10374] RSP: 002b:00007f67a5a46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  327.842551][T10374] RAX: ffffffffffffffda RBX: 00007f67a5a476c0 RCX: 00007f67a6facfce
[  327.842572][T10374] RDX: 000000000000000f RSI: 00007f67a5a470a0 RDI: 0000000000000004
[  327.842586][T10374] RBP: 00007f67a5a47090 R08: 0000000000000000 R09: 0000000000000000
[  327.842600][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.842613][T10374] R13: 00007f67a7266038 R14: 00007f67a7265fa0 R15: 00007ffe67625e88
[  327.842693][T10374]  </TASK>
[  328.043910][T10364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  328.060930][T10364] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.246254][T10380] dummy0 speed is unknown, defaulting to 1000
[  328.252976][T10380] lo speed is unknown, defaulting to 1000
[  328.356081][T10386] netlink: 'syz.5.1848': attribute type 1 has an invalid length.
[  328.381310][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  328.404093][T10390] loop7: detected capacity change from 0 to 512
[  328.455290][T10393] loop5: detected capacity change from 0 to 512
[  328.466336][T10390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.475200][T10395] loop0: detected capacity change from 0 to 512
[  328.484240][T10390] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.522063][T10393] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  328.553066][T10395] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  328.645277][T10393] EXT4-fs (loop5): 1 truncate cleaned up
[  328.653181][T10395] EXT4-fs (loop0): 1 truncate cleaned up
[  328.664961][T10393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.686959][T10395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.378870][T10410] netlink: 'syz.7.1849': attribute type 4 has an invalid length.
[  329.519996][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.547803][T10404] tipc: Enabled bearer <udp:
[  329.547803][T10404] >, priority 10
[  329.565630][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.607444][T10415] netlink: 'syz.5.1854': attribute type 1 has an invalid length.
[  329.682874][T10418] loop5: detected capacity change from 0 to 2048
[  329.728223][T10422] loop0: detected capacity change from 0 to 512
[  329.738022][T10418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.760720][T10422] ext3: Unknown parameter 'measure'
[  329.792245][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.318207][T10445] loop7: detected capacity change from 0 to 1024
[  330.382824][T10445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.446451][T10447] loop2: detected capacity change from 0 to 2048
[  330.486641][T10447] EXT4-fs: dax option not supported
[  330.593025][T10421] EXT4-fs: Ignoring removed mblk_io_submit option
[  330.642040][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.673322][    T9] tipc: Node number set to 367910323
[  330.747326][T10421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  330.780352][T10421] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.843066][    C1] net_ratelimit: 23887 callbacks suppressed
[  330.843083][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  330.861093][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.873453][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  330.885662][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.897839][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.910032][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  330.922377][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  330.934477][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  330.946691][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  330.958820][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  331.005045][T10457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.025685][T10457] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1868'.
[  331.055781][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  331.208351][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.304890][T10466] netlink: 'syz.7.1867': attribute type 27 has an invalid length.
[  331.317156][T10466] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1867'.
[  331.337307][T10466] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1867'.
[  331.356524][   T28] kauditd_printk_skb: 507 callbacks suppressed
[  331.356537][   T28] audit: type=1400 audit(1773265923.167:1620): avc:  denied  { watch watch_reads } for  pid=10462 comm="syz.7.1867" path="/34/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  331.467848][T10447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.106733][T10479] netlink: 'syz.1.1871': attribute type 27 has an invalid length.
[  332.220345][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.338988][T10489] set_capacity_and_notify: 2 callbacks suppressed
[  332.339004][T10489] loop0: detected capacity change from 0 to 512
[  332.355635][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.367860][T10489] EXT4-fs: Ignoring removed nobh option
[  332.383319][T10489] EXT4-fs (loop0): 1 orphan inode deleted
[  332.405401][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.621753][T10479] batman_adv: batadv0: Interface deactivated: macsec1
[  332.648054][T10479] ip6gre1: left promiscuous mode
[  332.662405][T10479] ip6gre1: left allmulticast mode
[  333.234207][T10498] SET target dimension over the limit!
[  333.245951][T10447] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.268016][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'.
[  333.310015][ T5010] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.330484][T10498] loop0: detected capacity change from 0 to 4096
[  333.340333][ T5010] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.360687][T10498] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  333.381646][ T5010] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.430844][ T5010] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.492641][   T28] audit: type=1326 audit(1773265925.308:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.1.1878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x0
[  333.915764][T10514] FAULT_INJECTION: forcing a failure.
[  333.915764][T10514] name failslab, interval 1, probability 0, space 0, times 0
[  333.928882][T10514] CPU: 0 UID: 0 PID: 10514 Comm: syz.7.1880 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  333.928916][T10514] Tainted: [W]=WARN
[  333.928922][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  333.928933][T10514] Call Trace:
[  333.928947][T10514]  <TASK>
[  333.928974][T10514]  __dump_stack+0x1d/0x30
[  333.929001][T10514]  dump_stack_lvl+0x95/0xd0
[  333.929058][T10514]  dump_stack+0x15/0x1b
[  333.929081][T10514]  should_fail_ex+0x263/0x280
[  333.929106][T10514]  should_failslab+0x8c/0xb0
[  333.929159][T10514]  kmem_cache_alloc_noprof+0x66/0x400
[  333.929183][T10514]  ? skb_clone+0x151/0x1f0
[  333.929273][T10514]  skb_clone+0x151/0x1f0
[  333.929297][T10514]  __netlink_deliver_tap+0x2c9/0x500
[  333.929325][T10514]  ? netlink_attachskb+0x2e2/0x660
[  333.929392][T10514]  netlink_sendskb+0x126/0x150
[  333.929418][T10514]  netlink_unicast+0x2a2/0x690
[  333.929562][T10514]  netlink_ack+0x4c8/0x500
[  333.929628][T10514]  netlink_rcv_skb+0x192/0x220
[  333.929676][T10514]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  333.929706][T10514]  nfnetlink_rcv+0x167/0x1720
[  333.929845][T10514]  ? __kfree_skb+0x109/0x150
[  333.929870][T10514]  ? nlmon_xmit+0x4f/0x60
[  333.929949][T10514]  ? consume_skb+0x4b/0x160
[  333.930014][T10514]  ? nlmon_xmit+0x4f/0x60
[  333.930101][T10514]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  333.930128][T10514]  ? __dev_queue_xmit+0x136c/0x1f20
[  333.930155][T10514]  ? __dev_queue_xmit+0x148/0x1f20
[  333.930237][T10514]  ? ref_tracker_free+0x37d/0x3e0
[  333.930266][T10514]  ? __netlink_deliver_tap+0x4dc/0x500
[  333.930298][T10514]  netlink_unicast+0x5c0/0x690
[  333.930324][T10514]  netlink_sendmsg+0x5c8/0x6f0
[  333.930408][T10514]  ? __pfx_netlink_sendmsg+0x10/0x10
[  333.930435][T10514]  ____sys_sendmsg+0x563/0x5b0
[  333.930464][T10514]  ___sys_sendmsg+0x195/0x1e0
[  333.930603][T10514]  __x64_sys_sendmsg+0xd4/0x160
[  333.930681][T10514]  x64_sys_call+0x194c/0x3020
[  333.930769][T10514]  do_syscall_64+0x12c/0x370
[  333.930791][T10514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.930812][T10514] RIP: 0033:0x7f613c0ec799
[  333.930840][T10514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.930859][T10514] RSP: 002b:00007f613ab3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  333.930882][T10514] RAX: ffffffffffffffda RBX: 00007f613c365fa0 RCX: 00007f613c0ec799
[  333.930897][T10514] RDX: 0000000004040010 RSI: 00002000000007c0 RDI: 0000000000000003
[  333.930911][T10514] RBP: 00007f613ab3f090 R08: 0000000000000000 R09: 0000000000000000
[  333.930925][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.930996][T10514] R13: 00007f613c366038 R14: 00007f613c365fa0 R15: 00007fff29ac8bc8
[  333.931017][T10514]  </TASK>
[  334.272654][T10447] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.395453][T10520] loop0: detected capacity change from 0 to 512
[  334.421017][T10524] loop7: detected capacity change from 0 to 512
[  334.462009][T10524] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  334.515936][T10527] loop5: detected capacity change from 0 to 2048
[  334.542017][T10524] EXT4-fs (loop7): 1 truncate cleaned up
[  334.625932][ T3304] Alternate GPT is invalid, using primary GPT.
[  334.634632][ T3304]  loop5: p2 p3 p7
[  334.722876][T10533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  334.841573][T10530] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8)
[  334.848167][T10530] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  334.903312][T10530] vhci_hcd vhci_hcd.0: Device attached
[  335.080937][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  335.150976][    T9] usb 3-2: new full-speed USB device number 4 using vhci_hcd
[  335.240308][T10447] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.259046][T10527] Alternate GPT is invalid, using primary GPT.
[  335.285608][T10527]  loop5: p2 p3 p7
[  335.292532][   T28] audit: type=1400 audit(1773265927.109:1622): avc:  denied  { bind } for  pid=10537 comm="syz.7.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  335.422504][   T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.435296][   T28] audit: type=1400 audit(1773265927.109:1623): avc:  denied  { write } for  pid=10537 comm="syz.7.1886" path="socket:[31246]" dev="sockfs" ino=31246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  335.473103][T10534] vhci_hcd: connection reset by peer
[  335.478663][ T4983] vhci_hcd vhci_hcd.1: stop threads
[  335.509050][ T4983] vhci_hcd vhci_hcd.1: release socket
[  335.542779][   T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.559569][ T4983] vhci_hcd vhci_hcd.1: disconnect device
[  335.575251][T10541] loop7: detected capacity change from 0 to 512
[  335.607560][ T4983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.622130][T10541] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  335.640795][   T28] audit: type=1400 audit(1773265927.109:1624): avc:  denied  { read } for  pid=10537 comm="syz.7.1886" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  335.674013][ T4983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.703677][T10541] EXT4-fs (loop7): 1 truncate cleaned up
[  335.759849][   T28] audit: type=1400 audit(1773265927.109:1625): avc:  denied  { open } for  pid=10537 comm="syz.7.1886" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  335.811739][   T28] audit: type=1400 audit(1773265927.129:1626): avc:  denied  { ioctl } for  pid=10537 comm="syz.7.1886" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  335.850587][    C1] net_ratelimit: 28888 callbacks suppressed
[  335.850607][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.868620][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  335.880703][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.893132][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  335.905346][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.917523][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  335.929684][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  335.934884][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  335.942052][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  335.951721][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  335.963420][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  335.976914][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  335.985093][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  336.060901][   T28] audit: type=1326 audit(1773265927.870:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.060978][   T28] audit: type=1326 audit(1773265927.870:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.061001][   T28] audit: type=1326 audit(1773265927.870:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.213182][T10550] bridge2: entered allmulticast mode
[  336.382163][   T28] kauditd_printk_skb: 792 callbacks suppressed
[  336.382202][   T28] audit: type=1326 audit(1773265928.190:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382226][   T28] audit: type=1326 audit(1773265928.190:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382329][   T28] audit: type=1326 audit(1773265928.190:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382353][   T28] audit: type=1326 audit(1773265928.190:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382378][   T28] audit: type=1326 audit(1773265928.190:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382422][   T28] audit: type=1326 audit(1773265928.190:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382453][   T28] audit: type=1326 audit(1773265928.190:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382477][   T28] audit: type=1326 audit(1773265928.190:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382502][   T28] audit: type=1326 audit(1773265928.190:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.382607][   T28] audit: type=1326 audit(1773265928.190:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x50000
[  336.453471][T10559] loop7: detected capacity change from 0 to 1024
[  336.480797][T10559] EXT4-fs: Ignoring removed orlov option
[  336.950960][T10567] loop7: detected capacity change from 0 to 164
[  336.971583][T10567] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82
[  337.329027][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1896'.
[  337.329269][T10570] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1896'.
[  337.375929][T10575] SELinux: syz.1.1898 (10575) set checkreqprot to 1. This is no longer supported.
[  337.376426][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'.
[  337.514534][T10578] loop1: detected capacity change from 0 to 512
[  337.525951][T10578] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  337.532882][T10578] EXT4-fs (loop1): 1 truncate cleaned up
[  337.616767][T10582] loop7: detected capacity change from 0 to 512
[  337.626532][T10582] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  337.647202][T10582] EXT4-fs (loop7): 1 truncate cleaned up
[  337.664025][T10585] loop1: detected capacity change from 0 to 2048
[  337.757335][ T3303]  loop1: p1 < > p3 p4 < >
[  337.758038][ T3303] loop1: p3 size 861184 extends beyond EOD, truncated
[  337.767705][T10585]  loop1: p1 < > p3 p4 < >
[  337.768757][T10585] loop1: p3 size 861184 extends beyond EOD, truncated
[  337.777760][ T3000]  loop1: p1 < > p3 p4 < >
[  337.778322][ T3000] loop1: p3 size 861184 extends beyond EOD, truncated
[  338.004514][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  338.959985][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  338.961712][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  338.972571][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  338.974508][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  339.420852][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  339.483918][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'.
[  339.787365][T10604] loop5: detected capacity change from 0 to 256
[  339.860971][T10606] sg_write: data in/out 25564/139 bytes for SCSI command 0xf7-- guessing data in;
[  339.860971][T10606]    program syz.7.1909 not setting count and/or reply_len properly
[  340.016138][T10610] loop5: detected capacity change from 0 to 164
[  340.120733][T10610] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82
[  340.206292][T10621] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1915'.
[  340.215421][    T9] usb 3-2: enqueue for inactive port 1
[  340.223655][T10606] loop7: detected capacity change from 0 to 512
[  340.233835][    T9] usb 3-2: enqueue for inactive port 1
[  340.278868][T10606] EXT4-fs: quotafile must be on filesystem root
[  340.328348][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  340.418512][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1911'.
[  340.478671][T10610] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1911'.
[  340.858146][    C1] net_ratelimit: 26315 callbacks suppressed
[  340.858168][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.876232][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  340.888271][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.900596][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  340.912790][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.923157][T10645] pimreg: left allmulticast mode
[  340.925002][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  340.942616][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  340.943031][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  340.966947][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:fe:a0:ba:48:27, vlan:0)
[  340.967061][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  341.063227][T10647] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  341.173438][T10649] loop7: detected capacity change from 0 to 256
[  341.382361][T10649] FAT-fs (loop7): Directory bread(block 64) failed
[  341.382422][T10649] FAT-fs (loop7): Directory bread(block 65) failed
[  341.382453][T10649] FAT-fs (loop7): Directory bread(block 66) failed
[  341.382468][T10649] FAT-fs (loop7): Directory bread(block 67) failed
[  341.382549][T10649] FAT-fs (loop7): Directory bread(block 68) failed
[  341.382591][T10649] FAT-fs (loop7): Directory bread(block 69) failed
[  341.382611][T10649] FAT-fs (loop7): Directory bread(block 70) failed
[  341.382624][T10649] FAT-fs (loop7): Directory bread(block 71) failed
[  341.382759][T10649] FAT-fs (loop7): Directory bread(block 72) failed
[  341.382817][T10649] FAT-fs (loop7): Directory bread(block 73) failed
[  341.418151][   T28] kauditd_printk_skb: 3520 callbacks suppressed
[  341.418165][   T28] audit: type=1326 audit(1773265933.242:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.418249][   T28] audit: type=1326 audit(1773265933.242:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.418378][   T28] audit: type=1326 audit(1773265933.242:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.418528][   T28] audit: type=1326 audit(1773265933.242:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.418616][   T28] audit: type=1326 audit(1773265933.242:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.418829][   T28] audit: type=1326 audit(1773265933.242:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.419058][   T28] audit: type=1326 audit(1773265933.242:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.419487][   T28] audit: type=1326 audit(1773265933.242:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.419694][   T28] audit: type=1326 audit(1773265933.242:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.420364][   T28] audit: type=1326 audit(1773265933.242:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10628 comm="syz.2.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x50000
[  341.795235][ T5010] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.419562][T10676] loop5: detected capacity change from 0 to 512
[  342.437941][T10676] EXT4-fs mount: 14 callbacks suppressed
[  342.437974][T10676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.473747][T10676] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.747218][ T5010] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.914536][T10669] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  343.967050][T10669] syzkaller0: entered promiscuous mode
[  343.972619][T10669] syzkaller0: entered allmulticast mode
[  344.058865][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.077586][ T5010] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.170184][T10703] loop5: detected capacity change from 0 to 512
[  344.222409][T10703] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  344.273755][T10703] EXT4-fs (loop5): 1 truncate cleaned up
[  344.282343][T10703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.556826][ T5010] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.671290][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.779407][T10713] loop7: detected capacity change from 0 to 512
[  344.790436][ T5010] veth0_to_bridge: left allmulticast mode
[  344.816116][ T5010] veth0_to_bridge: left promiscuous mode
[  344.832046][ T5010] bridge0: port 3(veth0_to_bridge) entered disabled state
[  344.884591][T10713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.898309][ T5010] bridge_slave_1: left allmulticast mode
[  344.908818][ T5010] bridge_slave_1: left promiscuous mode
[  344.914502][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.936230][ T5010] bridge_slave_0: left allmulticast mode
[  344.944634][ T5010] bridge_slave_0: left promiscuous mode
[  344.951914][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.957726][T10713] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.058587][T10730] loop2: detected capacity change from 0 to 512
[  345.124890][T10730] EXT4-fs: dax option not supported
[  345.341634][T10746] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004
[  345.361510][T10747] netlink: 'syz.7.1937': attribute type 4 has an invalid length.
[  345.625793][ T5010] bond1 (unregistering): (slave geneve2): Releasing active interface
[  345.662453][ T5010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.682788][ T5010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.713699][ T5010] bond0 (unregistering): Released all slaves
[  345.721526][ T5010] bond1 (unregistering): Released all slaves
[  345.806764][T10755] loop5: detected capacity change from 0 to 512
[  345.818629][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.849675][T10755] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  345.900404][T10755] EXT4-fs (loop5): 1 truncate cleaned up
[  345.904326][T10760] loop7: detected capacity change from 0 to 512
[  345.958435][T10760] EXT4-fs: dax option not supported
[  345.975132][T10755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.075581][ T5010] hsr_slave_0: left promiscuous mode
[  346.101387][T10771] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004
[  346.121634][ T5010] hsr_slave_1: left promiscuous mode
[  346.129484][ T5010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.146385][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.159604][ T5010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.186294][ T5010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.193727][ T5010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.220679][ T5010] veth1_macvtap: left promiscuous mode
[  346.233692][ T5010] veth0_macvtap: left promiscuous mode
[  346.252965][ T5010] veth1_vlan: left promiscuous mode
[  346.271417][ T5010] veth0_vlan: left promiscuous mode
[  346.279832][T10774] loop5: detected capacity change from 0 to 512
[  346.387508][T10776] loop7: detected capacity change from 0 to 1024
[  346.415905][T10776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.440966][   T28] kauditd_printk_skb: 9831 callbacks suppressed
[  346.440980][   T28] audit: type=1326 audit(1773265938.265:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.465905][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1944: corrupted inode contents
[  346.492718][ T5010] team0 (unregistering): Port device team_slave_1 removed
[  346.495772][T10774] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  346.500133][T10774] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.1944: mark_inode_dirty error
[  346.509218][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  346.509239][    C1] EXT4-fs (loop5): initial error at time 1773265938: ext4_do_update_inode:5569: inode 3
[  346.509274][    C1] EXT4-fs (loop5): last error at time 1773265938: ext4_do_update_inode:5569: inode 3
[  346.547684][T10774] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  346.548191][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.1944: corrupted inode contents
[  346.569353][T10774] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  346.569433][ T5010] team0 (unregistering): Port device team_slave_0 removed
[  346.569486][T10774] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.1944: mark_inode_dirty error
[  346.596866][   T28] audit: type=1326 audit(1773265938.265:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.621333][T10774] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  346.621660][T10774] Quota error (device loop5): write_blk: dquota write failed
[  346.629274][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.630756][   T28] audit: type=1326 audit(1773265938.265:15795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.671977][T10774] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  346.682877][T10774] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1944: Failed to acquire dquot type 0
[  346.694667][T10774] loop5: lost filesystem error report for type 5 error -117
[  346.695127][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1944: corrupted inode contents
[  346.715144][T10774] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  346.715407][T10774] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.1944: mark_inode_dirty error
[  346.736198][   T28] audit: type=1326 audit(1773265938.265:15796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.775690][T10774] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  346.775875][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1944: corrupted inode contents
[  346.806942][   T28] audit: type=1326 audit(1773265938.265:15797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.835112][T10774] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  346.835318][T10774] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1944: mark_inode_dirty error
[  346.875351][T10774] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  346.875563][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1944: corrupted inode contents
[  346.897544][   T28] audit: type=1326 audit(1773265938.265:15798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.944695][T10774] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  346.945269][T10774] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  346.973051][   T28] audit: type=1326 audit(1773265938.265:15799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  346.999255][T10786] loop7: detected capacity change from 0 to 512
[  347.015047][T10774] loop5: lost filesystem error report for type 5 error -117
[  347.021522][T10786] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  347.049223][T10774] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1944: corrupted inode contents
[  347.071308][T10774] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  347.071391][   T28] audit: type=1326 audit(1773265938.265:15800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10742 comm="syz.1.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  347.104354][T10774] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.1944: mark_inode_dirty error
[  347.106403][T10786] EXT4-fs (loop7): 1 truncate cleaned up
[  347.121790][T10786] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.156572][T10774] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  347.165658][T10774] loop5: lost filesystem error report for type 5 error -117
[  347.167303][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.183916][T10774] EXT4-fs (loop5): 1 truncate cleaned up
[  347.194628][T10774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.214998][T10774] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.236317][T10774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.278826][ T5010] IPVS: stop unused estimator thread 0...
[  347.647862][T10831] loop2: detected capacity change from 0 to 512
[  347.696497][T10831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.714763][T10831] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.966594][T10837] netlink: 'syz.2.1953': attribute type 4 has an invalid length.
[  348.308878][T10839] loop5: detected capacity change from 0 to 512
[  348.321254][T10839] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  348.333411][T10839] EXT4-fs (loop5): 1 truncate cleaned up
[  348.339527][T10839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.421761][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.473026][T10845] dummy0 speed is unknown, defaulting to 1000
[  348.480357][T10845] lo speed is unknown, defaulting to 1000
[  348.518390][T10849] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  348.531268][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.573197][T10849] EXT4-fs (loop5): 1 orphan inode deleted
[  348.580199][T10851] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  348.605366][T10849] EXT4-fs (loop5): 1 truncate cleaned up
[  348.615017][T10849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.644447][T10849] EXT4-fs (loop5): shut down requested (1)
[  348.662288][T10851] bond1 (unregistering): Released all slaves
[  348.690172][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.785297][T10860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.835105][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.975117][T10855] EXT4-fs: Ignoring removed mblk_io_submit option
[  349.073498][T10855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  349.172912][T10855] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.361628][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  349.406611][T10885] set_capacity_and_notify: 3 callbacks suppressed
[  349.406628][T10885] loop2: detected capacity change from 0 to 1024
[  349.431564][T10885] EXT4-fs: Ignoring removed orlov option
[  349.455055][T10885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.487770][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.540073][T10893] loop2: detected capacity change from 0 to 512
[  349.574394][T10893] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  349.600812][T10893] EXT4-fs (loop2): 1 truncate cleaned up
[  349.614481][T10893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.651840][T10902] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1972'.
[  349.673520][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.845804][T10908] loop7: detected capacity change from 0 to 764
[  349.853017][T10908] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  349.980736][T10921] netlink: 'syz.5.1977': attribute type 1 has an invalid length.
[  350.000353][T10921] bridge0: Device is already in use.
[  350.241158][T10929] loop2: detected capacity change from 0 to 1024
[  350.249948][T10929] EXT4-fs: Ignoring removed orlov option
[  350.274601][T10929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.299817][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.437700][T10940] loop1: detected capacity change from 0 to 512
[  350.454946][T10940] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  350.546032][T10951] tmpfs: Bad value for 'mpol'
[  350.586492][T10950] syzkaller0: entered promiscuous mode
[  350.597749][T10950] syzkaller0: entered allmulticast mode
[  350.647385][T10957] sctp: [Deprecated]: syz.2.1989 (pid 10957) Use of int in maxseg socket option.
[  350.647385][T10957] Use struct sctp_assoc_value instead
[  350.969470][T10962] netlink: 'syz.1.1991': attribute type 5 has an invalid length.
[  350.990573][T10964] loop2: detected capacity change from 0 to 1024
[  351.000869][T10964] EXT4-fs: Ignoring removed orlov option
[  351.021074][T10964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.054620][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.076995][T10973] loop2: detected capacity change from 0 to 512
[  351.096783][T10973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  351.110110][T10973] EXT4-fs (loop2): 1 truncate cleaned up
[  351.134726][T10973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.282766][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.468420][   T28] kauditd_printk_skb: 3182 callbacks suppressed
[  351.468511][   T28] audit: type=1326 audit(1773265943.287:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  351.733691][T10994] dummy0 speed is unknown, defaulting to 1000
[  351.766800][T10994] lo speed is unknown, defaulting to 1000
[  351.794594][   T28] audit: type=1326 audit(1773265943.537:18984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f15a3e8db19 code=0x7ffc0000
[  352.086348][   T28] audit: type=1326 audit(1773265943.537:18985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  352.430694][   T28] audit: type=1326 audit(1773265943.537:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.5.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a3eec799 code=0x7ffc0000
[  352.508572][T11002] loop1: detected capacity change from 0 to 1024
[  352.536052][T11002] EXT4-fs: Ignoring removed mblk_io_submit option
[  352.557020][T11010] sctp: [Deprecated]: syz.0.2005 (pid 11010) Use of int in maxseg socket option.
[  352.557020][T11010] Use struct sctp_assoc_value instead
[  352.598143][T11002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  352.612120][T11002] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.844442][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  352.983782][   T28] audit: type=1326 audit(1773265944.788:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.2.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x7ffc0000
[  353.023449][   T28] audit: type=1326 audit(1773265944.798:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.2.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x7ffc0000
[  353.081080][   T28] audit: type=1326 audit(1773265944.798:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.2.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1443bcc799 code=0x7ffc0000
[  353.130061][T11039] netlink: 'syz.7.2014': attribute type 2 has an invalid length.
[  353.137918][T11039] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2014'.
[  353.147136][   T28] audit: type=1326 audit(1773265944.838:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11031 comm="syz.2.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1443b8cfce code=0x7ffc0000
[  353.183770][   T28] audit: type=1326 audit(1773265944.838:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.2.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1443bcc799 code=0x7ffc0000
[  353.207476][   T28] audit: type=1326 audit(1773265944.848:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.2.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f1443bcc799 code=0x7ffc0000
[  353.305379][T11039] ipip0: entered promiscuous mode
[  353.314275][T11043] loop2: detected capacity change from 0 to 164
[  353.338426][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'.
[  353.422214][T11043] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82
[  353.598240][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'.
[  353.609345][T11043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2016'.
[  353.861429][T11058] sctp: [Deprecated]: syz.0.2019 (pid 11058) Use of int in maxseg socket option.
[  353.861429][T11058] Use struct sctp_assoc_value instead
[  353.949900][T11060] loop1: detected capacity change from 0 to 1024
[  353.966684][T11060] EXT4-fs: Ignoring removed mblk_io_submit option
[  354.126478][T11071] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2022'.
[  354.138490][T11060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  354.153055][T11060] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.292046][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  355.428692][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  355.833098][T11115] set_capacity_and_notify: 1 callbacks suppressed
[  355.833112][T11115] loop2: detected capacity change from 0 to 512
[  355.846104][T11115] EXT4-fs: inline encryption not supported
[  355.852214][T11115] EXT4-fs: Ignoring removed i_version option
[  355.864511][T11115] EXT4-fs (loop2): 1 orphan inode deleted
[  355.881164][T11115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.885281][T11117] sctp: [Deprecated]: syz.5.2034 (pid 11117) Use of int in maxseg socket option.
[  355.885281][T11117] Use struct sctp_assoc_value instead
[  355.945916][T11111] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.2033: Directory hole found for htree leaf block 0
[  356.060062][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2036'.
[  356.079868][T11120] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  356.213344][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.356434][T11130] dummy0 speed is unknown, defaulting to 1000
[  356.382935][T11132] loop2: detected capacity change from 0 to 512
[  356.393149][T11130] lo speed is unknown, defaulting to 1000
[  356.431168][T11132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  356.464489][T11132] System zones: 0-2, 18-18, 34-34
[  356.488422][   T28] kauditd_printk_skb: 4233 callbacks suppressed
[  356.488484][   T28] audit: type=1326 audit(1773265948.310:23226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  356.531282][T11132] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  356.585867][T11132] EXT4-fs (loop2): Remounting filesystem read-only
[  356.592419][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  356.592438][    C1] EXT4-fs (loop2): initial error at time 1773265948: ext4_mb_generate_buddy:1315
[  356.592459][    C1] EXT4-fs (loop2): last error at time 1773265948: ext4_mb_generate_buddy:1315
[  356.622682][   T28] audit: type=1326 audit(1773265948.310:23227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  356.666715][   T28] audit: type=1326 audit(1773265948.310:23228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  356.717240][   T28] audit: type=1326 audit(1773265948.310:23229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  356.719314][T11132] EXT4-fs (loop2): 1 truncate cleaned up
[  356.740807][ T5009] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  356.746613][T11139] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2041'.
[  356.781820][ T5009] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  356.792539][   T28] audit: type=1326 audit(1773265948.310:23230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  356.816202][ T5009] Quota error (device loop2): write_blk: dquota write failed
[  356.823798][ T5009] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  356.830591][T11132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.834678][ T5009] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  356.857224][   T28] audit: type=1326 audit(1773265948.310:23231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x50000
[  356.912793][T11132] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.926338][ T5009] Quota error (device loop2): write_blk: dquota write failed
[  356.937975][ T5009] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  356.988188][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.096686][T11157] pimreg: entered allmulticast mode
[  357.127849][T11155] loop2: detected capacity change from 0 to 8192
[  357.145094][T11155] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  357.964646][T11172] sctp: [Deprecated]: syz.0.2051 (pid 11172) Use of int in maxseg socket option.
[  357.964646][T11172] Use struct sctp_assoc_value instead
[  358.505676][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2048'.
[  358.758261][T11206] loop1: detected capacity change from 0 to 1024
[  358.783745][T11206] EXT4-fs: Ignoring removed orlov option
[  358.850446][T11206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.864519][T11213] loop7: detected capacity change from 0 to 512
[  358.920273][T11213] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  358.928300][T11213] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  358.941957][T11213] EXT4-fs (loop7): 1 truncate cleaned up
[  358.961854][T11213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.981974][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.097624][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.115176][T11292] loop7: detected capacity change from 0 to 1024
[  360.139609][T11282] loop2: detected capacity change from 0 to 8192
[  360.154820][T11282] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  360.260032][T11292] EXT4-fs: Ignoring removed orlov option
[  360.271029][T11292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.502596][ T9686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.558290][   T28] kauditd_printk_skb: 874 callbacks suppressed
[  361.558306][   T28] audit: type=1326 audit(1773265953.392:24102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.558489][   T28] audit: type=1326 audit(1773265953.392:24103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.559192][   T28] audit: type=1326 audit(1773265953.392:24104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.567978][   T28] audit: type=1326 audit(1773265953.402:24105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.568006][   T28] audit: type=1326 audit(1773265953.402:24106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f67a6facfce code=0x7ffc0000
[  361.569193][   T28] audit: type=1326 audit(1773265953.402:24107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.612279][T11332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2080'.
[  361.718999][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  361.897965][   T28] audit: type=1326 audit(1773265953.602:24108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.897994][   T28] audit: type=1326 audit(1773265953.602:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f67a6f8db19 code=0x7ffc0000
[  361.898015][   T28] audit: type=1326 audit(1773265953.602:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  361.898095][   T28] audit: type=1326 audit(1773265953.602:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a6fec799 code=0x7ffc0000
[  362.570472][T11357] loop2: detected capacity change from 0 to 1024
[  362.579126][T11357] EXT4-fs: Ignoring removed orlov option
[  362.610937][T11357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.626355][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.661884][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.746232][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.063491][T11382] loop2: detected capacity change from 0 to 8192
[  363.085018][T11382] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  364.397298][T11403] loop5: detected capacity change from 0 to 1024
[  364.408880][T11403] EXT4-fs: Ignoring removed orlov option
[  364.430051][T11403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.167215][ T5377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.209394][T11423] loop1: detected capacity change from 0 to 512
[  365.228983][T11423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.241956][T11423] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.350911][T11431] loop2: detected capacity change from 0 to 1024
[  365.358072][ T3000] ==================================================================
[  365.366154][ T3000] BUG: KCSAN: data-race in set_nlink / set_nlink
[  365.372475][ T3000] 
[  365.374793][ T3000] read to 0xffff8881081089e8 of 4 bytes by task 3304 on cpu 0:
[  365.382326][ T3000]  set_nlink+0x29/0xb0
[  365.386386][ T3000]  kernfs_iop_permission+0x1e2/0x220
[  365.391690][ T3000]  inode_permission+0x31f/0x3b0
[  365.396535][ T3000]  link_path_walk+0x779/0xe30
[  365.401215][ T3000]  path_openat+0x1c6/0x2050
[  365.405730][ T3000]  do_file_open+0x16c/0x290
[  365.410243][ T3000]  do_sys_openat2+0x94/0x130
[  365.414829][ T3000]  __x64_sys_openat+0xf2/0x120
[  365.419586][ T3000]  x64_sys_call+0x1e39/0x3020
[  365.424254][ T3000]  do_syscall_64+0x12c/0x370
[  365.428824][ T3000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.434701][ T3000] 
[  365.437016][ T3000] write to 0xffff8881081089e8 of 4 bytes by task 3000 on cpu 1:
[  365.444626][ T3000]  set_nlink+0x99/0xb0
[  365.445137][T11435] netlink: 'syz.1.2107': attribute type 4 has an invalid length.
[  365.448700][ T3000]  kernfs_iop_permission+0x1e2/0x220
[  365.448734][ T3000]  inode_permission+0x31f/0x3b0
[  365.466525][ T3000]  link_path_walk+0x779/0xe30
[  365.471204][ T3000]  path_lookupat+0x8c/0x500
[  365.475694][ T3000]  filename_lookup+0x190/0x390
[  365.480454][ T3000]  vfs_statx+0x96/0x170
[  365.484604][ T3000]  vfs_fstatat+0x118/0x170
[  365.489002][ T3000]  __se_sys_newfstatat+0x55/0x3e0
[  365.494032][ T3000]  __x64_sys_newfstatat+0x55/0x70
[  365.499055][ T3000]  x64_sys_call+0x2c64/0x3020
[  365.503734][ T3000]  do_syscall_64+0x12c/0x370
[  365.508313][ T3000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.514187][ T3000] 
[  365.516491][ T3000] value changed: 0x00000008 -> 0x00000009
[  365.522181][ T3000] 
[  365.524485][ T3000] Reported by Kernel Concurrency Sanitizer on:
[  365.530612][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  365.541003][ T3000] Tainted: [W]=WARN
[  365.544781][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  365.554817][ T3000] ==================================================================
[  365.568414][T11431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.606205][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.061248][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.