last executing test programs:

12m31.649251536s ago: executing program 32 (id=206):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000202"], 0x98}}, 0x4048010)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
keyctl$get_keyring_id(0x0, 0x0, 0xffffffff)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @remote, 0x8, 0x4000000}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff, 0xff, 0xa, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x184}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x101, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

9m9.471640803s ago: executing program 33 (id=1539):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x5, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r2)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')

8m57.477373827s ago: executing program 34 (id=1510):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7652883a}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0) (async)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38)
socket$inet_mptcp(0x2, 0x1, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="dc823adcbbc1e1853bb0bb5de198", 0x0, 0x2, 0x0, 0x4, 0x0, &(0x7f0000000200)="2bb92900", 0x0, 0x2, 0x0, 0x3}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250b06b6a70000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250b06b6a70000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00')
readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140))
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x2, 0x1}, 0x10000d, 0x4, 0x0, 0xfffffffffffffdfe, 0x5, 0x1f05, 0x0, 0x7, 0x6, 0x0}) (async)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x2, 0x1}, 0x10000d, 0x4, 0x0, 0xfffffffffffffdfe, 0x5, 0x1f05, 0x0, 0x7, 0x6, 0x0})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x6)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) (async)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
epoll_create1(0x80000) (async)
epoll_create1(0x80000)
socket$inet6_sctp(0xa, 0x1, 0x84)

7m38.384440916s ago: executing program 35 (id=2134):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
socket$kcm(0x2a, 0x2, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e")
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r4, 0x540a, 0x0)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000100)={0xaee, 0x0, 0x81, 0x7a7, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x4, 0x100022})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000004840)=""/215, 0xd7}, {&(0x7f0000000980)=""/265, 0x109}, {&(0x7f0000004b00)=""/176, 0xb0}, {&(0x7f0000000ac0)=""/4103, 0x1007}], 0x5}}], 0x1, 0x0, 0x0)
write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0)

7m36.739765342s ago: executing program 36 (id=2149):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = memfd_create(&(0x7f00000000c0)='\x02A\xbb\xcc\xeb\x14\x10\xef\xa7\x16\xd7m\x14oG1\xff\xf9\x028\xc6\xc8\xd9\xd5c\xb1E \x06\xa0\xc9\xcf\x17ag\xf7iX\xf2O\x04k\x9c!\x13\xd8y\xd4\xdc\xbf\xc8\x8cWO\xc37\xf7\x83\x90\xce\xefd\x18\x95%\xa1\xa3\x15b\x9cF4>\xbb\x11d\xd9\x9f\x10]\xdc\xe3\x03\xa4\xeb\xb0', 0x5)
fallocate(r1, 0x0, 0x800657, 0x40000b7)
close(0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

7m8.929531147s ago: executing program 37 (id=2314):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$FIONCLEX(r0, 0x5450)
r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)

7m8.221881853s ago: executing program 38 (id=2325):
setreuid(0x0, 0xee00)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$eJzs3U1vW1kZAOD33thMk2ZIBljMjMTMiBmUVFAnmdBpxKKAhGBVCSj7EhI3iuLEVeK0TVRBKn4AEkKAxAZWbJD4AUioPwEhKsEeAQJV0LJhUbjI9nWapraTUn9onOeRTu6Hj/2eN5aP7/E99g3gzHonImYjIsuy7EJETOX707zEQbPU6z1+dHelXpLIsmv/SCLJ97Ue65V8eT6/27mI+MZXI76dPB93Z29/Y7lSKW/n23O1zeRJlu1fXN9cXiuvlbcWFxc+WLq8dGlpvid5TkfElS//9Uff/8VXrvzms7f/dP3vs99pJth0NI9eaqZebPwvWgoRsd2PYENSaGTYdGnIbQEAoLv68f7HIuJTEXEhpmKscTQHAAAAjJLsC5PxJGme/wMAAABGUxoRk5GkpXy+72SkaanUnMP7iZhIK9Wd2meyqcPPC6ajmN5Yr5Tn87kD01FM6tsL+Rzb1vb7x7YXI+K1iPjh1Hhju7RSrawO9ZMPAAAAODvOPx3/v5F/h7Mx/gcAAABGzPSwGwAAAAD0nfE/AAAAjD7jfwAAABhpX7t6tV6y1vWvV2/t7W5Ub11cLe9slDZ3V0or1e2bpbVqda3xm32bJz1epVq9+bnY2r0zVyvv1OZ29vavb1Z3t2rX15+5BDYAAAAwQK+9ff+PSUQcfH48jYgsOXJbMSIbO1q5MPj2Af2Tvkjlv/SvHcDgjQ27AcDQOKSHs6t4chXfDoARd1I/0HHyzm973xYAAKA/Zt44PP/fKMDZcf9hY5Ekw24IMHDdzv+bGwCj7RTn/4ARVez2Lm9QACMv7fJSb30h6OXP/2fZi7cMAADopclGSdJSPg6YjDQtlSJebUz8LyY31ivl+Yj4aET8Yar4Sn17oXHPxMcDAAAAAAAAAAAAAAAAAAAAAAAAAHBKWZZE1sH4YR0AAADgwywi/VuSX/9rZuq9yeaI/+lVQT+S/HuqsYyI2z+99uM7y7Xa9kJ9/z8P99d+ku9/fxifYAAAAADHtcbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTS40d3V1plkHEffikiptvFL8S5xvJcFCNi4l9JFI7cL4mIsR7EP5iIiNfbxU/qzYrpvBXH46cRMd6L+Pf+//jnexAfzrL79f7ni+1ef2m801i2f/0V8vKyOvd/6WH/N9ah/3u13QOmz+9688Gv5jrGvxfxZqF9/9OKn3SI/+4pc/zWN/f3O92W/Txipu37T/JMrLmkcHNuZ2//4vrm8lp5rby1uLjwwdLlpUtL83M31ivl/G/bGD/45K//2y3/iQ7xp0/I/71T5v+fB3cefby5Wjx2UzF+lmWz77Z//l/vEL/13vfp/Omub8+01g+a60e99cvfvfV2l/xXO+R/0vM/e8r8L3z9e38+ZVUAYAB29vY3liuV8rYVK31bGY8BBl2ObnVaB7EDaM9381D9CvH7YkT/shhipwQAAPTF04P+YbcEAAAAAAAAAAAAAAAAAAAAzq6TfgasFz8wdjzmwXBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo6n8BAAD///phy8c=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000019200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000080)={[{@errors_remount}, {@user_xattr}, {@minixdf}]}, 0xfe, 0x450, &(0x7f0000000140)="$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")
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000001340), 0x808008, &(0x7f0000001080)=ANY=[@ANYBLOB='tr\x00ns=unix,cache=mmap,\x00'])
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000640)='.\x00', 0x3a424bc, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe0d59824e1618cd9913d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYBLOB="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", @ANYBLOB="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", @ANYRESHEX, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000))
faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100)

6m26.722779891s ago: executing program 39 (id=2663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6020400)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
getsockopt$inet6_int(r2, 0x29, 0x4, 0x0, &(0x7f0000000080))
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4m42.921618481s ago: executing program 40 (id=3546):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000c0000000000000a0d00000000000000000000000000000000000000000000000000000000000000000000000004000000000000009d01dcbe2d629b6a50cabab29200"/127], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0xfffffffe, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x0, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bff, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0xfffffffd, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x400084, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xeffffffd, 0x13, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r7, &(0x7f0000000300)=ANY=[], 0xbfb3)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffff, 0x0, 0x0, 0x17})
syz_open_pts(r7, 0x101000)

3m54.683188268s ago: executing program 7 (id=3876):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TCSBRKP(r0, 0x5425, 0x80000000)

3m54.672702485s ago: executing program 7 (id=3877):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x1e, 0x5}]}}}]}, 0x44}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x5501, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x3}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x81}]}]}, 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0)
pipe2$watch_queue(&(0x7f0000000180), 0x80)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380))

3m53.747954038s ago: executing program 7 (id=3891):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000d00)={[{@mode={'mode', 0x3d, 0x3}}, {@gid}, {@overriderock}, {@unhide}, {@check_strict}, {@map_off}, {@check_strict}, {@showassoc}]}, 0x1, 0xa5d, &(0x7f0000000180)="$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")

3m53.480855258s ago: executing program 7 (id=3892):
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001365d2e03fff78c821f7ab9e35f12ff6cc1b34a33191295f0000000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf250200000005003d000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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")
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m52.046784846s ago: executing program 7 (id=3905):
unshare(0x62040200)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
unshare(0x22020400)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="cd", 0x1, 0x8804, &(0x7f0000000100)={0xa, 0x4e23, 0x80, @loopback={0xf00000000000000}, 0xfffffffe}, 0x1c)

3m51.918239007s ago: executing program 7 (id=3911):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x30, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

3m51.918152037s ago: executing program 41 (id=3911):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x30, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

3m41.632123982s ago: executing program 6 (id=3955):
r0 = gettid()
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000e80)=ANY=[], 0x1, 0x207, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000200))
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000640)=""/235, 0xffffffffffffff29}], 0x23a, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x404040, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250100000008000c00030000000e0001006e65742f6c000061700000000800020005"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20000044)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x48, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '{!/(\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20008011)

3m41.480903208s ago: executing program 6 (id=3959):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0x2000})
timer_create(0x0, 0x0, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r2, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r2, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r3 = fsopen(0x0, 0x0)
fsmount(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, 0xffffffffffffffff, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pim6reg0\x00'})

3m40.579122436s ago: executing program 6 (id=3969):
r0 = gettid()
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000e80)=ANY=[], 0x1, 0x207, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000200))
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000640)=""/235, 0xffffffffffffff29}], 0x23a, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x404040, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250100000008000c00030000000e0001006e65742f6c000061700000000800020005"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20000044)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x48, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '{!/(\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20008011)

3m40.525629294s ago: executing program 6 (id=3971):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0xb089, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x9, 0x81, 0x3, 0xffffffff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8a042, 0x0)
mq_open(&(0x7f0000000100)='\n[\xd0n\x01\xa1\xb8\n\x8f\xe9\xb9}\xee`L\xc1\xad\"-\xf3\xc6\x8b\xc2\xcd\xd1\xb3\x9a\x82k\xd2\xc9B0\xf9\xb48\xd1\xc0dp\x881\xa8\xeafU\x94r]+P\xbc;\x10\xd4\xc3\xb7-Sq\x8d7\x9d]\x83W\xf3\xcf\x8d6A\xb6g\xa9T\xf5\aL\xbb>2\"\xd5\xafF\xb0<\x85\x90\xd6\x00\xf3\xb8\x00'/106, 0x800, 0x1b9, &(0x7f0000000000)={0x6616, 0x7, 0x29dd8b8d, 0xfffffffffffffffe})
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

3m40.119124542s ago: executing program 6 (id=3973):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a82701214"], 0xffdd)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd)

3m36.831005525s ago: executing program 6 (id=3997):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff653f3440fb21c877da1d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09b4a7e7dac3c3000"/252, @ANYRES64=0x0], 0x3, 0x263, &(0x7f0000000600)="$eJzs2s9rHGUYB/Bn05ZuWtJd8RctiC96UC9Lk7OHFokgBhQ1QhWkUzPRNeNuyCyBFTE56dU/wbN49CZIj15y8S/w4C2XHHsQRyaziUkstPgjW+Lnc0ge5p0v8868y8szy+6+/PWna6tlbzUbxUyrFTM3YjvutaIbM3FgO1564dZPz7x9673Xby4ttSdHF1JKV5798f3Pv3vu7ujyu99f+eFi7HQ/2N1b+HXnqZ2ru7+/83G/TP0yDYajlKU7w+Eou1PkaaVfrvVSerPIszJP/UGZbxwbXy2G6+vjlA1W5i6tb+RlmbLBOK3l4zQaptHGOGUfZf1B6vV6ae5S8E8sf3uvqmKvunA7qqqa/SYu3425X6ITrcdS6/EbrSdvt57ebl3dq6rOyejsdGbMv+tvrz9nwmRTX3wrpXZE8dXm8uZy878ebcfN1ehHEXlcj9n4LeqPyURTv/ra0uL1tK8bXxZbk/zW5vKFg0s0+fnoRPf++fkmnw7yFyOi/lvv7ofXX4hOPHH//MKJfHP9drz4/JF8Lzrx84cxjCJWos7G1mR+i1/Mp/TKG0sn8tf2zwMAOGt66VDdv52rXwqb/udcM947Nn6kP2ryR/rDzgP6wxP91fm4dn66905EOf5sLSuKfKN+wdsvDo/8X4vZo4/lYYqDr0L+u4nNHFuzv5zTjUfk0SnOThHxyVR2JE7Tn4v+wFPbpzIhAAAAAAAAAAAAHspp/Jxw2vcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA82v4IAAD//1jpvxo=")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x2000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)

3m36.826701444s ago: executing program 42 (id=3997):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff653f3440fb21c877da1d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09b4a7e7dac3c3000"/252, @ANYRES64=0x0], 0x3, 0x263, &(0x7f0000000600)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x2000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)

2m27.815457911s ago: executing program 9 (id=4324):
syz_emit_ethernet(0x4e, 0x0, 0x0)
unshare(0x600)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], 'batadv_slave_1\x00', 'dvmrp0\x00', {0xff}, {}, 0x2c, 0x21, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unshare(0x22020600)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)

2m26.987334375s ago: executing program 9 (id=4329):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80805, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket(0x10, 0x3, 0x0)
unshare(0x6a040000)

2m25.495327495s ago: executing program 9 (id=4332):
unshare(0x2c040480)
unshare(0x8000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket(0x2, 0x80805, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x842, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r2, 0x0)
read(r2, &(0x7f0000001400)=""/4096, 0x1000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x2000000, 0x1001f3)
syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000140), 0x1, 0x7e3, &(0x7f0000002400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102143, 0x151)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x7, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x3, 0x800000, 0x0, 0x2, 0x6, 0x8, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff0200000000000000000000000000010004422d60f5a10009b56e65e9969500020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d432000000640101010000000000000000000000000000000000000000000000000000000009000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff000000000e000000000000002cbd7000003500000200000070000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"})
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10040)

2m24.623175011s ago: executing program 9 (id=4340):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x11e, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
read$char_usb(r2, &(0x7f00000001c0)=""/4053, 0xffffffffffffff1c)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206720000000000000000000000000105000100070000000900020073797a30000000000c00078008001240fffffffb0500050002000000b9d50400000000702c706f72742c6e657400"/92], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r4], 0xb)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket(0x3, 0x6, 0xfffffffd)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2, 0x0, 0x10ffe, 0x2, 0x2, 0x8000000e, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r9 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a2, 0x8, 0x2, 0x296})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000400)=@buf={0x0, &(0x7f00000003c0)})
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
lsm_get_self_attr(0x66, 0x0, &(0x7f0000000480), 0x0)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf250000000008000100", @ANYBLOB="0f4f6b00b128b4f900"], 0x24}, 0x1, 0x0, 0x0, 0x4000070}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe")

2m23.779033632s ago: executing program 9 (id=4343):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x40, 0x1, 0xfd, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000f40000000000000000711021000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x6, 0x9, 0x0, 0x200002b0, 0x200082e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x208018, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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")
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0xc000)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbb"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x3, 0x4, 0x0, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x5}, 0x50)
sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800)
fsync(0xffffffffffffffff)

2m23.511131452s ago: executing program 9 (id=4346):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fff0000}]})
r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x592, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x800, 0x4)

2m23.510945112s ago: executing program 43 (id=4346):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{0x6, 0x6, 0x38, 0x7fff0000}]})
r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x592, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x800, 0x4)

1m28.975322326s ago: executing program 5 (id=4583):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x0)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeaf, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x26, 0x0, @val=@kprobe_multi=@syms={0x0, 0x5, &(0x7f0000000400)=[&(0x7f0000000000)='\x00', &(0x7f0000000100)=':\xc0\xb3f', &(0x7f00000001c0)='\x00', &(0x7f00000004c0)=' N)D\b\xa7\xc5\xd1\xb7\x0e\xd5V\xd53\xccN\xaf\xa4\xea\x1c\a\x87\xc7O]\xff\xf3\x1b\x8c\xcc\xfcN\x19Sw1{7\xea\xef\t\xbbn\x84\xd4\xc6\x86eB\x9fS\xac%{\xab1VI\x8c\xecu\xd4d\x91\xe3\xd8\xc2\x11\r\xb6\x03U\xe4\xddD\"\x1au\xc9a\x9b|\\glV\xda,\xe5(\x94\xf1\xaa:\xecNm\xb7\xdd9a\xe8+\x0e\xf7\xb4\xa6\x9fF\t,\xf7:A\xcc\x11\x1d\xacR\r@\x92\xcb\x8b:p\x94\xd4\xd1\'\x85A\xae\xc6\x93\xd82<\xb4\xfc(\xb3\xf8\xb7D\x95\xa6/\xd1\xf1l\xceTp\xff\xea\x94\x97\x04\xde\xee\xd9\xf4\x88\x1c$\xa9P\x90\xee\x88\x82\a@\x1e\xfe\xc1\n\x86Jf\"eWN\xbb\xab[\xbc\xa1\x86\xea\xa4\x94\xd4\r\xc8\x90.\xe7=\x84\xe7\xf4\vc\x11]u#Y\x0fC\xdek\xdd\x84\xd6\t\xbc\x94\xf1{\'\xf3\xe3\xd6\xfb', &(0x7f00000003c0)='/!\\*$!!!\x00'], 0x0, 0x400}}, 0x30)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000480)=0x1, 0x6)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10)

1m28.899025022s ago: executing program 5 (id=4584):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(0x0, 0x21)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x7)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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")

1m28.846009702s ago: executing program 5 (id=4585):
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0)

1m28.823156418s ago: executing program 5 (id=4586):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nodiscard}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$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")
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c001000019000100fffffffffcdbdf2500000000000000000000000000000000fffffffc00000000000000000000000000000000fffc00000a00800087000000", @ANYRES32=0x0, @ANYBLOB="9ae1d74ec2d9eeaa84acd42b5203da187bfdaedbb53b50e3e1bfbf5972585657578467b8d1beadabc43b97272f3c0ae422ad7b2d813dc853fdf6a65c23c063bd7306cf9066c6d1d69033fdad91d49139a17e7baf401fdac01d64540d8aff4ccc5e84e631095db5c87a3af092f7ae6fceb8b7a205b5f93438625e7443aaa6297ac830d607ce009162e81a7848db", @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000100000000000000004000000000000000002000000000000000000000000c06b6e0000000000000000000c001c00", @ANYRES32=0x0, @ANYRESOCT=r1], 0x1c0}, 0x1, 0x0, 0x0, 0x20004006}, 0xc000090)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
shutdown(r4, 0x1)
sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010026bd7000ffdb05", @ANYRES32=0x0, @ANYBLOB="040100"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x8)
r6 = syz_open_procfs(0x0, &(0x7f0000000c00)='net/vlan/vlan0\x00')
timer_create(0x1, &(0x7f0000000140)={0x0, 0x13, 0x1, @thr={&(0x7f00000006c0)="8539bc609f9480951e2c409ad729f3098ce4add8eb3ee3dc18e66f5369989dfb2d934ab38201a4d14828f3aea94eb44eb194d41f553df19c447d2c3724d41b004bf9a568f15a4bfee0106f9a33e995baa73993ebd5f39ee5295f2993fc3b2e3e17fa9bcc2542348a6dd96017024e3dd39c52dc721ac153d01df3ab7052f5deec6e7a99ae84c56677c1b1b7e11fbf3db3aa8867c110b4f8fba94a9950a88741d8034c0f933ed5305a869f17363f1541b83b643d5c0f5d7159357de0ef1ef20cc2a5ce87932cea917d6e3ed8fd5d18e0d2e8417068e600a3d89235bf02c16a90c68a", &(0x7f0000000400)="988f405242b149f98dc5cc3b877826b4ee77184a164a34a6777b3d6341e880a2d6facdeec99ca1e16cf246445f236391ab33e9dc37e9a36ffc2cef35041651cc14624efd612bfc579a1965488885495815d25923422143a3f8013fe52bdaa5ca6a249dfad47c4967684cfc030bf35e6126c7059322239cdddc87d9e224fea5f519d079"}}, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050002ea2edca3b0e852c7d5cf893a97eaaebee4ac4f05718dd88ce6714314ec276d034cd4a640caea632d6104d258d80970bd8dfccfd2c1caf9ba3e4f81be0885f0ccddec50150c64d3b99ff605957d189eebf382fa0ebdd1e8d4bae3c337c56832d5f0be7850ab43f0c560c4cb5de30280339ed8ea6674f7d73605b4a511a95796"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000000000c66f6118e1b06cde00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000ffff000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b70300eef0d4ee048500000005000000bc0900000000000035090100000000009500000000000000cf4900000000000052080000000000008500000000000000b70000000000000090f5000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000100007000400000000000000ff0200000000000000000000000000017f0008000000000000000006000000004e2000004e2300000000008002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000001000000000000800500000000000000020000000000000000000000000000000000001000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdff1f00000000000700000000000000000000000000000000000400fdffffffe80a0000000000000000000002000400140000000000000014000e00"/188], 0x104}}, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0x0, 0xb, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m28.594992165s ago: executing program 5 (id=4587):
syz_open_dev$loop(&(0x7f0000000040), 0xbb, 0x80d00)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff0f"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48)

1m28.560802969s ago: executing program 5 (id=4588):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x3b, @multicast1, 0x4e20, 0x1, 'rr\x00', 0x10, 0x7, 0x57}, 0x2c)
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1m28.538981334s ago: executing program 44 (id=4588):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x3b, @multicast1, 0x4e20, 0x1, 'rr\x00', 0x10, 0x7, 0x57}, 0x2c)
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1m27.351446481s ago: executing program 3 (id=4598):
syz_open_dev$loop(&(0x7f0000000040), 0xbb, 0x80d00)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff0f"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48)

1m27.057983736s ago: executing program 3 (id=4600):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000005c0), 0x2700)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0xd65}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf25050000000400017ce568af72e576f29f09000000000000000233147e53a34d42d2e07f000000c61405ae9583bc5276e90d4f15f434d1fa2b5290c0080aaec794cbb3555578ecad19d883e78bb7b18728141dbcaa7be5"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind(r6, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e24, 0xfffffffc, @local, 0x40}}}, 0x80)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r3)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r9, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x314d}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x800)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r10, r10, 0x0, 0x2000007ff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x700, 0x40, 0xb3, 0x5}})

1m26.006223309s ago: executing program 3 (id=4604):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYRES64], 0x1, 0x336, &(0x7f0000000e00)="$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")
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
socket(0x10, 0x3, 0x6)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

1m25.721938155s ago: executing program 3 (id=4605):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = gettid()
timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000044000)=<r4=>0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300)
r5 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
creat(0x0, 0x140)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000000)=@known='trusted.overlay.upper\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r2, 0x0, 0x1, 0x0)
syz_open_procfs(r5, &(0x7f0000000080)='net/igmp\x00')
fcntl$setpipe(r2, 0x408, 0x7)
close_range(r1, 0xffffffffffffffff, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES64=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40004)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0xffffffff}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x800)

1m24.671177368s ago: executing program 3 (id=4611):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "da880c4f7e37eb8685"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'})
r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)

1m23.499105378s ago: executing program 3 (id=4613):
r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=<r3=>0x0, &(0x7f0000000900))
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000200))
syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/net\x00')

1m23.445211998s ago: executing program 45 (id=4613):
r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=<r3=>0x0, &(0x7f0000000900))
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000200))
syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/net\x00')

8.703293275s ago: executing program 0 (id=4997):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="3900c3001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)

8.602471407s ago: executing program 0 (id=4998):
r0 = gettid()
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000e80)=ANY=[], 0x1, 0x207, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000200))
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000640)=""/235, 0xffffffffffffff29}], 0x23a, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x404040, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250100000008000c00030000000e0001006e65742f6c00006170000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20000044)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x48, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '{!/(\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20008011)

8.098960702s ago: executing program 0 (id=5003):
syz_io_uring_setup(0x63a7, &(0x7f00000004c0)={0x0, 0xe72b, 0x200, 0x1, 0x23}, &(0x7f00000000c0), &(0x7f0000000100)=<r0=>0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
clock_adjtime(0x3, &(0x7f0000000540)={0x9, 0x7, 0x36, 0x8, 0x4, 0x3, 0x40, 0x2, 0x6, 0x3, 0x2, 0xffffffff00000001, 0x200, 0x5, 0xb, 0x4, 0x7, 0x8, 0x800, 0x430, 0xf, 0x5, 0xc4b, 0x5, 0x0, 0xfffffffffffffffb})
openat$cgroup_procs(r1, &(0x7f0000000300)='tasks\x00', 0x2, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4263, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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")
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0xc, 0x0, r1, 0x1, &(0x7f00000001c0)="b3b101cce39eeac44dac53d517e6801deb46cc65497d07fb9851c7e020815fef798e35af04c215997465a6d5c91bee3006f8843fc547baa908d71184db0bb73397ac1c98f8d72f848dac517c7af24e0dd78dbfbd207fff4f95fb341f24e09b0bf2aca15fd0869f4eb782c3df1dd238891314f04f77575c485b759abe66e70e844a4555fe2cfb7fec4bb1ce8bef32563b1f4044e2b819a0bfb72dc1c6c8db940e9ef1f7c849b61d863bc5ba28231804fbf20b690ec8237c386b90613ba8d7c97401dbd47d", 0xc4, 0x1, 0x1, {0x0, r3}})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000100001002bad700000000000fc0100000000000000000000000000000a0101000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x4050)

6.848193077s ago: executing program 0 (id=5010):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000040)={[{@user_xattr}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@errors_remount}, {@nolazytime}, {@noauto_da_alloc}, {@dax_never}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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")

6.731116795s ago: executing program 2 (id=5012):
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x42082)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, 0x0)

6.157365587s ago: executing program 0 (id=5014):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f00000000c0), 0xf9, 0x58b, &(0x7f0000000840)="$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") (async, rerun: 32)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0) (rerun: 32)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async)
rt_tgsigqueueinfo(0x0, 0x0, 0x4000032, &(0x7f0000000000)={0x28, 0x87, 0x1000})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a0001002dbd7000040000008180800000000600"], 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) (async)
unshare(0x2000400)
r2 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
close_range(r2, 0xffffffffffffffff, 0x2) (async)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x2, &(0x7f0000001f40)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$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") (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbb"], 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) (rerun: 64)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r3, 0x537, 0xfffffffc, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
syz_emit_ethernet(0x7e, &(0x7f0000000500)={@local, @random="c59528579b13", @void, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x16, 0x70, 0x68, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x13, 0x6b, [@broadcast, @empty, @empty, @broadcast]}, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x5, 0x1, 0xbd, 0x0, 0x0, 0x0, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0xe3d7, {{0x7, 0x2, 0x9, 0x0, 0x1, 0x2, 0x1, 0x3}, 0x2, {0x35a0b86c, 0x5, 0x1, 0x1d, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) (async, rerun: 64)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_dest={0x18, 0x114, 0x2, {0x10000, 0x3ff}}], 0x18, 0x2004c0d5}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000007000000094f8cd182797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000080800034000000008080007406df50031080006"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x84) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x34, 0x18, 0x15, 0x0, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6.018586541s ago: executing program 0 (id=5017):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a6eb010018000000000000003c000000b20000000200000000000000020000844285fe996561056d030400000000000000000000020000000000000b00"/70], 0x0, 0x56, 0x0, 0x0, 0xfffffffc}, 0x28)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
fchownat(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000)
setregid(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=")
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
getsockname$unix(r3, &(0x7f0000000300), &(0x7f00000001c0)=0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10040, &(0x7f00000002c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000b589bebbea7f073a95000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

6.018231151s ago: executing program 2 (id=5018):
unshare(0x2a020480)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [], 0xa, "c3b8a388"}, 0x8)
copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0) (fail_nth: 2)

6.016784531s ago: executing program 4 (id=5020):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x9, &(0x7f0000000040)=[{0xf76, 0x0, 0xf, 0xffffffff}, {0xec9d, 0xf, 0x0, 0x7}, {0x7, 0x45, 0xff, 0x9}, {0x1, 0x3, 0x2}, {0x9b, 0x0, 0x6, 0x200}, {0x3, 0x0, 0xf8, 0x7}, {0x6eb, 0x7, 0x5, 0x9}, {0x5e, 0x6, 0x6, 0x5}, {0x7fff, 0xb, 0xa, 0x8}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, 0x0)

5.719097124s ago: executing program 2 (id=5022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)

5.631327708s ago: executing program 2 (id=5024):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80805, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket(0x10, 0x3, 0x0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e66ad2e57cb54078df0e0734000000851c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10)
ppoll(&(0x7f0000000640)=[{r0, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000340)="b2000000", 0x4}, {&(0x7f00000003c0)="040062db7ba1", 0x6}], 0x2)

5.58712844s ago: executing program 4 (id=5025):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r0, r1, 0x0, 0x24002de8) (fail_nth: 2)

5.181826243s ago: executing program 4 (id=5026):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$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") (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) (async)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x170bd2a, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffff}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80)

3.534381444s ago: executing program 4 (id=5027):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/206, 0xce, <r0=>0x0, &(0x7f0000000180)=""/151, 0x97}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', <r1=>0x0, 0x0, 0xaf, 0x2, 0x400, 0x45, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x0, 0x7800, 0xffffffff, 0x6}})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3.444740927s ago: executing program 2 (id=5028):
socket(0x2, 0x80805, 0x0)
close(0x3)
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2e6b39dc8582e32f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3615c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x104000, 0x2, 0x0, 0x7, 0x7, 0x0, 0x800, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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")
getdents(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x404, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x800, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x20e9e8914d607d2c, &(0x7f00000005c0))
openat$selinux_policy(0xffffff9c, &(0x7f0000000280), 0x0, 0x700)

3.24520702s ago: executing program 8 (id=5030):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a0300"], 0x0, 0x56}, 0x28)
getgroups(0x1, &(0x7f0000000180)=[<r2=>0xee00])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x5560}}, './file0\x00'})
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x0, 0x2, 0x2, 0xfff4, 0x0, 0xd, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, r5, 0x1000)
setregid(r2, r5)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x182, 0x6}, 0x10821, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20)
connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x25, 0x360, &(0x7f0000001340)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3.220101235s ago: executing program 1 (id=5032):
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x42082)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, 0x0)

2.92898735s ago: executing program 1 (id=5033):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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")
r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106)
pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7800, 0x0, 0x3)

2.562211552s ago: executing program 4 (id=5034):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x200}, [@IFLA_LINKMODE={0x5, 0x11, 0x5d}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x30}, 0x1, 0xd, 0x0, 0x4000000}, 0x4044050)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001940), &(0x7f0000001980), 0x2, 0x2)
tkill(r6, 0x13)
tkill(r6, 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000480), 0x1, 0x566, &(0x7f00000015c0)="$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")
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x0)
fchown(r7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r9=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r9, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r11 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r10, r11, 0x0, 0x24002de8)

2.544977648s ago: executing program 1 (id=5035):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x106, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48)

2.242484561s ago: executing program 8 (id=5036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000800000000000000000feffff10850100000700000095d7937591e466ce9792c4cfeb4776c02c3da19ddf0efb762f879456e54e7a9d9488247e7dcd0d4a6c8b361a36dc6c4031736a14115c0d6c7d9b353344dc54d81fd8e475c756fe8ee2e1ca9c917c9409ec2f0e95cf2d7fcbc800b7f1833a3c583cd727d81598a036339a9839fae16732"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000001900010000000000000000001c140000fe03000100000000840013"], 0xd4}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000004c0)=0x81a1)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000128bd700034dbdf2506000000050005000000000006001c000000000005000d000100000005000d0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6, 0x42032, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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")
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000033b522660000000009000000180100007c6c6c2500000000f31f2020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202078250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000ff850000000600000095000000000000003347d9be1dd91f33f1415a89c11f61ffa2a1dcc8969b294b71fc4076"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r10 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8)

2.241952011s ago: executing program 4 (id=5037):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a6eb010018000000000000003c000000b20000000200000000000000020000844285fe996561056d030400000000000000000000020000000000000b00"/70], 0x0, 0x56, 0x0, 0x0, 0xfffffffc}, 0x28)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
fchownat(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000)
setregid(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
getsockname$unix(r3, &(0x7f0000000300), &(0x7f00000001c0)=0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x10040, &(0x7f00000002c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000b589bebbea7f073a95000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.241427651s ago: executing program 1 (id=5038):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjW1d2EXBgl2IuGhokho6/UGTgq2FJuBCQUHEbZFu/Ae6l+5dCCKoO9dCFalY0NKR+2OayWQmM/k10+R+PjCZc+85N+d8c+fknjt3ztwAKms2+5FGvB/x+moSMd2SNxVF5mxZ7sW/Hl7LHkk0Gt/9ZxJJua5ZPimfT5UL4xHxxwsRn67trHft/oMbi/VG4VHEmfWbd86s3X/w0erNxevL15dvLZz92sefzH994eOFlobu36ny+eKl73z+Fz/54VdX/lT/KIlzcWX0x0vRFsdhmY3ZeF2G2Lp+JCI+yRId/i7HzQkIodJq5etxNCI+G9NRy5cK07H686E2DjhSjVpEY3dJrwLAcaV7Q1U1xwHNc/v+zoOvHPGoZHCeny9OgHbGP1K+5TCenxtNvkhazoyK9zZOH0L9WR2vHo4/fvVw5nFsex/i5Zu9M3II9XSzsRkRn+sUf5K37XQeaRZ/uu1cP4mI+YgYK9v3rQO0IWlJH8X7MLvpM/5aFn/rfkgj4lz5nK2/sM/629/WGnT8AFTTs/PlgXwjW9o6/mVjj+b4J7bGP4+a200d/JJMbtjHv+7jv+bxfjwf96Rt47BszHK5868cbV/xt59d/FW3+ovx38zj5iOrvzkWHITnmxEzbfH/NAu2HP9k8Scdxr9Zkavn+qvj23/+x8VuecOOv/Ek4oOO5z9bo9Istcv1yTMrq/Xl+eJnxzp+9/sf/LZb/Z3jf+cIIu0s2/+TXeJv2f9p+3bZ3+RO51+52b7i6eUnN7vVP9Vz/6d/H0uK882xcs2PNtfX7y5EjCWXyiLl+sX19btnd4+3KPOykT8vFPF/+KXO/X/b678tqonmv8w+3PnejRfd8vbz+m+5mPy60WcbusniX+q9/7f6/0QzN+KXfdbxn+/f+0K3vM7xJweMCgAAAAAAAKopza/BJuncm3Sazs0V82U/E5Np/fba+pdXbt+7tRTxYf55yNE00iT/yMh0sZysrNaXF8rPwzaXz7YtfyUi3ouIX9cm8uW5a7frS8MOHgAAAAAAAAAAAAAAAAAAAN4Sp8r5/837VP+7Vsz/Byqi9w3mdtz/ATghjvIGk8DbLe//ux3i3x1cW4DBcvyH6tL/obr0f6gu/R+qS/+H6tL/obr0f6gu/R8AAAAATqT3vvjsr0lEbHxjIn9kxso8k37hZBvdU+nakbUDGDw9GqrrzaV/g32onL7G//8tvxzw6JsDDEHSaWU+OGjs3vmfddxyy+bB2wYAAAAAAAAAAAAAFD54v/v8/73NDQaOG9P+oLoOMP/fVwfAMbfvr/4fO9x2AIPnHB/oMYs/xrtl9Jr/DwAAAAAAAAAAAAAcmqn8kaRz5VzgqUjTubmIT0XE6RhNVlbry/MR8W5E/KU2+k62vDDsRgMAAAAAAAAAAAAAAAAAAMAJs3b/wY3Fen35bmvifzvWnOxE8y6ovQs3+iiza+KbscetIhn8n2UiIoa+U7Ylnpa3m93z5n8oX+ctWSMtZZKIjSx76AEWiXg7mpEnhvUfCQAAAAAAAAAAAAAAAAAAqqtl7nFnM78ZcIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPC27v/fI7E0WWzQV+HtiWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcT/8PAAD//4RxNqU=")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000)

1.625195106s ago: executing program 2 (id=5039):
unshare(0x2a020480)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_pidfd_open(0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000150a01080000000000001f000a0039cea8c0e533bcd77a31000000004a8e617edc8207e9c278c6caf9481301e3"], 0x20}}, 0x4000)
ioctl$TCFLSH(0xffffffffffffffff, 0x40085500, 0x100000)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00", 0x1b)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000300)={'#! ', '', [], 0xa, "c3b8a388"}, 0x8)
copy_file_range(r12, &(0x7f00000008c0)=0x4, r0, 0x0, 0x8, 0x0)

1.420991797s ago: executing program 8 (id=5040):
syz_emit_ethernet(0x42, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x20000000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x1)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x31cd, 0x2002, 0x800003, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan0\x00'})
signalfd(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
clock_getres(0x2, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.288172722s ago: executing program 1 (id=5041):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x2}, 0x8386, 0x2, 0x0, 0x0, 0x0, 0x400004, 0x1, 0x0, 0x1000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
r4 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x9, 0xd8, 0x81, 0x0, 0x0, 0x8000, 0xc80, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x10074, 0x7f, 0x7, 0x1, 0xfffffffffffff000, 0x7, 0x3, 0x0, 0x4, 0x0, 0x7fff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x2048, 0x9, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
r5 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x6, 0xab9}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004)
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

913.317301ms ago: executing program 8 (id=5042):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xa052)

840.651088ms ago: executing program 8 (id=5043):
r0 = gettid()
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000e80)=ANY=[], 0x1, 0x207, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000200))
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000640)=""/235, 0xffffffffffffff29}], 0x23a, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x404040, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250100000008000c00030000000e0001006e65742f6c00006170000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20000044)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x48, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '{!/(\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20008011)

704.9µs ago: executing program 8 (id=5044):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80805, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e66ad2e57cb54078df0e0734000000851c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000340)="b2000000", 0x4}, {&(0x7f00000003c0)="040062db7ba1", 0x6}], 0x2)

0s ago: executing program 1 (id=5045):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/206, 0xce, 0x0, &(0x7f0000000180)=""/151, 0x97}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0xaf, 0x2, 0x400, 0x45, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x0, 0x7800, 0xffffffff, 0x6}})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.339974][   T28] audit: type=1326 audit(2000000415.350:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.427573][T24123] loop1: detected capacity change from 0 to 1024
[  740.472257][T24123] EXT4-fs: inline encryption not supported
[  740.480014][T24123] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  740.507802][   T28] audit: type=1326 audit(2000000415.350:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.531734][   T28] audit: type=1326 audit(2000000415.350:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.581919][   T28] audit: type=1326 audit(2000000415.350:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.593582][T24133] lo speed is unknown, defaulting to 1000
[  740.605978][   T28] audit: type=1326 audit(2000000415.350:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.635515][   T28] audit: type=1326 audit(2000000415.350:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.637537][T24123] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.4649: Freeing blocks not in datazone - block = 0, count = 4096
[  740.659514][   T28] audit: type=1326 audit(2000000415.350:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24108 comm="syz.1.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3b54c799 code=0x7ffc0000
[  740.757065][T24123] loop1: lost filesystem error report for type 5 error -117
[  740.757241][T24123] EXT4-fs (loop1): Remounting filesystem read-only
[  740.764768][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  740.764791][    C1] EXT4-fs (loop1): initial error at time 2000000415: ext4_free_blocks:6724
[  740.764817][    C1] EXT4-fs (loop1): last error at time 2000000415: ext4_free_blocks:6724
[  740.801089][T24123] EXT4-fs (loop1): 1 orphan inode deleted
[  740.816055][T24142] loop2: detected capacity change from 0 to 512
[  740.822024][T24123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  740.822682][  T845] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  740.846686][T24123] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.852192][T24142] EXT4-fs: Ignoring removed bh option
[  740.886753][T24142] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  740.895088][  T845] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  740.920082][T24149] netlink: 'syz.0.4654': attribute type 1 has an invalid length.
[  740.941707][  T845] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  740.942384][T24142] EXT4-fs (loop2): 1 truncate cleaned up
[  740.952487][T24149] netlink: 'syz.0.4654': attribute type 2 has an invalid length.
[  740.965748][T24142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  740.981919][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'.
[  740.993730][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.042439][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.135770][T24165] netlink: 'syz.4.4655': attribute type 21 has an invalid length.
[  741.182706][T24168] loop1: detected capacity change from 0 to 512
[  741.215765][T24177] FAULT_INJECTION: forcing a failure.
[  741.215765][T24177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  741.239807][T24168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  741.256143][T24177] CPU: 1 UID: 0 PID: 24177 Comm: syz.4.4661 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  741.256187][T24177] Tainted: [W]=WARN
[  741.256195][T24177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  741.256206][T24177] Call Trace:
[  741.256214][T24177]  <TASK>
[  741.256224][T24177]  __dump_stack+0x1d/0x30
[  741.256300][T24177]  dump_stack_lvl+0x95/0xd0
[  741.256323][T24177]  dump_stack+0x15/0x1b
[  741.256343][T24177]  should_fail_ex+0x263/0x280
[  741.256380][T24177]  should_fail+0xb/0x20
[  741.256468][T24177]  should_fail_usercopy+0x1a/0x20
[  741.256515][T24177]  _copy_from_user+0x1c/0xb0
[  741.256602][T24177]  ___sys_sendmsg+0xc1/0x1e0
[  741.256644][T24177]  __x64_sys_sendmsg+0xd4/0x160
[  741.256679][T24177]  x64_sys_call+0x194c/0x3020
[  741.256740][T24177]  do_syscall_64+0x12c/0x370
[  741.256766][T24177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.256850][T24177] RIP: 0033:0x7fbb069cc799
[  741.256869][T24177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.256892][T24177] RSP: 002b:00007fbb0541f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  741.256915][T24177] RAX: ffffffffffffffda RBX: 00007fbb06c45fa0 RCX: 00007fbb069cc799
[  741.257011][T24177] RDX: 0000000020000044 RSI: 0000200000002c40 RDI: 0000000000000004
[  741.257026][T24177] RBP: 00007fbb0541f090 R08: 0000000000000000 R09: 0000000000000000
[  741.257044][T24177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  741.257059][T24177] R13: 00007fbb06c46038 R14: 00007fbb06c45fa0 R15: 00007ffc9b09a1f8
[  741.257091][T24177]  </TASK>
[  741.257455][T24168] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.356289][T24133] netlink: 'syz.8.4651': attribute type 10 has an invalid length.
[  741.443227][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.446709][T24136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4651'.
[  741.461477][T24182] loop2: detected capacity change from 0 to 128
[  741.588570][T24182] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  741.630564][T24194] loop4: detected capacity change from 0 to 256
[  741.638231][T24182] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  741.686210][T24194] FAT-fs (loop4): Directory bread(block 64) failed
[  741.692897][T24194] FAT-fs (loop4): Directory bread(block 65) failed
[  741.699446][T24194] FAT-fs (loop4): Directory bread(block 66) failed
[  741.706009][T24194] FAT-fs (loop4): Directory bread(block 67) failed
[  741.712575][T24194] FAT-fs (loop4): Directory bread(block 68) failed
[  741.719196][T24194] FAT-fs (loop4): Directory bread(block 69) failed
[  741.725822][T24194] FAT-fs (loop4): Directory bread(block 70) failed
[  741.732385][T24194] FAT-fs (loop4): Directory bread(block 71) failed
[  741.738943][T24194] FAT-fs (loop4): Directory bread(block 72) failed
[  741.745698][T24194] FAT-fs (loop4): Directory bread(block 73) failed
[  741.778471][T24207] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4667'.
[  741.788196][T24201] loop0: detected capacity change from 0 to 128
[  741.912106][T24216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4669'.
[  741.923546][T24216] loop0: detected capacity change from 0 to 256
[  741.930492][T24216] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  741.953851][T24216] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  742.006133][T24228] netlink: 'syz.8.4670': attribute type 5 has an invalid length.
[  742.014454][T24228] netlink: 'syz.8.4670': attribute type 11 has an invalid length.
[  742.023496][T24228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4670'.
[  742.054896][T24228] loop8: detected capacity change from 0 to 1024
[  742.070704][T22400] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  742.082051][T24228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  742.168055][T24239] loop2: detected capacity change from 0 to 512
[  742.198541][T24248] FAULT_INJECTION: forcing a failure.
[  742.198541][T24248] name failslab, interval 1, probability 0, space 0, times 0
[  742.234119][T24239] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4671: invalid indirect mapped block 256 (level 2)
[  742.235082][T24248] CPU: 1 UID: 0 PID: 24248 Comm: syz.0.4672 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  742.235116][T24248] Tainted: [W]=WARN
[  742.235124][T24248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  742.235137][T24248] Call Trace:
[  742.235224][T24248]  <TASK>
[  742.235233][T24248]  __dump_stack+0x1d/0x30
[  742.235263][T24248]  dump_stack_lvl+0x95/0xd0
[  742.235286][T24248]  dump_stack+0x15/0x1b
[  742.235309][T24248]  should_fail_ex+0x263/0x280
[  742.235371][T24248]  should_failslab+0x8c/0xb0
[  742.235393][T24248]  kmem_cache_alloc_noprof+0x66/0x400
[  742.235435][T24248]  ? skb_clone+0x151/0x1f0
[  742.235513][T24248]  skb_clone+0x151/0x1f0
[  742.235548][T24248]  nfnetlink_rcv+0x316/0x1720
[  742.235572][T24248]  ? xas_load+0x413/0x430
[  742.235631][T24248]  ? xas_load+0x413/0x430
[  742.235662][T24248]  ? __rcu_read_unlock+0x4e/0x70
[  742.235684][T24248]  ? xa_load+0xb1/0xe0
[  742.235726][T24248]  ? obj_cgroup_charge_account+0x122/0x1a0
[  742.235755][T24248]  ? should_fail_ex+0x30/0x280
[  742.235777][T24248]  ? __rcu_read_unlock+0x4e/0x70
[  742.235840][T24248]  ? avc_has_perm_noaudit+0xab/0x130
[  742.235897][T24248]  ? _raw_spin_lock_bh+0x56/0xb0
[  742.236017][T24248]  ? _raw_spin_unlock_bh+0x18/0x20
[  742.236047][T24248]  netlink_unicast+0x5c0/0x690
[  742.236195][T24248]  netlink_sendmsg+0x5c8/0x6f0
[  742.236255][T24248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  742.236303][T24248]  ____sys_sendmsg+0x5af/0x600
[  742.236334][T24248]  ___sys_sendmsg+0x195/0x1e0
[  742.236437][T24248]  __x64_sys_sendmsg+0xd4/0x160
[  742.236467][T24248]  x64_sys_call+0x194c/0x3020
[  742.236494][T24248]  do_syscall_64+0x12c/0x370
[  742.236548][T24248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.236571][T24248] RIP: 0033:0x7fd171bdc799
[  742.236588][T24248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.236645][T24248] RSP: 002b:00007fd17062f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  742.236667][T24248] RAX: ffffffffffffffda RBX: 00007fd171e55fa0 RCX: 00007fd171bdc799
[  742.236758][T24248] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[  742.236772][T24248] RBP: 00007fd17062f090 R08: 0000000000000000 R09: 0000000000000000
[  742.236786][T24248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.236800][T24248] R13: 00007fd171e56038 R14: 00007fd171e55fa0 R15: 00007ffc67386758
[  742.236853][T24248]  </TASK>
[  742.324359][T24253] loop0: detected capacity change from 0 to 512
[  742.342598][T24239] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  742.351913][T24253] EXT4-fs: Ignoring removed orlov option
[  742.368229][T24239] EXT4-fs (loop2): 2 truncates cleaned up
[  742.372065][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  742.372088][    C0] EXT4-fs (loop2): initial error at time 2000000417: ext4_free_branches:1023: inode 11
[  742.372120][    C0] EXT4-fs (loop2): last error at time 2000000417: ext4_free_branches:1023: inode 11
[  742.400040][T24253] EXT4-fs: Ignoring removed mblk_io_submit option
[  742.418788][T24239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  742.518190][T24253] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.4673: corrupted in-inode xattr: e_value size too large
[  742.622140][   T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.625808][T24253] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  742.630684][   T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  742.633019][T24253] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4673: couldn't read orphan inode 15 (err -117)
[  742.640325][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  742.640586][    C0] EXT4-fs (loop0): initial error at time 2000000417: ext4_iget_extra_inode:5025: inode 15
[  742.640725][    C0] EXT4-fs (loop0): last error at time 2000000417: ext4_iget_extra_inode:5025: inode 15
[  742.642581][   T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  742.642648][   T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  742.805372][T24286] sctp: [Deprecated]: syz.4.4675 (pid 24286) Use of int in max_burst socket option.
[  742.805372][T24286] Use struct sctp_assoc_value instead
[  742.822003][T24253] loop0: lost filesystem error report for type 5 error -117
[  742.836181][T24253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  742.862371][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.232258][T24295] netlink: 'syz.1.4678': attribute type 21 has an invalid length.
[  743.241160][T24295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4678'.
[  743.253498][T24295] netlink: 'syz.1.4678': attribute type 5 has an invalid length.
[  743.261711][T24295] netlink: 'syz.1.4678': attribute type 6 has an invalid length.
[  743.270220][T24295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4678'.
[  743.407713][T24300] netlink: 'syz.8.4679': attribute type 2 has an invalid length.
[  743.445200][T24300] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4679'.
[  743.476991][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.601066][T24304] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4681'.
[  743.907725][   T50] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  743.946929][   T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  744.006980][   T50] EXT4-fs (loop2): This should not happen!! Data will be lost
[  744.006980][   T50] 
[  744.062696][   T50] EXT4-fs (loop2): Total free blocks count 0
[  744.068726][   T50] EXT4-fs (loop2): Free/Dirty block details
[  744.102091][   T50] EXT4-fs (loop2): free_blocks=0
[  744.129345][   T50] EXT4-fs (loop2): dirty_blocks=8
[  744.161504][   T50] EXT4-fs (loop2): Block reservation details
[  744.167565][   T50] EXT4-fs (loop2): i_reserved_data_blocks=8
[  744.321441][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.331994][T24313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  744.360946][T24339] lo speed is unknown, defaulting to 1000
[  744.366750][T24339] lo speed is unknown, defaulting to 1000
[  744.372689][T24339] lo speed is unknown, defaulting to 1000
[  744.379480][T24339] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  744.400283][T24339] lo speed is unknown, defaulting to 1000
[  744.406402][T24339] lo speed is unknown, defaulting to 1000
[  744.412745][T24339] lo speed is unknown, defaulting to 1000
[  744.418781][T24339] lo speed is unknown, defaulting to 1000
[  744.424852][T24339] lo speed is unknown, defaulting to 1000
[  744.430915][T24339] lo speed is unknown, defaulting to 1000
[  744.437167][T24339] lo speed is unknown, defaulting to 1000
[  744.443192][T24339] lo speed is unknown, defaulting to 1000
[  744.451525][T24339] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  744.463482][T24339] netlink: 'syz.8.4686': attribute type 3 has an invalid length.
[  744.486440][T24313] EXT4-fs (loop4): orphan cleanup on readonly fs
[  744.524098][T24313] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  744.563037][T24313] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  744.588898][T24313] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.4682: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  744.610649][T24313] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  744.616580][T24313] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4682: couldn't read orphan inode 13 (err -117)
[  744.621936][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  744.622017][    C0] EXT4-fs (loop4): last error at time 2000000419: ext4_ext_check_inode:521: inode 13
[  744.702669][T24313] loop4: lost filesystem error report for type 5 error -117
[  744.719050][T24353] EXT4-fs: inline encryption not supported
[  744.721158][T24313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  744.754938][T24353] EXT4-fs: Ignoring removed bh option
[  744.761348][T24353] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 73
[  744.961387][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.172703][T24382] lo speed is unknown, defaulting to 1000
[  745.183412][T24382] lo speed is unknown, defaulting to 1000
[  745.470840][T24364] set_capacity_and_notify: 3 callbacks suppressed
[  745.470893][T24364] loop1: detected capacity change from 0 to 512
[  745.505367][T24387] netlink: 'syz.2.4694': attribute type 21 has an invalid length.
[  745.524135][T24364] EXT4-fs: Ignoring removed orlov option
[  745.576454][T24364] EXT4-fs: Ignoring removed mblk_io_submit option
[  745.592948][T24391] loop8: detected capacity change from 0 to 128
[  745.626443][T24386] netlink: 'syz.4.4693': attribute type 2 has an invalid length.
[  745.626961][T24391] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  745.665444][T24386] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4693'.
[  745.674976][T24364] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4691: corrupted in-inode xattr: e_value size too large
[  745.675068][T24364] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  745.677733][T24364] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4691: couldn't read orphan inode 15 (err -117)
[  745.700951][T24391] FAT-fs (loop8): Filesystem has been set read-only
[  745.701777][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  745.720586][T24391] syz.8.4695: attempt to access beyond end of device
[  745.720586][T24391] loop8: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  745.726962][    C1] EXT4-fs (loop1): initial error at time 2000000420: ext4_iget_extra_inode:5025: inode 15
[  745.740858][T24391] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  745.740884][T24391] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100)
[  745.741087][T24391] syz.8.4695: attempt to access beyond end of device
[  745.741087][T24391] loop8: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  745.750965][    C1] EXT4-fs (loop1): last error at time 2000000420: ext4_iget_extra_inode:5025
[  745.768354][T24391] syz.8.4695: attempt to access beyond end of device
[  745.768354][T24391] loop8: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  745.781128][    C1] : inode 15
[  745.815568][T24399] netlink: 'syz.2.4696': attribute type 21 has an invalid length.
[  745.816883][T24364] loop1: lost filesystem error report for type 5 error -117
[  745.848436][T24364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  746.058920][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.084018][T24407] loop4: detected capacity change from 0 to 128
[  746.439465][T24423] lo speed is unknown, defaulting to 1000
[  746.463559][T24423] lo speed is unknown, defaulting to 1000
[  746.902956][T24443] loop1: detected capacity change from 0 to 512
[  746.916312][T24443] EXT4-fs: Ignoring removed bh option
[  747.544609][T24436] loop2: detected capacity change from 0 to 256
[  747.595404][T24436] FAT-fs (loop2): Directory bread(block 64) failed
[  747.602012][T24436] FAT-fs (loop2): Directory bread(block 65) failed
[  747.608575][T24436] FAT-fs (loop2): Directory bread(block 66) failed
[  747.615238][T24436] FAT-fs (loop2): Directory bread(block 67) failed
[  747.621781][T24436] FAT-fs (loop2): Directory bread(block 68) failed
[  747.628453][T24436] FAT-fs (loop2): Directory bread(block 69) failed
[  747.635241][T24436] FAT-fs (loop2): Directory bread(block 70) failed
[  747.641848][T24436] FAT-fs (loop2): Directory bread(block 71) failed
[  747.648526][T24436] FAT-fs (loop2): Directory bread(block 72) failed
[  747.655119][T24436] FAT-fs (loop2): Directory bread(block 73) failed
[  747.664769][T24443] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  748.336302][T24449] loop0: detected capacity change from 0 to 4096
[  748.505109][T24459] loop4: detected capacity change from 0 to 512
[  748.512347][T24443] EXT4-fs (loop1): 1 truncate cleaned up
[  748.518575][T24443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  748.543142][T24459] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  748.543639][T24449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  748.610181][T24459] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  748.630703][T24459] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4705: bad orphan inode 4
[  748.652380][T24459] loop4: lost filesystem error report for type 5 error -117
[  748.652634][T24459] EXT4-fs (loop4): 1 orphan inode deleted
[  748.660005][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  748.660030][    C0] EXT4-fs (loop4): initial error at time 2000000423: ext4_orphan_get:1417
[  748.660056][    C0] EXT4-fs (loop4): last error at time 2000000423: ext4_orphan_get:1417
[  748.713049][T24459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  748.726517][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.819938][T24482] loop8: detected capacity change from 0 to 256
[  748.872090][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.975596][T24482] FAT-fs (loop8): Directory bread(block 64) failed
[  749.011950][T24482] FAT-fs (loop8): Directory bread(block 65) failed
[  749.016325][T24455] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  749.025303][T24492] loop0: detected capacity change from 0 to 512
[  749.050970][T24489] loop2: detected capacity change from 0 to 512
[  749.063193][T24489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4710: invalid indirect mapped block 256 (level 2)
[  749.086776][T24482] FAT-fs (loop8): Directory bread(block 66) failed
[  749.096499][T24489] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  749.099587][T24489] EXT4-fs (loop2): 2 truncates cleaned up
[  749.108810][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  749.108834][    C1] EXT4-fs (loop2): initial error at time 2000000424: ext4_free_branches:1023: inode 11
[  749.108870][    C1] EXT4-fs (loop2): last error at time 2000000424: ext4_free_branches:1023: inode 11
[  749.144411][T24492] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4709: invalid indirect mapped block 256 (level 2)
[  749.186172][T24482] FAT-fs (loop8): Directory bread(block 67) failed
[  749.192746][T24482] FAT-fs (loop8): Directory bread(block 68) failed
[  749.199749][T24482] FAT-fs (loop8): Directory bread(block 69) failed
[  749.206611][T24482] FAT-fs (loop8): Directory bread(block 70) failed
[  749.213144][T24482] FAT-fs (loop8): Directory bread(block 71) failed
[  749.214374][T24492] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  749.220004][T24482] FAT-fs (loop8): Directory bread(block 72) failed
[  749.229701][T24489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  749.236043][T24482] FAT-fs (loop8): Directory bread(block 73) failed
[  749.266123][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  749.272586][    C0] EXT4-fs (loop0): initial error at time 2000000424: ext4_free_branches:1023: inode 11
[  749.282404][    C0] EXT4-fs (loop0): last error at time 2000000424: ext4_free_branches:1023: inode 11
[  749.363104][T24492] EXT4-fs (loop0): 2 truncates cleaned up
[  749.388937][T24492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  749.440267][T24479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  749.521735][T24479] EXT4-fs (loop1): orphan cleanup on readonly fs
[  749.629070][T24479] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  749.649805][T24479] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  749.688387][T24479] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.4708: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  749.736539][T24479] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  749.750163][T24479] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4708: couldn't read orphan inode 13 (err -117)
[  749.759938][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  749.760089][    C1] EXT4-fs (loop1): last error at time 2000000424: ext4_ext_check_inode:521: inode 13
[  749.812340][ T1338] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  749.885164][T24479] loop1: lost filesystem error report for type 5 error -117
[  749.909752][   T50] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  749.982971][ T1338] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  750.016989][   T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  750.031165][ T1338] EXT4-fs (loop2): This should not happen!! Data will be lost
[  750.031165][ T1338] 
[  750.046014][   T50] EXT4-fs (loop0): This should not happen!! Data will be lost
[  750.046014][   T50] 
[  750.061009][T24479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  750.074940][ T1338] EXT4-fs (loop2): Total free blocks count 0
[  750.081035][   T50] EXT4-fs (loop0): Total free blocks count 0
[  750.087080][ T1338] EXT4-fs (loop2): Free/Dirty block details
[  750.093163][ T1338] EXT4-fs (loop2): free_blocks=0
[  750.098250][   T50] EXT4-fs (loop0): Free/Dirty block details
[  750.104166][   T50] EXT4-fs (loop0): free_blocks=0
[  750.109213][ T1338] EXT4-fs (loop2): dirty_blocks=8
[  750.117094][ T1338] EXT4-fs (loop2): Block reservation details
[  750.123223][   T50] EXT4-fs (loop0): dirty_blocks=8
[  750.133345][ T1338] EXT4-fs (loop2): i_reserved_data_blocks=8
[  750.139356][   T50] EXT4-fs (loop0): Block reservation details
[  750.151830][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.161577][   T50] EXT4-fs (loop0): i_reserved_data_blocks=8
[  750.172648][T24479] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  750.187064][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.276121][   T28] kauditd_printk_skb: 113 callbacks suppressed
[  750.276142][   T28] audit: type=1326 audit(2000000425.326:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.349596][T24479] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  750.399645][   T28] audit: type=1326 audit(2000000425.326:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.440030][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.449941][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.585648][   T28] audit: type=1326 audit(2000000425.336:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.609454][   T28] audit: type=1326 audit(2000000425.336:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.634364][   T28] audit: type=1326 audit(2000000425.336:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.658292][T24555] set_capacity_and_notify: 1 callbacks suppressed
[  750.658309][T24555] loop2: detected capacity change from 0 to 256
[  750.675686][   T28] audit: type=1326 audit(2000000425.336:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.700840][   T28] audit: type=1326 audit(2000000425.336:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.826191][T24555] FAT-fs (loop2): Directory bread(block 64) failed
[  750.851044][T24555] FAT-fs (loop2): Directory bread(block 65) failed
[  750.891558][T24555] FAT-fs (loop2): Directory bread(block 66) failed
[  750.910552][T24482] bridge_slave_0: left allmulticast mode
[  750.920050][   T28] audit: type=1326 audit(2000000425.336:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  750.982297][T24482] bridge_slave_0: left promiscuous mode
[  751.011384][   T28] audit: type=1326 audit(2000000425.336:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  751.074169][T24482] bridge0: port 1(bridge_slave_0) entered disabled state
[  751.103413][   T28] audit: type=1326 audit(2000000425.336:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24538 comm="syz.0.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  751.129769][T24555] FAT-fs (loop2): Directory bread(block 67) failed
[  751.144204][T24555] FAT-fs (loop2): Directory bread(block 68) failed
[  751.165559][T24555] FAT-fs (loop2): Directory bread(block 69) failed
[  751.193544][T24555] FAT-fs (loop2): Directory bread(block 70) failed
[  751.221300][T24555] FAT-fs (loop2): Directory bread(block 71) failed
[  751.249116][T24555] FAT-fs (loop2): Directory bread(block 72) failed
[  751.255798][T24555] FAT-fs (loop2): Directory bread(block 73) failed
[  751.376274][T24482] bridge_slave_1: left allmulticast mode
[  751.419373][T24482] bridge_slave_1: left promiscuous mode
[  751.558568][T24563] loop0: detected capacity change from 0 to 512
[  751.567600][T24482] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.616150][T24563] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4717: invalid indirect mapped block 256 (level 2)
[  751.629824][T24563] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  751.630159][T24563] EXT4-fs (loop0): 2 truncates cleaned up
[  751.639356][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  751.639378][    C0] EXT4-fs (loop0): initial error at time 2000000426: ext4_free_branches:1023: inode 11
[  751.639436][    C0] EXT4-fs (loop0): last error at time 2000000426: ext4_free_branches:1023: inode 11
[  751.671530][T24563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.767102][T24482] bond0: (slave bond_slave_0): Releasing backup interface
[  751.830530][T24482] bond0: (slave bond_slave_1): Releasing backup interface
[  751.921274][  T845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap
[  751.934893][  T845] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  751.960756][  T845] EXT4-fs (loop0): This should not happen!! Data will be lost
[  751.960756][  T845] 
[  751.982133][  T845] EXT4-fs (loop0): Total free blocks count 0
[  751.999838][  T845] EXT4-fs (loop0): Free/Dirty block details
[  752.014833][  T845] EXT4-fs (loop0): free_blocks=0
[  752.022220][  T845] EXT4-fs (loop0): dirty_blocks=8
[  752.033137][  T845] EXT4-fs (loop0): Block reservation details
[  752.048082][  T845] EXT4-fs (loop0): i_reserved_data_blocks=8
[  752.062203][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.126020][T24568] loop0: detected capacity change from 0 to 512
[  752.143602][T24568] EXT4-fs: Ignoring removed bh option
[  752.161301][T24568] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  752.189127][T24482] team0: Port device team_slave_0 removed
[  752.197615][T24568] EXT4-fs (loop0): 1 truncate cleaned up
[  752.203997][T24568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.283418][T24482] team0: Port device team_slave_1 removed
[  752.315549][T24482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  752.323815][T24482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  752.365100][T24482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  752.373304][T24482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  752.420820][T24482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  752.439187][ T3484] lo speed is unknown, defaulting to 1000
[  752.470236][T24555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  752.803048][T24581] xt_hashlimit: size too large, truncated to 1048576
[  753.116623][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.307180][T24599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4725'.
[  754.385898][T24599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24599 comm=syz.4.4725
[  754.749947][T24601] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4725'.
[  755.317113][T24609] lo speed is unknown, defaulting to 1000
[  755.328784][T24609] lo speed is unknown, defaulting to 1000
[  755.725295][T24612] loop0: detected capacity change from 0 to 128
[  755.771066][T24612] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  755.822557][T24612] FAT-fs (loop0): Filesystem has been set read-only
[  755.829306][T24612] syz.0.4728: attempt to access beyond end of device
[  755.829306][T24612] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  755.872723][T24612] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  755.880746][T24612] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[  755.938097][T24612] syz.0.4728: attempt to access beyond end of device
[  755.938097][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.002428][T24612] syz.0.4728: attempt to access beyond end of device
[  756.002428][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.042553][T24612] syz.0.4728: attempt to access beyond end of device
[  756.042553][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.086130][T24612] syz.0.4728: attempt to access beyond end of device
[  756.086130][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.128071][T24612] syz.0.4728: attempt to access beyond end of device
[  756.128071][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.173594][T24612] syz.0.4728: attempt to access beyond end of device
[  756.173594][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.221354][T24612] syz.0.4728: attempt to access beyond end of device
[  756.221354][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.271476][T24612] syz.0.4728: attempt to access beyond end of device
[  756.271476][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.323501][T24612] syz.0.4728: attempt to access beyond end of device
[  756.323501][T24612] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  756.501347][T24634] loop8: detected capacity change from 0 to 128
[  756.639484][T24636] lo speed is unknown, defaulting to 1000
[  756.660144][T24636] lo speed is unknown, defaulting to 1000
[  756.763559][T24636] netlink: 'syz.8.4737': attribute type 10 has an invalid length.
[  756.896191][T24639] loop0: detected capacity change from 0 to 512
[  756.952400][T24639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  756.992001][T24636] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4737'.
[  757.044592][T24639] EXT4-fs (loop0): 1 truncate cleaned up
[  757.095989][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  757.096006][   T28] audit: type=1400 audit(2000000432.180:3550): avc:  denied  { ioctl } for  pid=24645 comm="syz.8.4740" path="socket:[66667]" dev="sockfs" ino=66667 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  757.151038][T24639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.416772][T24659] loop8: detected capacity change from 0 to 1024
[  757.454088][T24659] EXT4-fs: inline encryption not supported
[  757.457886][T24653] loop1: detected capacity change from 0 to 512
[  757.480505][T24659] EXT4-fs: Ignoring removed bh option
[  757.511288][T24659] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 73
[  757.513905][T24653] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  757.562558][T24653] EXT4-fs (loop1): 1 truncate cleaned up
[  757.605981][T24653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  757.791114][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.975151][T24671] lo speed is unknown, defaulting to 1000
[  757.979953][T24667] loop0: detected capacity change from 0 to 512
[  757.988187][T24671] lo speed is unknown, defaulting to 1000
[  758.008911][T24667] EXT4-fs: Ignoring removed orlov option
[  758.028723][T24667] EXT4-fs: Ignoring removed mblk_io_submit option
[  758.075973][T24667] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.4747: corrupted in-inode xattr: e_value size too large
[  758.094039][T24667] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  758.097240][T24667] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4747: couldn't read orphan inode 15 (err -117)
[  758.106816][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  758.106856][    C0] EXT4-fs (loop0): initial error at time 2000000433: ext4_iget_extra_inode:5025: inode 15
[  758.107036][    C0] EXT4-fs (loop0): last error at time 2000000433: ext4_iget_extra_inode:5025: inode 15
[  758.215013][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.233961][T24667] loop0: lost filesystem error report for type 5 error -117
[  758.238471][T24667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  758.273142][T24680] netlink: 'syz.8.4750': attribute type 2 has an invalid length.
[  758.288826][T24680] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4750'.
[  758.529837][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.538994][T24686] loop8: detected capacity change from 0 to 128
[  758.560760][T24687] loop1: detected capacity change from 0 to 256
[  758.601817][T24687] FAT-fs (loop1): Directory bread(block 64) failed
[  758.644133][T24687] FAT-fs (loop1): Directory bread(block 65) failed
[  758.661484][T24687] FAT-fs (loop1): Directory bread(block 66) failed
[  758.692554][T24687] FAT-fs (loop1): Directory bread(block 67) failed
[  758.709149][T24695] loop0: detected capacity change from 0 to 1024
[  758.714290][T24687] FAT-fs (loop1): Directory bread(block 68) failed
[  758.742867][T24687] FAT-fs (loop1): Directory bread(block 69) failed
[  758.749433][T24687] FAT-fs (loop1): Directory bread(block 70) failed
[  758.779692][T24695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  758.847771][T24700] loop2: detected capacity change from 0 to 1024
[  758.857509][T24687] FAT-fs (loop1): Directory bread(block 71) failed
[  758.884584][T24687] FAT-fs (loop1): Directory bread(block 72) failed
[  758.891920][T24700] EXT4-fs: inline encryption not supported
[  758.918775][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.933856][T24687] FAT-fs (loop1): Directory bread(block 73) failed
[  758.940896][T24700] EXT4-fs: Ignoring removed bh option
[  758.955207][T24700] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 73
[  758.996970][   T28] audit: type=1400 audit(2000000434.081:3551): avc:  denied  { nlmsg_read } for  pid=24702 comm="syz.0.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  759.231861][T24704] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  759.274132][T24704] EXT4-fs (loop8): 1 truncate cleaned up
[  759.357234][T24704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  759.453749][T24718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  759.476245][T24718] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.636050][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.821669][T24721] lo speed is unknown, defaulting to 1000
[  759.832749][T24721] lo speed is unknown, defaulting to 1000
[  760.125836][T24728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  760.150271][T24728] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  760.250044][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  760.351786][T24743] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  760.402705][T24743] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  760.523968][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  760.554247][T24753] netlink: 'syz.0.4768': attribute type 15 has an invalid length.
[  760.580498][T24742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  760.610559][   T28] audit: type=1400 audit(2000000435.702:3552): avc:  denied  { setopt } for  pid=24754 comm="syz.8.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  760.684114][T24742] EXT4-fs (loop2): 1 truncate cleaned up
[  760.727789][T24760] team0: Port device gtp0 added
[  760.748503][   T28] audit: type=1326 audit(2000000435.832:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  760.777901][T24742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  760.842108][   T28] audit: type=1326 audit(2000000435.832:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  760.965264][   T28] audit: type=1326 audit(2000000435.832:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  760.988684][   T28] audit: type=1326 audit(2000000435.832:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  761.012430][   T28] audit: type=1326 audit(2000000435.832:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  761.036009][   T28] audit: type=1326 audit(2000000435.832:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  761.059609][   T28] audit: type=1326 audit(2000000435.832:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24751 comm="syz.0.4768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  761.983022][T24771] lo speed is unknown, defaulting to 1000
[  761.993177][T24771] lo speed is unknown, defaulting to 1000
[  762.704581][T24793] set_capacity_and_notify: 5 callbacks suppressed
[  762.704601][T24793] loop8: detected capacity change from 0 to 1024
[  762.735229][T24793] EXT4-fs: inline encryption not supported
[  762.835778][T24793] EXT4-fs: Ignoring removed bh option
[  762.850477][T24793] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 73
[  762.986615][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.996077][T24797] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  763.135162][T24800] loop2: detected capacity change from 0 to 128
[  763.162482][T24800] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  763.187067][T24800] FAT-fs (loop2): Filesystem has been set read-only
[  763.210455][T24800] bio_check_eod: 3471 callbacks suppressed
[  763.210474][T24800] syz.2.4780: attempt to access beyond end of device
[  763.210474][T24800] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  763.245839][T24800] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  763.274091][T24800] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  763.289804][T24811] netlink: 'syz.8.4783': attribute type 21 has an invalid length.
[  763.806274][T24832] lo speed is unknown, defaulting to 1000
[  763.818135][T24832] lo speed is unknown, defaulting to 1000
[  764.147046][T24831] loop8: detected capacity change from 0 to 512
[  764.213433][T24831] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4787: invalid indirect mapped block 256 (level 2)
[  764.244718][T24831] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  764.245144][T24831] EXT4-fs (loop8): 2 truncates cleaned up
[  764.254994][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  764.255033][    C0] EXT4-fs (loop8): initial error at time 2000000439: ext4_free_branches:1023: inode 11
[  764.255068][    C0] EXT4-fs (loop8): last error at time 2000000439: ext4_free_branches:1023: inode 11
[  764.362013][T24831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  764.558646][T11095] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:12: bg 0: block 5: invalid block bitmap
[  764.592154][T11095] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  764.630070][T24866] lo speed is unknown, defaulting to 1000
[  764.636271][T24866] lo speed is unknown, defaulting to 1000
[  764.662574][T11095] EXT4-fs (loop8): This should not happen!! Data will be lost
[  764.662574][T11095] 
[  764.702478][T11095] EXT4-fs (loop8): Total free blocks count 0
[  764.728008][T11095] EXT4-fs (loop8): Free/Dirty block details
[  764.733991][T11095] EXT4-fs (loop8): free_blocks=0
[  764.767959][T11095] EXT4-fs (loop8): dirty_blocks=8
[  764.773092][T11095] EXT4-fs (loop8): Block reservation details
[  764.797936][T11095] EXT4-fs (loop8): i_reserved_data_blocks=8
[  764.810050][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  765.147829][T24866] netlink: 'syz.2.4792': attribute type 10 has an invalid length.
[  765.179229][T24866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4792'.
[  765.610618][T24910] netlink: 'syz.1.4794': attribute type 21 has an invalid length.
[  765.707888][T24915] loop1: detected capacity change from 0 to 128
[  765.772170][T24914] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4796'.
[  765.903257][T24917] netlink: 'syz.1.4798': attribute type 21 has an invalid length.
[  766.007477][T24918] loop2: detected capacity change from 0 to 128
[  766.310626][T24900] loop8: detected capacity change from 0 to 512
[  766.400765][T24931] loop2: detected capacity change from 0 to 128
[  766.400960][T24900] vfat: Unknown parameter ''
[  766.454754][T24931] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  766.487399][T24931] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  766.905862][T24934] netlink: 'syz.1.4799': attribute type 3 has an invalid length.
[  766.968027][T24934] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4799'.
[  767.078439][T24936] loop0: detected capacity change from 0 to 512
[  767.145942][T24936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  767.210192][T24936] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  767.238809][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  767.375278][T24949] xt_policy: output policy not valid in PREROUTING and INPUT
[  767.409271][T24947] lo speed is unknown, defaulting to 1000
[  767.417580][T24952] loop4: detected capacity change from 0 to 512
[  767.424373][T24952] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  767.441115][T24947] lo speed is unknown, defaulting to 1000
[  767.710262][T24954] netlink: 'syz.0.4808': attribute type 21 has an invalid length.
[  767.981019][T24969] loop0: detected capacity change from 0 to 512
[  768.010416][T24947] netlink: 'syz.2.4806': attribute type 10 has an invalid length.
[  768.019730][T24969] EXT4-fs: Ignoring removed orlov option
[  768.031704][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4806'.
[  768.036415][T24969] EXT4-fs: Ignoring removed mblk_io_submit option
[  768.090579][T24969] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.4811: corrupted in-inode xattr: e_value size too large
[  768.106491][T24967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.115566][T24967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.125644][T24969] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  768.126788][T24969] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4811: couldn't read orphan inode 15 (err -117)
[  768.136419][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  768.154627][    C1] EXT4-fs (loop0): initial error at time 2000000443: ext4_iget_extra_inode:5025: inode 15
[  768.164501][T24969] loop0: lost filesystem error report for type 5 error -117
[  768.164586][    C1] EXT4-fs (loop0): last error at time 2000000443: ext4_iget_extra_inode:5025
[  768.204453][T24969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  768.387362][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.428430][T24978] loop0: detected capacity change from 0 to 512
[  768.473564][T24978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.516323][T24978] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  768.606963][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.623242][T24985] lo speed is unknown, defaulting to 1000
[  768.661075][T24985] lo speed is unknown, defaulting to 1000
[  768.672443][T24986] netlink: 'syz.2.4814': attribute type 32 has an invalid length.
[  768.696456][T24992] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4815'.
[  768.724441][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4814'.
[  768.776815][T24995] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1
[  768.785619][T24995] ref_ctr increment failed for inode: 0xbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881050a4380
[  768.800727][T24986] bond1: option coupled_control: invalid value (77)
[  768.822866][T24986] bond1 (unregistering): Released all slaves
[  768.859971][T24995] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1
[  768.878131][T24995] ref_ctr decrement failed for inode: 0xbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881050a4380
[  768.899379][T24995] uprobe: syz.4.4818:24995 failed to unregister, leaking uprobe
[  768.899695][T25000] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1
[  768.916124][T25000] ref_ctr increment failed for inode: 0x732 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888183f6b600
[  768.936186][T24999] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1
[  768.955178][T24999] ref_ctr decrement failed for inode: 0x732 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888183f6b600
[  768.997843][T24999] uprobe: syz.0.4820:24999 failed to unregister, leaking uprobe
[  769.013704][T25003] lo speed is unknown, defaulting to 1000
[  769.037984][T25003] lo speed is unknown, defaulting to 1000
[  769.104717][T25008] netlink: 'syz.2.4822': attribute type 10 has an invalid length.
[  769.159615][T25004] netlink: 'syz.4.4821': attribute type 10 has an invalid length.
[  769.253427][T25004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  769.355731][T25007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4822'.
[  770.254072][T25023] loop4: detected capacity change from 0 to 512
[  770.332347][T25023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  770.419316][T25023] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  770.490701][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  770.773540][T25033] loop2: detected capacity change from 0 to 128
[  770.780264][T25033] ext4: Unknown parameter 'smackfshat'
[  770.808732][T25033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4829'.
[  770.827395][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  770.827411][   T28] audit: type=1400 audit(2000000445.916:3563): avc:  denied  { execute } for  pid=25031 comm="syz.2.4829" dev="hugetlbfs" ino=67975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  770.913359][   T28] audit: type=1400 audit(2000000445.916:3564): avc:  denied  { execute_no_trans } for  pid=25031 comm="syz.2.4829" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=67975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  771.171520][T25041] loop4: detected capacity change from 0 to 1024
[  771.215913][T25041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.233340][T25041] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.4831: Allocating blocks 497-513 which overlap fs metadata
[  771.256227][T25041] EXT4-fs (loop4): pa ffff888108288310: logic 2, phys. 113, len 25
[  771.264257][T25041] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1
[  771.305655][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.343608][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'.
[  771.372772][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'.
[  771.410030][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'.
[  771.422967][T25047] loop4: detected capacity change from 0 to 512
[  771.435648][T25047] EXT4-fs: Ignoring removed orlov option
[  771.442176][T25047] EXT4-fs: Ignoring removed mblk_io_submit option
[  771.467499][T25047] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.4833: corrupted in-inode xattr: e_value size too large
[  771.504885][T25047] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  771.513445][T25047] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4833: couldn't read orphan inode 15 (err -117)
[  771.522993][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  771.523068][    C1] EXT4-fs (loop4): initial error at time 2000000446: ext4_iget_extra_inode:5025: inode 15
[  771.523232][    C1] EXT4-fs (loop4): last error at time 2000000446: ext4_iget_extra_inode:5025: inode 15
[  771.564600][T25047] loop4: lost filesystem error report for type 5 error -117
[  771.598054][T25057] FAULT_INJECTION: forcing a failure.
[  771.598054][T25057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  771.608102][T25047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.620278][T25057] CPU: 1 UID: 0 PID: 25057 Comm: syz.2.4835 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  771.620313][T25057] Tainted: [W]=WARN
[  771.620321][T25057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  771.620333][T25057] Call Trace:
[  771.620340][T25057]  <TASK>
[  771.620349][T25057]  __dump_stack+0x1d/0x30
[  771.620384][T25057]  dump_stack_lvl+0x95/0xd0
[  771.620472][T25057]  dump_stack+0x15/0x1b
[  771.620494][T25057]  should_fail_ex+0x263/0x280
[  771.620518][T25057]  should_fail+0xb/0x20
[  771.620539][T25057]  should_fail_usercopy+0x1a/0x20
[  771.620562][T25057]  _copy_to_user+0x20/0xa0
[  771.620616][T25057]  raw_getsockopt+0x452/0x500
[  771.620679][T25057]  ? __pfx_raw_getsockopt+0x10/0x10
[  771.620710][T25057]  do_sock_getsockopt+0x1c4/0x210
[  771.620740][T25057]  __x64_sys_getsockopt+0x11d/0x1a0
[  771.620818][T25057]  x64_sys_call+0x2dcf/0x3020
[  771.620844][T25057]  do_syscall_64+0x12c/0x370
[  771.620867][T25057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.621027][T25057] RIP: 0033:0x7f5b1c02c799
[  771.621045][T25057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.621064][T25057] RSP: 002b:00007f5b1aa7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  771.621094][T25057] RAX: ffffffffffffffda RBX: 00007f5b1c2a5fa0 RCX: 00007f5b1c02c799
[  771.621109][T25057] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003
[  771.621205][T25057] RBP: 00007f5b1aa7f090 R08: 0000200000000040 R09: 0000000000000000
[  771.621222][T25057] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.621237][T25057] R13: 00007f5b1c2a6038 R14: 00007f5b1c2a5fa0 R15: 00007ffc2072c048
[  771.621257][T25057]  </TASK>
[  771.820221][T25063] lo speed is unknown, defaulting to 1000
[  771.836344][T25063] lo speed is unknown, defaulting to 1000
[  771.896253][T25065] loop2: detected capacity change from 0 to 128
[  771.903148][T25065] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  771.917987][T25065] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  771.974449][T25068] loop0: detected capacity change from 0 to 512
[  772.026867][T25068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  772.039563][T25068] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  772.108902][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.153715][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.233224][T25072] netlink: 'syz.1.4840': attribute type 2 has an invalid length.
[  772.247819][T25072] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4840'.
[  772.405649][T25076] loop1: detected capacity change from 0 to 128
[  773.534063][T25083] loop1: detected capacity change from 0 to 512
[  773.728448][T25083] EXT4-fs: Ignoring removed orlov option
[  774.509847][T25083] EXT4-fs: Ignoring removed mblk_io_submit option
[  775.374561][T25094] netlink: 'syz.8.4844': attribute type 21 has an invalid length.
[  775.382848][T25094] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4844'.
[  775.483956][T25094] netlink: 'syz.8.4844': attribute type 5 has an invalid length.
[  775.492093][T25094] netlink: 'syz.8.4844': attribute type 6 has an invalid length.
[  775.500230][T25094] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4844'.
[  775.561673][T25083] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4842: corrupted in-inode xattr: e_value size too large
[  775.723664][T25083] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  775.727557][T25083] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4842: couldn't read orphan inode 15 (err -117)
[  775.737183][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  775.737234][    C0] EXT4-fs (loop1): initial error at time 2000000450: ext4_iget_extra_inode:5025: inode 15
[  775.737383][    C0] EXT4-fs (loop1): last error at time 2000000450: ext4_iget_extra_inode:5025: inode 15
[  775.794483][T25083] loop1: lost filesystem error report for type 5 error -117
[  775.798615][T25083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  775.985374][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  776.910897][T25136] FAULT_INJECTION: forcing a failure.
[  776.910897][T25136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  777.105220][T25142] netlink: 'syz.8.4854': attribute type 21 has an invalid length.
[  777.115251][T25136] CPU: 0 UID: 0 PID: 25136 Comm: syz.4.4852 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  777.115284][T25136] Tainted: [W]=WARN
[  777.115291][T25136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  777.115303][T25136] Call Trace:
[  777.115311][T25136]  <TASK>
[  777.115320][T25136]  __dump_stack+0x1d/0x30
[  777.115353][T25136]  dump_stack_lvl+0x95/0xd0
[  777.115404][T25136]  dump_stack+0x15/0x1b
[  777.115424][T25136]  should_fail_ex+0x263/0x280
[  777.115453][T25136]  should_fail+0xb/0x20
[  777.115476][T25136]  should_fail_usercopy+0x1a/0x20
[  777.115554][T25136]  _copy_from_user+0x1c/0xb0
[  777.115579][T25136]  ___sys_sendmsg+0xc1/0x1e0
[  777.115707][T25136]  __x64_sys_sendmsg+0xd4/0x160
[  777.115743][T25136]  x64_sys_call+0x194c/0x3020
[  777.115768][T25136]  do_syscall_64+0x12c/0x370
[  777.115861][T25136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.115894][T25136] RIP: 0033:0x7fbb069cc799
[  777.115909][T25136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.115930][T25136] RSP: 002b:00007fbb0541f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  777.116025][T25136] RAX: ffffffffffffffda RBX: 00007fbb06c45fa0 RCX: 00007fbb069cc799
[  777.116041][T25136] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000003
[  777.116057][T25136] RBP: 00007fbb0541f090 R08: 0000000000000000 R09: 0000000000000000
[  777.116073][T25136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.116088][T25136] R13: 00007fbb06c46038 R14: 00007fbb06c45fa0 R15: 00007ffc9b09a1f8
[  777.116111][T25136]  </TASK>
[  778.022177][T25144] lo speed is unknown, defaulting to 1000
[  778.115186][T25144] lo speed is unknown, defaulting to 1000
[  778.221430][T25148] lo speed is unknown, defaulting to 1000
[  778.236097][T25141] netlink: 'syz.1.4853': attribute type 2 has an invalid length.
[  778.270566][T25154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4857'.
[  778.281012][T25148] lo speed is unknown, defaulting to 1000
[  778.288199][T25141] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4853'.
[  778.750471][T25149] loop1: detected capacity change from 0 to 128
[  778.773196][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4860'.
[  780.235775][T25180] loop1: detected capacity change from 0 to 256
[  780.868166][T25155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4856'.
[  780.882403][T25170] macvlan2: entered promiscuous mode
[  781.846941][T25180] FAT-fs (loop1): Directory bread(block 64) failed
[  781.853603][T25180] FAT-fs (loop1): Directory bread(block 65) failed
[  781.860300][T25180] FAT-fs (loop1): Directory bread(block 66) failed
[  781.867167][T25180] FAT-fs (loop1): Directory bread(block 67) failed
[  781.873738][T25180] FAT-fs (loop1): Directory bread(block 68) failed
[  781.888914][T25170] macvlan2: entered allmulticast mode
[  781.905837][T25170] veth0_virt_wifi: entered allmulticast mode
[  781.930708][T25180] FAT-fs (loop1): Directory bread(block 69) failed
[  781.937982][T25180] FAT-fs (loop1): Directory bread(block 70) failed
[  781.944644][T25180] FAT-fs (loop1): Directory bread(block 71) failed
[  781.951284][T25180] FAT-fs (loop1): Directory bread(block 72) failed
[  781.957909][T25180] FAT-fs (loop1): Directory bread(block 73) failed
[  782.036629][T25174] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  782.093369][   T28] audit: type=1400 audit(2000000457.191:3565): avc:  denied  { accept } for  pid=25184 comm="syz.2.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  782.796167][T25206] netlink: 'syz.2.4866': attribute type 21 has an invalid length.
[  782.805694][T25206] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4866'.
[  782.816807][T25206] netlink: 'syz.2.4866': attribute type 5 has an invalid length.
[  782.825570][T25206] netlink: 'syz.2.4866': attribute type 6 has an invalid length.
[  782.834298][T25206] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4866'.
[  783.252231][T25213] loop4: detected capacity change from 0 to 128
[  783.274535][T25213] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  783.290556][T25213] FAT-fs (loop4): Filesystem has been set read-only
[  783.307584][T25213] syz.4.4868: attempt to access beyond end of device
[  783.307584][T25213] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  783.333930][T25216] loop0: detected capacity change from 0 to 1024
[  783.350616][T25213] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  783.359035][T25216] EXT4-fs: inline encryption not supported
[  783.368907][T25216] EXT4-fs: Ignoring removed bh option
[  783.377634][T25213] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  783.415002][T25216] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 73
[  783.438410][T25213] syz.4.4868: attempt to access beyond end of device
[  783.438410][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.500538][T25213] syz.4.4868: attempt to access beyond end of device
[  783.500538][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.565270][T25213] syz.4.4868: attempt to access beyond end of device
[  783.565270][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.603262][T25219] netlink: 'syz.1.4871': attribute type 2 has an invalid length.
[  783.620520][T25213] syz.4.4868: attempt to access beyond end of device
[  783.620520][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.637975][T25219] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4871'.
[  783.688386][T25213] syz.4.4868: attempt to access beyond end of device
[  783.688386][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.708713][T25211] loop8: detected capacity change from 0 to 4096
[  783.750549][T25213] syz.4.4868: attempt to access beyond end of device
[  783.750549][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.800659][T25213] syz.4.4868: attempt to access beyond end of device
[  783.800659][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.817694][T25211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  783.833588][T25224] loop1: detected capacity change from 0 to 128
[  783.841108][T25213] syz.4.4868: attempt to access beyond end of device
[  783.841108][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  783.863183][   T28] audit: type=1400 audit(2000000458.951:3566): avc:  denied  { setattr } for  pid=25210 comm="syz.8.4869" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  783.921337][T25213] syz.4.4868: attempt to access beyond end of device
[  783.921337][T25213] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  784.378474][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.067336][T25237] lo speed is unknown, defaulting to 1000
[  785.077372][T25237] lo speed is unknown, defaulting to 1000
[  785.835831][T25250] loop2: detected capacity change from 0 to 128
[  786.107946][T25257] lo speed is unknown, defaulting to 1000
[  786.123601][T25257] lo speed is unknown, defaulting to 1000
[  786.361986][T25253] team0: Port device gtp0 added
[  786.367297][T25250] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  786.381439][T25261] netlink: 'syz.8.4882': attribute type 2 has an invalid length.
[  786.389545][T25250] FAT-fs (loop2): Filesystem has been set read-only
[  786.399033][T25261] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4882'.
[  786.408832][T25250] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  786.418748][T25250] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  786.573467][T25267] loop1: detected capacity change from 0 to 512
[  786.796476][T25267] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  786.848899][T25267] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  786.968288][T25261] loop8: detected capacity change from 0 to 128
[  787.153255][T25267] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  787.210492][T25267] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.4884: Failed to acquire dquot type 1
[  787.234175][T25267] loop1: lost filesystem error report for type 5 error -5
[  787.246118][T25267] EXT4-fs (loop1): 1 truncate cleaned up
[  787.253423][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  787.253446][    C1] EXT4-fs (loop1): last error at time 2000000462: ext4_acquire_dquot:7001
[  787.297439][T25267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  787.718308][T25290] loop8: detected capacity change from 0 to 1024
[  787.727337][T25290] EXT4-fs: Ignoring removed bh option
[  787.773790][T25290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  788.429004][T25223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  788.709283][T25294] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.4888: Allocating blocks 497-513 which overlap fs metadata
[  788.724362][T25294] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.4888: Allocating blocks 497-513 which overlap fs metadata
[  789.135130][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  789.530214][T25289] EXT4-fs (loop8): pa ffff8881082884d0: logic 48, phys. 193, len 20
[  789.538683][T25289] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1
[  789.652728][T25300] loop0: detected capacity change from 0 to 512
[  789.679533][T25300] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4889: invalid indirect mapped block 256 (level 2)
[  789.758411][T25300] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  789.758839][T25300] EXT4-fs (loop0): 2 truncates cleaned up
[  789.774037][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  789.774059][    C0] EXT4-fs (loop0): initial error at time 2000000464: ext4_free_branches:1023: inode 11
[  789.774104][    C0] EXT4-fs (loop0): last error at time 2000000464: ext4_free_branches:1023: inode 11
[  790.321992][T25306] lo speed is unknown, defaulting to 1000
[  790.331733][T25306] lo speed is unknown, defaulting to 1000
[  790.523479][T25300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  790.910758][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.925173][T25316] netlink: 'syz.4.4896': attribute type 21 has an invalid length.
[  790.981596][   T50] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:3: bg 0: block 5: invalid block bitmap
[  790.998346][   T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  791.019043][   T50] EXT4-fs (loop0): This should not happen!! Data will be lost
[  791.019043][   T50] 
[  791.030462][   T50] EXT4-fs (loop0): Total free blocks count 0
[  791.044996][   T50] EXT4-fs (loop0): Free/Dirty block details
[  791.058157][   T50] EXT4-fs (loop0): free_blocks=0
[  791.063240][   T50] EXT4-fs (loop0): dirty_blocks=8
[  791.087980][   T50] EXT4-fs (loop0): Block reservation details
[  791.094487][   T50] EXT4-fs (loop0): i_reserved_data_blocks=8
[  791.108256][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.130745][T25328] vlan2: entered allmulticast mode
[  791.136104][T25328] bond0: entered allmulticast mode
[  791.185659][T25334] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4892'.
[  791.251377][T25328] loop8: detected capacity change from 0 to 256
[  791.258188][T25334] bond0 (unregistering): Released all slaves
[  791.295691][T25338] loop4: detected capacity change from 0 to 128
[  791.311604][T25338] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  791.322766][T25332] loop0: detected capacity change from 0 to 512
[  791.329380][T25338] FAT-fs (loop4): Filesystem has been set read-only
[  791.336166][T25338] bio_check_eod: 11266 callbacks suppressed
[  791.336182][T25338] syz.4.4899: attempt to access beyond end of device
[  791.336182][T25338] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  791.376155][T25338] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  791.389367][T25338] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  791.400599][T25338] syz.4.4899: attempt to access beyond end of device
[  791.400599][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.416199][T25332] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  791.436802][T25338] syz.4.4899: attempt to access beyond end of device
[  791.436802][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.439577][T25332] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  791.450991][T25338] syz.4.4899: attempt to access beyond end of device
[  791.450991][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.474919][T25338] syz.4.4899: attempt to access beyond end of device
[  791.474919][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.488926][T25338] syz.4.4899: attempt to access beyond end of device
[  791.488926][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.502904][T25338] syz.4.4899: attempt to access beyond end of device
[  791.502904][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.518190][T25338] syz.4.4899: attempt to access beyond end of device
[  791.518190][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.533985][T25338] syz.4.4899: attempt to access beyond end of device
[  791.533985][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.548046][T25338] syz.4.4899: attempt to access beyond end of device
[  791.548046][T25338] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  791.575639][T25332] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.4897: Failed to acquire dquot type 1
[  791.623587][T25357] loop1: detected capacity change from 0 to 512
[  791.632631][T25332] loop0: lost filesystem error report for type 5 error -117
[  791.633241][T25332] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.4897: corrupted inode contents
[  791.640784][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  791.640807][    C0] EXT4-fs (loop0): initial error at time 2000000466: ext4_acquire_dquot:7001
[  791.640834][    C0] EXT4-fs (loop0): last error at time 2000000466: ext4_acquire_dquot:7001
[  791.672821][T25354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  791.686391][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.686648][T25332] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.4897: mark_inode_dirty error
[  791.686676][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.686899][T25332] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.4897: corrupted inode contents
[  791.686926][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.687170][T25332] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.4897: mark_inode_dirty error
[  791.687197][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.687399][T25332] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.4897: corrupted inode contents
[  791.687437][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.687562][T25332] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  791.687583][T25332] loop0: lost filesystem error report for type 5 error -117
[  791.688879][T25332] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.4897: corrupted inode contents
[  791.688906][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.689084][T25332] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.4897: mark_inode_dirty error
[  791.689112][T25332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  791.689271][T25332] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  791.689289][T25332] loop0: lost filesystem error report for type 5 error -117
[  791.689663][T25332] EXT4-fs (loop0): 1 truncate cleaned up
[  791.690116][T25332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  791.690249][T25332] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  791.830881][T25357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  791.858531][T25361] loop2: detected capacity change from 0 to 128
[  791.917807][T25357] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  791.942400][T25354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  791.966142][T25361] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  791.974090][T25361] FAT-fs (loop2): Filesystem has been set read-only
[  792.003367][T25361] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  792.015418][T25332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.031438][T25361] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  792.091201][T25365] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.4905: iget: bad i_size value: 2533274857506816
[  792.141082][T25364] loop2: detected capacity change from 0 to 512
[  792.175343][T25364] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4908: invalid indirect mapped block 256 (level 2)
[  792.202833][T25364] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  792.203183][T25364] EXT4-fs (loop2): 2 truncates cleaned up
[  792.212791][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  792.212814][    C0] EXT4-fs (loop2): initial error at time 2000000467: ext4_free_branches:1023: inode 11
[  792.212887][    C0] EXT4-fs (loop2): last error at time 2000000467: ext4_free_branches:1023: inode 11
[  792.262524][T25364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  792.357341][T25382] lo speed is unknown, defaulting to 1000
[  792.363874][T25382] lo speed is unknown, defaulting to 1000
[  792.424038][ T2127] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap
[  792.437852][ T2127] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  792.450639][ T2127] EXT4-fs (loop2): This should not happen!! Data will be lost
[  792.450639][ T2127] 
[  792.461048][ T2127] EXT4-fs (loop2): Total free blocks count 0
[  792.467147][ T2127] EXT4-fs (loop2): Free/Dirty block details
[  792.487737][ T2127] EXT4-fs (loop2): free_blocks=0
[  792.492743][ T2127] EXT4-fs (loop2): dirty_blocks=8
[  792.507554][ T2127] EXT4-fs (loop2): Block reservation details
[  792.513754][ T2127] EXT4-fs (loop2): i_reserved_data_blocks=8
[  792.525016][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.548611][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.635336][T25382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4911'.
[  792.902008][T25402] loop2: detected capacity change from 0 to 256
[  792.910515][T25402] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  792.936485][T25403] loop0: detected capacity change from 0 to 256
[  792.973222][T25402] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  793.009936][T25403] FAT-fs (loop0): Directory bread(block 64) failed
[  793.025622][T25403] FAT-fs (loop0): Directory bread(block 65) failed
[  793.091425][T25399] loop1: detected capacity change from 0 to 512
[  793.123763][T25403] FAT-fs (loop0): Directory bread(block 66) failed
[  793.228244][T25403] FAT-fs (loop0): Directory bread(block 67) failed
[  793.256990][T25399] EXT4-fs: Ignoring removed orlov option
[  793.299303][T25403] FAT-fs (loop0): Directory bread(block 68) failed
[  793.305868][T25403] FAT-fs (loop0): Directory bread(block 69) failed
[  793.312465][T25403] FAT-fs (loop0): Directory bread(block 70) failed
[  793.319079][T25403] FAT-fs (loop0): Directory bread(block 71) failed
[  793.325892][T25403] FAT-fs (loop0): Directory bread(block 72) failed
[  793.332478][T25403] FAT-fs (loop0): Directory bread(block 73) failed
[  793.342360][T25399] EXT4-fs: Ignoring removed mblk_io_submit option
[  793.371878][T25399] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4917: corrupted in-inode xattr: e_value size too large
[  793.437372][T25399] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  793.442770][T25399] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4917: couldn't read orphan inode 15 (err -117)
[  793.452378][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  793.452397][    C1] EXT4-fs (loop1): initial error at time 2000000468: ext4_iget_extra_inode:5025: inode 15
[  793.452430][    C1] EXT4-fs (loop1): last error at time 2000000468: ext4_iget_extra_inode:5025: inode 15
[  793.508739][T25399] loop1: lost filesystem error report for type 5 error -117
[  793.514680][T25399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  793.538562][T25397] bond0: (slave bridge_slave_1): Releasing backup interface
[  793.641681][T25397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  793.685333][T25411] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  793.695917][T25411] FAT-fs (loop2): Filesystem has been set read-only
[  793.717648][T25411] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  793.725640][T25411] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  793.734050][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.836185][T25431] ext3: Unknown parameter 'nouser_xattr'
[  793.898921][T25433] EXT4-fs: Ignoring removed orlov option
[  793.907693][T25435] lo speed is unknown, defaulting to 1000
[  793.913663][T25433] EXT4-fs: Ignoring removed nobh option
[  793.922019][T25435] lo speed is unknown, defaulting to 1000
[  793.931679][T25433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  794.033452][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  794.110405][T25445] EXT4-fs: Ignoring removed bh option
[  794.237304][T25435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4928'.
[  794.258435][T25445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  794.555062][T25453] lo speed is unknown, defaulting to 1000
[  794.576794][T25453] lo speed is unknown, defaulting to 1000
[  795.195645][T25456] set_capacity_and_notify: 4 callbacks suppressed
[  795.195674][T25456] loop4: detected capacity change from 0 to 1024
[  795.293424][T25456] EXT4-fs: Ignoring removed bh option
[  795.587628][T25456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  795.623208][T25469] loop2: detected capacity change from 0 to 1024
[  796.235185][T25469] EXT4-fs: Ignoring removed orlov option
[  796.258548][T25469] EXT4-fs: Ignoring removed nobh option
[  796.648957][T25469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  796.775871][T25471] lo speed is unknown, defaulting to 1000
[  796.783879][T25471] lo speed is unknown, defaulting to 1000
[  797.417389][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.429643][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.771138][T25484] loop2: detected capacity change from 0 to 128
[  798.328808][T25489] netlink: 'syz.1.4937': attribute type 21 has an invalid length.
[  798.339408][T25489] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4937'.
[  798.354866][T25489] netlink: 'syz.1.4937': attribute type 5 has an invalid length.
[  798.363305][T25489] netlink: 'syz.1.4937': attribute type 6 has an invalid length.
[  798.372836][T25489] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4937'.
[  798.454690][T25488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4939'.
[  798.473993][T25488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4939'.
[  798.820601][T25484] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  799.115830][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4940'.
[  799.144948][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.168475][T25484] FAT-fs (loop2): Filesystem has been set read-only
[  799.182446][T25494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4940'.
[  799.204352][T25484] bio_check_eod: 14645 callbacks suppressed
[  799.204371][T25484] syz.2.4938: attempt to access beyond end of device
[  799.204371][T25484] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[  799.230316][T25498] FAULT_INJECTION: forcing a failure.
[  799.230316][T25498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  799.250379][T25494] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[  799.268298][T25498] CPU: 0 UID: 0 PID: 25498 Comm: syz.8.4941 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  799.268361][T25498] Tainted: [W]=WARN
[  799.268370][T25498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  799.268384][T25498] Call Trace:
[  799.268391][T25498]  <TASK>
[  799.268461][T25498]  __dump_stack+0x1d/0x30
[  799.268495][T25498]  dump_stack_lvl+0x95/0xd0
[  799.268523][T25498]  dump_stack+0x15/0x1b
[  799.268544][T25498]  should_fail_ex+0x263/0x280
[  799.268570][T25498]  should_fail+0xb/0x20
[  799.268601][T25498]  should_fail_usercopy+0x1a/0x20
[  799.268629][T25498]  _copy_to_user+0x20/0xa0
[  799.268686][T25498]  simple_read_from_buffer+0xb5/0x130
[  799.268709][T25498]  proc_fail_nth_read+0x10e/0x150
[  799.268742][T25498]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  799.268768][T25498]  vfs_read+0x1ab/0x7f0
[  799.268841][T25498]  ? __rcu_read_unlock+0x4e/0x70
[  799.268866][T25498]  ? __fget_files+0x184/0x1c0
[  799.268904][T25498]  ? mutex_lock+0x57/0x90
[  799.269010][T25498]  ksys_read+0xdc/0x1a0
[  799.269044][T25498]  __x64_sys_read+0x40/0x50
[  799.269122][T25498]  x64_sys_call+0x2886/0x3020
[  799.269241][T25498]  do_syscall_64+0x12c/0x370
[  799.269261][T25498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  799.269333][T25498] RIP: 0033:0x7fbb91d9cfce
[  799.269353][T25498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  799.269376][T25498] RSP: 002b:00007fbb90808fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  799.269398][T25498] RAX: ffffffffffffffda RBX: 00007fbb908096c0 RCX: 00007fbb91d9cfce
[  799.269412][T25498] RDX: 000000000000000f RSI: 00007fbb908090a0 RDI: 0000000000000007
[  799.269424][T25498] RBP: 00007fbb90809090 R08: 0000000000000000 R09: 0000000000000000
[  799.269440][T25498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  799.269461][T25498] R13: 00007fbb92056128 R14: 00007fbb92056090 R15: 00007ffd53856808
[  799.269479][T25498]  </TASK>
[  799.272062][T25484] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  799.507344][T25484] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  799.519366][T25484] syz.2.4938: attempt to access beyond end of device
[  799.519366][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.533997][T25484] syz.2.4938: attempt to access beyond end of device
[  799.533997][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.548249][T25484] syz.2.4938: attempt to access beyond end of device
[  799.548249][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.561873][T25504] lo speed is unknown, defaulting to 1000
[  799.563107][T25484] syz.2.4938: attempt to access beyond end of device
[  799.563107][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.582157][T25484] syz.2.4938: attempt to access beyond end of device
[  799.582157][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.597694][T25484] syz.2.4938: attempt to access beyond end of device
[  799.597694][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.612396][T25484] syz.2.4938: attempt to access beyond end of device
[  799.612396][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.627105][T25484] syz.2.4938: attempt to access beyond end of device
[  799.627105][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.641641][T25484] syz.2.4938: attempt to access beyond end of device
[  799.641641][T25484] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[  799.666120][T25504] lo speed is unknown, defaulting to 1000
[  799.678484][T25503] loop8: detected capacity change from 0 to 512
[  799.703844][T25503] EXT4-fs: Ignoring removed orlov option
[  799.735185][T25503] EXT4-fs: Ignoring removed mblk_io_submit option
[  799.848230][T25503] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.4944: corrupted in-inode xattr: e_value size too large
[  799.874701][T25503] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  799.877345][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  799.892393][T25504] netlink: 'syz.1.4943': attribute type 10 has an invalid length.
[  799.893732][    C0] EXT4-fs (loop8): initial error at time 2000000474: ext4_iget_extra_inode:5025: inode 15
[  799.912125][    C0] EXT4-fs (loop8): last error at time 2000000474: ext4_iget_extra_inode:5025: inode 15
[  799.924389][T25503] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4944: couldn't read orphan inode 15 (err -117)
[  800.525540][T25517] netlink: 'syz.4.4945': attribute type 21 has an invalid length.
[  800.535117][T25517] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4945'.
[  800.572490][T25503] loop8: lost filesystem error report for type 5 error -117
[  800.596012][T25503] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  800.889429][T25504] team0 (unregistering): Port device gtp0 removed
[  800.919426][T25507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4943'.
[  800.931155][T25527] netlink: 'syz.0.4948': attribute type 1 has an invalid length.
[  800.948199][T25517] netlink: 'syz.4.4945': attribute type 5 has an invalid length.
[  800.956267][T25517] netlink: 'syz.4.4945': attribute type 6 has an invalid length.
[  800.964102][T25517] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4945'.
[  800.984411][   T28] audit: type=1326 audit(2000000476.077:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.131876][T25503] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 12: comm syz.8.4944: lblock 3 mapped to illegal pblock 12 (length 1)
[  801.269620][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.280689][T25534] veth0_vlan: entered allmulticast mode
[  801.310652][T25534] veth0_vlan: left promiscuous mode
[  801.330332][T25534] veth0_vlan: entered promiscuous mode
[  801.700629][   T28] audit: type=1326 audit(2000000476.077:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.724754][   T28] audit: type=1326 audit(2000000476.077:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.750006][   T28] audit: type=1326 audit(2000000476.077:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.773777][   T28] audit: type=1326 audit(2000000476.077:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.801438][   T28] audit: type=1326 audit(2000000476.077:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.848381][   T28] audit: type=1326 audit(2000000476.077:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.872875][   T28] audit: type=1326 audit(2000000476.077:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.898103][   T28] audit: type=1326 audit(2000000476.087:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.923120][   T28] audit: type=1326 audit(2000000476.087:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25526 comm="syz.0.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd171bdc799 code=0x7ffc0000
[  801.995397][T25549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4948'.
[  802.266069][T25551] lo speed is unknown, defaulting to 1000
[  802.281652][T25551] lo speed is unknown, defaulting to 1000
[  802.427122][T25533] delete_channel: no stack
[  803.058782][T25560] lo speed is unknown, defaulting to 1000
[  803.074394][T25560] lo speed is unknown, defaulting to 1000
[  803.545681][T25566] loop0: detected capacity change from 0 to 256
[  803.731548][T25571] lo speed is unknown, defaulting to 1000
[  803.757794][T25571] lo speed is unknown, defaulting to 1000
[  803.871249][T25566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'.
[  804.043622][T25587] loop0: detected capacity change from 0 to 128
[  804.173922][T25589] loop1: detected capacity change from 0 to 512
[  804.201310][T25595] loop2: detected capacity change from 0 to 512
[  804.205223][T25589] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4963: invalid indirect mapped block 256 (level 2)
[  804.221257][T25595] EXT4-fs: Ignoring removed orlov option
[  804.233154][T25595] EXT4-fs: Ignoring removed mblk_io_submit option
[  804.240076][T25589] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  804.241894][T25589] EXT4-fs (loop1): 2 truncates cleaned up
[  804.251181][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  804.251203][    C1] EXT4-fs (loop1): initial error at time 2000000479: ext4_free_branches:1023: inode 11
[  804.251260][    C1] EXT4-fs (loop1): last error at time 2000000479: ext4_free_branches:1023: inode 11
[  804.252800][T25598] netlink: 'syz.0.4965': attribute type 2 has an invalid length.
[  804.307898][T25589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  804.321386][T25595] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.4966: corrupted in-inode xattr: e_value size too large
[  804.375144][T25595] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  804.377953][T25595] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4966: couldn't read orphan inode 15 (err -117)
[  804.387239][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  804.387260][    C0] EXT4-fs (loop2): initial error at time 2000000479: ext4_iget_extra_inode:5025: inode 15
[  804.387296][    C0] EXT4-fs (loop2): last error at time 2000000479: ext4_iget_extra_inode:5025: inode 15
[  804.431726][T25595] loop2: lost filesystem error report for type 5 error -117
[  804.432350][T25595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  804.436781][T25593] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4965'.
[  804.529908][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.542400][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.595729][T25598] loop0: detected capacity change from 0 to 128
[  804.617174][T25605] loop2: detected capacity change from 0 to 256
[  804.804899][T25610] loop0: detected capacity change from 0 to 256
[  805.164998][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'.
[  805.172200][T25616] loop1: detected capacity change from 0 to 512
[  805.186175][T25610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'.
[  805.350503][T25631] loop4: detected capacity change from 0 to 512
[  805.374908][T25629] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4976'.
[  805.399155][T25631] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4977: invalid indirect mapped block 256 (level 2)
[  805.485926][T25631] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  805.486326][T25631] EXT4-fs (loop4): 2 truncates cleaned up
[  805.495584][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  805.495608][    C0] EXT4-fs (loop4): initial error at time 2000000480: ext4_free_branches:1023: inode 11
[  805.495643][    C0] EXT4-fs (loop4): last error at time 2000000480: ext4_free_branches:1023: inode 11
[  805.557143][T25643] netlink: 'syz.2.4978': attribute type 1 has an invalid length.
[  805.582652][T25631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  805.637879][T25616] EXT4-fs (loop1): 1 orphan inode deleted
[  805.661046][T25647] loop0: detected capacity change from 0 to 512
[  805.679894][T25647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  805.761303][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.775709][T25647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61778 sclass=netlink_route_socket pid=25647 comm=syz.0.4979
[  805.791950][T25616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  805.884476][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.934744][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.995918][T25666] syzkaller0: entered promiscuous mode
[  806.001562][T25666] syzkaller0: entered allmulticast mode
[  806.148888][T25670] lo speed is unknown, defaulting to 1000
[  806.273282][T25670] lo speed is unknown, defaulting to 1000
[  806.281106][T25674] netlink: 'syz.0.4985': attribute type 10 has an invalid length.
[  806.349122][T25674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4985'.
[  806.502292][T25673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4986'.
[  806.649182][T25691] lo speed is unknown, defaulting to 1000
[  806.656082][T25691] lo speed is unknown, defaulting to 1000
[  806.866052][T25696] netlink: 'syz.0.4990': attribute type 21 has an invalid length.
[  807.018907][T25715] FAULT_INJECTION: forcing a failure.
[  807.018907][T25715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  807.032384][   T28] kauditd_printk_skb: 158 callbacks suppressed
[  807.032402][   T28] audit: type=1400 audit(2000000482.118:3735): avc:  denied  { mount } for  pid=25714 comm="syz.2.4996" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  807.089417][T25707] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4994: invalid indirect mapped block 256 (level 2)
[  807.103671][T25707] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  807.104266][T25707] EXT4-fs (loop8): 2 truncates cleaned up
[  807.115623][T25715] CPU: 1 UID: 0 PID: 25715 Comm: syz.2.4996 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  807.115658][T25715] Tainted: [W]=WARN
[  807.115721][T25715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  807.115734][T25715] Call Trace:
[  807.115742][T25715]  <TASK>
[  807.115752][T25715]  __dump_stack+0x1d/0x30
[  807.115779][T25715]  dump_stack_lvl+0x95/0xd0
[  807.115803][T25715]  dump_stack+0x15/0x1b
[  807.115825][T25715]  should_fail_ex+0x263/0x280
[  807.115895][T25715]  should_fail+0xb/0x20
[  807.115915][T25715]  should_fail_usercopy+0x1a/0x20
[  807.115943][T25715]  _copy_from_user+0x1c/0xb0
[  807.116027][T25715]  memdup_user+0x5e/0xd0
[  807.116046][T25715]  strndup_user+0x68/0xb0
[  807.116066][T25715]  __se_sys_fsconfig+0x402/0x7d0
[  807.116097][T25715]  __x64_sys_fsconfig+0x67/0x80
[  807.116155][T25715]  x64_sys_call+0xd6e/0x3020
[  807.116235][T25715]  do_syscall_64+0x12c/0x370
[  807.116259][T25715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.116327][T25715] RIP: 0033:0x7f5b1c02c799
[  807.116344][T25715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.116363][T25715] RSP: 002b:00007f5b1aa7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  807.116441][T25715] RAX: ffffffffffffffda RBX: 00007f5b1c2a5fa0 RCX: 00007f5b1c02c799
[  807.116457][T25715] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  807.116483][T25715] RBP: 00007f5b1aa7f090 R08: 0000000000000000 R09: 0000000000000000
[  807.116497][T25715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  807.116510][T25715] R13: 00007f5b1c2a6038 R14: 00007f5b1c2a5fa0 R15: 00007ffc2072c048
[  807.116530][T25715]  </TASK>
[  807.119257][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  807.119279][    C0] EXT4-fs (loop8): initial error at time 2000000482: ext4_free_branches:1023: inode 11
[  807.119312][    C0] EXT4-fs (loop8): last error at time 2000000482: ext4_free_branches:1023: inode 11
[  807.323961][T25707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.365659][T25723] netlink: 'syz.2.4999': attribute type 4 has an invalid length.
[  807.401939][T25691] netlink: 'syz.1.4988': attribute type 10 has an invalid length.
[  807.440539][T25691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4988'.
[  807.484729][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.493373][T25720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'.
[  807.555464][T25733] netlink: 'syz.8.5002': attribute type 5 has an invalid length.
[  807.577428][T25728] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5000: invalid indirect mapped block 256 (level 2)
[  807.608261][T25728] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  807.608588][T25728] EXT4-fs (loop4): 2 truncates cleaned up
[  807.618326][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  807.618352][    C1] EXT4-fs (loop4): initial error at time 2000000482: ext4_free_branches:1023: inode 11
[  807.618380][    C1] EXT4-fs (loop4): last error at time 2000000482: ext4_free_branches:1023: inode 11
[  807.651404][T25728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.731906][T25739] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  807.789171][T25739] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  807.806123][T25739] EXT4-fs (loop0): invalid journal inode
[  807.812215][T25739] EXT4-fs (loop0): can't get journal size
[  807.813171][T25744] EXT4-fs: Ignoring removed bh option
[  807.828184][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.829458][T25739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  807.855429][T25739] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5003'.
[  807.919806][   T28] audit: type=1400 audit(2000000483.018:3736): avc:  denied  { shutdown } for  pid=25741 comm="syz.1.5005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  807.944260][T25744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  808.067962][   T28] audit: type=1400 audit(2000000483.158:3737): avc:  denied  { ioctl } for  pid=25743 comm="syz.8.5004" path="/74/file3/cpu.stat" dev="loop8" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  808.117144][T25749] netlink: 'syz.4.5006': attribute type 21 has an invalid length.
[  808.140939][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.446552][T25756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  808.578055][T25760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  808.616873][T25758] pimreg: entered allmulticast mode
[  808.633102][T25758] pimreg: left allmulticast mode
[  808.776136][T25756] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.5008: Allocating blocks 497-513 which overlap fs metadata
[  808.790591][T25756] EXT4-fs (loop4): pa ffff8881082884d0: logic 256, phys. 385, len 8
[  808.798635][T25756] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1
[  808.820751][T25760] syzkaller0: tun_chr_ioctl cmd 21731
[  808.858510][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.894502][T25756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5008'.
[  808.929306][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  809.566520][T25781] set_capacity_and_notify: 8 callbacks suppressed
[  809.566540][T25781] loop0: detected capacity change from 0 to 1024
[  809.660853][T25792] FAULT_INJECTION: forcing a failure.
[  809.660853][T25792] name failslab, interval 1, probability 0, space 0, times 0
[  809.689786][T25795] loop1: detected capacity change from 0 to 1024
[  809.708528][T25792] CPU: 0 UID: 0 PID: 25792 Comm: syz.2.5018 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  809.708621][T25792] Tainted: [W]=WARN
[  809.708630][T25792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  809.708645][T25792] Call Trace:
[  809.708654][T25792]  <TASK>
[  809.708663][T25792]  __dump_stack+0x1d/0x30
[  809.708697][T25792]  dump_stack_lvl+0x95/0xd0
[  809.708795][T25792]  dump_stack+0x15/0x1b
[  809.708817][T25792]  should_fail_ex+0x263/0x280
[  809.708839][T25792]  ? alloc_pipe_info+0xad/0x340
[  809.708858][T25792]  should_failslab+0x8c/0xb0
[  809.708932][T25792]  __kmalloc_cache_noprof+0x5f/0x410
[  809.709009][T25792]  alloc_pipe_info+0xad/0x340
[  809.709188][T25792]  splice_direct_to_actor+0x591/0x670
[  809.709214][T25792]  ? _parse_integer+0x27/0x40
[  809.709238][T25792]  ? kstrtoull+0x111/0x140
[  809.709259][T25792]  ? __pfx_direct_splice_actor+0x10/0x10
[  809.709333][T25792]  ? kstrtouint+0x76/0xc0
[  809.709353][T25792]  ? avc_policy_seqno+0x15/0x30
[  809.709381][T25792]  do_splice_direct+0x119/0x1a0
[  809.709407][T25792]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  809.709494][T25792]  vfs_copy_file_range+0x9a0/0xf30
[  809.709523][T25792]  __se_sys_copy_file_range+0x269/0x3b0
[  809.709603][T25792]  __x64_sys_copy_file_range+0x78/0x90
[  809.709678][T25792]  x64_sys_call+0x197b/0x3020
[  809.709792][T25792]  do_syscall_64+0x12c/0x370
[  809.709814][T25792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.709849][T25792] RIP: 0033:0x7f5b1c02c799
[  809.709870][T25792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  809.709889][T25792] RSP: 002b:00007f5b1aa7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[  809.709910][T25792] RAX: ffffffffffffffda RBX: 00007f5b1c2a5fa0 RCX: 00007f5b1c02c799
[  809.710001][T25792] RDX: 0000000000000003 RSI: 00002000000008c0 RDI: 0000000000000004
[  809.710014][T25792] RBP: 00007f5b1aa7f090 R08: 0000000000000008 R09: 0000000000000000
[  809.710026][T25792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  809.710100][T25792] R13: 00007f5b1c2a6038 R14: 00007f5b1c2a5fa0 R15: 00007ffc2072c048
[  809.710161][T25792]  </TASK>
[  809.949729][T25800] netlink: 'syz.8.5021': attribute type 10 has an invalid length.
[  809.957987][T25795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  809.975605][T25803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5022'.
[  809.988064][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.007541][T25801] loop0: detected capacity change from 0 to 256
[  810.017997][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.028686][T25800] team0 (unregistering): Port device gtp0 removed
[  810.076436][T25804] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5021'.
[  810.139576][T25810] FAULT_INJECTION: forcing a failure.
[  810.139576][T25810] name failslab, interval 1, probability 0, space 0, times 0
[  810.156544][T25810] CPU: 0 UID: 0 PID: 25810 Comm: syz.4.5025 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  810.156611][T25810] Tainted: [W]=WARN
[  810.156618][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  810.156630][T25810] Call Trace:
[  810.156637][T25810]  <TASK>
[  810.156646][T25810]  __dump_stack+0x1d/0x30
[  810.156678][T25810]  dump_stack_lvl+0x95/0xd0
[  810.156769][T25810]  dump_stack+0x15/0x1b
[  810.156794][T25810]  should_fail_ex+0x263/0x280
[  810.156823][T25810]  should_failslab+0x8c/0xb0
[  810.156909][T25810]  __kmalloc_noprof+0xb8/0x4e0
[  810.156930][T25810]  ? alloc_pipe_info+0x1c8/0x340
[  810.157004][T25810]  alloc_pipe_info+0x1c8/0x340
[  810.157068][T25810]  splice_direct_to_actor+0x591/0x670
[  810.157097][T25810]  ? __pfx_direct_splice_actor+0x10/0x10
[  810.157151][T25810]  ? selinux_file_permission+0x633/0x690
[  810.157175][T25810]  do_splice_direct+0x119/0x1a0
[  810.157197][T25810]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  810.157235][T25810]  do_sendfile+0x382/0x650
[  810.157264][T25810]  __x64_sys_sendfile64+0x105/0x150
[  810.157286][T25810]  x64_sys_call+0x2dc4/0x3020
[  810.157375][T25810]  do_syscall_64+0x12c/0x370
[  810.157420][T25810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.157481][T25810] RIP: 0033:0x7fbb069cc799
[  810.157497][T25810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.157596][T25810] RSP: 002b:00007fbb0541f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  810.157618][T25810] RAX: ffffffffffffffda RBX: 00007fbb06c45fa0 RCX: 00007fbb069cc799
[  810.157632][T25810] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[  810.157644][T25810] RBP: 00007fbb0541f090 R08: 0000000000000000 R09: 0000000000000000
[  810.157656][T25810] R10: 0000000024002de8 R11: 0000000000000246 R12: 0000000000000001
[  810.157708][T25810] R13: 00007fbb06c46038 R14: 00007fbb06c45fa0 R15: 00007ffc9b09a1f8
[  810.157731][T25810]  </TASK>
[  810.414413][T25801] FAT-fs (loop0): Directory bread(block 64) failed
[  810.421488][T25801] FAT-fs (loop0): Directory bread(block 65) failed
[  811.340025][T25801] FAT-fs (loop0): Directory bread(block 66) failed
[  811.349952][T25818] loop4: detected capacity change from 0 to 256
[  811.688011][T25816] lo speed is unknown, defaulting to 1000
[  811.750601][T25816] lo speed is unknown, defaulting to 1000
[  811.783732][T25820] lo speed is unknown, defaulting to 1000
[  811.825262][T25820] lo speed is unknown, defaulting to 1000
[  811.961781][T25801] FAT-fs (loop0): Directory bread(block 67) failed
[  811.969515][T25801] FAT-fs (loop0): Directory bread(block 68) failed
[  812.159076][T25801] FAT-fs (loop0): Directory bread(block 69) failed
[  812.174838][T25801] FAT-fs (loop0): Directory bread(block 70) failed
[  812.182568][T25801] FAT-fs (loop0): Directory bread(block 71) failed
[  812.345523][T25828] loop2: detected capacity change from 0 to 512
[  812.374510][T25828] EXT4-fs: Ignoring removed i_version option
[  812.380306][T25801] FAT-fs (loop0): Directory bread(block 72) failed
[  812.387662][T25801] FAT-fs (loop0): Directory bread(block 73) failed
[  812.398355][T25828] EXT4-fs: Ignoring removed bh option
[  812.472580][T25828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.504584][T25828] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  812.547592][T25801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  812.687825][T25838] loop8: detected capacity change from 0 to 256
[  812.756375][T25838] FAT-fs (loop8): Directory bread(block 64) failed
[  812.763160][T25838] FAT-fs (loop8): Directory bread(block 65) failed
[  812.769822][T25838] FAT-fs (loop8): Directory bread(block 66) failed
[  812.773066][T25843] loop1: detected capacity change from 0 to 1024
[  812.776651][T25838] FAT-fs (loop8): Directory bread(block 67) failed
[  812.789502][T25838] FAT-fs (loop8): Directory bread(block 68) failed
[  812.796075][T25838] FAT-fs (loop8): Directory bread(block 69) failed
[  812.802650][T25838] FAT-fs (loop8): Directory bread(block 70) failed
[  812.809264][T25838] FAT-fs (loop8): Directory bread(block 71) failed
[  812.816134][T25838] FAT-fs (loop8): Directory bread(block 72) failed
[  812.822674][T25838] FAT-fs (loop8): Directory bread(block 73) failed
[  812.904502][T25843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  813.170964][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.204283][T25848] loop4: detected capacity change from 0 to 1024
[  813.237008][T25848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  813.411132][T23638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.453597][T25855] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5036'.
[  813.542597][T25857] loop1: detected capacity change from 0 to 1024
[  813.556332][T25855] loop8: detected capacity change from 0 to 1024
[  813.563220][T25857] EXT4-fs: Ignoring removed mblk_io_submit option
[  813.601676][T25857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  813.622234][T25857] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  813.636729][T25855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  813.662024][T25857] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.5038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  813.692249][T25857] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  813.692450][T25857] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5038: couldn't read orphan inode 11 (err -117)
[  813.713644][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  813.713674][    C1] EXT4-fs (loop1): initial error at time 2000000488: ext4_ext_check_inode:521: inode 11
[  813.713726][    C1] EXT4-fs (loop1): last error at time 2000000488: ext4_ext_check_inode:521: inode 11
[  813.881093][T25857] loop1: lost filesystem error report for type 5 error -117
[  813.881622][T25857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  814.089781][T22400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.197347][T25866] FAT-fs (loop4): Directory bread(block 64) failed
[  814.250486][T25866] FAT-fs (loop4): Directory bread(block 65) failed
[  814.285612][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.287970][T25866] FAT-fs (loop4): Directory bread(block 66) failed
[  814.301260][T25866] FAT-fs (loop4): Directory bread(block 67) failed
[  814.308271][T25866] FAT-fs (loop4): Directory bread(block 68) failed
[  814.315062][T25866] FAT-fs (loop4): Directory bread(block 69) failed
[  814.321603][T25866] FAT-fs (loop4): Directory bread(block 70) failed
[  814.352184][T25866] FAT-fs (loop4): Directory bread(block 71) failed
[  814.359215][T25870] netlink: 'syz.2.5039': attribute type 10 has an invalid length.
[  814.370724][T25870] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  814.379509][T25866] FAT-fs (loop4): Directory bread(block 72) failed
[  814.386061][T25868] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5040: invalid indirect mapped block 256 (level 2)
[  814.386299][T25866] FAT-fs (loop4): Directory bread(block 73) failed
[  814.421671][T11704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.445037][T25870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5039'.
[  814.461431][T25868] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  814.461800][T25868] EXT4-fs (loop8): 2 truncates cleaned up
[  814.471094][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  814.471114][    C0] EXT4-fs (loop8): initial error at time 2000000489: ext4_free_branches:1023: inode 11
[  814.471147][    C0] EXT4-fs (loop8): last error at time 2000000489: ext4_free_branches:1023: inode 11
[  814.532485][T25874] netlink: 'syz.1.5041': attribute type 10 has an invalid length.
[  814.542472][T25868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  814.607888][T25876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5041'.
[  814.698954][T25866] bridge_slave_0: left allmulticast mode
[  814.706767][T25866] bridge_slave_0: left promiscuous mode
[  814.719850][T25866] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.793157][T23780] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.887257][T25884] set_capacity_and_notify: 2 callbacks suppressed
[  814.887279][T25884] loop8: detected capacity change from 0 to 256
[  814.898256][T25866] bridge_slave_1: left allmulticast mode
[  814.930357][T25866] bridge_slave_1: left promiscuous mode
[  814.951309][T25866] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.130777][T25866] bond0: (slave bond_slave_0): Releasing backup interface
[  815.294821][T25866] bond0: (slave bond_slave_1): Releasing backup interface
[  815.430471][T25866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  815.448287][T25866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  815.509884][T25866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  815.531627][T25866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.612799][T25866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  815.648911][T25870] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  815.723357][ T3001] ==================================================================
[  815.740014][ T3001] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current
[  815.748408][ T3001] 
[  815.750756][ T3001] write to 0xffff88811b3d9df8 of 8 bytes by task 3537 on cpu 0:
[  815.758493][ T3001]  inode_set_ctime_current+0x5f2/0x960
[  815.763990][ T3001]  simple_unlink+0x2d/0x80
[  815.768608][ T3001]  shmem_unlink+0x12d/0x140
[  815.773143][ T3001]  vfs_unlink+0x1c7/0x490
[  815.777492][ T3001]  filename_unlinkat+0x1e2/0x410
[  815.782446][ T3001]  __se_sys_unlink+0x2b/0xe0
[  815.787055][ T3001]  __x64_sys_unlink+0x1f/0x30
[  815.791799][ T3001]  x64_sys_call+0x2eb6/0x3020
[  815.796510][ T3001]  do_syscall_64+0x12c/0x370
[  815.801109][ T3001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.807009][ T3001] 
[  815.809334][ T3001] read to 0xffff88811b3d9df8 of 8 bytes by task 3001 on cpu 1:
[  815.816874][ T3001]  atime_needs_update+0x2ef/0x3e0
[  815.821919][ T3001]  touch_atime+0x4a/0x330
[  815.826258][ T3001]  do_readlinkat+0x137/0x2f0
[  815.830853][ T3001]  __x64_sys_readlink+0x47/0x60
[  815.835748][ T3001]  x64_sys_call+0x2b51/0x3020
[  815.840433][ T3001]  do_syscall_64+0x12c/0x370
[  815.845056][ T3001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.850960][ T3001] 
[  815.853369][ T3001] value changed: 0x00000000773595e9 -> 0x00000000773595ea
[  815.860659][ T3001] 
[  815.862997][ T3001] Reported by Kernel Concurrency Sanitizer on:
[  815.869432][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  815.879954][ T3001] Tainted: [W]=WARN
[  815.883757][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  815.894075][ T3001] ==================================================================
[  816.297482][T25895] lo speed is unknown, defaulting to 1000
[  816.312668][T25895] lo speed is unknown, defaulting to 1000
[  817.201489][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!