last executing test programs:

10m20.412061117s ago: executing program 32 (id=72):
r0 = socket$inet(0x2, 0x4000000000000001, 0x4009)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x20, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf965}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = dup(r3)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a22000000000a01010000000000000000050000000900010073797a30000000005c000a01030000000000000000050000000900010073797a30000000000900030073797a30000000001400048008000240606282e008000140000000001c0008800c00014000000900000000090c0002400000000000002b5f1400000011dab9c700010000000000000000000000000a9c55946fafea888c92465a5d448a72617356619e3ad215faef979aed4a2e6f22d0eb0bb5b9fc08d3ff27f4e959d9e52c0c2ceab312ea35883195b6f1e4f6385345888dfc20ea843846724380e2"], 0xa4}}, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4)
futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) (async)
futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'})
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
connect$inet(r0, &(0x7f0000001040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
socket$packet(0x11, 0x2, 0x300)

10m11.60155246s ago: executing program 33 (id=125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, 0x0, 0x2, 0x503, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x34}}, 0x0)
set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f00000001c0), 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf2567"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x1050, r7, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xd1, 0xff}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x1050}, 0x1, 0x0, 0x0, 0x800}, 0x810)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, 0x0, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r10, 0x4b48, &(0x7f0000000740)={0x9, "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"})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x6e, r11, 0x500}, 0x38)
poll(&(0x7f0000000180)=[{r5, 0xc0a4}, {r0, 0x8021}, {r11, 0x108}], 0x3, 0xa)

9m38.609237218s ago: executing program 34 (id=307):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (fail_nth: 1)

9m25.374777074s ago: executing program 35 (id=439):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f375"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010400000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000010800034000000001080001400000001414000000110001"], 0xdc}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0)
write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="64badcf521c6f7d86b01696d"], 0xf)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000100000000000000000000008500000028000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x70a0}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000280)=@ethtool_cmd={0x23, 0x103, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x2, 0x7fffffff, 0xfffb, 0x4, 0x5, 0x9, [0xe, 0xfb]}})
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0x0, 0x51, 0x32, &(0x7f0000000300)="d2ab9d9bb2105eeee82f93f31edc2e90dad136d9738fe801bffe51e203de18e894ee90bad5d6ab4478f4d7cd0abb4308d412ada4ff94e7a783f892e2c39024bac64e409b6c53845f18c089de807902e29e", &(0x7f0000000380)=""/50, 0x8, 0x0, 0x88, 0xc3, &(0x7f00000003c0)="e7cb6c303be92639cae636c9088829a384244e348bf0f67038f1f9ae3c1cfa5b35c6f89e503b4d12ab9951922995f93224a6bc36c10a3a690d1ffc657454c3ebbc67d55a5ebd61eba173d8f2995462a599d44ca344ba956be03c654490d3f666c9ea5cc2f6361a584194e0fa7e4e622fede2a604bb18576e219310cd6ee40ee645e0746681183c5e", &(0x7f0000000480)="fcac9c2220fc71ba8c67f48d7bed8242c7baf3e66463f0529cb030f71977c75bb0399150fbae42761e99d6a13ea3138a8331e4d01bcd324f3b7cc02252e9191bbce30861a455883cfa41fc7b95528cb82600ef1cac8db9ebe9fbbe2c05cac1be055434067fad0581c861e1f80574e3807ac83deb7e21467f85e1649172a8074c37a75ac0dc021ca7ead6a899ebbcaee6589acf2ff03b9ab29af909d06c3f10bbb63ca6309ca7589107d89ffb6d4f5e015152b1f95a0c0caedcf94914d803810c7647d6", 0x4, 0x0, 0x3b}, 0x50)

8m15.775231082s ago: executing program 36 (id=925):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x0, &(0x7f0000001a80), 0x3, 0x5bc, &(0x7f0000001440)="$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")
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000640)='.\x00', 0x3a424bc, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe0d59824e1618cd9913d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYBLOB="3093e121f7523fece90a37d5a927c18dd10d3154456ac66e96749c346fd71173e12fcf6d1160b1a8ed194deb98dc67b07edd64d7e1afef339c828e956edf4068785cb0d7d4a24137cf9c2cac79060c0beb7d1ab2be0fac9a6d6028d2e9d895ec67dec6914528a112adced19a86ad84fdea4e04bc7d51afc6561063bbb696c825a82153efcf06941b3ae039ef7761b7a2bbddc32f3cc39f6ffb5d2a808f3e7ecd9039d8c7895b00ebbf6dc950788fbca296f89178e938440f8e57819e17eb79736882e9699d96b1959c119730542c4baf0af7acac79531d0c4623bb5055768b624c01c505d29e066e88f2e7cb67c8a928217225ea7782904746898b13fc6dab1c63a2c2d5a724a8bb745da18da54627d618842162c1367e4361737545a8628fb76106c1212ce6152ef12ebda119a33e28f17ba3fbf9eed69447ca88876cbabfce8b2aba2f668f5b91d00d5de2be7bf028b273ec31e63b4fbf87f6cbf1efb41a7e53b04f4a66962d7c7a0b2ff01e86df58b94f1a321aa1297c5a4cc42b656d9acb7a40490ede8099679fb86b4ee7a852aa68358dcea38ad3d2b3b794db5b3caec0228b39709eedd31a55aaf2b49146d0effdc3dfce3ec78e4bb2f65ceb9ca94a2e2fed7efc2b6bcd462955cf911ed5dbb62d6339d001bee46a4989d87cf0578d0f8913ed29d36c31e9b41678ec127f48d40003c0569b6102757c87f00adb7920ab2b78a82bfc115f831ab9abc72a93299c0e1971d17a2b3d376d66e6ddfe3dd86166507f87b6db73fe284aa52db7645601329b6087cab267eefc8bb846cad8ade3e61be692a066d0e6a3f0603d0405d58aa07c406950a69fff78a37cb9e2c9d420bb9394e483252739cabecc7418b142ec8c84e394b42c05c3f116409fc830fac08788bc2b93cb491696a8385d07cd1e19a9de182abeceb435e92d4eda2d2710cb06180c6271e5c1a26edf630ee16848993e3c3ef8804a87407b7e7cdb04263238cec45424f7dfda3b1a8390e39820ac367c33aafc4edb3223578c108628e6fa84d7805208d796d91e4b83794fdea7fa49ed4c422aed72db2d46df97082b904dd80ed9cb4ab29b4cc1e345d76999971bb7a3bcf191634020eeda9c58c3b2a306921ef7830f672cc1da4905963b0a4aede35913fdf8dbd4e8ba22e39bfba342c6a302f7a03225d021f0e0e357200f7301ce560b065d1431ad16702e035caab022382d6251e88ef861145c1a3121ff099feda4dcf6561a026889ac3f0474d6a868a4f24ea60f7bc95bf7f2afb85a430658eb3b2b84b61a695f90e01f30a417c79caa44640e7eb9195f844346100c551d4fc23ef249f29ec1a5489839d153c3fce79b288d86a48eadc7024cab6f9b626c7eeb87e8f76ec6205c3487deaef65133ec2677c642887de743d1dcc2dbf72f7b9062b9654ff693aa688dd5e05ed48c8d681cd426bde017c08d31d83994284efb804a9beda7091240e7feb740307412e4c64aa422b91dfd31874a43aa2e76988e5933f557c884cd4b960a6321828692975a76f6473cd0650cbd9dd09acfad7aec17c7a6c34e3c9327469d77d1ee32992f1f2c47ff36026f74b4c8d01cf52eefd44d30519f33cc13cb30cf7a43f7305fd76b063d2363ac318e0090d3516cbbd82da99b3f53d570c2e2b85883abf68332f0ea3e0721bd251cea500281405d34aaed523c2684cd5e255919d828bf00f2d62a3d0b56d3d7cd18c5fa6f0764aeea0405e8731f0b223bd19471b8188c4b37cb5c2d057444148a390f36f2ddbf3bb6c46f4c96058ff00057311d2cff2a9c081f3f47967bc5c7c1dc554cd66c39ee403cd426a659131f3e2b9f0109af5414214e81344e0ff0129fe9ec7c01814823c995bf1b437e4f1f07f83055ded75331575d921231b448609f1aa76ae28edc70612e8de047c338712a43413a047c67a2fb3ec7c525a1720d01d8e0e92ae34f3b88c9b4c6c3e938919a4390628f6529dfa8d1f5666c28d4ae9bf8d5a579d5117e027a4cbbc5193a1c3f811a4822746e4c10fe9fd0ac93df86fb41e3d3993cdacb05f633be404a0d7fd256ca01c131859d08e5cd26809f786c5c57866d76f25ae000fc7517e2e74c29f1cf804fa6ae0bd985926daadbc1c61b9e042d8b6367d1e68e3e23476830f8fa2ff4999f17120d64537d601990fa130eaa19b6b660730f37f2256e028689c5b86582819ee5103d8cb23c246f4f34dfb7adebf2a14eb41eef768ecd6dbb37075ed8bf462104e0303f74fd81e69209c0d89cef3b0231a1b24b60d3edf5cb96043ef449823440c2edb1fcee97a9b56e811989ead072123d1090f1f7be126112497c2042bfdea16a14c34d6c90fe8be6a3558ecbcadba53a939f78362a295bc4f0597ce78fdf099a57981099d4c3b10c560b814c3eb719bd441cc7fc1667776fe21b1a2288804a6b2a0c65341660053f800fef460b93d2dd27b38cdc32fd781fd34480278756e8b9ea8a3fd7687b55064bf95b80d01122f81ac7b1b33c08e92f9736dd80bd850f0f5d54197e28624e8aee1e171a449c21576f420f41d09c3f15c8723303338ede1f73020d1d637a59596092d02b7df0a649be2890b825978f5a571b88425cabbadbff56bbd2bcd3e1ff4c9197e7f639fec41ce603e34a18eb21fac02fcd0c68025c3eba6aa01a8470915ec51a499659a179b12deed0153e02c88dbf4429ecd922675132de722b0d225125e8650cbec160ea8dde590d87d37dda05aa4ebf21a9b2f96bebfc0a495cdea3258f732451716ee60bb9c69d7a1c87ea7e804ec2864234805f3f5a8fc13b08ea7de3f3fa0cb3649aa6b2d6191ad9493dd01a5380a89af9fbbdcf8482429e254dce6e3d55cd012cf937ec058c922d9490228a7a75c8f28691452bc65184e89bc9b59278c05356c1e9db634b4c3d69ac5b0ac074e21b06cda6f57727dc67503cb78124c9ba71a98138ff73ff83344562a6835262517b239eb12244bafe6200595576f520b6cec0128cc18e94df1a2404dafa7b8631870d4b0b28706463fcdb12ff30a4dae6836cdb119430e0d9a2a00d354ac4489be77b69de05646a12406473e2803bab37ca3a8e4057c8c1acdfe64529affda8ab2dc2a2912901dbdaf31add3db2a1998ac2524a6544cbbeea0015f2e3e219d9f65892345b9707a75e47308a0803076b1f3599804410513619a2224e51669d25b3d9ad1d795df41f6718a6bfec935fe61d5b4ed48c9b3506afac9e6215a64b56cc35d69c84914886da4f443aeb9ba4d7b92de2afcaae0d27dcb9fb587de4cfb501419ec1ecf6409761ac42a92d6bf9067f76eee3f459815459dadf700ffc024c511159626bc33f4b67ff894cada0dfd232639d1cb979d4f7f6064b2ff18c5376dd3bddcf70e0db0cbc4169aff2f81295cbcda865bb4d38b135003bf0db7264a80d74628c4e14a24d4453fbfa6ec81befc58c8dc52806961c90aacfbfcafd097d07e285158e96129b7d7fc1e692bb47e59fe42c86be772ce525f2df3cd7fee26fa6f2c4ae8820af6bd86f71a650a8fc636f50fa0be68986d8bc9c4af917c8483057f85700d177efc36127c5737439ccaae4753a97ab57b701a73a9580c497e11f07c60d47407898404f0b8b4187a51a6fa83ea3bca73d58e601f6d62eb86be9675dfc61620f09099de918c1e5d661d8cac1b4a638689ecc5ab23af6807a48be79af1a6fe9a0c4dd0496f8ff2c3e7e395719523d529a57c8cbde9594196e381a549b24e92f62e53f267bdfa214e5830513ca33fdc6abd42c274926eec5b9b26df5b1d19a4e5a33751419853cf372ff3b1f19b7f69b8cc21325828ab5a27ec12a6c6be92b3fe86cc1947e90032535c01dbf4bc8f511d71c2af2b5a2839be10d41786cac3037af2edc90e10005de6c7cd8c8f212ced643b901880e797ca6f114f1984aebb9d8114af39819200f2d7a52737ffb928798589a399ca3476cee2371e278d7a617cbc0ad3291f4c118d33366316be15a11738b0b36824064fd6e24a17e11c83a72fe54afe4b62d3280df32c0d7089cf67ca673613f223f0b66134c74878ca46fd11f965cbe337258f9e313da2edcd5fdeffc85d6ca8db1355b15d389d4068cefefc1e3e2dea21b22d07fb5120fd4827dd4b3dd6f0c1cdf773820f9b539065569f5e9bdeb6b8dd48cd01b30b3b9ed6b9fb48fa7dc87ceeff8f54cf0744b8c307319615ecb0d7b240cd663425d945cd00906e5b9bd63b89bcac0f4b28837fbfa299866f2b228e7341e517694f4a30c451512eb85e8e011911df0e050d125e63d559f1deae50745dc0a73eb6f0c04b725d8b0e2dfa7668442e9e0da2b83d07b6180a8152e6a35b61b642effaa6a57815d032dd643ed925884d4fdf0d115d5d75ea50999933a770ff1b10b4e172104ee61c2455987db88a053782b97a77af12f01f3f74d1d6224a14a047fda4c181e6b01de067d764d5e666e08d9be7bf5f936a3e3442f741d1619983c77e3bbedf97c4430ac96fe3cc8df98f15188ea9f796dd0e3e0e4bde70cf534a15d0e82d27ffbbafba15d8889451ec8cb0c4a63ef2d6907db89555385e11ec7ef2534ca29cc64df6dc5b3b92697ec11b826449c5db22f81b93868caf8e3df973edfa578b79c012ef8ef433a1eda720e22e30b2901e955dee0646c1efafdf997cd1163e08cf03e9d33f02bdffe0a89cf91acf2ac99796fa05018984ea13ce514460e159b49421c4356928031595dea599f000f0debe2c42e8d3bdd05207e74588ab36a6daaddc8ea2c7c4c5294c385886e58fc6309b94fd91b9b56a37b73a1c163a5a5ea1bfaecc1898c4fe857fec7e9b7f3a24c2f90f61119a9c72aa8df532787db0d25ac60db91b456d03baba0577d96ab9b8439ffc2b7b72e0146e3f2f61118d08449c2a816644c895345fd0a4c019bb4a983095e236a8c1a38b946bdb877c2ae202592cb0266f7d80e2c1d1292532204f9be9f2f5954ce36a99697c9b20fe138db57ac3134ad556d16d8d615c356d05fd95ab1bef26b23e1ad2ea5abaffede3e14bfe2ee55f593700c49a6c9ecf28d1a01d72b1920b1b7944ef7ed7a2f96a6f5ee4f40f54978a735d155b259d7afd53ac19ed2443d45dcbc84335a419109ab159403b0f828d94079c0c5e5320f91496a043b92901a1e8a4966315ada9f8ffc5ac70868c0df278afe7bfe0affb68aa13ed029bb965b6d6a9ebaba1d0d1a2c17b69d0ca3b0edabd9df19b5bc0064272577ac22fa84bf819a4eea0ab2ba920888e4c2bc89286184fc10b6dcce84466f3db078fe3af1a90a5b9aa7b66a9e5450807601c2a17460027109908618ac2cc1508029151fc96ee5ab264d2c4236aacfca06c0e6b71b748900652de55f7761a4606a237bd11902178e3a2afde4cc4964b3dfe1abdaad79ed0d80693674c4737a0b29a203ec4cf6317ee9c3922ac490db17c2e42ba390f98e776a4e758ed98ce8bdeb914b01707602b10fffca3992f1168e7ab3793ad47236351ff7a20ecd50b4edb63e95ed05d6093ead98bbc2dec9dda3ac4b902bd02e4d0eb528653ce3aa313cee066181d7612f40234c1c3aef14fc99b7d9196cd7dab2ffead014170866ba2c27c388ef67de7b351cf40d343059eeda90e45700c36febfde7a07fce384200618548cb76d8017c2053b332507045a914e39b93f927b33396ab82feb532870c4323c2305398867aac393339656bd4b39c5da5d676fa5a233c7c62f8cc9ab4417a658bf9e679d22bb801ab10d855897a75e4b3e523e87e4ea1e17f270830cee4185d62ea0afd170508453ab0f42d3b35292c4e1b38f273967a0ac374a73f1e3cccb83d6720a7c3f4a63d96e3469db8b4bd147bf94e78df5cb82498b146a3aad486b9e47f672cde7eedc67ecbf9c23d93d1f29ac3af60988250b14d5e347349da73cd31ca0884dd92a52ba4bb60b101e0c03e68e9615a132dcef1403d476f2075b8311d07b002faa6caede3f5477bdae35099315eb6b013bf054a438e7179cc2f50d125c7cefc88c58b60da", @ANYBLOB="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", @ANYRESHEX, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x4000)
uname(&(0x7f0000000300)=""/223)

6m7.589918024s ago: executing program 37 (id=1712):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000002bc0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1400000000000800290000000b00000000007fff00000000180000000000000029000000370000002f00000000000000"], 0x30}, 0x20000000)

5m33.928481037s ago: executing program 38 (id=1964):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010)

4m25.085074541s ago: executing program 39 (id=2413):
unshare(0x2a020400)

4m2.942065252s ago: executing program 9 (id=2518):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000500)={[{@quota}, {@grpquota}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x22042, 0xfc)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0)
fallocate(r0, 0x3, 0x7fffff, 0x8000c62)

4m2.793652879s ago: executing program 9 (id=2519):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

4m1.725627151s ago: executing program 9 (id=2527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)

4m1.33801308s ago: executing program 9 (id=2528):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r0)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

4m1.270230753s ago: executing program 9 (id=2529):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r0)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

4m1.1385595s ago: executing program 9 (id=2530):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)

4m1.111623421s ago: executing program 40 (id=2530):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)

3m57.481621229s ago: executing program 3 (id=2555):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

3m56.549740804s ago: executing program 3 (id=2562):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x18000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7f)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x180}, 0x9}, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0xc, 0x6})

3m55.773424122s ago: executing program 3 (id=2566):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

3m55.431866738s ago: executing program 3 (id=2567):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

3m55.289983155s ago: executing program 3 (id=2569):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000380"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
write$P9_RLCREATE(r4, 0x0, 0x2d)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30fa047c", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25050000000c00020000000000000000000c0004000f543e6e000000000c000800000001000000000008000100000000000c0008000b00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x8a}, 0x0, 0x6c}, @in6=@remote, {}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @mark={0xc, 0x15, {0x350759, 0x5}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x154}}, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x2204c004)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)

3m53.980361269s ago: executing program 3 (id=2575):
r0 = mq_open(0x0, 0x8c2, 0xb3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

3m53.886806344s ago: executing program 41 (id=2575):
r0 = mq_open(0x0, 0x8c2, 0xb3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

3m29.688159125s ago: executing program 2 (id=2699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)

3m29.572500741s ago: executing program 2 (id=2703):
socket$inet6(0xa, 0x3, 0x5)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @private=0xa010102, @remote}, 0xc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r1, 0x32, {0xb, 0x100004000}, 0x2}, 0x1)

3m29.428303227s ago: executing program 2 (id=2705):
r0 = socket$kcm(0x29, 0x7, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r1=>0x0)
sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000002c0)=@nfc={0x27, r1, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="3add0ffbc1e81bfb8b156c1f632ef7b046448ddd8ac4e5", 0x17}, {&(0x7f0000000380)="8d9a94057b3b0c02d20f5bd5fc557870a633728d53a58485937da1f9f04a1ed2515b94c73c240f2636d0fa4c7395bf3718723ef6f7ba6ce79a5293f3bee5a7f2822db2f0be", 0x45}, {&(0x7f0000000440)="586cbbf053005e2ddaa3c9c7e5775f7c5529a73954c6f9948330de7d54ecac73df7538a1c579595a602095e4476b2aad0e94134e6aadc1e47293d1a52587f5a480b39ab462fb5463a90fdd53c33d9c04cf9c8f866fec5cc598866ad272f78c8b364bf018cc8becb950a965a3f10795b1c1d75c25e055e4f8b9d358b0cc44233e2fbe8f45ebc1256ed3254f54bee1ba8bbad33d45321e560979b88a", 0x9b}, {&(0x7f0000000500)="52a638e12bf82fb1bad55ea028217518d8ae71ebaaec17ef8ea8e720d6d5572581ed5940afd177f80741", 0x2a}, {&(0x7f0000000540)="e99058bcb6f0c168d4f77b920ae8eb6c4cd776f3c61f0254337fdad7da8f5ecc374e888415406177e6bb21cef9a777ad62082f31a19d70b5164fa995c1e4c03c497721ffa185cf4819ea17c329e123ed222fb281183aa1a99830dfc4aa1828ce0e8de6026f1890d6be9705ec19eba32092af24d9c8c6590c3b16e93cd78e207d4248025fdef1ba3970b194aad0d2482daaed818d922a23421198be25d4df7e36b3758d1fcd7af95bdda39f00dfe9", 0xae}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="a00000000000000001010000f7ffffff13ada04f0f6065925dee12ac74267c8a96744a18e309406cb9e436ad7695a408e7d4d8dce50bef443b7c52bcb4522d15ba625f6da9de92c6a34488fc63bb42bdb1c17df6588a5893f423691c23bd7b0ce42b225f5d2bd88a80109bb75b1873782f6f993954095ade6290fc8501edc8168f4c4464d44f88669410024a93e146363a190aa5a5124f74bf7e28359aca4eefc0000000000000008400000002000000e0a5456e63886a5d53b040c8b3381495dc9a99e34fb21506adf00b329c0c394012dc4a54563c048c2a9a184d1c0b741b5a4cca21bedcbe0441103b8cc39db84badab8d710fc284739c0f12224cfde2bbd15c96d79253a905befb8ba02100ff43b29b2157fcf961007edd73b4dc452cfe008784f8a9b802a67f467497550a131188c70f707bdf33a6529edc20a5453b5574bd1d63f26aa06d3eaa4edc987a7b866d6b893f3fe66564c7035fb17343877bc000000000000000160100000109000096c3b2b2af07e4e3e9e00a7b771d3fe66445544ee1ea7a6f7df2e7f939bb7e5b011744bbf5b4b2a89d74307565d9ec2737d77fbbee61826fef1e5bf0e0fccb943dcdff2efaac93d18f235c0a625611413a149319b59dc1006d7055c9a088b7bb7a5817ea141a74bb2a4174d3e43e94b7b14d9ab8f8986c2250e37c3a8da2487ebda8e4d0709c74b67fc07f418b885c8c64228794c696a43439a3a861bf3ec5a3653884646a8d769b3d6cd1d4cd88000048000000000000000000000006000000264316e50421118c978da50c850a3c9e6d3580472324c18e76f734fccd4af978a41a4cb27bd3fc8c5dae37705e988655db88000000000000"], 0x268}, 0x4000005)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="359b127fc136bdd9a77493e016999136ef3d8e2c18d6434a9c04e3ad63c54b519da57f"], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', r5, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r3}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000040))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r9, 0x29, 0x48, 0x0, &(0x7f0000000400)=0x2fbea93b)
fstat(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setreuid(0xee00, r10)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000280)=@nullb, r10, &(0x7f0000000080)={0x2, 0x43b, 0x7ffd, 0xb93, 0x8, 0x5, 0xc, 0x5, 0x1})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5800000064c5896248a30f9f395ea8a202c166d2d45d5c4af38589345f4d5214af80a979d86888669fc04f8be51ed85b91f241bb2e5de82f32cd081a2f9141dbfaa9", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf25010000000500020008000000060001004e21000014000900fe88000000000000000000000000000114000700fe8000000000000000000000000000bb08000b00", @ANYRESOCT=r1, @ANYBLOB="04000500"], 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x48044)
setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x10000, @remote, 0xb}}, 0x0, 0x0, 0x2f, 0x0, "af7b6f9e1dcc99bd50f62653a581124e397819e5b048a31b2841efc310ec8bd275f230a882e30ea615d43c7741eec2f33a2eb4e67bb7af994e3aafe3eee5e190c9700577f293b4828afe597bd9395072"}, 0xd8)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)

3m28.670001585s ago: executing program 2 (id=2708):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x508, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x438, 0xffffffff, 0xffffffff, 0x438, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd4, 0x400, 0x9, 0x1, 0x0, "59cdfd2a9ee2042274a5331a60faa155e9fcbed2866a9ad0fc9405d4c9f3f7aa0eb77d0572214c10463888690349a4a510db0a330c159079e3c20f2b24ed5fa8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x568)
r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x2, 0x0, 0x0, 0x0, 0x7, 0x40202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x10e200, 0x10004, 0x20da, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480))
r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0x76, 0x183301)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xb)
semget$private(0x0, 0x6, 0x3b1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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")
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x805, 0x10000, 0xb, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregs(0xe, r5, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa11000c3985a8207010000f8ffffffb702000008000000b703000000000000850001080600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040)
r9 = dup3(r7, r8, 0x0)
connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000300)={'pim6reg\x00', @broadcast})
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000280))
socket$nl_netfilter(0x10, 0x3, 0xc)

3m25.560333817s ago: executing program 2 (id=2727):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2)

3m25.102082439s ago: executing program 2 (id=2729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)

3m25.07897242s ago: executing program 42 (id=2729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)

3m24.619569242s ago: executing program 8 (id=2733):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b00010062726964676500002c00028005002600010000000500290000000000060009000500000005002d"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040)

3m24.348680665s ago: executing program 8 (id=2736):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xd6000, 0x100, 0x18}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x1}}, './file0\x00'})
syz_genetlink_get_family_id$team(&(0x7f0000000200), r3)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000240)={'gre0\x00'}) (async)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000240)={'gre0\x00'})
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0))
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000000)
socket$inet6(0xa, 0x0, 0xc)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r5, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfffe}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x36}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_PMKID={0x14, 0x55, "5356e9648355a9334f485e9f9d08a870"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "b99f71acae3f4a5d5832f127768d537f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)={0x0, <r7=>0x0})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000600)={0x2, [0xc, 0x4]}, 0x8)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000640)=0x2, 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x27cc00}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf725}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x67}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x985e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x88, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x27cc00}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf725}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x67}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x985e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r10, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x6, 0x80000000]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mkdirat(r3, &(0x7f00000009c0)='./file0\x00', 0x11d)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000a40)={0x2, 'veth0_to_batadv\x00', {0x8001}, 0x9}) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000a40)={0x2, 'veth0_to_batadv\x00', {0x8001}, 0x9})
r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0)
perf_event_open(&(0x7f0000000a80)={0x4, 0x80, 0x0, 0xfc, 0xb, 0x5, 0x0, 0x1, 0xa2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x55be9b97, 0x2, @perf_config_ext={0x9, 0x81}, 0x10481, 0x7, 0x8, 0x3, 0x8, 0x2, 0xe88, 0x0, 0x6, 0x0, 0x6}, r7, 0xe, r12, 0x2)
ioctl$AUTOFS_IOC_ASKUMOUNT(r12, 0x80049370, &(0x7f0000000b40))

3m23.963136444s ago: executing program 8 (id=2737):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0)
r1 = syz_io_uring_setup(0x9e, 0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/216, 0xd8}], 0x1, 0x0, 0x1})
io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

3m23.877763309s ago: executing program 8 (id=2738):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x508, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x438, 0xffffffff, 0xffffffff, 0x438, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd4, 0x400, 0x9, 0x1, 0x0, "59cdfd2a9ee2042274a5331a60faa155e9fcbed2866a9ad0fc9405d4c9f3f7aa0eb77d0572214c10463888690349a4a510db0a330c159079e3c20f2b24ed5fa8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x568)
r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x2, 0x0, 0x0, 0x0, 0x7, 0x40202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x10e200, 0x10004, 0x20da, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480))
r4 = syz_open_dev$usbfs(&(0x7f0000000680), 0x76, 0x183301)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045503, &(0x7f0000000340)={0x1, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xb)
semget$private(0x0, 0x6, 0x3b1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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")
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x805, 0x10000, 0xb, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregs(0xe, r5, 0xffffffffffffdcaf, &(0x7f0000000400)=""/45)
r6 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa11000c3985a8207010000f8ffffffb702000008000000b703000000000000850001080600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040)
r9 = dup3(r7, r8, 0x0)
connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000300)={'pim6reg\x00', @broadcast})
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000280))
socket$nl_netfilter(0x10, 0x3, 0xc)

3m21.846489798s ago: executing program 8 (id=2752):
poll(0x0, 0x0, 0x7fffffff)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x101, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0})

3m21.533427203s ago: executing program 8 (id=2755):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

3m21.464576996s ago: executing program 43 (id=2755):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

2m56.682610966s ago: executing program 5 (id=2875):
socket$inet6(0xa, 0x3, 0x5)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f32, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @private=0xa010102, @remote}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r1, 0x32, {0xb, 0x100004000}, 0x2}, 0x1)

2m56.017052049s ago: executing program 5 (id=2878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffbfff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x70bd27, 0x25dfdbec, {0x2, 0x18, 0xe1, 0xff, r5}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LABEL={0x14, 0x3, 'lo\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', <r7=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'vlan1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r9 = getpid()
r10 = getpgrp(r9)
sched_setscheduler(r10, 0x1, &(0x7f0000000100)=0x5) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r14, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) (async)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

2m55.937467283s ago: executing program 5 (id=2879):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/87, 0x57}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/240, 0xf0}], 0x4, 0x7, 0x1)

2m54.472241094s ago: executing program 5 (id=2890):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2ebff, 0x0)

2m54.383003618s ago: executing program 5 (id=2892):
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xd5000002) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="91104d000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)

2m53.778984718s ago: executing program 5 (id=2897):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x100, 0xd00)
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000240)={0x0, 0x0})
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
pipe(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

2m53.759785929s ago: executing program 44 (id=2897):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x100, 0xd00)
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000240)={0x0, 0x0})
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
pipe(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

6.943431742s ago: executing program 1 (id=3818):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x40000000, @mcast2, 0x5}, 0x1c)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000240))

6.379870919s ago: executing program 1 (id=3825):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c1}, 0x8040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x44, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x5b)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
r8 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fspick(r8, &(0x7f00000000c0)='.\x00', 0x0)
r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r10 = epoll_create1(0x0)
r11 = dup3(r9, r10, 0x80000)
connect$qrtr(r11, &(0x7f0000000140)={0x2a, 0x1, 0x4001}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x116)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)

5.829705146s ago: executing program 6 (id=3830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2505000000180001801400020069707600001900080009080500000077a900e000000000000000000093e43ae9ad8be97a97e786285a8442729cf1b19662e5aebc4b8967d63c49cb3f66e43a32e7602d506213003c8d961a3ca8b73dcfa542ac32c292f93187326ce643e21f7ec8b908d9151208cda3a36b75ea1230e213f4af8e70e4017d749ad4e95017f3f5de4315e7615bdddf6eb7156a05a12d35774829bde1066243a61315c0bdcdcb25f42ee024543a1d1ba586fe4516d8cd9e660a790c3201c73fe3bf10f277f3228f02bc84eae0d22d736c1c96e7e02598ba6bbd9935a68dad"], 0x34}, 0x1, 0x0, 0x0, 0x200440c0}, 0x80)
munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x100000001, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd0900008400000002000000", @ANYRES32, @ANYBLOB="feffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000440)="9285aa9aba60ee0c3fd724df6a204d873105d5330ffdaa291cd24a76fbf2adc6cf75baba959448db9c67c4407ed237ec1b4b53a83cfea9371dff36b42e2ca6d58e46a90c4439928bde168b47a56abca1a8376624b07068c59d4d6ffa631f4105be67966e6ca3e81d34013bee3cf1245885ca2d6333877c218553f20e03067aad2a19756c97bca5cc3a835d1d025f16794cb822e957a651c52f72584486e0622a5df5", &(0x7f0000000240), 0x7, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
brk(0x800000)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x6, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0x2, r2, 0x2)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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")

5.811377877s ago: executing program 4 (id=3831):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

5.475303573s ago: executing program 1 (id=3832):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=")
r3 = socket$inet(0xa, 0x801, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x10628a, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x1, 0x2bf}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f00000003c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000})
write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0xa8, {}, 0x2000000000001005, 0x6}}}, 0xfc36)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r6, 0x4, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xffff, @empty, 0xb}, @in6={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00', 0xfffeffff}}}, 0x118)

4.605587976s ago: executing program 6 (id=3835):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080d700000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r0, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000180)={0x1, 0x4})
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
poll(&(0x7f0000000140)=[{r2, 0x8}, {r2, 0x1010}], 0x2, 0xfffffff7)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r4 = signalfd4(r3, 0x0, 0x0, 0x80000)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000500)=""/149)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
unlink(0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
read(r3, &(0x7f0000000040)=""/113, 0x71)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.567049147s ago: executing program 4 (id=3838):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r4 = socket(0x2b, 0x1, 0x1) (async)
unshare(0x20000400) (async)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async, rerun: 64)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r4)
ioctl(r0, 0x3, &(0x7f0000000ac0)="83398b3a625c73f4043757064434444cd8640ab27b28a4ca1abb032d3102f30713d43775a52dbc0dc54804fb509d19c26d5dfaaf3d0e61c1badaa7c46f0a5df2b11642995431174aee1fba1c2f78eb29b6015c9f3a69b1d956a6a1757fcb141c") (async)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x284, r10, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x14f9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5e5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x118}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffb056}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x77}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x51}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1fdc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xded}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d0}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0xb0) (async, rerun: 32)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (rerun: 32)
ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000080))
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xc}, {0x9, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) (rerun: 64)

3.315805079s ago: executing program 1 (id=3841):
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0xff, 0xdc, 0xfe, 0xfe, 0xff, "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", 0x2, "5c8d586ba8bd89058fdb9fe5b2ea00"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2404e084}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2.765742746s ago: executing program 4 (id=3845):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) (async)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0xf3a, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
tee(r1, 0xffffffffffffffff, 0xf3a, 0x4)

2.764611976s ago: executing program 4 (id=3847):
r0 = socket(0x2b, 0x80801, 0x1)
listen(r0, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x1c5dfd, 0x11e)
fcntl$setflags(r2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002700170101000000fbdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0xc004)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814)
r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1, 0x20e}, &(0x7f00000000c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000140)={'tunl0\x00', r6, 0x80, 0x10, 0x4, 0x9, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x68, 0x0, 0xa, 0x4, 0x0, @remote, @broadcast}}}})
r7 = socket$netlink(0x10, 0x3, 0x13)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={<r9=>0x0}, &(0x7f0000000380)=0xc)
fcntl$setown(r0, 0x8, r9)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f00000002c0)={0x1, 0xffff, 0x6})
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f01252155b21c00120008000100626f6e64000040000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00200000061000001c0012800b00010062726964676500000c00028006000600ff7f000008000a00", @ANYRES32=r10, @ANYBLOB="9f35472237a2e502ada10f6e8b8a3e95"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

2.68174842s ago: executing program 1 (id=3848):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000280)=0x7)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x20ffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000080)})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x9bca8b37701fe6b1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)

2.669082521s ago: executing program 6 (id=3849):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37daeed337490ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581100000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
recvfrom(r1, &(0x7f0000000080)=""/33, 0x21, 0x40010001, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x3, 0x0, {0xa, 0x4e20, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, 0x36d0}}}, 0x80)
r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f0000000ac0)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1022802, 0x0)
r6 = dup(r5)
utimensat(r6, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002c00)=<r7=>0x0)
lstat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002d00)=<r11=>0x0)
fstat(r3, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fstat(r4, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmmsg$unix(r4, &(0x7f0000002f40)=[{{&(0x7f0000001080)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001100)="f86a8c1a6b3f604faa128682557b38995513085d80ec348361e65281649d6e533d3ba02a1b3acf84218a12f8c352c138792757abaa212ce93d5c4dea661525938b3b46e98a86cf8997c6794f6d47072ea0975c82841e15440a438491a248953a6d2e5447b72437fa1754ac71044572663dd6aa1b0375667d79d887c6b0cc004e6cda5bf2c3e45ddce3eeb156ce", 0x8d}, {&(0x7f00000011c0)="c6448ab49a51d698b7cedfb38202d524ee1865b3c182f409c2d122199465aaab6d625113c8d1fa28e118673cf6083fb2fa7d8e52c7117d916d9d4572a99f7deb2d7d36604b2fc0b4245dc2add7c3a7e46a233603461b897821fef43457fb7f77f50381de97ac7a7d19ae75fb54d00f67e65afa0b018cc005f84619cc0b1fece1a88cb9afbfbd5b25e7dc64b7d5dd22aefa20c4528037a16b6c5223a325bb774286f19a68f407e5114a90f2e6907d952dc756663e61152ca7fb", 0xb9}, {&(0x7f00000003c0)="1d05e8b462e70109d9fb8a655a5ed9733757ea29bd67f732cbfce49c96553ef183c93791f667ebd01fc4cb7a4e1c7aaeb4dcc064c0011cff47c6d9", 0x3b}], 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c000000000000004301cc3f1abe8b41", @ANYRES8, @ANYRES32=r0, @ANYRES32, @ANYRESHEX=r10, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x40000}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="e3fe22cd962ff534664d017fa1d69816c05f9940fb7f011ded3c8c991e9e80017c8bd8a63c3bc9277c56ff3c8d1f1f28c62e99be013b463cb2249a83ea7a72683b3469c03496448ed4840f36aa6c1fd85c4d9cd24d96c09478f84010fb7a64821722af425e4b8bd2820b0aa463f4e2ddceab49d7d92bd875f8db48168c5751dab70436080448d52aaa1a6e5c912f456b59a7b5c789bd9963e9e0af7960713da44de031ddc6ea507dddf85b618b446f18dcb1fce52dcdcfc2c8754a553ecfd5af019afd2747a32e0d253b3707d88db8244b0c547da17ae93a544b1362c46c952c679b74da70d9ae55dce0e4a7a234a4", 0xef}, {&(0x7f0000002640)="df6c17e29e1395aa4b0632717d2c1406027e2a1c4be2c3cd3cfa7e32ea384465e2a81d97fb088d1ec2b934c43fddb4b01086868d76d98b4c360dadfb92ab016c1e9998612ee58361db2dbd34ae72b445e6161a7aee4d2756dcaf4bd30d47a8f1aabcd4a5ccf36d911ae98cb3f3f15ab4a928b76b61c9ab160c997466624880ea6d08fdc046395fb10b386d81627559b36e9fb1d07bde9565", 0x98}, {&(0x7f0000002700)="55e7820ce5abb448fec331a41009a5870515dbd5c60eb25fe9da3ffd8936f05bb93fb18271b2ec848f69371dcb5018ac647cc767992947e3a98016aa0f377ee470f56188b724b280e0567dae796529eb62653994a0b443e6061e16f2f05dbb5fdc936a8913cb803b36f113d0e09b3a6547c8c1f4a79f8f4edcc2a04c0bbfd917b07793210bea7901118d54051f6abb14fa41f139b45bda46031fb5c7a7613130339bf8221a97cf900a257ed649aeb2bf913c7672fc2f756135a9a48bdf028a2ededda4b8f8de9132f98d85ac73c3654078c2f046cabf40eccad933416f10bbbf24c9b351f4f5a5a7b8894f0638af2b37f4", 0xf1}, {&(0x7f0000002800)="5990aa43c6e7c2905fed99578da928a3f3716fdbf70c2d0230e869b663bd23b776a6df4b8c8c98b6b346b312a7dd712971985b49207d53383d9a316abf3b56d432b310370f62ec422870b40c8e424b73b0700373bc1e79f2f326c4d5354bac66bfbf29fb560b01981dd5f65931cebee14a673e00806a08f7a16abe2c9d80e04bbbf0916a8bb4cf0c2c42267ed560a572f08dcc5d1e9e8a159761fda9ed5f782d1f33321d2f1eb3903d264248cd1e8dfd8e32fd54303d7400da0a269dc55f039397f507a83f5f015ebbf150e7631c270f52684657", 0xd4}, {&(0x7f0000002900)="4ed6e535fcab0bf2aaba7609ad7ddb5152e86d42972bb106562972ddd8e7d266510328457fff017e64617b7b321e91149c3c455c26ca9f6a4bf3f2290b72", 0x3e}, {&(0x7f0000002940)="6c8daace06ff5d6e890a8ceac9453384dee0343cc3aa651461327b841880fa29d09dd267", 0x24}, {&(0x7f0000002980)="25d3994fc6aae9296944d60e98cd08bb40423ab1d17d49c19d4e60dd356e049cfee15022d3ee9bb4de712e1719bdb8589211740827bf87af", 0x38}, {&(0x7f00000029c0)="5dfb6e0da384effdc627dbbf67912d92c5776c4e0352fda77520d4c2d19a5d44ee8bfb9cc73f9b377176dd3449994d16456e9e4fe73051d1b31374adcc2df56612a5ae06b32db2d11803724730655d956903312fe8165e18303e9a5330e1f9f55797b02510cfaee2b722199f95490daffde5733f2cfe9534781a3bd2e070bda4823dd91ceabbb103b9e0f79d990eb33559781af72499fc300b86579c675e4aef05ee634112667a68535fb416374a27f7bb89abaab7554d1b3c85784ef2a7484420acff", 0xc3}], 0x9, &(0x7f0000002e40)=[@rights={{0x28, 0x1, 0x1, [r2, r4, r4, r0, r0, r3]}}, @rights={{0x20, 0x1, 0x1, [r4, r0, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r3]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2, r1, r4, r6, r3, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x100, 0x10}}], 0x2, 0x400c0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x1}, 0x94)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r15=>0x0})
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r16, r15, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002c0002000000119078000000000000000000004e20001890780400000007740000fdfffffffffffdffe93e04326bc223b56e745226087af671823192c1ad359b8b086d19e499fc59697dc65c8068e75c119cb8efc8deb9c225c645cc0574673ff6632f24499c49fbde3ea4ffcdd1c2385b0dc28ee7db1fcdc38c1cf92445402b3e54d54262ce53fee5d36aee8f4c0675aa46f563e721f2c0df04f4e021821e701402f70a91b647b9042f24db8a480f17cf"], 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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")
r17 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r17, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40020}, 0x80000)

2.549697576s ago: executing program 0 (id=3850):
r0 = geteuid()
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0xff08, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000005c0)={[{@nojournal_checksum}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@noblock_validity}, {@user_xattr, 0x0}, {@dax_never}, {@acl}, {@nodiscard}, {@nogrpid}, {@usrjquota}, {@grpid}, {@noinit_itable}, {@noload}, {@norecovery}, {@abort}, {@dax_never}, {@grpid}], [{@audit}, {@fowner_lt}, {@fowner_gt={'fowner>', r0}}], 0x2c}, 0xa, 0x543, &(0x7f0000001dc0)="$eJzs3M9rHNcdAPDvrla/Wqnauj9dt7Vat1S01LLkn4cebNOCLy2FluJeCqokG1eyWywVbFdguRQbemjxX+Akt0D+geSUXEISckjwNSaQS0LABF2s+BAmzM6MtKvV6pe1ErI+H1jtmzdvdt5785523nu7G8C+NZj+KUX0RcQHfRED2WZjgsHsaXFhbvzzhbnxUiTJHz4r1dI9WZgbL5IWx3013xgqR5T/U4pDEZEMNJy2e+bmramx6enJ63nE8Gw5D10duzx5efLa6JkzJ473nj41enJbytlRBA5e+PP9345fvP/Xt19J85vk0fXlyFRrf7s2f4alihiMwca6rPPTDb/u3tBfFy5V0r/l3csMG5a22vRydab9Pwaio7aVGYjf/HtXMwe0VZIkSXdT7NJ72XxSr1TKDkiSOwnwHCjFeilW/BcAnhPFG/2ThXSkOjfePA5+vj0+F7URUFruxdqjmKmo1Eawg9VsbNTZpvN/MyIuzj99UNyD7bf6BwB23uvnIu6dz+47ike2pxzfrkv3tcjWhqoR8fWIOBAR34iIVyPiWxG1tN+JiO/WHdO/7ipAZ7b+VKf5/uf93jxQf7u6bdL7v1/la1vFI9uzlPNqR77VXyt/Z+nSlenJY3mdDEVnd7o90vzSS9Nqb/z64f9bnX8wv/8rHun50+flFOVPKysm6CbGZseetdyFx3dqFXu7ofwfRW0Rq5IvXqVPByPie1t4/bTOrvz85e+32t9Q/rScTeX/33KwuuLgyhYytELyYsTPsus/Hw3XPyt8Vx4anr36j+GZm7d+eaV+fXLk9KnRk8M9MT15bLhoFc3eee/u7/Ng0zBijetfdI22LqQ9vhM9X1m1/S+tXFbT0NJ67cxmXj3runcf3Ws5ptlq++8q/bEWLtZnb4zNzl4fiegqzTfHjy4fe2OstyF92v6Hjqze/w9EfPFCftyhiEgb8Q8i4ocRcTjP+48i4scRcWSNWnjr/E/+1moIOZjGrln+9krLP7Gp698qcPbdiNV3dUy9+VrTif+bNe/6698ZTx8sNi2Yp9f/RC00lMdMjM32rFeutXJaH3iGqgMAAIA943BE9EWpfDSfaOr7VzHdWsygzMz+4tLf/3ltIvuOQDU6y8VM10DdfOhIPj2XbqdHjdZtp/uP1+aNkyRJetPtdPw+3b97xQby7+o09P8ol48ezfZ90rHbuQPablPraK2+0QbsSSv7/6M1U0/Vhbf/AxnAztqGz9EAe5T+D/vXhvt/u74FB+ya1fr/7YjFXcgKsMNW6/9/aoo5uyN5AXaW8T/sX1vv/z4MAHud93/Ylzb0JfktBA5cWCNNqdKek7YOlCMLfPyXrNgrfwWgGlHEFPc0a7/gh+WotPi5g00GOp69gGmO85jehmtaXvWontiOWo3yumkqm/ghhpaB3mhDkygvx5TWSdwbU7972NYm2t3cIFe23igq4XYRuNXuLlPrBC/t4r8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbfFlAAAA//+kScac")
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r7, 0x100, 0x0)

2.440596762s ago: executing program 7 (id=3851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844)

2.27150427s ago: executing program 7 (id=3852):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
r6 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)

2.196774024s ago: executing program 4 (id=3853):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110b9000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8000)
r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3)
syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00')

2.146447286s ago: executing program 0 (id=3854):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0})
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

2.124684417s ago: executing program 6 (id=3855):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9361, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0", 0x14}], 0x1}, 0x40040)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2})
fsopen(0x0, 0x7ddd913026ac0d12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) (fail_nth: 3)
syz_io_uring_setup(0x72e5, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=")
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000180))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\t!=&\x00')
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080))

1.728661267s ago: executing program 7 (id=3856):
sync()
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
chroot(&(0x7f0000000040)='./file0\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.704618588s ago: executing program 0 (id=3857):
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r8 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.518742237s ago: executing program 7 (id=3858):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6d4}, &(0x7f00000001c0)=0x8)

1.496574938s ago: executing program 7 (id=3859):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="54000000060605"], 0x54}}, 0x48c0) (fail_nth: 2)

1.495519388s ago: executing program 0 (id=3860):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x10001, 0x4)

1.45753034s ago: executing program 0 (id=3861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)

1.325723666s ago: executing program 7 (id=3862):
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
set_mempolicy_home_node(&(0x7f000091d000/0x3000)=nil, 0x3000, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x0, @perf_config_ext={0x81, 0x4b}, 0x101000, 0x80007, 0x8, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffdc1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="21000000000000000500000080001000ec1b9f762004a750edfca7843c17", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000020000000000000000000000020000000000000000"], 0x50)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000200)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r2 = syz_io_uring_setup(0x499, &(0x7f00000000c0)={0x0, 0x79af, 0x3181, 0x9, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x14, 0x3, @fd, 0x7, 0x0, 0x0, 0x8, 0x1, {0x1}})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0xc000)

1.275992569s ago: executing program 1 (id=3863):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
fchdir(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x400000)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="af", 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_int(r2, &(0x7f00000000c0)=0xa7, 0x12)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="842000000000000014001280090001"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000faff00001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
lseek(r8, 0x289e0cb5, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xbe, 0x1000000000000}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)

1.25360527s ago: executing program 6 (id=3864):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x1, 0x0, 0x0, 0x4, 0x350, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

595.042492ms ago: executing program 4 (id=3865):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000002c80)=@ethtool_rxnfc={0x31, 0x11, 0xe8, {0x4, @hdata="4ccbebb4add1395ee325a350b1e8d5aa4bc8f864be3e8b34fc5684fd0ad87b3e9ebdb22bfff77549fba411b6983ce1727dffae91", {0x0, @random="f860c2d67e46", 0xa3b7, 0x3, [0x100, 0x3ff]}, @udp_ip4_spec={@multicast1, @remote, 0x4e21, 0x4e22}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0xfff9, 0x7ff, [0x1000, 0x203f]}, 0xe, 0x3ff}}})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x3, 0x3, 0xffffffff, 0x40})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x10000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
listen(r3, 0x8)
accept$inet(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x94)

513.576656ms ago: executing program 0 (id=3866):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000280)=0x7)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x20ffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000080)})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x9bca8b37701fe6b1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)

0s ago: executing program 6 (id=3867):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb})
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x40091}, 0x4008000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r2, 0x0, 0x4050)
dup(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000010, &(0x7f0000000840)=ANY=[], 0x4, 0x27a, &(0x7f0000000440)="$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")
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.016751][T18274] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  586.257193][T18287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3404'.
[  586.525670][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.898421][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  586.898436][   T28] audit: type=1400 audit(1773800413.519:2338): avc:  denied  { connect } for  pid=18294 comm="syz.0.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  587.171069][T18301] syzkaller0: entered promiscuous mode
[  587.171097][T18301] syzkaller0: entered allmulticast mode
[  587.269554][T18314] 9pnet_fd: Insufficient options for proto=fd
[  588.294068][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3421'.
[  588.355170][T18327] loop1: detected capacity change from 0 to 512
[  588.441415][   T28] audit: type=1400 audit(1773800414.970:2339): avc:  denied  { bind } for  pid=18330 comm="syz.7.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  588.584931][   T28] audit: type=1400 audit(1773800414.970:2340): avc:  denied  { setopt } for  pid=18330 comm="syz.7.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  588.586919][T18335] netlink: 'syz.6.3421': attribute type 16 has an invalid length.
[  588.718969][T18337] loop1: detected capacity change from 0 to 512
[  588.759060][T18335] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3421'.
[  588.759205][T18329] tmpfs: Bad value for 'size'
[  588.789383][T18337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.813656][T18337] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  588.933641][T18352] loop4: detected capacity change from 0 to 8192
[  589.029228][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.137242][T18364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3427'.
[  589.165947][   T35] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  589.175187][   T35] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  589.585776][T18346] syz.4.3427 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  589.600393][T18346] CPU: 0 UID: 0 PID: 18346 Comm: syz.4.3427 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  589.600430][T18346] Tainted: [W]=WARN
[  589.600438][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  589.600502][T18346] Call Trace:
[  589.600509][T18346]  <TASK>
[  589.600519][T18346]  __dump_stack+0x1d/0x30
[  589.600549][T18346]  dump_stack_lvl+0x95/0xd0
[  589.600577][T18346]  dump_stack+0x15/0x1b
[  589.600622][T18346]  dump_header+0x80/0x240
[  589.600724][T18346]  oom_kill_process+0x295/0x350
[  589.600826][T18346]  out_of_memory+0x97d/0xb80
[  589.600853][T18346]  try_charge_memcg+0x62e/0xa10
[  589.600953][T18346]  obj_cgroup_charge_pages+0x23/0xc0
[  589.601037][T18346]  __memcg_kmem_charge_page+0x9e/0x170
[  589.601076][T18346]  __alloc_frozen_pages_noprof+0x18a/0x360
[  589.601147][T18346]  alloc_pages_mpol+0xb3/0x260
[  589.601176][T18346]  alloc_pages_noprof+0x8f/0x130
[  589.601208][T18346]  __vmalloc_node_range_noprof+0xa46/0x12b0
[  589.601243][T18346]  __kvmalloc_node_noprof+0x3d4/0x650
[  589.601343][T18346]  ? ip_set_alloc+0x24/0x30
[  589.601376][T18346]  ? ip_set_alloc+0x24/0x30
[  589.601407][T18346]  ip_set_alloc+0x24/0x30
[  589.601517][T18346]  hash_netiface_create+0x282/0x740
[  589.601593][T18346]  ? __pfx_hash_netiface_create+0x10/0x10
[  589.601690][T18346]  ip_set_create+0x3cf/0x970
[  589.601731][T18346]  ? __nla_parse+0x40/0x60
[  589.601807][T18346]  nfnetlink_rcv_msg+0x509/0x5d0
[  589.601857][T18346]  netlink_rcv_skb+0x123/0x220
[  589.601889][T18346]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  589.601954][T18346]  nfnetlink_rcv+0x167/0x1720
[  589.601985][T18346]  ? __kfree_skb+0x109/0x150
[  589.602016][T18346]  ? nlmon_xmit+0x4f/0x60
[  589.602118][T18346]  ? consume_skb+0x4b/0x160
[  589.602149][T18346]  ? nlmon_xmit+0x4f/0x60
[  589.602172][T18346]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  589.602363][T18346]  ? __dev_queue_xmit+0x136c/0x1f20
[  589.602397][T18346]  ? __dev_queue_xmit+0x148/0x1f20
[  589.602433][T18346]  ? ref_tracker_free+0x37d/0x3e0
[  589.602547][T18346]  ? __netlink_deliver_tap+0x4dc/0x500
[  589.602582][T18346]  netlink_unicast+0x5c0/0x690
[  589.602685][T18346]  netlink_sendmsg+0x5c8/0x6f0
[  589.602719][T18346]  ? __pfx_netlink_sendmsg+0x10/0x10
[  589.602750][T18346]  ____sys_sendmsg+0x563/0x5b0
[  589.602787][T18346]  ___sys_sendmsg+0x195/0x1e0
[  589.602828][T18346]  __x64_sys_sendmsg+0xd4/0x160
[  589.602867][T18346]  x64_sys_call+0x194c/0x3020
[  589.603026][T18346]  do_syscall_64+0x12c/0x370
[  589.603050][T18346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.603072][T18346] RIP: 0033:0x7f574dd3c799
[  589.603145][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  589.603164][T18346] RSP: 002b:00007f574c78f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  589.603223][T18346] RAX: ffffffffffffffda RBX: 00007f574dfb5fa0 RCX: 00007f574dd3c799
[  589.603236][T18346] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003
[  589.603249][T18346] RBP: 00007f574ddd2c99 R08: 0000000000000000 R09: 0000000000000000
[  589.603263][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.603279][T18346] R13: 00007f574dfb6038 R14: 00007f574dfb5fa0 R15: 00007ffdb2793878
[  589.603302][T18346]  </TASK>
[  589.603310][T18346] memory: usage 307200kB, limit 307200kB, failcnt 1204
[  589.956869][T18346] memory+swap: usage 311520kB, limit 9007199254740988kB, failcnt 0
[  589.964825][T18346] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  589.978225][T18346] Memory cgroup stats for /syz4:
[  589.978449][T18346] cache 0
[  589.986366][T18346] rss 4096
[  589.999617][T18346] shmem 0
[  590.002571][T18346] mapped_file 0
[  590.006029][T18346] dirty 0
[  590.008951][T18346] writeback 0
[  590.031631][T18346] workingset_refault_anon 702
[  590.036333][T18346] workingset_refault_file 327
[  590.050656][T18346] swap 4423680
[  590.054110][T18346] swapcached 15306752
[  590.058112][T18346] pgpgin 524894
[  590.061619][T18346] pgpgout 524891
[  590.074417][T18346] pgfault 221418
[  590.077963][T18346] pgmajfault 178
[  590.081490][T18346] inactive_anon 4096
[  590.095757][T18346] active_anon 0
[  590.099305][T18346] inactive_file 8192
[  590.109788][T18346] active_file 0
[  590.113238][T18346] unevictable 0
[  590.116699][T18346] hierarchical_memory_limit 314572800
[  590.136925][T18346] hierarchical_memsw_limit 9223372036854771712
[  590.143204][T18346] total_cache 0
[  590.146670][T18346] total_rss 4096
[  590.150354][T18346] total_shmem 0
[  590.153814][T18346] total_mapped_file 0
[  590.157793][T18346] total_dirty 0
[  590.164724][T18346] total_writeback 0
[  590.168634][T18346] total_workingset_refault_anon 702
[  590.183004][T18346] total_workingset_refault_file 327
[  590.188214][T18346] total_swap 4423680
[  590.192557][T18346] total_swapcached 15306752
[  590.197065][T18346] total_pgpgin 524894
[  590.201038][T18346] total_pgpgout 524891
[  590.205558][T18346] total_pgfault 221418
[  590.209612][T18346] total_pgmajfault 178
[  590.213912][T18346] total_inactive_anon 4096
[  590.218480][T18346] total_active_anon 0
[  590.222560][T18346] total_inactive_file 8192
[  590.227241][T18346] total_active_file 0
[  590.231288][T18346] total_unevictable 0
[  590.236131][T18346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3427,pid=18341,uid=0
[  590.251329][T18346] Memory cgroup out of memory: Killed process 18341 (syz.4.3427) total-vm:98532kB, anon-rss:1232kB, file-rss:26612kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  590.448472][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3437'.
[  590.456511][   T28] audit: type=1400 audit(1773800416.842:2341): avc:  denied  { read } for  pid=18385 comm="syz.7.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  590.482016][T18387] ip6gre1: entered promiscuous mode
[  590.487247][T18387] ip6gre1: entered allmulticast mode
[  590.526842][T18387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3437'.
[  590.542981][   T28] audit: type=1400 audit(1773800416.935:2342): avc:  denied  { listen } for  pid=18392 comm="syz.6.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  590.597938][   T28] audit: type=1400 audit(1773800416.945:2343): avc:  denied  { getopt } for  pid=18392 comm="syz.6.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  590.617662][ T5364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  590.639784][ T5364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  590.647451][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  590.674672][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3441'.
[  590.685254][   T28] audit: type=1400 audit(1773800416.945:2344): avc:  denied  { setopt } for  pid=18392 comm="syz.6.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  590.821133][T18402] netlink: 'syz.6.3441': attribute type 16 has an invalid length.
[  590.883585][T18402] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3441'.
[  590.897967][T18402] tmpfs: Bad value for 'size'
[  591.088550][T18406] loop6: detected capacity change from 0 to 128
[  591.095472][   T28] audit: type=1400 audit(1773800417.441:2345): avc:  denied  { create } for  pid=18405 comm="syz.6.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  591.120176][   T28] audit: type=1400 audit(1773800417.441:2346): avc:  denied  { ioctl } for  pid=18405 comm="syz.6.3443" path="socket:[55804]" dev="sockfs" ino=55804 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  591.146620][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3443'.
[  591.408408][T18414] loop7: detected capacity change from 0 to 8192
[  591.417017][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  591.431583][T18411] loop4: detected capacity change from 0 to 512
[  591.500732][T18414]  loop7: p1 < > p2 p4 < p5 >
[  591.505559][T18414] loop7: partition table partially beyond EOD, truncated
[  591.513554][T18414] loop7: p1 start 134217728 is beyond EOD, truncated
[  591.520461][T18414] loop7: p2 size 591360 extends beyond EOD, truncated
[  591.583795][T18414] loop7: p5 size 591360 extends beyond EOD, truncated
[  591.624129][T18411] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3445: inode has both inline data and extents flags
[  591.692758][T18411] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  591.693446][T18411] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3445: couldn't read orphan inode 15 (err -117)
[  591.702659][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  591.702703][    C1] EXT4-fs (loop4): initial error at time 1773800418: ext4_orphan_get:1391: inode 15
[  591.702751][    C1] EXT4-fs (loop4): last error at time 1773800418: ext4_orphan_get:1391: inode 15
[  591.762699][ T3408] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  591.959475][ T3680] udevd[3680]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  591.960217][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  591.977508][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  591.987328][T18411] loop4: lost filesystem error report for type 5 error -117
[  591.993300][T18411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  592.003728][   T28] audit: type=1400 audit(1773800418.292:2347): avc:  denied  { create } for  pid=18420 comm="syz.7.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  592.061427][T18421] xt_TCPMSS: Only works on TCP SYN packets
[  592.110033][T18411] netlink: 'syz.4.3445': attribute type 10 has an invalid length.
[  592.241304][T18411] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3445'.
[  592.272772][T18411] bond0: entered promiscuous mode
[  592.379376][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3450'.
[  592.415626][T18411] bond_slave_0: entered promiscuous mode
[  592.442704][T18436] loop6: detected capacity change from 0 to 512
[  592.511141][T18411] bond_slave_1: entered promiscuous mode
[  592.578423][T18411] bridge0: port 3(bond0) entered blocking state
[  592.640288][T18411] bridge0: port 3(bond0) entered disabled state
[  592.646948][T18411] bond0: entered allmulticast mode
[  592.647357][T18411] bond_slave_0: entered allmulticast mode
[  592.647580][T18411] bond_slave_1: entered allmulticast mode
[  592.745386][T18411] bridge0: port 3(bond0) entered blocking state
[  592.758718][T18411] bridge0: port 3(bond0) entered forwarding state
[  592.847813][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  593.103421][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3454'.
[  593.189283][T18444] loop4: detected capacity change from 0 to 128
[  593.256179][T18448] netlink: 'syz.6.3454': attribute type 16 has an invalid length.
[  593.293690][T18448] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3454'.
[  593.362430][T18448] tmpfs: Bad value for 'size'
[  593.474257][T18453] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3451'.
[  593.655450][T18458] loop6: detected capacity change from 0 to 128
[  593.706257][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3456'.
[  593.946402][T18464] loop4: detected capacity change from 0 to 256
[  593.971322][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  593.971345][   T28] audit: type=1400 audit(1773800420.089:2350): avc:  denied  { execute } for  pid=18462 comm="syz.6.3458" path="/146/cgroup.stat" dev="tmpfs" ino=894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  595.085670][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  595.124507][T18470] loop1: detected capacity change from 0 to 512
[  595.144624][T18464] FAT-fs (loop4): Directory bread(block 64) failed
[  595.151199][T18464] FAT-fs (loop4): Directory bread(block 65) failed
[  595.157776][T18464] FAT-fs (loop4): Directory bread(block 66) failed
[  595.164359][T18464] FAT-fs (loop4): Directory bread(block 67) failed
[  595.170918][T18464] FAT-fs (loop4): Directory bread(block 68) failed
[  595.177556][T18464] FAT-fs (loop4): Directory bread(block 69) failed
[  595.184184][T18464] FAT-fs (loop4): Directory bread(block 70) failed
[  595.190718][T18464] FAT-fs (loop4): Directory bread(block 71) failed
[  595.197279][T18464] FAT-fs (loop4): Directory bread(block 72) failed
[  595.203851][T18464] FAT-fs (loop4): Directory bread(block 73) failed
[  595.280601][T18471] loop6: detected capacity change from 0 to 8192
[  595.334817][T18464] xt_TPROXY: Can be used only with -p tcp or -p udp
[  595.367545][T11167]  loop6: p1 < > p2 p4 < p5 >
[  595.372554][T11167] loop6: partition table partially beyond EOD, truncated
[  595.435222][T11167] loop6: p1 start 134217728 is beyond EOD, truncated
[  595.631132][T18470] EXT4-fs (loop1): 1 truncate cleaned up
[  595.642338][T11167] loop6: p2 size 591360 extends beyond EOD, truncated
[  595.666232][T18470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.797525][T11167] loop6: p5 size 591360 extends beyond EOD, truncated
[  595.900285][T18471]  loop6: p1 < > p2 p4 < p5 >
[  595.905050][T18471] loop6: partition table partially beyond EOD, truncated
[  595.912326][T18471] loop6: p1 start 134217728 is beyond EOD, truncated
[  595.919109][T18471] loop6: p2 size 591360 extends beyond EOD, truncated
[  595.926880][T18471] loop6: p5 size 591360 extends beyond EOD, truncated
[  596.110404][T18483] loop4: detected capacity change from 0 to 8192
[  596.143857][T18483]  loop4: p1 < > p2 p4 < p5 >
[  596.148601][T18483] loop4: partition table partially beyond EOD, truncated
[  596.155942][T18483] loop4: p1 start 134217728 is beyond EOD, truncated
[  596.162634][T18483] loop4: p2 size 591360 extends beyond EOD, truncated
[  596.187218][T18483] loop4: p5 size 591360 extends beyond EOD, truncated
[  596.342685][   T28] audit: type=1400 audit(1773800422.364:2351): avc:  denied  { ioctl } for  pid=18469 comm="syz.1.3460" path="/173/file1/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  597.086398][T18491] __nla_validate_parse: 30 callbacks suppressed
[  597.086490][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3465'.
[  597.890631][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  597.890906][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  597.910710][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3467'.
[  597.920984][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  597.985372][T18502] loop4: detected capacity change from 0 to 256
[  598.369890][T18499] netlink: 'syz.7.3467': attribute type 16 has an invalid length.
[  598.377839][T18499] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3467'.
[  598.395334][T18499] tmpfs: Bad value for 'size'
[  598.600977][T18509] loop4: detected capacity change from 0 to 8192
[  598.633385][T11167]  loop4: p1 < > p2 p4 < p5 >
[  598.787176][   T28] audit: type=1400 audit(1773800424.647:2352): avc:  denied  { create } for  pid=18506 comm="syz.7.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  598.816734][T11167] loop4: partition table partially beyond EOD, truncated
[  598.980521][T11167] loop4: p1 start 134217728 is beyond EOD, truncated
[  599.008185][T11167] loop4: p2 size 591360 extends beyond EOD, truncated
[  599.099920][   T28] audit: type=1400 audit(1773800424.928:2353): avc:  denied  { map } for  pid=18506 comm="syz.7.3468" path="socket:[55990]" dev="sockfs" ino=55990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  599.192567][T11167] loop4: p5 size 591360 extends beyond EOD, truncated
[  599.324637][   T28] audit: type=1400 audit(1773800424.928:2354): avc:  denied  { read } for  pid=18506 comm="syz.7.3468" path="socket:[55990]" dev="sockfs" ino=55990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  599.356785][T18519] loop0: detected capacity change from 0 to 128
[  599.501003][T18509]  loop4: p1 < > p2 p4 < p5 >
[  599.503146][   T28] audit: type=1400 audit(1773800425.003:2355): avc:  denied  { create } for  pid=18506 comm="syz.7.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  599.505933][T18509] loop4: partition table partially beyond EOD, truncated
[  599.506086][T18509] loop4: p1 start 134217728 is beyond EOD, truncated
[  599.539137][T18509] loop4: p2 size 591360 extends beyond EOD, truncated
[  599.546829][T18509] loop4: p5 size 591360 extends beyond EOD, truncated
[  599.821421][T18524] loop0: detected capacity change from 0 to 512
[  599.838587][T18524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  599.899475][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3475'.
[  600.137615][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3476'.
[  600.213279][T18524] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  600.235706][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  600.235931][T18524] EXT4-fs (loop0): 1 truncate cleaned up
[  600.242175][    C0] EXT4-fs (loop0): initial error at time 1773800426: ext4_mb_generate_buddy:1315
[  600.249440][T18524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  600.257357][    C0] EXT4-fs (loop0): last error at time 1773800426: ext4_mb_generate_buddy:1315
[  600.315067][T18524] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  600.358030][   T28] audit: type=1400 audit(1773800426.098:2356): avc:  denied  { relabelto } for  pid=18522 comm="syz.0.3474" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  600.401159][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3479'.
[  600.436337][   T28] audit: type=1400 audit(1773800426.098:2357): avc:  denied  { write } for  pid=18522 comm="syz.0.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  600.524872][   T28] audit: type=1400 audit(1773800426.276:2358): avc:  denied  { getopt } for  pid=18537 comm="syz.4.3473" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  600.717070][T18542] netlink: 'syz.6.3479': attribute type 16 has an invalid length.
[  600.747576][T18544] tmpfs: Bad value for 'size'
[  600.755954][T15960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.788831][T18542] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3479'.
[  600.871550][T18547] 9p: Bad value for 'rfdno'
[  601.084364][T18554] loop4: detected capacity change from 0 to 8192
[  601.629487][T18559] loop6: detected capacity change from 0 to 128
[  601.635622][T11167]  loop4: p1 < > p2 p4 < p5 >
[  601.660663][T11167] loop4: partition table partially beyond EOD, truncated
[  601.678428][T11167] loop4: p1 start 134217728 is beyond EOD, truncated
[  601.701626][T11167] loop4: p2 size 591360 extends beyond EOD, truncated
[  601.707675][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3485'.
[  601.719091][T11167] loop4: p5 size 591360 extends beyond EOD, truncated
[  601.737149][T18554]  loop4: p1 < > p2 p4 < p5 >
[  601.741925][T18554] loop4: partition table partially beyond EOD, truncated
[  601.749089][T18554] loop4: p1 start 134217728 is beyond EOD, truncated
[  601.755822][T18554] loop4: p2 size 591360 extends beyond EOD, truncated
[  601.763419][T18554] loop4: p5 size 591360 extends beyond EOD, truncated
[  601.943365][T18561] loop6: detected capacity change from 0 to 1024
[  601.977722][T18561] EXT4-fs: inline encryption not supported
[  601.988160][T18561] EXT4-fs: Ignoring removed nobh option
[  601.993723][T18561] EXT4-fs: Ignoring removed bh option
[  602.036426][T18561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.351366][   T28] audit: type=1400 audit(1773800427.895:2359): avc:  denied  { getopt } for  pid=18569 comm="syz.4.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  602.372997][T18570] FAULT_INJECTION: forcing a failure.
[  602.372997][T18570] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.386175][T18570] CPU: 1 UID: 0 PID: 18570 Comm: syz.4.3488 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  602.386243][T18570] Tainted: [W]=WARN
[  602.386251][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  602.386325][T18570] Call Trace:
[  602.386333][T18570]  <TASK>
[  602.386342][T18570]  __dump_stack+0x1d/0x30
[  602.386372][T18570]  dump_stack_lvl+0x95/0xd0
[  602.386398][T18570]  dump_stack+0x15/0x1b
[  602.386419][T18570]  should_fail_ex+0x263/0x280
[  602.386474][T18570]  should_fail+0xb/0x20
[  602.386519][T18570]  should_fail_usercopy+0x1a/0x20
[  602.386543][T18570]  strncpy_from_user+0x27/0x250
[  602.386625][T18570]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  602.386653][T18570]  do_getname+0x59/0x1c0
[  602.386680][T18570]  getname_flags+0x1d/0x30
[  602.386702][T18570]  __se_sys_quotactl+0x157/0x660
[  602.386841][T18570]  __x64_sys_quotactl+0x55/0x70
[  602.386882][T18570]  x64_sys_call+0x1a2a/0x3020
[  602.386910][T18570]  do_syscall_64+0x12c/0x370
[  602.386937][T18570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.386961][T18570] RIP: 0033:0x7f574dd3c799
[  602.387059][T18570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.387079][T18570] RSP: 002b:00007f574c78f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  602.387101][T18570] RAX: ffffffffffffffda RBX: 00007f574dfb5fa0 RCX: 00007f574dd3c799
[  602.387117][T18570] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000900
[  602.387132][T18570] RBP: 00007f574c78f090 R08: 0000000000000000 R09: 0000000000000000
[  602.387160][T18570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.387174][T18570] R13: 00007f574dfb6038 R14: 00007f574dfb5fa0 R15: 00007ffdb2793878
[  602.387196][T18570]  </TASK>
[  602.690650][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.784385][T18575] loop6: detected capacity change from 0 to 512
[  602.810648][T18575] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3490: corrupted inode contents
[  602.853970][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.885925][T18575] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  602.886284][T18575] EXT4-fs (loop6): Remounting filesystem read-only
[  602.901933][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  602.901969][    C1] EXT4-fs (loop6): initial error at time 1773800428: ext4_do_update_inode:5569: inode 15
[  602.902003][    C1] EXT4-fs (loop6): last error at time 1773800428: ext4_do_update_inode:5569: inode 15
[  602.980164][T18575] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -30)
[  602.989432][T18575] EXT4-fs (loop6): 1 orphan inode deleted
[  602.995847][T18575] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.065414][   T28] audit: type=1400 audit(1773800428.653:2360): avc:  denied  { create } for  pid=18571 comm="syz.4.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  603.099428][   T28] audit: type=1400 audit(1773800428.653:2361): avc:  denied  { bind } for  pid=18571 comm="syz.4.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  603.152782][   T28] audit: type=1400 audit(1773800428.653:2362): avc:  denied  { setopt } for  pid=18571 comm="syz.4.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  603.225965][T14835] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  603.285177][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3495'.
[  603.295729][    T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  603.323737][    T9] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  603.427844][T18596] netlink: 'syz.6.3495': attribute type 16 has an invalid length.
[  603.464241][T18596] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3495'.
[  603.484075][T18598] tmpfs: Bad value for 'size'
[  603.680026][T18600] loop1: detected capacity change from 0 to 256
[  603.697845][T18600] FAT-fs (loop1): Directory bread(block 64) failed
[  603.704747][T18600] FAT-fs (loop1): Directory bread(block 65) failed
[  603.725994][T18600] FAT-fs (loop1): Directory bread(block 66) failed
[  603.740473][T18600] FAT-fs (loop1): Directory bread(block 67) failed
[  603.763775][T18600] FAT-fs (loop1): Directory bread(block 68) failed
[  603.783354][T18600] FAT-fs (loop1): Directory bread(block 69) failed
[  603.802858][T18600] FAT-fs (loop1): Directory bread(block 70) failed
[  603.823602][T18600] FAT-fs (loop1): Directory bread(block 71) failed
[  603.843068][T18600] FAT-fs (loop1): Directory bread(block 72) failed
[  603.860669][T18600] FAT-fs (loop1): Directory bread(block 73) failed
[  603.887052][T18600] bio_check_eod: 28 callbacks suppressed
[  603.887077][T18600] syz.1.3497: attempt to access beyond end of device
[  603.887077][T18600] loop1: rw=8388608, sector=1192, nr_sectors = 2 limit=256
[  603.920829][T18601] syz.1.3497: attempt to access beyond end of device
[  603.920829][T18601] loop1: rw=8388608, sector=1192, nr_sectors = 2 limit=256
[  603.978939][T18604] loop4: detected capacity change from 0 to 1024
[  604.043760][T18604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  604.076407][T18612] loop1: detected capacity change from 0 to 1024
[  604.086599][T18612] EXT4-fs: inline encryption not supported
[  604.092478][T18612] EXT4-fs: Ignoring removed nobh option
[  604.098493][T18612] EXT4-fs: Ignoring removed bh option
[  604.099448][T18614] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3502'.
[  604.112981][T18604] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.132999][T18604] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.3498: lblock 0 mapped to illegal pblock 0 (length 1)
[  604.146493][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  604.154754][T18604] EXT4-fs (loop4): Remounting filesystem read-only
[  604.163018][   T28] audit: type=1400 audit(1773800429.682:2363): avc:  denied  { write } for  pid=18603 comm="syz.4.3498" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  604.198367][T18612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.362971][T18623] loop6: detected capacity change from 0 to 512
[  604.376791][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  604.460322][T18623] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  604.470046][T18623] EXT4-fs (loop6): orphan cleanup on readonly fs
[  604.470894][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.492667][T18623] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3505: corrupted inode contents
[  604.520398][T18623] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  604.520617][T18623] EXT4-fs (loop6): Remounting filesystem read-only
[  604.536346][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  604.536368][    C0] EXT4-fs (loop6): initial error at time 1773800430: ext4_do_update_inode:5569: inode 16
[  604.536399][    C0] EXT4-fs (loop6): last error at time 1773800430: ext4_do_update_inode:5569: inode 16
[  604.627479][T18623] EXT4-fs (loop6): 1 truncate cleaned up
[  604.634403][ T5387] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  604.682247][ T5387] __quota_error: 2 callbacks suppressed
[  604.682262][ T5387] Quota error (device loop6): write_blk: dquota write failed
[  604.713019][ T5387] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries
[  604.754401][ T5387] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  604.776789][ T5387] Quota error (device loop6): write_blk: dquota write failed
[  604.784326][ T5387] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list
[  604.820403][ T5387] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  604.843484][ T5387] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  604.873030][ T5387] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  604.883382][T18623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  604.907809][ T3421] hid-generic 0080:0005:FFFFFFFE.001E: unknown main item tag 0x0
[  604.915579][ T3421] hid-generic 0080:0005:FFFFFFFE.001E: unknown main item tag 0x0
[  604.926186][ T3421] hid-generic 0080:0005:FFFFFFFE.001E: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  604.952430][T18645] netlink: 'syz.7.3512': attribute type 16 has an invalid length.
[  604.972774][T18645] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3512'.
[  604.990303][T18644] fido_id[18644]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  605.008138][T18647] tmpfs: Bad value for 'size'
[  605.319775][T18651] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3514'.
[  605.374793][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.400900][   T28] audit: type=1400 audit(1773800430.843:2366): avc:  denied  { getopt } for  pid=18652 comm="syz.0.3515" lport=58999 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  605.484923][T18658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3516'.
[  605.515217][   T28] audit: type=1400 audit(1773800430.946:2367): avc:  denied  { map } for  pid=18661 comm="syz.1.3517" path="socket:[57026]" dev="sockfs" ino=57026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  605.548565][T18658] ipt_rpfilter: unknown options
[  605.561578][T18658] loop6: detected capacity change from 0 to 512
[  605.564991][   T28] audit: type=1400 audit(1773800430.974:2368): avc:  denied  { nlmsg_write } for  pid=18661 comm="syz.1.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  605.600155][T18658] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  605.614628][   T28] audit: type=1400 audit(1773800430.974:2369): avc:  denied  { audit_write } for  pid=18661 comm="syz.1.3517" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  605.849710][T18665] loop1: detected capacity change from 0 to 1024
[  605.864555][T18665] EXT4-fs: inline encryption not supported
[  605.883928][T18665] EXT4-fs: Ignoring removed nobh option
[  605.897752][T18665] EXT4-fs: Ignoring removed bh option
[  605.975124][T18658] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.3516: corrupted xattr entries
[  605.991846][T18658] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  605.992442][T18658] EXT4-fs (loop6): Remounting filesystem read-only
[  606.001664][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  606.001703][    C0] EXT4-fs (loop6): initial error at time 1773800431: xattr_find_entry:337: inode 15
[  606.001733][    C0] EXT4-fs (loop6): last error at time 1773800431: xattr_find_entry:337: inode 15
[  606.033356][T18658] EXT4-fs (loop6): 1 truncate cleaned up
[  606.039979][T18658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.066951][T18669] loop4: detected capacity change from 0 to 512
[  606.091735][T18665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  606.097298][T18669] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3520: corrupted inode contents
[  606.176603][T18669] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  606.176808][T18669] EXT4-fs (loop4): Remounting filesystem read-only
[  606.192441][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  606.192462][    C1] EXT4-fs (loop4): initial error at time 1773800431: ext4_do_update_inode:5569: inode 15
[  606.192502][    C1] EXT4-fs (loop4): last error at time 1773800431: ext4_do_update_inode:5569: inode 15
[  606.230081][T18669] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -30)
[  606.274087][T18669] EXT4-fs (loop4): 1 orphan inode deleted
[  606.284833][T18669] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.430071][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.473753][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.634113][T13702] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  606.811788][T18687] sctp: [Deprecated]: syz.4.3524 (pid 18687) Use of struct sctp_assoc_value in delayed_ack socket option.
[  606.811788][T18687] Use struct sctp_sack_info instead
[  606.865783][T18689] net_ratelimit: 10 callbacks suppressed
[  606.865950][T18689] netlink: zone id is out of range
[  606.952583][T18689] netlink: get zone limit has 8 unknown bytes
[  606.977453][T18694] netlink: zone id is out of range
[  606.983395][T18694] netlink: zone id is out of range
[  606.991245][T18694] netlink: get zone limit has 8 unknown bytes
[  607.295319][T18697] loop1: detected capacity change from 0 to 1024
[  607.309274][T18697] EXT4-fs: Ignoring removed nomblk_io_submit option
[  607.321403][T18704] loop6: detected capacity change from 0 to 256
[  607.430696][T18704] FAT-fs (loop6): Directory bread(block 64) failed
[  607.437366][T18704] FAT-fs (loop6): Directory bread(block 65) failed
[  607.444034][T18704] FAT-fs (loop6): Directory bread(block 66) failed
[  607.450660][T18704] FAT-fs (loop6): Directory bread(block 67) failed
[  607.457251][T18704] FAT-fs (loop6): Directory bread(block 68) failed
[  607.463857][T18704] FAT-fs (loop6): Directory bread(block 69) failed
[  607.470495][T18704] FAT-fs (loop6): Directory bread(block 70) failed
[  607.477011][T18704] FAT-fs (loop6): Directory bread(block 71) failed
[  607.483619][T18704] FAT-fs (loop6): Directory bread(block 72) failed
[  607.490157][T18704] FAT-fs (loop6): Directory bread(block 73) failed
[  607.522442][T18697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.542956][T18704] xt_TPROXY: Can be used only with -p tcp or -p udp
[  607.810920][T18714] xt_CT: No such helper "snmp"
[  607.925287][T18718] FAULT_INJECTION: forcing a failure.
[  607.925287][T18718] name failslab, interval 1, probability 0, space 0, times 0
[  608.003731][T18718] CPU: 0 UID: 0 PID: 18718 Comm: syz.4.3532 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  608.003840][T18718] Tainted: [W]=WARN
[  608.003846][T18718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  608.003895][T18718] Call Trace:
[  608.003902][T18718]  <TASK>
[  608.003911][T18718]  __dump_stack+0x1d/0x30
[  608.003942][T18718]  dump_stack_lvl+0x95/0xd0
[  608.003965][T18718]  dump_stack+0x15/0x1b
[  608.003986][T18718]  should_fail_ex+0x263/0x280
[  608.004066][T18718]  should_failslab+0x8c/0xb0
[  608.004119][T18718]  __kmalloc_noprof+0xb8/0x4e0
[  608.004145][T18718]  ? kernfs_fop_write_iter+0xe2/0x300
[  608.004185][T18718]  kernfs_fop_write_iter+0xe2/0x300
[  608.004257][T18718]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  608.004290][T18718]  vfs_write+0x5a6/0x9f0
[  608.004350][T18718]  ksys_write+0xdc/0x1a0
[  608.004372][T18718]  __x64_sys_write+0x40/0x50
[  608.004389][T18718]  x64_sys_call+0x27e1/0x3020
[  608.004443][T18718]  do_syscall_64+0x12c/0x370
[  608.004472][T18718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.004502][T18718] RIP: 0033:0x7f574dd3c799
[  608.004520][T18718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.004608][T18718] RSP: 002b:00007f574c78f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  608.004657][T18718] RAX: ffffffffffffffda RBX: 00007f574dfb5fa0 RCX: 00007f574dd3c799
[  608.004672][T18718] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000003
[  608.004687][T18718] RBP: 00007f574c78f090 R08: 0000000000000000 R09: 0000000000000000
[  608.004702][T18718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.004714][T18718] R13: 00007f574dfb6038 R14: 00007f574dfb5fa0 R15: 00007ffdb2793878
[  608.004732][T18718]  </TASK>
[  608.221407][T18722] loop4: detected capacity change from 0 to 512
[  608.238266][T18722] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  608.294907][T18722] EXT4-fs (loop4): 1 truncate cleaned up
[  608.300957][T18722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.749055][T18711] veth0_to_team: entered promiscuous mode
[  608.792134][T18712] netlink: 'syz.1.3528': attribute type 8 has an invalid length.
[  608.809756][T18712] sch_fq: defrate 0 ignored.
[  608.822778][T18722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.889076][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.910555][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.970751][ T3394] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  608.984179][ T3394] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  609.068183][T18749] loop4: detected capacity change from 0 to 8192
[  609.088616][T18757] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  609.293711][T18769] netlink: 'syz.7.3547': attribute type 16 has an invalid length.
[  609.309890][T18769] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3547'.
[  609.361101][T18769] tmpfs: Bad value for 'size'
[  609.370879][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3548'.
[  609.416966][T18749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3542'.
[  609.811501][T13702] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  609.824037][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  609.824077][T13702] Tainted: [W]=WARN
[  609.824086][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  609.824100][T13702] Call Trace:
[  609.824109][T13702]  <TASK>
[  609.824132][T13702]  __dump_stack+0x1d/0x30
[  609.824158][T13702]  dump_stack_lvl+0x95/0xd0
[  609.824183][T13702]  dump_stack+0x15/0x1b
[  609.824209][T13702]  dump_header+0x80/0x240
[  609.824242][T13702]  oom_kill_process+0x295/0x350
[  609.824301][T13702]  out_of_memory+0x97d/0xb80
[  609.824328][T13702]  try_charge_memcg+0x62e/0xa10
[  609.824393][T13702]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  609.824503][T13702]  __swap_cache_prepare_and_add+0x386/0x530
[  609.824537][T13702]  swap_cache_alloc_folio+0xa2/0x120
[  609.824577][T13702]  swap_cluster_readahead+0x36b/0x3d0
[  609.824691][T13702]  swapin_readahead+0xde/0x840
[  609.824722][T13702]  ? __rcu_read_unlock+0x4e/0x70
[  609.824743][T13702]  ? __rcu_read_unlock+0x4e/0x70
[  609.824830][T13702]  ? __perf_event_task_sched_in+0xa65/0xad0
[  609.824858][T13702]  ? __rcu_read_unlock+0x4e/0x70
[  609.824877][T13702]  ? swap_cache_get_folio+0x26f/0x280
[  609.824929][T13702]  do_swap_page+0x30d/0x2220
[  609.824955][T13702]  ? finish_task_switch+0x7d/0x280
[  609.825024][T13702]  ? __schedule+0x93c/0xd40
[  609.825088][T13702]  ? __rcu_read_lock+0x36/0x50
[  609.825106][T13702]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  609.825208][T13702]  handle_mm_fault+0xb46/0x3020
[  609.825250][T13702]  ? vma_start_read+0x1c7/0x2c0
[  609.825295][T13702]  do_user_addr_fault+0x62f/0x1050
[  609.825326][T13702]  ? trace_page_fault_user+0x1f/0xe0
[  609.825355][T13702]  exc_page_fault+0x62/0xa0
[  609.825422][T13702]  asm_exc_page_fault+0x26/0x30
[  609.825520][T13702] RIP: 0033:0x7f574dcf7917
[  609.825569][T13702] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  609.825589][T13702] RSP: 002b:00007ffdb2793b70 EFLAGS: 00010202
[  609.825678][T13702] RAX: 0000000000000000 RBX: 000055555b0ff500 RCX: 00007f574dcf7917
[  609.825695][T13702] RDX: 00007ffdb2793bb0 RSI: 0000000000000000 RDI: 0000000000000000
[  609.825710][T13702] RBP: 00007ffdb2793c1c R08: 0000000000000000 R09: 0000000000000000
[  609.825752][T13702] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[  609.825764][T13702] R13: 00000000000927c0 R14: 000000000008cac4 R15: 00007ffdb2793c70
[  609.825789][T13702]  </TASK>
[  609.825901][T13702] memory: usage 307200kB, limit 307200kB, failcnt 1518
[  610.076972][T13702] memory+swap: usage 211744kB, limit 9007199254740988kB, failcnt 0
[  610.085015][T13702] kmem: usage 207356kB, limit 9007199254740988kB, failcnt 0
[  610.092619][T13702] Memory cgroup stats for /syz4:
[  610.092942][T13702] cache 20480
[  610.107751][T13702] rss 98304
[  610.114358][T13702] shmem 0
[  610.119700][T13702] mapped_file 0
[  610.127637][T13702] dirty 0
[  610.132184][T13702] writeback 0
[  610.135581][T13702] workingset_refault_anon 978
[  610.140342][T13702] workingset_refault_file 328
[  610.152351][T13702] swap 4300800
[  610.155911][T13702] swapcached 19623936
[  610.160176][T13702] pgpgin 592964
[  610.164072][T13702] pgpgout 592927
[  610.167708][T13702] pgfault 248568
[  610.171336][T13702] pgmajfault 255
[  610.175111][T13702] inactive_anon 24576
[  610.179191][T13702] active_anon 90112
[  610.189530][T18744] syz.4.3542 (18744) used greatest stack depth: 5776 bytes left
[  610.222529][T18785] netlink: 'syz.6.3553': attribute type 3 has an invalid length.
[  610.243530][T13702] inactive_file 32768
[  610.266812][T13702] active_file 0
[  610.273613][T13702] unevictable 0
[  610.277155][T13702] hierarchical_memory_limit 314572800
[  610.302026][T13702] hierarchical_memsw_limit 9223372036854771712
[  610.322266][T13702] total_cache 20480
[  610.333104][T13702] total_rss 98304
[  610.336842][T13702] total_shmem 0
[  610.375698][T13702] total_mapped_file 0
[  610.418492][T13702] total_dirty 0
[  610.422053][T13702] total_writeback 0
[  610.485163][T18797] loop0: detected capacity change from 0 to 256
[  610.550657][T18797] FAT-fs (loop0): Directory bread(block 64) failed
[  610.557233][T18797] FAT-fs (loop0): Directory bread(block 65) failed
[  610.563927][T18797] FAT-fs (loop0): Directory bread(block 66) failed
[  610.570486][T18797] FAT-fs (loop0): Directory bread(block 67) failed
[  610.577010][T18797] FAT-fs (loop0): Directory bread(block 68) failed
[  610.583606][T18797] FAT-fs (loop0): Directory bread(block 69) failed
[  610.590195][T18797] FAT-fs (loop0): Directory bread(block 70) failed
[  610.596791][T18797] FAT-fs (loop0): Directory bread(block 71) failed
[  610.603339][T18797] FAT-fs (loop0): Directory bread(block 72) failed
[  610.609848][T18797] FAT-fs (loop0): Directory bread(block 73) failed
[  610.653592][T13702] total_workingset_refault_anon 978
[  610.687652][T18797] xt_TPROXY: Can be used only with -p tcp or -p udp
[  610.695841][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.704893][T18797] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.714349][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.723528][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.732581][T18797] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.741811][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.750844][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3554'.
[  610.828339][T13702] total_workingset_refault_file 328
[  610.880902][T13702] total_swap 4300800
[  611.432730][T13702] total_swapcached 19623936
[  611.446083][T13702] total_pgpgin 592964
[  611.454925][T13702] total_pgpgout 592927
[  611.469914][T13702] total_pgfault 248568
[  611.899003][T13702] total_pgmajfault 255
[  611.903093][T13702] total_inactive_anon 24576
[  611.918478][T13702] total_active_anon 90112
[  611.929298][T13702] total_inactive_file 32768
[  611.940128][T13702] total_active_file 0
[  611.944127][T13702] total_unevictable 0
[  612.016400][T13702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3542,pid=18742,uid=0
[  612.070174][T13702] Memory cgroup out of memory: OOM victim 18742 (syz.4.3542) is already exiting. Skip killing the task
[  612.123335][ T3394] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  612.135343][ T3394] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  612.242966][T18818] netlink: 'syz.0.3560': attribute type 16 has an invalid length.
[  612.305273][T18815] tmpfs: Bad value for 'size'
[  612.507940][T18822] vlan2: entered allmulticast mode
[  612.519095][T18822] bridge4: entered allmulticast mode
[  612.763368][T18836] loop0: detected capacity change from 0 to 8192
[  612.876306][ T3304]  loop0: p1 < > p2 p4 < p5 >
[  612.881386][ T3304] loop0: partition table partially beyond EOD, truncated
[  612.910720][ T3304] loop0: p1 start 134217728 is beyond EOD, truncated
[  612.918743][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  612.918760][   T28] audit: type=1400 audit(1773800437.862:2376): avc:  denied  { ioctl } for  pid=18840 comm="syz.4.3570" path="socket:[57489]" dev="sockfs" ino=57489 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  612.975043][ T3304] loop0: p2 size 591360 extends beyond EOD, truncated
[  613.018614][   T28] audit: type=1400 audit(1773800437.862:2377): avc:  denied  { create } for  pid=18841 comm="syz.7.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  613.047528][T18843] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  613.075503][T18843] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  613.117623][   T28] audit: type=1400 audit(1773800437.909:2378): avc:  denied  { bind } for  pid=18841 comm="syz.7.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  613.168521][   T28] audit: type=1400 audit(1773800437.909:2379): avc:  denied  { write } for  pid=18841 comm="syz.7.3563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  613.191835][   T28] audit: type=1400 audit(1773800438.087:2380): avc:  denied  { ioctl } for  pid=18852 comm="syz.6.3573" path="socket:[57527]" dev="sockfs" ino=57527 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  613.219038][ T3304] loop0: p5 size 591360 extends beyond EOD, truncated
[  613.355413][T18865] xt_nat: multiple ranges no longer supported
[  613.424609][T18867] hsr_slave_0: left promiscuous mode
[  613.430692][T18867] hsr_slave_1: left promiscuous mode
[  613.581034][T18836]  loop0: p1 < > p2 p4 < p5 >
[  613.585824][T18836] loop0: partition table partially beyond EOD, truncated
[  613.592960][T18836] loop0: p1 start 134217728 is beyond EOD, truncated
[  613.599637][T18836] loop0: p2 size 591360 extends beyond EOD, truncated
[  613.607266][T18836] loop0: p5 size 591360 extends beyond EOD, truncated
[  613.759533][   T28] audit: type=1400 audit(1773800438.658:2381): avc:  denied  { create } for  pid=18869 comm="syz.1.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  613.790072][T18870] loop1: detected capacity change from 0 to 8192
[  613.803071][   T28] audit: type=1400 audit(1773800438.695:2382): avc:  denied  { ioctl } for  pid=18869 comm="syz.1.3578" path="socket:[57328]" dev="sockfs" ino=57328 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  614.100476][T18883] FAULT_INJECTION: forcing a failure.
[  614.100476][T18883] name failslab, interval 1, probability 0, space 0, times 0
[  614.113198][   T28] audit: type=1400 audit(1773800438.976:2383): avc:  denied  { read } for  pid=18882 comm="syz.4.3584" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  614.146799][T18881] loop0: detected capacity change from 0 to 1024
[  614.162462][T18881] EXT4-fs: inline encryption not supported
[  614.188512][T18881] EXT4-fs: Ignoring removed nobh option
[  614.214695][T18881] EXT4-fs: Ignoring removed bh option
[  614.280722][T18883] CPU: 1 UID: 0 PID: 18883 Comm: syz.4.3584 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  614.280820][T18883] Tainted: [W]=WARN
[  614.280828][T18883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  614.280879][T18883] Call Trace:
[  614.280887][T18883]  <TASK>
[  614.280897][T18883]  __dump_stack+0x1d/0x30
[  614.280927][T18883]  dump_stack_lvl+0x95/0xd0
[  614.280953][T18883]  dump_stack+0x15/0x1b
[  614.281054][T18883]  should_fail_ex+0x263/0x280
[  614.281084][T18883]  ? kobject_uevent_env+0x1c0/0x570
[  614.281117][T18883]  should_failslab+0x8c/0xb0
[  614.281174][T18883]  __kmalloc_cache_noprof+0x5f/0x410
[  614.281204][T18883]  kobject_uevent_env+0x1c0/0x570
[  614.281238][T18883]  ? __fget_files+0x184/0x1c0
[  614.281319][T18883]  kobject_uevent+0x1d/0x30
[  614.281349][T18883]  lo_ioctl+0xe1a/0x13a0
[  614.281403][T18883]  ? ioctl_has_perm+0x27e/0x2d0
[  614.281500][T18883]  ? blkdev_common_ioctl+0xc12/0x20b0
[  614.281526][T18883]  ? do_vfs_ioctl+0x84f/0xe70
[  614.281548][T18883]  ? selinux_file_ioctl+0x5f7/0xcb0
[  614.281571][T18883]  ? __rcu_read_unlock+0x4e/0x70
[  614.281603][T18883]  ? __rcu_read_unlock+0x4e/0x70
[  614.281624][T18883]  ? __pfx_lo_ioctl+0x10/0x10
[  614.281701][T18883]  ? __pfx_blkdev_ioctl+0x10/0x10
[  614.281725][T18883]  blkdev_ioctl+0x387/0x460
[  614.281750][T18883]  ? __pfx_blkdev_ioctl+0x10/0x10
[  614.281903][T18883]  __se_sys_ioctl+0xce/0x140
[  614.281922][T18883]  __x64_sys_ioctl+0x43/0x50
[  614.281957][T18883]  x64_sys_call+0x1563/0x3020
[  614.281985][T18883]  do_syscall_64+0x12c/0x370
[  614.282007][T18883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.282105][T18883] RIP: 0033:0x7f574dd3c799
[  614.282124][T18883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.282145][T18883] RSP: 002b:00007f574c78f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  614.282169][T18883] RAX: ffffffffffffffda RBX: 00007f574dfb5fa0 RCX: 00007f574dd3c799
[  614.282198][T18883] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000009
[  614.282247][T18883] RBP: 00007f574c78f090 R08: 0000000000000000 R09: 0000000000000000
[  614.282260][T18883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.282331][T18883] R13: 00007f574dfb6038 R14: 00007f574dfb5fa0 R15: 00007ffdb2793878
[  614.282352][T18883]  </TASK>
[  614.477327][   T28] audit: type=1400 audit(1773800438.976:2384): avc:  denied  { open } for  pid=18882 comm="syz.4.3584" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  614.587376][T18891] loop4: detected capacity change from 0 to 256
[  614.595674][T18881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  614.621548][T15960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.829412][T18912] Ÿë
: port 1(veth0_to_bridge) entered blocking state
[  614.829528][T18912] Ÿë
: port 1(veth0_to_bridge) entered disabled state
[  614.829687][T18912] veth0_to_bridge: entered allmulticast mode
[  614.830322][T18912] veth0_to_bridge: entered promiscuous mode
[  614.833161][T18912] Ÿë
: port 2(veth0_to_team) entered blocking state
[  614.833233][T18912] Ÿë
: port 2(veth0_to_team) entered disabled state
[  614.833335][T18912] veth0_to_team: entered allmulticast mode
[  614.834101][T18912] veth0_to_team: entered promiscuous mode
[  614.921616][T18912] loop4: detected capacity change from 0 to 512
[  615.066184][T18912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  615.066249][T18912] ext4 filesystem being mounted at /208/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  615.069587][T18912] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 1632 free clusters
[  615.069874][T18912] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28
[  615.069955][T18912] EXT4-fs (loop4): This should not happen!! Data will be lost
[  615.069955][T18912] 
[  615.069970][T18912] EXT4-fs (loop4): Total free blocks count 0
[  615.069985][T18912] EXT4-fs (loop4): Free/Dirty block details
[  615.070098][T18912] EXT4-fs (loop4): free_blocks=1536
[  615.070113][T18912] EXT4-fs (loop4): dirty_blocks=1
[  615.070139][T18912] EXT4-fs (loop4): Block reservation details
[  615.070150][T18912] EXT4-fs (loop4): i_reserved_data_blocks=1
[  615.090473][T18923] loop1: detected capacity change from 0 to 512
[  615.187096][T18925] loop0: detected capacity change from 0 to 256
[  615.204809][T18925] FAT-fs (loop0): Directory bread(block 64) failed
[  615.204987][T18925] FAT-fs (loop0): Directory bread(block 65) failed
[  615.205096][T18925] FAT-fs (loop0): Directory bread(block 66) failed
[  615.205271][T18925] FAT-fs (loop0): Directory bread(block 67) failed
[  615.205420][T18925] FAT-fs (loop0): Directory bread(block 68) failed
[  615.205465][T18925] FAT-fs (loop0): Directory bread(block 69) failed
[  615.205553][T18925] FAT-fs (loop0): Directory bread(block 70) failed
[  615.205635][T18925] FAT-fs (loop0): Directory bread(block 71) failed
[  615.205665][T18925] FAT-fs (loop0): Directory bread(block 72) failed
[  615.205723][T18925] FAT-fs (loop0): Directory bread(block 73) failed
[  615.217607][T18925] xt_TPROXY: Can be used only with -p tcp or -p udp
[  615.218508][T18925] __nla_validate_parse: 57 callbacks suppressed
[  615.218533][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.218628][T18925] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.218843][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.218960][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.218975][T18925] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.219199][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.219283][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.219378][T18925] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.219719][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.219802][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'.
[  615.661458][   T28] audit: type=1400 audit(1773800439.622:2385): avc:  denied  { write } for  pid=18908 comm="syz.0.3591" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  616.754011][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  616.867386][T18937] loop1: detected capacity change from 0 to 256
[  616.883562][T18935] loop4: detected capacity change from 0 to 512
[  616.952402][T18939] 9p: Bad value for 'rfdno'
[  616.963660][T18941] loop1: detected capacity change from 0 to 736
[  617.019934][T18941] ISOFS: unable to read i-node block
[  617.032580][T18941] isofs_fill_super: get root inode failed
[  617.051948][T18945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18945 comm=syz.0.3602
[  617.084782][T18942] loop4: detected capacity change from 0 to 512
[  617.150990][T18950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.168774][T18950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.239121][T18942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.267615][T18942] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.783956][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.981879][T18976] loop0: detected capacity change from 0 to 256
[  617.997037][T18974] loop4: detected capacity change from 0 to 128
[  618.446777][T18955] syz.7.3605 (18955) used greatest stack depth: 5680 bytes left
[  618.972379][T18999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.075008][T18999] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  619.453962][T19030] FAULT_INJECTION: forcing a failure.
[  619.453962][T19030] name failslab, interval 1, probability 0, space 0, times 0
[  619.483398][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.488635][T19030] CPU: 0 UID: 60929 PID: 19030 Comm: syz.0.3624 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  619.488720][T19030] Tainted: [W]=WARN
[  619.488728][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  619.488742][T19030] Call Trace:
[  619.488750][T19030]  <TASK>
[  619.488759][T19030]  __dump_stack+0x1d/0x30
[  619.488786][T19030]  dump_stack_lvl+0x95/0xd0
[  619.488891][T19030]  dump_stack+0x15/0x1b
[  619.488913][T19030]  should_fail_ex+0x263/0x280
[  619.488942][T19030]  should_failslab+0x8c/0xb0
[  619.488965][T19030]  kmem_cache_alloc_noprof+0x66/0x400
[  619.489051][T19030]  ? security_file_alloc+0x32/0xf0
[  619.489083][T19030]  security_file_alloc+0x32/0xf0
[  619.489106][T19030]  init_file+0x5b/0x1b0
[  619.489146][T19030]  alloc_empty_file+0x8b/0x200
[  619.489173][T19030]  path_openat+0x65/0x2050
[  619.489208][T19030]  ? _parse_integer_limit+0x170/0x190
[  619.489244][T19030]  ? _parse_integer+0x27/0x40
[  619.489267][T19030]  ? kstrtoull+0x111/0x140
[  619.489290][T19030]  ? kstrtouint+0x76/0xc0
[  619.489314][T19030]  do_file_open+0x16c/0x290
[  619.489395][T19030]  do_sys_openat2+0x94/0x130
[  619.489425][T19030]  __x64_sys_openat+0xf2/0x120
[  619.489454][T19030]  x64_sys_call+0x1e39/0x3020
[  619.489504][T19030]  do_syscall_64+0x12c/0x370
[  619.489530][T19030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.489558][T19030] RIP: 0033:0x7f80f84cc799
[  619.489576][T19030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.489650][T19030] RSP: 002b:00007f80f6f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  619.489672][T19030] RAX: ffffffffffffffda RBX: 00007f80f8745fa0 RCX: 00007f80f84cc799
[  619.489721][T19030] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  619.489736][T19030] RBP: 00007f80f6f27090 R08: 0000000000000000 R09: 0000000000000000
[  619.489750][T19030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.489764][T19030] R13: 00007f80f8746038 R14: 00007f80f8745fa0 R15: 00007ffc8f930428
[  619.489785][T19030]  </TASK>
[  619.645370][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  619.645386][   T28] audit: type=1400 audit(1773800444.151:2391): avc:  denied  { ioctl } for  pid=19032 comm="syz.7.3627" path="socket:[58698]" dev="sockfs" ino=58698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  619.839762][T19045] EXT4-fs: inline encryption not supported
[  619.857758][T19045] EXT4-fs: Ignoring removed nobh option
[  619.879771][T19045] EXT4-fs: Ignoring removed bh option
[  619.908632][T19045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.985012][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.105202][T19057] set_capacity_and_notify: 6 callbacks suppressed
[  620.105220][T19057] loop4: detected capacity change from 0 to 256
[  621.036368][T19059] __nla_validate_parse: 26 callbacks suppressed
[  621.036422][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'.
[  621.349989][T19059] loop0: detected capacity change from 0 to 512
[  621.397295][T19057] FAT-fs (loop4): Directory bread(block 64) failed
[  621.403944][T19057] FAT-fs (loop4): Directory bread(block 65) failed
[  621.410585][T19057] FAT-fs (loop4): Directory bread(block 66) failed
[  621.417180][T19057] FAT-fs (loop4): Directory bread(block 67) failed
[  621.423908][T19057] FAT-fs (loop4): Directory bread(block 68) failed
[  621.430459][T19057] FAT-fs (loop4): Directory bread(block 69) failed
[  621.437113][T19057] FAT-fs (loop4): Directory bread(block 70) failed
[  621.443949][T19057] FAT-fs (loop4): Directory bread(block 71) failed
[  621.450567][T19057] FAT-fs (loop4): Directory bread(block 72) failed
[  621.457204][T19057] FAT-fs (loop4): Directory bread(block 73) failed
[  621.479137][T19057] xt_TPROXY: Can be used only with -p tcp or -p udp
[  621.630684][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.639779][T19057] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.649032][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.658083][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.667216][T19057] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.676693][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.685775][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.694804][T19057] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.704059][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'.
[  621.875257][T19069] loop6: detected capacity change from 0 to 128
[  622.190781][   T28] audit: type=1400 audit(1773800446.547:2392): avc:  denied  { name_bind } for  pid=19076 comm="syz.7.3638" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  622.231000][T19067] loop0: detected capacity change from 0 to 4096
[  622.242826][T19067] EXT4-fs: Ignoring removed bh option
[  622.315815][T19067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  622.360085][   T28] audit: type=1400 audit(1773800446.706:2393): avc:  denied  { append } for  pid=19066 comm="syz.0.3637" path="/144/file3/cgroup.freeze" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  622.509386][   T28] audit: type=1400 audit(1773800446.706:2394): avc:  denied  { map } for  pid=19066 comm="syz.0.3637" path="/144/file3/cgroup.freeze" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  622.533039][   T28] audit: type=1400 audit(1773800446.706:2395): avc:  denied  { execute } for  pid=19066 comm="syz.0.3637" path="/144/file3/cgroup.freeze" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  622.578680][T15960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.609949][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  622.619642][T19094] loop1: detected capacity change from 0 to 256
[  622.733128][   T28] audit: type=1400 audit(1773800447.062:2396): avc:  denied  { map } for  pid=19096 comm="syz.4.3645" path="/219" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  622.829724][T19094] FAT-fs (loop1): Directory bread(block 64) failed
[  622.836284][T19094] FAT-fs (loop1): Directory bread(block 65) failed
[  622.842805][T19094] FAT-fs (loop1): Directory bread(block 66) failed
[  622.849372][T19094] FAT-fs (loop1): Directory bread(block 67) failed
[  622.855961][T19094] FAT-fs (loop1): Directory bread(block 68) failed
[  622.862462][T19094] FAT-fs (loop1): Directory bread(block 69) failed
[  622.868997][T19094] FAT-fs (loop1): Directory bread(block 70) failed
[  622.875498][T19094] FAT-fs (loop1): Directory bread(block 71) failed
[  622.882033][T19094] FAT-fs (loop1): Directory bread(block 72) failed
[  622.888624][T19094] FAT-fs (loop1): Directory bread(block 73) failed
[  622.904577][T19094] xt_TPROXY: Can be used only with -p tcp or -p udp
[  623.363619][T19120] xt_TPROXY: Can be used only with -p tcp or -p udp
[  624.702283][   T28] audit: type=1400 audit(1773800448.896:2397): avc:  denied  { write } for  pid=19128 comm="syz.6.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  624.702313][   T28] audit: type=1400 audit(1773800448.896:2398): avc:  denied  { nlmsg_write } for  pid=19128 comm="syz.6.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  624.740981][T19133] loop1: detected capacity change from 0 to 512
[  624.768446][T19133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002]
[  624.768629][T19133] EXT4-fs (loop1): orphan cleanup on readonly fs
[  624.769075][T19133] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  624.769149][T19133] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  624.769300][T19133] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.3654: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  624.769340][T19133] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  624.769653][T19133] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3654: couldn't read orphan inode 13 (err -117)
[  624.769682][T19133] loop1: lost filesystem error report for type 5 error -117
[  624.771385][T19133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  624.772577][T19133] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  624.773397][T19133] loop5: detected capacity change from 0 to 7
[  624.774738][   T28] audit: type=1400 audit(1773800448.971:2399): avc:  denied  { remount } for  pid=19129 comm="syz.1.3654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  625.203672][T19143] syzkaller0: entered promiscuous mode
[  625.203691][T19143] syzkaller0: entered allmulticast mode
[  625.430839][T19141] support for cryptoloop has been removed.  Use dm-crypt instead.
[  625.484911][T19152] loop0: detected capacity change from 0 to 128
[  625.562702][T19152] FAT-fs (loop0): FAT read failed (blocknr 128)
[  625.817058][T19170] loop4: detected capacity change from 0 to 512
[  626.062891][T19177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  626.277631][T19166] loop4: detected capacity change from 0 to 512
[  626.308098][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.321681][T19166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.384740][T19166] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.414721][T19183] loop1: detected capacity change from 0 to 4096
[  626.427831][T19183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.446423][   T28] audit: type=1400 audit(1773800450.543:2400): avc:  denied  { create } for  pid=19182 comm="syz.1.3667" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  626.472504][   T28] audit: type=1400 audit(1773800450.543:2401): avc:  denied  { setattr } for  pid=19182 comm="syz.1.3667" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  626.501870][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.562707][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.643643][T19196] loop0: detected capacity change from 0 to 2048
[  626.650202][   T28] audit: type=1400 audit(1773800450.721:2402): avc:  denied  { bind } for  pid=19191 comm="syz.7.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  626.681514][T19196] EXT4-fs: Ignoring removed i_version option
[  626.748685][   T28] audit: type=1400 audit(1773800450.721:2403): avc:  denied  { write } for  pid=19191 comm="syz.7.3671" path="socket:[58908]" dev="sockfs" ino=58908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  626.749897][T19196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.811602][T19196] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.859161][T15960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.011051][T19212] loop6: detected capacity change from 0 to 512
[  627.081462][T19222] loop1: detected capacity change from 0 to 256
[  627.108957][T19222] FAT-fs (loop1): Directory bread(block 64) failed
[  627.115528][T19222] FAT-fs (loop1): Directory bread(block 65) failed
[  627.122082][T19222] FAT-fs (loop1): Directory bread(block 66) failed
[  627.128658][T19222] FAT-fs (loop1): Directory bread(block 67) failed
[  627.135303][T19222] FAT-fs (loop1): Directory bread(block 68) failed
[  627.141869][T19222] FAT-fs (loop1): Directory bread(block 69) failed
[  627.148437][T19222] FAT-fs (loop1): Directory bread(block 70) failed
[  627.155036][T19222] FAT-fs (loop1): Directory bread(block 71) failed
[  627.161638][T19222] FAT-fs (loop1): Directory bread(block 72) failed
[  627.168144][T19222] FAT-fs (loop1): Directory bread(block 73) failed
[  627.186816][T19222] xt_TPROXY: Can be used only with -p tcp or -p udp
[  627.194611][T19222] __nla_validate_parse: 86 callbacks suppressed
[  627.194638][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.210202][T19222] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.219495][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.228699][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.237669][T19222] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.246908][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.255943][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.265374][T19222] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.274559][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.283701][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3675'.
[  627.388934][T19212] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3677: corrupted inode contents
[  627.478594][T19212] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  627.480785][T19212] EXT4-fs (loop6): Remounting filesystem read-only
[  627.490037][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  627.490054][    C0] EXT4-fs (loop6): initial error at time 1773800451: ext4_do_update_inode:5569: inode 15
[  627.490097][    C0] EXT4-fs (loop6): last error at time 1773800451: ext4_do_update_inode:5569: inode 15
[  627.740070][T19230] 9p: Bad value for 'rfdno'
[  627.751568][   T28] audit: type=1400 audit(1773800451.741:2404): avc:  denied  { mount } for  pid=19229 comm="syz.4.3681" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  627.830695][T19212] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -30)
[  627.857438][T19212] EXT4-fs (loop6): 1 orphan inode deleted
[  627.869442][T19212] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.946190][   T28] audit: type=1400 audit(1773800451.938:2405): avc:  denied  { read } for  pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  627.995113][   T28] audit: type=1400 audit(1773800451.966:2406): avc:  denied  { search } for  pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  628.016693][   T28] audit: type=1400 audit(1773800451.966:2407): avc:  denied  { search } for  pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  628.519755][   T28] audit: type=1400 audit(1773800451.966:2408): avc:  denied  { search } for  pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  628.542525][   T28] audit: type=1400 audit(1773800451.966:2409): avc:  denied  { read } for  pid=3038 comm="dhcpcd" name="n78" dev="tmpfs" ino=34687 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  628.782377][T14835] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  628.888897][T19247] syzkaller0: entered promiscuous mode
[  628.894497][T19247] syzkaller0: entered allmulticast mode
[  628.986556][    T9] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  629.001954][    T9] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  629.029194][T19277] loop6: detected capacity change from 0 to 512
[  629.049026][T19244] loop4: detected capacity change from 0 to 8192
[  629.104675][T19277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.122262][T19277] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.128024][ T3304]  loop4: p1 < > p2 p4 < p5 >
[  629.169529][ T3304] loop4: partition table partially beyond EOD, truncated
[  629.177838][ T3304] loop4: p1 start 134217728 is beyond EOD, truncated
[  629.184673][ T3304] loop4: p2 size 591360 extends beyond EOD, truncated
[  629.192741][ T3304] loop4: p5 size 591360 extends beyond EOD, truncated
[  629.212976][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.868249][T19302] xt_TPROXY: Can be used only with -p tcp or -p udp
[  631.257213][T19244]  loop4: p1 < > p2 p4 < p5 >
[  631.261924][T19244] loop4: partition table partially beyond EOD, truncated
[  631.277508][T19244] loop4: p1 start 134217728 is beyond EOD, truncated
[  631.413302][T19312] loop6: detected capacity change from 0 to 512
[  631.521578][T19244] loop4: p2 size 591360 extends beyond EOD, truncated
[  631.907717][T19244] loop4: p5 size 591360 extends beyond EOD, truncated
[  632.441151][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  632.441166][   T28] audit: type=1400 audit(1773800456.150:2423): avc:  denied  { mount } for  pid=19323 comm="syz.6.3697" name="/" dev="autofs" ino=59987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  632.763509][T19365] __nla_validate_parse: 52 callbacks suppressed
[  632.763526][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'.
[  632.807535][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3699'.
[  632.841555][T19367] loop6: detected capacity change from 0 to 256
[  632.859797][T19367] FAT-fs (loop6): Directory bread(block 64) failed
[  632.866434][T19367] FAT-fs (loop6): Directory bread(block 65) failed
[  632.873066][T19367] FAT-fs (loop6): Directory bread(block 66) failed
[  632.879715][T19367] FAT-fs (loop6): Directory bread(block 67) failed
[  632.886386][T19367] FAT-fs (loop6): Directory bread(block 68) failed
[  632.893027][T19367] FAT-fs (loop6): Directory bread(block 69) failed
[  632.899622][T19367] FAT-fs (loop6): Directory bread(block 70) failed
[  632.906318][T19367] FAT-fs (loop6): Directory bread(block 71) failed
[  632.912858][T19367] FAT-fs (loop6): Directory bread(block 72) failed
[  632.919369][T19367] FAT-fs (loop6): Directory bread(block 73) failed
[  632.930879][T19367] xt_TPROXY: Can be used only with -p tcp or -p udp
[  632.953556][T19367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3706'.
[  632.962548][T19367] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3706'.
[  632.971709][T19367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3706'.
[  632.980704][T19367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3706'.
[  632.989716][T19367] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3706'.
[  632.998784][T19367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3706'.
[  633.007903][T19367] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3706'.
[  633.016864][T19367] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3706'.
[  633.034351][T19371] loop4: detected capacity change from 0 to 8192
[  634.425748][   T28] audit: type=1400 audit(1773800458.003:2424): avc:  denied  { append } for  pid=19390 comm="syz.6.3710" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  634.481237][T19369] syz.4.3704 (19369) used greatest stack depth: 5624 bytes left
[  634.534892][   T28] audit: type=1400 audit(1773800458.031:2425): avc:  denied  { cmd } for  pid=19390 comm="syz.6.3710" path="socket:[60057]" dev="sockfs" ino=60057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  634.720435][T19393] loop4: detected capacity change from 0 to 128
[  634.799371][T19393] FAT-fs (loop4): Directory bread(block 32) failed
[  634.835922][T19393] FAT-fs (loop4): Directory bread(block 33) failed
[  634.855753][T19393] FAT-fs (loop4): Directory bread(block 34) failed
[  634.862330][T19393] FAT-fs (loop4): Directory bread(block 35) failed
[  634.980930][T19402] loop6: detected capacity change from 0 to 8192
[  634.988313][T19393] FAT-fs (loop4): Directory bread(block 36) failed
[  635.016938][T11167]  loop6: p1 < > p2 p4 < p5 >
[  635.019362][T19393] FAT-fs (loop4): Directory bread(block 37) failed
[  635.036659][T19393] FAT-fs (loop4): Directory bread(block 38) failed
[  635.043273][T19393] FAT-fs (loop4): Directory bread(block 39) failed
[  635.050747][T11167] loop6: partition table partially beyond EOD, truncated
[  635.061826][T11167] loop6: p1 start 134217728 is beyond EOD, truncated
[  635.175881][T11167] loop6: p2 size 591360 extends beyond EOD, truncated
[  635.183882][T11167] loop6: p5 size 591360 extends beyond EOD, truncated
[  635.219669][T19402]  loop6: p1 < > p2 p4 < p5 >
[  635.224377][T19402] loop6: partition table partially beyond EOD, truncated
[  635.231575][T19402] loop6: p1 start 134217728 is beyond EOD, truncated
[  635.238307][T19402] loop6: p2 size 591360 extends beyond EOD, truncated
[  635.247576][T19402] loop6: p5 size 591360 extends beyond EOD, truncated
[  635.297317][T19393] FAT-fs (loop4): Directory bread(block 40) failed
[  635.388477][T19393] FAT-fs (loop4): Directory bread(block 41) failed
[  635.744910][T19393] syz.4.3711: attempt to access beyond end of device
[  635.744910][T19393] loop4: rw=8388608, sector=4108, nr_sectors = 4 limit=128
[  635.762882][T19393] FAT-fs (loop4): Filesystem has been set read-only
[  635.776325][T19393] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  635.807066][T19409] FAULT_INJECTION: forcing a failure.
[  635.807066][T19409] name failslab, interval 1, probability 0, space 0, times 0
[  635.813995][   T28] audit: type=1400 audit(1773800459.304:2426): avc:  denied  { validate_trans } for  pid=19408 comm="syz.6.3718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  635.820711][T19411] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  635.946052][T19409] CPU: 0 UID: 0 PID: 19409 Comm: syz.6.3718 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  635.946088][T19409] Tainted: [W]=WARN
[  635.946095][T19409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  635.946110][T19409] Call Trace:
[  635.946118][T19409]  <TASK>
[  635.946126][T19409]  __dump_stack+0x1d/0x30
[  635.946151][T19409]  dump_stack_lvl+0x95/0xd0
[  635.946191][T19409]  dump_stack+0x15/0x1b
[  635.946216][T19409]  should_fail_ex+0x263/0x280
[  635.946305][T19409]  should_failslab+0x8c/0xb0
[  635.946330][T19409]  __kmalloc_noprof+0xb8/0x4e0
[  635.946356][T19409]  ? sel_write_validatetrans+0x1c6/0x370
[  635.946391][T19409]  ? _copy_from_user+0x89/0xb0
[  635.946447][T19409]  sel_write_validatetrans+0x1c6/0x370
[  635.946483][T19409]  ? __pfx_sel_write_validatetrans+0x10/0x10
[  635.946575][T19409]  vfs_write+0x269/0x9f0
[  635.946605][T19409]  ? raw_irqentry_exit_cond_resched+0x3d/0x60
[  635.946626][T19409]  ? __rcu_read_unlock+0x4e/0x70
[  635.946649][T19409]  ? __fget_files+0x184/0x1c0
[  635.946747][T19409]  ? mutex_lock+0x57/0x90
[  635.946778][T19409]  ksys_write+0xdc/0x1a0
[  635.946796][T19409]  __x64_sys_write+0x40/0x50
[  635.946818][T19409]  x64_sys_call+0x27e1/0x3020
[  635.946914][T19409]  do_syscall_64+0x12c/0x370
[  635.946944][T19409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.947003][T19409] RIP: 0033:0x7f5745f9c799
[  635.947021][T19409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.947042][T19409] RSP: 002b:00007f57449ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  635.947061][T19409] RAX: ffffffffffffffda RBX: 00007f5746215fa0 RCX: 00007f5745f9c799
[  635.947077][T19409] RDX: 000000000000006f RSI: 0000200000000100 RDI: 0000000000000004
[  635.947124][T19409] RBP: 00007f57449ef090 R08: 0000000000000000 R09: 0000000000000000
[  635.947138][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.947153][T19409] R13: 00007f5746216038 R14: 00007f5746215fa0 R15: 00007ffd32ddc7d8
[  635.947171][T19409]  </TASK>
[  636.472318][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  636.500744][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  636.685625][T19424] loop6: detected capacity change from 0 to 256
[  636.705577][T19424] FAT-fs (loop6): Directory bread(block 64) failed
[  636.712180][T19424] FAT-fs (loop6): Directory bread(block 65) failed
[  636.718780][T19424] FAT-fs (loop6): Directory bread(block 66) failed
[  636.725386][T19424] FAT-fs (loop6): Directory bread(block 67) failed
[  636.732012][T19424] FAT-fs (loop6): Directory bread(block 68) failed
[  636.738562][T19424] FAT-fs (loop6): Directory bread(block 69) failed
[  636.745121][T19424] FAT-fs (loop6): Directory bread(block 70) failed
[  636.751673][T19424] FAT-fs (loop6): Directory bread(block 71) failed
[  636.758219][T19424] FAT-fs (loop6): Directory bread(block 72) failed
[  636.764719][T19424] FAT-fs (loop6): Directory bread(block 73) failed
[  636.778689][T19424] xt_TPROXY: Can be used only with -p tcp or -p udp
[  636.810532][T19423] syzkaller0: entered promiscuous mode
[  636.816043][T19423] syzkaller0: entered allmulticast mode
[  636.831942][T19416] loop0: detected capacity change from 0 to 8192
[  636.885319][T11167]  loop0: p1 < > p2 p4 < p5 >
[  636.892298][T11167] loop0: partition table partially beyond EOD, truncated
[  636.910951][T11167] loop0: p1 start 134217728 is beyond EOD, truncated
[  636.913034][T19432] netlink: 'syz.7.3723': attribute type 1 has an invalid length.
[  636.923258][T11167] loop0: p2 size 591360 extends beyond EOD, truncated
[  636.972863][T11167] loop0: p5 size 591360 extends beyond EOD, truncated
[  637.032123][T19438] bond1: (slave geneve2): making interface the new active one
[  637.083876][T19416] loop_reread_partitions: partition scan of loop0 () failed (rc=-16)
[  637.148435][T19438] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  637.164404][ T2999]  loop0: p1 < > p2 p4 < p5 >
[  637.169189][ T2999] loop0: partition table partially beyond EOD, truncated
[  637.184450][ T5364] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  637.186506][ T2999] loop0: p1 start 134217728 is beyond EOD, truncated
[  637.212801][T19434] loop1: detected capacity change from 0 to 8192
[  637.221929][ T2999] loop0: p2 size 591360 extends beyond EOD, truncated
[  637.227416][ T5364] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  637.243726][ T2999] loop0: p5 size 591360 extends beyond EOD, truncated
[  637.250354][ T5364] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  637.280283][ T5364] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  637.352688][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  637.365078][ T3680] udevd[3680]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  637.376465][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  637.794175][T19440] loop4: detected capacity change from 0 to 512
[  637.812992][T19440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.849300][T19440] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  638.070182][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.289063][T19466] __nla_validate_parse: 54 callbacks suppressed
[  638.289078][T19466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3733'.
[  638.325021][T19468] netlink: 'syz.6.3732': attribute type 6 has an invalid length.
[  638.336536][T19466] FAULT_INJECTION: forcing a failure.
[  638.336536][T19466] name failslab, interval 1, probability 0, space 0, times 0
[  638.350904][T19466] CPU: 0 UID: 0 PID: 19466 Comm: syz.7.3733 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  638.350937][T19466] Tainted: [W]=WARN
[  638.350986][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  638.351001][T19466] Call Trace:
[  638.351008][T19466]  <TASK>
[  638.351017][T19466]  __dump_stack+0x1d/0x30
[  638.351041][T19466]  dump_stack_lvl+0x95/0xd0
[  638.351127][T19466]  dump_stack+0x15/0x1b
[  638.351151][T19466]  should_fail_ex+0x263/0x280
[  638.351176][T19466]  should_failslab+0x8c/0xb0
[  638.351200][T19466]  kmem_cache_alloc_noprof+0x66/0x400
[  638.351225][T19466]  ? security_file_alloc+0x32/0xf0
[  638.351333][T19466]  security_file_alloc+0x32/0xf0
[  638.351357][T19466]  init_file+0x5b/0x1b0
[  638.351385][T19466]  alloc_empty_file+0x8b/0x200
[  638.351486][T19466]  path_openat+0x65/0x2050
[  638.351567][T19466]  ? perf_swevent_hrtimer+0x2e1/0x310
[  638.351599][T19466]  ? rb_insert_color+0x71/0x2b0
[  638.351620][T19466]  do_file_open+0x16c/0x290
[  638.351661][T19466]  do_sys_openat2+0x94/0x130
[  638.351683][   T28] audit: type=1400 audit(1773800461.653:2427): avc:  denied  { mount } for  pid=19465 comm="syz.7.3733" name="/" dev="ramfs" ino=60451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  638.351697][T19466]  __x64_sys_openat+0xf2/0x120
[  638.351726][T19466]  x64_sys_call+0x1e39/0x3020
[  638.351819][T19466]  do_syscall_64+0x12c/0x370
[  638.351845][T19466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.351868][T19466] RIP: 0033:0x7ffaa0ddc799
[  638.351885][T19466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.351950][T19466] RSP: 002b:00007ffa9f82f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  638.351972][T19466] RAX: ffffffffffffffda RBX: 00007ffaa1055fa0 RCX: 00007ffaa0ddc799
[  638.351987][T19466] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  638.352002][T19466] RBP: 00007ffa9f82f090 R08: 0000000000000000 R09: 0000000000000000
[  638.352016][T19466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.352030][T19466] R13: 00007ffaa1056038 R14: 00007ffaa1055fa0 R15: 00007fff86b14c38
[  638.352051][T19466]  </TASK>
[  638.489366][T19468] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3732'.
[  638.572287][T19473] syzkaller0: entered promiscuous mode
[  638.605318][T19473] syzkaller0: entered allmulticast mode
[  638.737646][T19487] netlink: 'syz.6.3737': attribute type 16 has an invalid length.
[  638.759519][   T28] audit: type=1400 audit(1773800462.055:2428): avc:  denied  { ioctl } for  pid=19481 comm="syz.1.3738" path="socket:[60211]" dev="sockfs" ino=60211 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  638.795374][T19488] tmpfs: Bad value for 'size'
[  638.797551][T19487] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3737'.
[  638.915272][T19479] loop4: detected capacity change from 0 to 8192
[  639.007494][T19494] 9p: Bad value for 'rfdno'
[  639.061715][   T28] audit: type=1400 audit(1773800462.336:2429): avc:  denied  { bind } for  pid=19496 comm="syz.0.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  639.145644][T19500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3735'.
[  639.339412][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3743'.
[  639.480888][T19515] loop6: detected capacity change from 0 to 512
[  639.750881][T19519] loop6: detected capacity change from 0 to 512
[  639.792201][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'.
[  639.855415][T19521] loop0: detected capacity change from 0 to 512
[  640.175925][T19519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.221724][T19519] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  640.317918][ T3421] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[  640.384795][ T3421] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  640.880154][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.047287][T19545] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3750'.
[  641.962267][T19564] loop1: detected capacity change from 0 to 8192
[  642.130752][T11167]  loop1: p1 < > p2 p4 < p5 >
[  642.146470][T11167] loop1: partition table partially beyond EOD, truncated
[  642.186238][T11167] loop1: p1 start 134217728 is beyond EOD, truncated
[  642.226086][T11167] loop1: p2 size 591360 extends beyond EOD, truncated
[  642.267453][T11167] loop1: p5 size 591360 extends beyond EOD, truncated
[  642.343087][T19564]  loop1: p1 < > p2 p4 < p5 >
[  642.347974][T19564] loop1: partition table partially beyond EOD, truncated
[  642.355123][T19564] loop1: p1 start 134217728 is beyond EOD, truncated
[  642.361849][T19564] loop1: p2 size 591360 extends beyond EOD, truncated
[  642.369649][T19564] loop1: p5 size 591360 extends beyond EOD, truncated
[  642.587475][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  642.598694][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  642.609633][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  642.685844][T19568] loop0: detected capacity change from 0 to 8192
[  642.699943][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  642.710877][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  642.728211][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  642.965161][T19578] futex_wake_op: syz.7.3761 tries to shift op by -3; fix this program
[  642.966507][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'.
[  643.067846][T19577] loop1: detected capacity change from 0 to 512
[  643.157683][T19589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=19589 comm=syz.4.3763
[  643.214645][T19577] EXT4-fs (loop1): 1 orphan inode deleted
[  643.220826][T19577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.286533][T19568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3757'.
[  643.431311][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.488925][T19605] loop4: detected capacity change from 0 to 512
[  643.531114][T19605] EXT4-fs (loop4): 1 truncate cleaned up
[  643.549712][T19605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  645.640259][   T28] audit: type=1400 audit(1773800468.503:2430): avc:  denied  { view } for  pid=19629 comm="syz.7.3774" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  646.105716][   T28] audit: type=1400 audit(1773800468.925:2431): avc:  denied  { create } for  pid=19632 comm="syz.7.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  646.184228][T19633] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  646.231206][   T28] audit: type=1400 audit(1773800468.981:2432): avc:  denied  { read } for  pid=19635 comm="syz.0.3776" path="socket:[61582]" dev="sockfs" ino=61582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  646.314447][   T28] audit: type=1400 audit(1773800469.065:2433): avc:  denied  { watch } for  pid=19632 comm="syz.7.3775" path="/216" dev="tmpfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  646.379125][   T28] audit: type=1326 audit(1773800469.065:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19632 comm="syz.7.3775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa0ddc799 code=0x0
[  646.386307][T19647] xt_hashlimit: size too large, truncated to 1048576
[  646.508476][   T28] audit: type=1400 audit(1773800469.308:2435): avc:  denied  { create } for  pid=19646 comm="syz.0.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  646.588615][T19648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3778'.
[  646.608296][   T28] audit: type=1400 audit(1773800469.346:2436): avc:  denied  { write } for  pid=19646 comm="syz.0.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  647.202969][   T28] audit: type=1400 audit(1773800469.879:2437): avc:  denied  { unlink } for  pid=15029 comm="syz-executor" name="file0" dev="tmpfs" ino=1245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  647.311159][T19669] loop1: detected capacity change from 0 to 512
[  647.550716][T19669] EXT4-fs (loop1): 1 truncate cleaned up
[  647.661603][T19670] loop0: detected capacity change from 0 to 8192
[  647.669345][T19669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.714162][T19665] loop6: detected capacity change from 0 to 8192
[  647.770357][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3787'.
[  647.879905][ T3304]  loop0: p1 < > p2 p4 < p5 >
[  647.888070][ T3304] loop0: partition table partially beyond EOD, truncated
[  647.895530][T19685] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3782'.
[  647.915779][ T3304] loop0: p1 start 134217728 is beyond EOD, truncated
[  647.928291][ T3304] loop0: p2 size 591360 extends beyond EOD, truncated
[  647.941345][ T3304] loop0: p5 size 591360 extends beyond EOD, truncated
[  647.956933][T19670]  loop0: p1 < > p2 p4 < p5 >
[  647.967069][T19670] loop0: partition table partially beyond EOD, truncated
[  647.997324][T19670] loop0: p1 start 134217728 is beyond EOD, truncated
[  648.004036][T19670] loop0: p2 size 591360 extends beyond EOD, truncated
[  648.030593][T19670] loop0: p5 size 591360 extends beyond EOD, truncated
[  648.193871][T19697] futex_wake_op: syz.7.3791 tries to shift op by -3; fix this program
[  648.717133][T19708] xt_TPROXY: Can be used only with -p tcp or -p udp
[  648.725596][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3795'.
[  648.734660][T19708] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3795'.
[  648.744043][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3795'.
[  648.753048][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3795'.
[  648.762002][T19708] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3795'.
[  648.771149][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3795'.
[  648.780302][T19708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3795'.
[  649.744423][T19714] syzkaller0: entered promiscuous mode
[  649.778255][T19714] syzkaller0: entered allmulticast mode
[  650.778002][T19727] loop0: detected capacity change from 0 to 8192
[  650.839434][T11167]  loop0: p1 < > p2 p4 < p5 >
[  650.850105][T11167] loop0: partition table partially beyond EOD, truncated
[  650.870806][T11167] loop0: p1 start 134217728 is beyond EOD, truncated
[  650.893348][T11167] loop0: p2 size 591360 extends beyond EOD, truncated
[  650.914475][T11167] loop0: p5 size 591360 extends beyond EOD, truncated
[  650.939079][T19727]  loop0: p1 < > p2 p4 < p5 >
[  650.943780][T19727] loop0: partition table partially beyond EOD, truncated
[  650.950938][T19727] loop0: p1 start 134217728 is beyond EOD, truncated
[  650.957782][T19727] loop0: p2 size 591360 extends beyond EOD, truncated
[  650.966132][T19727] loop0: p5 size 591360 extends beyond EOD, truncated
[  650.992885][   T28] audit: type=1400 audit(1773800473.510:2438): avc:  denied  { sqpoll } for  pid=19730 comm="syz.7.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  651.291566][T19720] loop6: detected capacity change from 0 to 32768
[  651.405885][T13702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.706642][T19740] loop4: detected capacity change from 0 to 256
[  651.727295][T19740] FAT-fs (loop4): Directory bread(block 64) failed
[  651.733842][T19740] FAT-fs (loop4): Directory bread(block 65) failed
[  651.740493][T19740] FAT-fs (loop4): Directory bread(block 66) failed
[  651.747046][T19740] FAT-fs (loop4): Directory bread(block 67) failed
[  651.753736][T19740] FAT-fs (loop4): Directory bread(block 68) failed
[  651.760297][T19740] FAT-fs (loop4): Directory bread(block 69) failed
[  651.766813][T19740] FAT-fs (loop4): Directory bread(block 70) failed
[  651.773574][T19740] FAT-fs (loop4): Directory bread(block 71) failed
[  651.780212][T19740] FAT-fs (loop4): Directory bread(block 72) failed
[  651.786795][T19740] FAT-fs (loop4): Directory bread(block 73) failed
[  651.804470][T19740] xt_TPROXY: Can be used only with -p tcp or -p udp
[  652.487538][   T28] audit: type=1400 audit(1773800474.905:2439): avc:  denied  { create } for  pid=19742 comm="syz.7.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  653.761092][T19754] netlink: 'syz.7.3808': attribute type 30 has an invalid length.
[  653.800387][T19754] __nla_validate_parse: 53 callbacks suppressed
[  653.800434][T19754] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3808'.
[  653.870073][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3809'.
[  653.879125][T19757] FAULT_INJECTION: forcing a failure.
[  653.879125][T19757] name failslab, interval 1, probability 0, space 0, times 0
[  653.892227][T19757] CPU: 1 UID: 0 PID: 19757 Comm: syz.4.3809 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  653.892264][T19757] Tainted: [W]=WARN
[  653.892272][T19757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  653.892289][T19757] Call Trace:
[  653.892296][T19757]  <TASK>
[  653.892303][T19757]  __dump_stack+0x1d/0x30
[  653.892363][T19757]  dump_stack_lvl+0x95/0xd0
[  653.892492][T19757]  dump_stack+0x15/0x1b
[  653.892516][T19757]  should_fail_ex+0x263/0x280
[  653.892541][T19757]  should_failslab+0x8c/0xb0
[  653.892566][T19757]  kmem_cache_alloc_noprof+0x66/0x400
[  653.892633][T19757]  ? skb_clone+0x151/0x1f0
[  653.892669][T19757]  skb_clone+0x151/0x1f0
[  653.892736][T19757]  __netlink_deliver_tap+0x2c9/0x500
[  653.892809][T19757]  ? netlink_attachskb+0x2e2/0x660
[  653.892874][T19757]  netlink_sendskb+0x126/0x150
[  653.892908][T19757]  netlink_unicast+0x2a2/0x690
[  653.892955][T19757]  netlink_ack+0x4c8/0x500
[  653.892984][T19757]  netlink_rcv_skb+0x192/0x220
[  653.893105][T19757]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  653.893136][T19757]  nfnetlink_rcv+0x167/0x1720
[  653.893160][T19757]  ? __kfree_skb+0x109/0x150
[  653.893188][T19757]  ? nlmon_xmit+0x4f/0x60
[  653.893261][T19757]  ? consume_skb+0x4b/0x160
[  653.893289][T19757]  ? nlmon_xmit+0x4f/0x60
[  653.893308][T19757]  ? dev_hard_start_xmit+0x3b9/0x3f0
[  653.893376][T19757]  ? __dev_queue_xmit+0x136c/0x1f20
[  653.893403][T19757]  ? __dev_queue_xmit+0x148/0x1f20
[  653.893430][T19757]  ? ref_tracker_free+0x37d/0x3e0
[  653.893506][T19757]  ? __netlink_deliver_tap+0x4dc/0x500
[  653.893537][T19757]  netlink_unicast+0x5c0/0x690
[  653.893607][T19757]  netlink_sendmsg+0x5c8/0x6f0
[  653.893641][T19757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  653.893822][T19757]  ____sys_sendmsg+0x563/0x5b0
[  653.893934][T19757]  ___sys_sendmsg+0x195/0x1e0
[  653.893974][T19757]  __x64_sys_sendmsg+0xd4/0x160
[  653.894040][T19757]  x64_sys_call+0x194c/0x3020
[  653.894128][T19757]  do_syscall_64+0x12c/0x370
[  653.894156][T19757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.894182][T19757] RIP: 0033:0x7f574dd3c799
[  653.894201][T19757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.894222][T19757] RSP: 002b:00007f574c78f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.894314][T19757] RAX: ffffffffffffffda RBX: 00007f574dfb5fa0 RCX: 00007f574dd3c799
[  653.894327][T19757] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000004
[  653.894341][T19757] RBP: 00007f574c78f090 R08: 0000000000000000 R09: 0000000000000000
[  653.894359][T19757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.894374][T19757] R13: 00007f574dfb6038 R14: 00007f574dfb5fa0 R15: 00007ffdb2793878
[  653.894397][T19757]  </TASK>
[  654.210118][T19759] loop6: detected capacity change from 0 to 512
[  654.256797][T19759] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3810: corrupted inode contents
[  654.269248][T19759] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  654.269878][T19759] EXT4-fs (loop6): Remounting filesystem read-only
[  654.285782][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  654.285800][    C1] EXT4-fs (loop6): initial error at time 1773800476: ext4_do_update_inode:5569: inode 15
[  654.285824][    C1] EXT4-fs (loop6): last error at time 1773800476: ext4_do_update_inode:5569: inode 15
[  654.408295][T19759] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -30)
[  654.428328][T19759] EXT4-fs (loop6): 1 orphan inode deleted
[  654.439511][T19759] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  654.474718][T13880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.585194][T19770] loop1: detected capacity change from 0 to 8192
[  654.611252][T14835] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  654.633202][T11167]  loop1: p1 < > p2 p4 < p5 >
[  654.644351][T11167] loop1: partition table partially beyond EOD, truncated
[  654.669014][T11167] loop1: p1 start 134217728 is beyond EOD, truncated
[  654.689367][T11167] loop1: p2 size 591360 extends beyond EOD, truncated
[  654.697997][T11167] loop1: p5 size 591360 extends beyond EOD, truncated
[  654.835563][T19775] loop6: detected capacity change from 0 to 256
[  654.909713][T19775] FAT-fs (loop6): Directory bread(block 64) failed
[  654.916418][T19775] FAT-fs (loop6): Directory bread(block 65) failed
[  654.923065][T19775] FAT-fs (loop6): Directory bread(block 66) failed
[  654.929598][T19775] FAT-fs (loop6): Directory bread(block 67) failed
[  654.936238][T19775] FAT-fs (loop6): Directory bread(block 68) failed
[  654.942774][T19775] FAT-fs (loop6): Directory bread(block 69) failed
[  654.949419][T19775] FAT-fs (loop6): Directory bread(block 70) failed
[  654.955984][T19775] FAT-fs (loop6): Directory bread(block 71) failed
[  654.962582][T19775] FAT-fs (loop6): Directory bread(block 72) failed
[  654.969183][T19775] FAT-fs (loop6): Directory bread(block 73) failed
[  654.980968][T19775] xt_TPROXY: Can be used only with -p tcp or -p udp
[  654.988130][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3814'.
[  654.997133][T19775] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.006168][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.015196][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.024211][T19775] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.033230][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.042278][T19775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.051258][T19775] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3814'.
[  655.077864][T19770]  loop1: p1 < > p2 p4 < p5 >
[  655.082617][T19770] loop1: partition table partially beyond EOD, truncated
[  655.089791][T19770] loop1: p1 start 134217728 is beyond EOD, truncated
[  655.096614][T19770] loop1: p2 size 591360 extends beyond EOD, truncated
[  655.105073][T19770] loop1: p5 size 591360 extends beyond EOD, truncated
[  655.263774][T19787] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  655.270440][T19787] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  655.282572][T19787] vhci_hcd vhci_hcd.0: Device attached
[  655.289685][T19788] vhci_hcd: connection closed
[  655.291964][ T5385] vhci_hcd vhci_hcd.7: stop threads
[  655.305379][   T28] audit: type=1400 audit(1773800477.525:2440): avc:  denied  { map } for  pid=19786 comm="syz.7.3819" path="socket:[61829]" dev="sockfs" ino=61829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  655.334154][ T5385] vhci_hcd vhci_hcd.7: release socket
[  655.343660][ T5385] vhci_hcd vhci_hcd.7: disconnect device
[  655.429465][T19794] loop6: detected capacity change from 0 to 512
[  655.511159][T19797] loop6: detected capacity change from 0 to 512
[  655.562704][T19797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  655.584530][T19804] loop4: detected capacity change from 0 to 512
[  655.599802][T19797] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  655.637105][T19804] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3824: corrupted inode contents
[  655.669083][T19804] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  655.674758][T19804] EXT4-fs (loop4): Remounting filesystem read-only
[  655.683954][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  655.683992][    C0] EXT4-fs (loop4): initial error at time 1773800477: ext4_do_update_inode:5569: inode 15
[  655.684030][    C0] EXT4-fs (loop4): last error at time 1773800477: ext4_do_update_inode:5569: inode 15
[  655.753101][T19804] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -30)
[  655.766456][T19804] EXT4-fs (loop4): 1 orphan inode deleted
[  655.773051][T19804] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  655.835239][T13702] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  655.889967][   T28] audit: type=1326 audit(1773800478.087:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.7.3827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaa0ddc799 code=0x0
[  655.914164][T19814] loop4: detected capacity change from 0 to 512
[  656.015395][   T28] audit: type=1400 audit(1773800478.209:2442): avc:  denied  { mount } for  pid=19808 comm="syz.1.3825" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  656.050359][   T28] audit: type=1400 audit(1773800478.237:2443): avc:  denied  { connect } for  pid=19808 comm="syz.1.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  656.074348][   T28] audit: type=1400 audit(1773800478.237:2444): avc:  denied  { mounton } for  pid=19808 comm="syz.1.3825" path="/227/file0/file0" dev="loop1" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1
[  656.098526][   T28] audit: type=1400 audit(1773800478.237:2445): avc:  denied  { mount } for  pid=19808 comm="syz.1.3825" name="/" dev="hugetlbfs" ino=62698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  656.148411][T19818] set_capacity_and_notify: 1 callbacks suppressed
[  656.148490][T19818] loop4: detected capacity change from 0 to 256
[  656.168852][T19818] FAT-fs (loop4): Directory bread(block 64) failed
[  656.175517][T19818] FAT-fs (loop4): Directory bread(block 65) failed
[  656.182079][T19818] FAT-fs (loop4): Directory bread(block 66) failed
[  656.188599][T19818] FAT-fs (loop4): Directory bread(block 67) failed
[  656.195172][T19818] FAT-fs (loop4): Directory bread(block 68) failed
[  656.201800][T19818] FAT-fs (loop4): Directory bread(block 69) failed
[  656.208385][T19818] FAT-fs (loop4): Directory bread(block 70) failed
[  656.215137][T19818] FAT-fs (loop4): Directory bread(block 71) failed
[  656.215553][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.221862][T19818] FAT-fs (loop4): Directory bread(block 72) failed
[  656.237302][T19818] FAT-fs (loop4): Directory bread(block 73) failed
[  656.250440][T19818] xt_TPROXY: Can be used only with -p tcp or -p udp
[  656.579258][T19824] loop6: detected capacity change from 0 to 512
[  656.675599][   T28] audit: type=1400 audit(1773800478.817:2446): avc:  denied  { unmount } for  pid=13880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  657.077716][T19834] loop1: detected capacity change from 0 to 256
[  657.155264][T19834] FAT-fs (loop1): Directory bread(block 64) failed
[  657.161866][T19834] FAT-fs (loop1): Directory bread(block 65) failed
[  657.168594][T19834] FAT-fs (loop1): Directory bread(block 66) failed
[  657.175246][T19834] FAT-fs (loop1): Directory bread(block 67) failed
[  657.181804][T19834] FAT-fs (loop1): Directory bread(block 68) failed
[  657.188419][T19834] FAT-fs (loop1): Directory bread(block 69) failed
[  657.195069][T19834] FAT-fs (loop1): Directory bread(block 70) failed
[  657.201665][T19834] FAT-fs (loop1): Directory bread(block 71) failed
[  657.208281][T19834] FAT-fs (loop1): Directory bread(block 72) failed
[  657.214875][T19834] FAT-fs (loop1): Directory bread(block 73) failed
[  657.262870][T19834] xt_TPROXY: Can be used only with -p tcp or -p udp
[  657.363809][T19824] EXT4-fs (loop6): 1 orphan inode deleted
[  657.387643][T19824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  657.442725][T19838] loop0: detected capacity change from 0 to 1024
[  657.477822][T19838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  657.521415][T14835] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.538149][ T3421] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  658.577322][ T3421] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  658.816660][T15960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.990951][T19869] syzkaller0: entered promiscuous mode
[  658.996751][T19869] syzkaller0: entered allmulticast mode
[  659.106731][T19878] FAULT_INJECTION: forcing a failure.
[  659.106731][T19878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  659.135198][T19878] CPU: 1 UID: 0 PID: 19878 Comm: syz.0.3844 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  659.135231][T19878] Tainted: [W]=WARN
[  659.135237][T19878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  659.135306][T19878] Call Trace:
[  659.135312][T19878]  <TASK>
[  659.135320][T19878]  __dump_stack+0x1d/0x30
[  659.135368][T19878]  dump_stack_lvl+0x95/0xd0
[  659.135394][T19878]  dump_stack+0x15/0x1b
[  659.135486][T19878]  should_fail_ex+0x263/0x280
[  659.135517][T19878]  should_fail+0xb/0x20
[  659.135541][T19878]  should_fail_usercopy+0x1a/0x20
[  659.135665][T19878]  _copy_to_user+0x20/0xa0
[  659.135699][T19878]  simple_read_from_buffer+0xb5/0x130
[  659.135725][T19878]  proc_fail_nth_read+0x10e/0x150
[  659.135834][T19878]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  659.135864][T19878]  vfs_read+0x1ab/0x7f0
[  659.135922][T19878]  ? __rcu_read_unlock+0x4e/0x70
[  659.135946][T19878]  ? __fget_files+0x184/0x1c0
[  659.135973][T19878]  ? mutex_lock+0x57/0x90
[  659.136056][T19878]  ksys_read+0xdc/0x1a0
[  659.136091][T19878]  __x64_sys_read+0x40/0x50
[  659.136111][T19878]  x64_sys_call+0x2886/0x3020
[  659.136209][T19878]  do_syscall_64+0x12c/0x370
[  659.136233][T19878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.136330][T19878] RIP: 0033:0x7f80f848cfce
[  659.136348][T19878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  659.136369][T19878] RSP: 002b:00007f80f6f26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  659.136442][T19878] RAX: ffffffffffffffda RBX: 00007f80f6f276c0 RCX: 00007f80f848cfce
[  659.136458][T19878] RDX: 000000000000000f RSI: 00007f80f6f270a0 RDI: 0000000000000003
[  659.136505][T19878] RBP: 00007f80f6f27090 R08: 0000000000000000 R09: 0000000000000000
[  659.136518][T19878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  659.136532][T19878] R13: 00007f80f8746038 R14: 00007f80f8745fa0 R15: 00007ffc8f930428
[  659.136554][T19878]  </TASK>
[  659.384043][T19888] __nla_validate_parse: 84 callbacks suppressed
[  659.384058][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'.
[  659.430842][T19888] netlink: 'syz.4.3847': attribute type 6 has an invalid length.
[  659.492412][T19883] loop0: detected capacity change from 0 to 128
[  659.495489][T19892] loop6: detected capacity change from 0 to 512
[  659.537108][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  659.545239][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3846'.
[  659.582178][T19892] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3849: corrupted inode contents
[  659.605089][   T28] audit: type=1400 audit(1773800481.569:2447): avc:  denied  { ioctl } for  pid=19887 comm="syz.4.3847" path="socket:[61905]" dev="sockfs" ino=61905 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  659.620893][T19892] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  659.641022][T19899] loop0: detected capacity change from 0 to 512
[  659.657191][T19892] EXT4-fs (loop6): Remounting filesystem read-only
[  659.663703][T19892] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -30)
[  659.672671][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  659.672710][    C1] EXT4-fs (loop6): initial error at time 1773800481: ext4_do_update_inode:5569: inode 15
[  659.672744][    C1] EXT4-fs (loop6): last error at time 1773800481: ext4_do_update_inode:5569: inode 15
[  659.729306][T19892] EXT4-fs (loop6): 1 orphan inode deleted
[  659.735561][T19892] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.748297][T19899] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349)
[  659.789789][T19899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0002]
[  659.819449][T19899] EXT4-fs (loop0): orphan cleanup on readonly fs
[  659.830118][T19899] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3850: bad orphan inode 3
[  659.852320][T19899] loop0: lost filesystem error report for type 5 error -117
[  659.852936][T19899] EXT4-fs (loop0): mounted filesystem ff0f0000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  659.997698][T15960] EXT4-fs (loop0): unmounting filesystem ff0f0000-0000-0000-0000-000000000007.
[  660.039416][T14835] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  660.078239][T19920] FAULT_INJECTION: forcing a failure.
[  660.078239][T19920] name failslab, interval 1, probability 0, space 0, times 0
[  660.111256][T19920] CPU: 0 UID: 0 PID: 19920 Comm: syz.6.3855 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  660.111343][T19920] Tainted: [W]=WARN
[  660.111349][T19920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  660.111360][T19920] Call Trace:
[  660.111368][T19920]  <TASK>
[  660.111376][T19920]  __dump_stack+0x1d/0x30
[  660.111401][T19920]  dump_stack_lvl+0x95/0xd0
[  660.111490][T19920]  dump_stack+0x15/0x1b
[  660.111509][T19920]  should_fail_ex+0x263/0x280
[  660.111533][T19920]  should_failslab+0x8c/0xb0
[  660.111587][T19920]  __kmalloc_noprof+0xb8/0x4e0
[  660.111609][T19920]  ? load_msg+0xab/0x2f0
[  660.111630][T19920]  load_msg+0xab/0x2f0
[  660.111667][T19920]  do_msgsnd+0xe8/0xba0
[  660.111686][T19920]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  660.111796][T19920]  ? __x64_sys_msgsnd+0x52/0xc0
[  660.111818][T19920]  __x64_sys_msgsnd+0xa8/0xc0
[  660.111924][T19920]  x64_sys_call+0x15e7/0x3020
[  660.112023][T19920]  do_syscall_64+0x12c/0x370
[  660.112046][T19920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.112070][T19920] RIP: 0033:0x7f5745f9c799
[  660.112085][T19920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.112110][T19920] RSP: 002b:00007f57449ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  660.112150][T19920] RAX: ffffffffffffffda RBX: 00007f5746215fa0 RCX: 00007f5745f9c799
[  660.112161][T19920] RDX: 0000000000002000 RSI: 0000200000000480 RDI: 0000000000000000
[  660.112172][T19920] RBP: 00007f57449ef090 R08: 0000000000000000 R09: 0000000000000000
[  660.112183][T19920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.112193][T19920] R13: 00007f5746216038 R14: 00007f5746215fa0 R15: 00007ffd32ddc7d8
[  660.112215][T19920]  </TASK>
[  660.345133][T19914] loop4: detected capacity change from 0 to 8192
[  660.394596][T19914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3853'.
[  660.447577][T19920] loop6: detected capacity change from 0 to 128
[  660.473421][   T28] audit: type=1400 audit(1773800482.383:2448): avc:  denied  { ioctl } for  pid=19923 comm="syz.0.3857" path="socket:[62961]" dev="sockfs" ino=62961 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  661.166544][T19947] loop6: detected capacity change from 0 to 8192
[  661.268725][T11167]  loop6: p1 < > p2 p4 < p5 >
[  661.273441][T11167] loop6: partition table partially beyond EOD, truncated
[  661.280688][T11167] loop6: p1 start 134217728 is beyond EOD, truncated
[  661.287384][T11167] loop6: p2 size 591360 extends beyond EOD, truncated
[  661.296022][T11167] loop6: p5 size 591360 extends beyond EOD, truncated
[  661.637279][T19947]  loop6: p1 < > p2 p4 < p5 >
[  661.660788][T19947] loop6: partition table partially beyond EOD, truncated
[  661.695327][T19947] loop6: p1 start 134217728 is beyond EOD, truncated
[  661.713131][T19947] loop6: p2 size 591360 extends beyond EOD, truncated
[  661.729300][T19947] loop6: p5 size 591360 extends beyond EOD, truncated
[  661.775206][   T28] audit: type=1400 audit(1773800483.178:2449): avc:  denied  { relabelfrom } for  pid=19939 comm="syz.1.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  661.825607][   T28] audit: type=1400 audit(1773800483.178:2450): avc:  denied  { relabelto } for  pid=19939 comm="syz.1.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  661.941738][T19941] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3862'.
[  662.143160][T14835] ==================================================================
[  662.151287][T14835] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr
[  662.159202][T14835] 
[  662.161527][T14835] read-write to 0xffff8881448d33b0 of 8 bytes by task 19944 on cpu 1:
[  662.169677][T14835]  shmem_add_to_page_cache+0x4b2/0x5b0
[  662.175146][T14835]  shmem_get_folio_gfp+0x4f3/0xd60
[  662.180265][T14835]  shmem_write_begin+0xfc/0x1f0
[  662.185134][T14835]  generic_perform_write+0x183/0x490
[  662.190444][T14835]  shmem_file_write_iter+0xc5/0xf0
[  662.195580][T14835]  __kernel_write_iter+0x319/0x590
[  662.200815][T14835]  dump_user_range+0xa7d/0xdb0
[  662.205609][T14835]  elf_core_dump+0x21a2/0x2330
[  662.210411][T14835]  coredump_write+0xacc/0xdd0
[  662.215100][T14835]  vfs_coredump+0x26c7/0x3130
[  662.219780][T14835]  get_signal+0xd80/0xf60
[  662.224128][T14835]  arch_do_signal_or_restart+0x96/0x450
[  662.229688][T14835]  irqentry_exit+0xf7/0x520
[  662.234199][T14835]  asm_exc_page_fault+0x26/0x30
[  662.239070][T14835] 
[  662.241393][T14835] read to 0xffff8881448d33b0 of 8 bytes by task 14835 on cpu 0:
[  662.249030][T14835]  shmem_getattr+0x68/0x200
[  662.253633][T14835]  vfs_getattr_nosec+0x146/0x1e0
[  662.258579][T14835]  vfs_getattr+0x48/0x60
[  662.262820][T14835]  vfs_statx_path+0x28/0x140
[  662.267417][T14835]  vfs_statx+0xc4/0x170
[  662.271585][T14835]  vfs_fstatat+0x118/0x170
[  662.276008][T14835]  __se_sys_newfstatat+0x55/0x3e0
[  662.281034][T14835]  __x64_sys_newfstatat+0x55/0x70
[  662.286067][T14835]  x64_sys_call+0x2c64/0x3020
[  662.290755][T14835]  do_syscall_64+0x12c/0x370
[  662.295346][T14835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.301242][T14835] 
[  662.303554][T14835] value changed: 0x0000000000002c9f -> 0x0000000000002ca0
[  662.310648][T14835] 
[  662.312973][T14835] Reported by Kernel Concurrency Sanitizer on:
[  662.319119][T14835] CPU: 0 UID: 0 PID: 14835 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  662.330246][T14835] Tainted: [W]=WARN
[  662.334051][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  662.344192][T14835] ==================================================================
[  662.424672][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  662.424715][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  662.528275][T19959] loop6: detected capacity change from 0 to 128
[  662.613305][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3867'.