last executing test programs:

2m0.172168157s ago: executing program 4 (id=5):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040))
syslog(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1, 0xfffffe01, 0x800)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x7, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x2)

1m58.098214648s ago: executing program 4 (id=14):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040))
syslog(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1, 0xfffffe01, 0x800)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x7, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x2)

1m56.339624652s ago: executing program 4 (id=18):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
getdents(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0x400, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m51.601900137s ago: executing program 4 (id=27):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
openat$rtc(0xffffffffffffff9c, 0x0, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="07000000040000001800000042a0"], 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x1fffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2000}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@newtclass={0x24, 0x28, 0x300, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0xb, 0x2}, {0x1, 0x5}}}, 0x24}}, 0x800)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x200000000000000)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

1m50.683836027s ago: executing program 4 (id=31):
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
read(r5, &(0x7f0000000440)=""/138, 0x8a)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x25, 0x3, 0x7)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x400, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x8b]}, {0x8, 0x8, 0x3, 0x4}}, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x3a8})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8000, 0x18, 0x95, 0x4, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x2, 0x0, 0x0, @multicast1, @loopback}}}})
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00')
readv(r8, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)

1m35.266553856s ago: executing program 32 (id=31):
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
read(r5, &(0x7f0000000440)=""/138, 0x8a)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x25, 0x3, 0x7)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x400, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x8b]}, {0x8, 0x8, 0x3, 0x4}}, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x3a8})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8000, 0x18, 0x95, 0x4, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x2, 0x0, 0x0, @multicast1, @loopback}}}})
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00')
readv(r8, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)

36.938294018s ago: executing program 5 (id=283):
futex(&(0x7f0000000000), 0x100, 0x0, 0x0, 0x0, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @void}, 0xa)
syz_emit_ethernet(0x36, &(0x7f0000001300)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x300)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x3000000)

36.729682617s ago: executing program 5 (id=286):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r2 = openat$cgroup(r0, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0)
writev(r2, &(0x7f0000000880)=[{&(0x7f00000006c0)="30070bd11d8a1bb564a19157f9a70ebb6a09bc76726c981ff06f3aabcc2655a079498ec57ab75b3a56156f18004d3773e37ea54ad8b143ea73e8c8014d75e6913b8aedcd413fa1d3aed1c20d22600306dad9ab9680d72eafb130725ea0bea7ec1538612d8636e41aa96da40eb9d25502e3eb14099b0247fa883b8066c97f5d20ef27db7107bc72a77b69061bc73277b3a96ddec24abe1579c5f65845bef8cf5d0fce01e6ac12a9e3007970215baaa902f133e0d9", 0xb4}, {&(0x7f0000000780)="acc04c18a8e96266bc97839e7997c7064071b499a7160b4057e7dddb2a7c660397cb2d102c9d1cadfbb32964715c86a1979222f4d881b75fbebb236e6198a4e0599e3c3cfcb468a519dd758409b9640a71761ad0f8e7fee69ce27ee03b5d37dbe4bc5434722da9c6b8b54f46b5507d9b6b7c6c8b8fddb453b4f399ea35194600db80ecfd79e8ec03e40e2185e6d5e875819fe73347af0e43d6127de43b4e34bd3fe1812cc7e75a780cbedfb42b361caa368170875306b5dfe98b35d34d725a0618a4174449f3be0acf5745c46bdd69ce857aefedd486b99425650cc46fd847", 0xdf}], 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=""/185, 0x117, 0xb9, 0x0, 0x7, 0x10000}, 0x28)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r3, &(0x7f0000000500)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000002c0)={'gre0\x00', <r7=>0x0, 0x10, 0x20, 0x4, 0x8, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x68, 0x0, 0x4f, 0x2f, 0x0, @empty, @remote, {[@rr={0x7, 0x1b, 0xec, [@local, @private=0x7, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end, @generic={0x7, 0xf, "fa8161fa70e1e85b385edef141"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x13, 0xf4, [@private=0xa010100, @empty, @remote, @rand_addr=0x64010100]}, @noop]}}}}})
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, @xdp={0x2c, 0x1, r7, 0x24}, @in={0x2, 0x4e24, @loopback}, @hci={0x1f, 0x2, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='ipvlan0\x00', 0x68, 0x80, 0x80})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x307, &(0x7f0000000a00)="$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")

36.564543161s ago: executing program 5 (id=287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000044c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a31"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004004)
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffffffc}, 0x1c)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000300)={r6, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000200)={r8, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000011c0)={{<r9=>0x0, 0xffff, 0x13b04820, 0x5, 0xfffffffffffff001, 0x7fffffffffffffff, 0x200, 0x6, 0x0, 0xf, 0x1ff, 0x8, 0x0, 0x9, 0xf}})
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000003800)={{r9, 0x400, 0x5, 0x7f, 0x4, 0x75f, 0x6, 0xa25, 0xffffff7f, 0x80000000, 0x3, 0x8, 0x1, 0x0, 0x4}})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x80001, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x8, 0x9, 0x6, 0x2, 0x0, 0x200000, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
getsockopt$MRT(r10, 0x0, 0xd0, 0x0, &(0x7f0000000380))

35.262404505s ago: executing program 5 (id=290):
r0 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x40840, 0x1)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)={r4}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r4, 0x739c7734}, 0x8)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x800)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000})
r5 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{0x0}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getresgid(&(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000740))
fstat(r1, &(0x7f0000000780))
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200})
io_uring_enter(r5, 0xd12, 0xd9bd, 0x9, 0x0, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0)

34.842527392s ago: executing program 5 (id=291):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendmmsg(r2, &(0x7f0000001b00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="700000000000000017010000080000000de6d828cef3e15d12490678608c32c1c3c8a94d58f21705c497c5b64db97d1129ca9e525f08ce3a41ae0ad896e11660315cb1ce997e24f72ad0c40cdda2ce1263775eea7c051d0cbda7a9888544ae20572f52bc4c771c440f00000000000000a8000000000000001801000006000000b4dbceb304cc776ebf6cf3a124a0e00ad516c159779c04c013fcefb3a62b2c485d41897aef7d02b1e52d1c0d7874a871957ade1e4f115a9b4182458773ba77cbdc55547cb6d6a02cc60fd469f4bf61cdf3a7886ba9b99d5d6674c91359c91d9a3ab31ea885b896702192d77de0d262775c99cc69eb23e0f83f625b597b9456f6312068c79b1d9fd082838735c140dde16c39862c7b3f0000000100000000000094000000010000001195e21dbd99191d1deb6ce8af75450e29665e4f63939056ae7ed32cf15b20449df95c3ecaf986e26d14c0f5b6"], 0x308}}], 0x1, 0x44)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="02"], 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x8080)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x404c840)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r7, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10)

33.225815943s ago: executing program 5 (id=309):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1ff, 0x402000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
close(r1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgid(0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x0, r7})
setpriority(0x0, r7, 0x24)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYRES64], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
dup(r9)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
unshare(0x2a020480)
r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
ioctl$FS_IOC_RESVSP(r10, 0x40044591, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

18.136238273s ago: executing program 33 (id=309):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1ff, 0x402000)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
close(r1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgid(0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x0, r7})
setpriority(0x0, r7, 0x24)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYRES64], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
dup(r9)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
unshare(0x2a020480)
r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
ioctl$FS_IOC_RESVSP(r10, 0x40044591, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

4.158924176s ago: executing program 6 (id=429):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
unshare(0x400)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0), 0x12)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)

3.150569274s ago: executing program 3 (id=441):
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x100)
r1 = dup(r0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x100, 0x1, 0x200, 0x0, 0x0, 0x8, 0x5, 0xd}}], 0x30}, 0x8050) (fail_nth: 4)

2.808716194s ago: executing program 3 (id=444):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x82040, 0x186)
r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r3=>0x0, 0x4, 0xf, 0x10, 0x2, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x8, 0xfff, 0x9}})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000300)={0x2, {{0xa, 0x4e22, 0x379, @private0, 0x8}}, {{0xa, 0x4e21, 0x0, @remote, 0x1}}}, 0x108)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', <r5=>0x0, 0x40, 0x8000, 0x9, 0x1, {{0xe, 0x4, 0x3, 0x24, 0x38, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @remote, {[@end, @rr={0x7, 0x7, 0x7b, [@remote]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xe, "f1acc584d25bd92ef67e2c6e"}, @timestamp={0x44, 0x8, 0xa, 0x0, 0xd, [0x3]}]}}}}})
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@getsa={0x2f4, 0x12, 0x8, 0x70bd2c, 0x25dfdbfe, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0xa}, [@lifetime_val={0x24, 0x9, {0x32d, 0x7, 0x87, 0x4}}, @tmpl={0x184, 0x5, [{{@in=@local, 0x4d2, 0xe}, 0x2, @in=@remote, 0x3505, 0x0, 0x3, 0x40, 0x6, 0x8, 0x1ff}, {{@in6=@empty, 0x4d5, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x2, 0x3, 0x8, 0x3, 0x6, 0x8}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x1, 0x2, 0xe, 0x0, 0x8, 0x80000000}, {{@in=@multicast2, 0x4d3, 0x6c}, 0xa, @in=@remote, 0x3506, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}, {{@in=@multicast1, 0x4d2, 0x2b}, 0xa, @in=@remote, 0x3507, 0x2, 0x1, 0x4, 0xe82, 0x8, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x3c}, 0xa, @in6=@local, 0x3504, 0x3, 0x3, 0x4, 0x8, 0x0, 0xfff}]}, @algo_crypt={0x48, 0x2, {{'chacha20\x00'}}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0xa1, r3, 0xee00}, {0x9, 0x3b, 0x1, 0x3, 0xf, 0x101, 0xfffffffffffffffb}, {0xfffffffffffffffb, 0x80000000, 0xfff, 0x200}, 0x1, 0x6e6bbb, 0x2, 0x0, 0x0, 0x3}}, @coaddr={0x14, 0xe, @in=@empty}, @offload={0xc, 0x1c, {r5, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @etimer_thresh={0x8, 0xc, 0x490}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
fcntl$setlease(r1, 0x400, 0x2)
unlink(&(0x7f0000000180)='./file1\x00')
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)

2.618680981s ago: executing program 3 (id=445):
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async)
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0x1) (async)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)=0x1)
setpgid(r4, r4)
setpgid(0x0, r4)
fchdir(r3)
mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20008, 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20008, 0x0)

2.374532522s ago: executing program 1 (id=449):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040))
syslog(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x40)
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1, 0xfffffe01, 0x800)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nz2M3n79v1orRotQlBMmrRqF24UBZGKgi7qMk6mJXTaSBPBfmCjiCtBCroWl6J/gbgRQdSV4Epw5UoKRbNp6ypyZ+5NMpNM2iSTTO38fjCZc+aemXueOffce+45kwA61lD2J4nYHRG/RsRALVtfYKj2dHP+cunW/OVSEgsLr/6RVMvdmL9cKooW79uVZ4bTiPT9JN9JvZkLF89MVCrl83l+dPZsX56cOF0+XT43fvz4saNjTz05/kRL4sziunHwnelDB154/epLpZNX3/jhy6y+u/Pty+NYp19Gm2wYygL/c6GqcdsjG9zZ3WrPsnTS3caKsC5dEZE1V0+1/w9EVyw13kA8/15bKwdsqeza1Nd889wCcA9Lot01ANqjuNDvnO8qZffAK++DB7Zy+NF215+p3QBlcd/MH7Ut3ZHmZXoa7m9baSgiTs799Wn2iM3NQwAA3JEPS5+c6I2IS7e+eDEbeyyN9tLu/1aff6v+3ZuPBAcj4l8RsS8i/h0R+yPiPxGRlf1fRPx/k/VZOf5Jr23yI9eUjf+ezte26sd/xegvBrvy3J5q/D3JqalK+Uj+nQxHT1+WH1tjH9889/NHzbYtH/9lj2z/xVgwr8e17oYJusmJ2YnqoLQFrr8bcbA7SVbGnyyuBCQRcSAiDq7vo/cWialHPz/UrNDt419DC9aZFj7LwpvL2n8uGuIvJLX1yTdHZy5cfHzqbOP65Gh/VMpHRoujYqUff/rglWb7r8Xfn+dWj3/H5sNs6nq59rys/ZdtXewDS+u1M63d/waP/7Q3ea26ztybv/b2xOzs+bGI3uRENV/3+vjSe4t8UT47/ocPr97/9+Xvydr/vojIDuL7I+KBiHgwr/tDEfFwRBxeI8bvn719/JFu4PhvgSz+yVXPf4vH/2BS1/7rT3Sd+e6rZvu/s/Y/Vk0N569Uz38Nkob8atXpjuhrrOBmvz8AAAD4J0irv4FP0pHFdJqOjNR+w78/dqaV6ZnZx05Nv3VusvZb+cHoSYuZroF8PrQyVSmPJXP5J9bmR8fzueJivvRoPm/8cdeOan6kNF2ZbHPs0Ol2Nen/md+72l07YIvVLy8VC8DjvW2pDLDNGtfR0/rslZfDyQDuVf5fGzrXbfp/ul31ALaf6z90rtX6/5WGvLUAuDe5/kPn0v+hQ6Xfrvry19teEaAdXP+hI23m//q3MNF/d1SjPYntbpRYV+EoEmnbv6hWJfrjrqjGxhOX8t7cyk9u84kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRf4OAAD//+Nr2uw=")
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000006c0), 0x0}, 0x20)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)

2.218885196s ago: executing program 2 (id=450):
unshare(0x2c020400)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresgid(0xee00, 0xee01, r0) (async)
setresgid(0xee00, 0xee01, r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
setresuid(0x0, 0xee00, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)='%-5lx  \x00'}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pimreg\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './file0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r5, 0x0) (async)
r6 = syz_pidfd_open(r5, 0x0)
pidfd_send_signal(r6, 0x16, 0x0, 0x0)

2.037883471s ago: executing program 6 (id=451):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKCLOSEZONE(r1, 0x40101287, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c000280050001000014000180080001000000000008000200ac1e02010c000280050001000000000018000e801400018008000100ac1414bb080002006401010200000000000000"], 0x7c}}, 0x0)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
sendmsg$nl_route(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000190000082bbd7000fcdbdf2580201401fe03ff050012000008000500fffffeff08000f000700000008000200ac1e000108000100ffffffff05001b000c000000100016800c0001000000020000000000"], 0x54}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e26, @rand_addr=0x64010101}], 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8, 0x81}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="f51a929378d8deaf1a86faa0e1e68cf820dab216129461de86164a763303121960e9569d8b357e601602201058c4f905d3f467d5601540404a7abe628e41a755dc7b57b8df25335976909dc01eb315ca87bf39c0bf8729330e039698b853f42e609e9c3d76756b3903838bde88e03542f5a03563ab56bf5ac54ff334b2efeacb2b3d53fa148f3473a6ab034be006af026c0ea39ad80ebce2f517f2329199e839cd846ef90f49101511aacb27819d585712d63c702f0cea7f98ff5913e7c709c7fc2589f66bb2e8a8a7554e026f9fbbf8cf316c309d72dc89c760420efef414d6c3d0bda8a42a12b2074a0946"], 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x83, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)

1.678680783s ago: executing program 3 (id=452):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x4, 0x401, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
syz_clone(0x26801000, 0x0, 0x80000, 0x0, 0x0, 0x0)

1.641918206s ago: executing program 2 (id=453):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

1.548524635s ago: executing program 1 (id=454):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x2)

1.446474523s ago: executing program 0 (id=455):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x3)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x1, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) (async)
r4 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81cf0"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81cf0"], 0x30}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r6) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r6)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xa}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x2a}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.446053553s ago: executing program 1 (id=456):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)

1.437182164s ago: executing program 2 (id=457):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
unshare(0x400)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000005c0), 0x12)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)

1.382985149s ago: executing program 1 (id=458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x44, 0x9, 0x6, 0x801, 0x0, 0xfff0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.25088031s ago: executing program 1 (id=459):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000077a38b1e88af417f3d40c2ae9d914c4e4c09bb169cc47362cca6833b314b865b5a72dc", @ANYRES16=r1, @ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
close(0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x6f6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)

1.14202363s ago: executing program 6 (id=460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x45, 0xfe, 0x0, 0x0, 0x1, 0x10012}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x20040000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")

924.667439ms ago: executing program 1 (id=461):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
unshare(0x400)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0), 0x12)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)

863.134924ms ago: executing program 2 (id=462):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x7, &(0x7f0000000280)=<r0=>0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
unshare(0x600)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0004000000028008001c"], 0x3c}}, 0x0)
socketpair(0x23, 0x5, 0x1, &(0x7f0000000100))
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
ioctl$TCFLSH(r1, 0x541b, 0x7ffffffffffffffe)
openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x80)
r4 = socket(0x10, 0x3, 0x0)
io_destroy(r0)
write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x10)
recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)

860.443535ms ago: executing program 0 (id=463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x28, 0x9, 0x6, 0x801, 0xfff0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

833.099837ms ago: executing program 6 (id=464):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x5}, 0x1a2d, 0x2, 0x7ff, 0x6, 0x2, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="baeac38fb771621c0000000000000000000000fa00000001890b04457695f3e48c59caf4024445b44d5e48e0d790ee3ff3d29f6f4e3cc3ccddc7464feceaa89379897dafc2a295e6e0629eaaf956be72fd95e451a01383"], 0x20}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010800000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002820c00038005000100ac000000080001400000000908000240000000020900010073797a3000"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r3)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r6=>0x0, 0x29, 0x2, 0x61, 0x5, 0x2c, @mcast1, @mcast1, 0x8000, 0x7, 0xfff, 0xfffff000}})
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x3}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x64715b09331be8e5}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', <r13=>0x0, 0x10, 0x80, 0xc6d, 0x8000, {{0x11, 0x4, 0x0, 0xc, 0x44, 0x65, 0x0, 0xa0, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, {[@rr={0x7, 0x7, 0x50, [@multicast2]}, @lsrr={0x83, 0x23, 0x9b, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @multicast2]}, @generic={0x89, 0x3, "96"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r14=>0x0, 0x4, 0x22, 0x0, 0xa368, 0x44, @empty, @mcast1, 0x8000, 0x10, 0x80, 0x7}})
r15 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r16=>0x0})
bind$can_raw(r15, &(0x7f0000000000)={0x1d, r16}, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x2d4, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

789.639801ms ago: executing program 2 (id=465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x60000600)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x800}}}]}, 0x38}}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x40}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x3, 0x2, 0x2, 0x6, 0x8, 0x0, [{0x3, 0x9, 0x1, '\x00', 0x100d}, {0x6, 0x7fff, 0xc7b0, '\x00', 0x102}, {0xb0, 0x2, 0x6, '\x00', 0x100}, {0x584, 0x0, 0x3, '\x00', 0xb01}, {0x642, 0x7fffffff, 0x2}, {0x0, 0x100000000, 0x2, '\x00', 0x209d}, {0x9, 0xfffffffffffffffa, 0xe313, '\x00', 0x282}, {0x84, 0x401, 0x7fffffffffffffff, '\x00', 0x2104}]})

722.774347ms ago: executing program 0 (id=466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fff5001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000050a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002"], 0xb0}}, 0x0)

722.484136ms ago: executing program 0 (id=467):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
shutdown(r0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

613.723236ms ago: executing program 0 (id=468):
r0 = socket$inet(0x2, 0x1, 0x100)
setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r3}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r3, 0x739c7734}, 0x8)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x800)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000})
r4 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{0x0}], 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getresgid(&(0x7f0000000540), &(0x7f0000000680), &(0x7f0000000740))
fstat(r1, &(0x7f0000000780))
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200})
io_uring_enter(r4, 0xd12, 0xd9bd, 0x9, 0x0, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x31, 0x0, 0x0)

546.982722ms ago: executing program 3 (id=469):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf37, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000300)=""/100, 0x64, <r4=>0x0, &(0x7f0000000380)=""/255, 0xff}}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x145bcc16, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_query, @ldst={0x2, 0x1, 0x3, 0x4, 0x2, 0x2, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x3a, &(0x7f0000000600)=""/58, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0xfff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x261c}, 0x94)
r6 = open(0x0, 0x24842, 0x1a7)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, 0x0, 0x0)
r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x18, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x58}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0xd79, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x55, 0xfff}, 0x10, r4, r5, 0x8, &(0x7f0000000800)=[r6, r7, r8], &(0x7f0000000840)=[{0x2, 0x5, 0xa, 0x3}, {0x5, 0x5, 0x1, 0x9}, {0x4, 0x3, 0x9, 0x2}, {0x5, 0x1, 0x6, 0xd}, {0x4, 0x3, 0xf, 0x8}, {0x2, 0x3, 0xa, 0x6}, {0x5, 0x1, 0x10, 0xa}, {0x4, 0x2, 0xe, 0x5}], 0x10, 0x6}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x20c512, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r9 = open(&(0x7f00000001c0)='./file2\x00', 0x4000, 0x6)
preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

406.654464ms ago: executing program 2 (id=470):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000080)='./file2\x00', 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$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")

349.618179ms ago: executing program 6 (id=471):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

225.57122ms ago: executing program 3 (id=472):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
unshare(0x400)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580), 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0), 0x12)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800)

97.667251ms ago: executing program 0 (id=473):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r0=>0x0})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x5080) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x5080)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000000000/0x1000)=nil, &(0x7f00007f6000/0x3000)=nil], 0x0, 0x0, 0x0)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_PARMS={0x18, 0x1, {0x3873, 0x2, 0x6, 0x452, 0x8}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_LABELS={0x13, 0x7, "ecac453c8b581c2a7fd3f798141b120c"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850)
r6 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4}) (async)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4})
io_uring_enter(r6, 0x44fd, 0x3, 0x1, 0x0, 0x0)
open(0x0, 0x8000, 0x112)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})

0s ago: executing program 6 (id=474):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1)
ioctl$TCSETS(r0, 0x8924, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
getdents(0xffffffffffffffff, 0x0, 0x58)
socket$inet6_sctp(0xa, 0x4, 0x84)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x3)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x101)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TCXONC(r2, 0x540a, 0x1)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)

kernel console output (not intermixed with test programs):

ystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.214874][ T4118] can0: slcan on ttyS3.
[   82.244537][  T409] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 52568 - 0
[   82.254835][ T4120] can0 (unregistered): slcan off ttyS3.
[   82.358086][  T409] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 52568 - 0
[   82.401386][ T4106] FAULT_INJECTION: forcing a failure.
[   82.401386][ T4106] name failslab, interval 1, probability 0, space 0, times 0
[   82.447495][ T4106] CPU: 1 UID: 0 PID: 4106 Comm: syz.2.98 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   82.447598][ T4106] Tainted: [W]=WARN
[   82.447606][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   82.447619][ T4106] Call Trace:
[   82.447626][ T4106]  <TASK>
[   82.447634][ T4106]  __dump_stack+0x1d/0x30
[   82.447686][ T4106]  dump_stack_lvl+0x95/0xd0
[   82.447782][ T4106]  dump_stack+0x15/0x1b
[   82.447811][ T4106]  should_fail_ex+0x263/0x280
[   82.447838][ T4106]  should_failslab+0x8c/0xb0
[   82.447863][ T4106]  kmem_cache_alloc_noprof+0x66/0x400
[   82.447908][ T4106]  ? alloc_empty_file+0x76/0x200
[   82.447999][ T4106]  alloc_empty_file+0x76/0x200
[   82.448036][ T4106]  path_openat+0x65/0x2050
[   82.448074][ T4106]  ? __perf_event_task_sched_in+0xa65/0xad0
[   82.448179][ T4106]  ? __perf_event_task_sched_out+0x192/0x710
[   82.448207][ T4106]  ? _raw_spin_unlock+0x9/0x30
[   82.448231][ T4106]  ? finish_task_switch+0x7d/0x280
[   82.448256][ T4106]  ? __schedule+0x85a/0xd40
[   82.448331][ T4106]  do_file_open+0x16c/0x290
[   82.448381][ T4106]  do_sys_openat2+0x94/0x130
[   82.448435][ T4106]  __x64_sys_openat+0xf2/0x120
[   82.448462][ T4106]  x64_sys_call+0x1e39/0x3020
[   82.448496][ T4106]  do_syscall_64+0x12c/0x370
[   82.448533][ T4106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.448568][ T4106] RIP: 0033:0x7f6f62f3c629
[   82.448588][ T4106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.448679][ T4106] RSP: 002b:00007f6f6198f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   82.448703][ T4106] RAX: ffffffffffffffda RBX: 00007f6f631b5fa0 RCX: 00007f6f62f3c629
[   82.448720][ T4106] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c
[   82.448733][ T4106] RBP: 00007f6f6198f090 R08: 0000000000000000 R09: 0000000000000000
[   82.448766][ T4106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.448780][ T4106] R13: 00007f6f631b6038 R14: 00007f6f631b5fa0 R15: 00007ffed5252d98
[   82.448852][ T4106]  </TASK>
[   82.659255][ T4115] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.102: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   82.705368][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.734771][   T28] kauditd_printk_skb: 19 callbacks suppressed
[   82.734785][   T28] audit: type=1400 audit(1771687848.021:213): avc:  denied  { unmount } for  pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   82.807673][   T28] audit: type=1400 audit(1771687848.091:214): avc:  denied  { write } for  pid=4123 comm="syz.2.104" name="fib_triestat" dev="proc" ino=4026532487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   82.945626][ T4128] loop1: detected capacity change from 0 to 512
[   82.957876][ T4128] EXT4-fs: Ignoring removed nobh option
[   83.313271][ T4128] EXT4-fs (loop1): 1 orphan inode deleted
[   83.381827][ T4134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.390897][ T4134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.994653][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.045009][ T4128] can0: slcan on ttyS3.
[   84.343589][ T4139] loop3: detected capacity change from 0 to 512
[   84.356531][ T4139] EXT4-fs: Ignoring removed nobh option
[   84.415614][ T4139] EXT4-fs (loop3): 1 orphan inode deleted
[   84.433783][ T4139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.494735][ T4128] can0 (unregistered): slcan off ttyS3.
[   84.799405][ T4139] can0: slcan on ttyS3.
[   85.304589][ T4144] loop2: detected capacity change from 0 to 512
[   85.318210][ T4144] EXT4-fs: Ignoring removed nobh option
[   85.364054][ T4144] EXT4-fs (loop2): 1 orphan inode deleted
[   85.382490][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.414753][ T4139] can0 (unregistered): slcan off ttyS3.
[   85.494523][ T4144] can0: slcan on ttyS3.
[   85.545678][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.603377][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.612813][ T4144] can0 (unregistered): slcan off ttyS3.
[   85.698296][ T4142] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.108: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   85.721459][ T4150] netlink: 'syz.5.112': attribute type 4 has an invalid length.
[   85.751099][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.782251][   T28] audit: type=1400 audit(1771687851.061:215): avc:  denied  { connect } for  pid=4155 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   85.842766][ T4160] FAULT_INJECTION: forcing a failure.
[   85.842766][ T4160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.982879][ T4166] loop1: detected capacity change from 0 to 512
[   85.997138][ T4166] EXT4-fs: Ignoring removed nobh option
[   86.024460][ T4160] CPU: 0 UID: 0 PID: 4160 Comm: syz.3.115 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   86.024580][ T4160] Tainted: [W]=WARN
[   86.024589][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   86.024605][ T4160] Call Trace:
[   86.024614][ T4160]  <TASK>
[   86.024624][ T4160]  __dump_stack+0x1d/0x30
[   86.024653][ T4160]  dump_stack_lvl+0x95/0xd0
[   86.024718][ T4160]  dump_stack+0x15/0x1b
[   86.024788][ T4160]  should_fail_ex+0x263/0x280
[   86.024809][ T4160]  should_fail+0xb/0x20
[   86.024829][ T4160]  should_fail_usercopy+0x1a/0x20
[   86.024869][ T4160]  _copy_from_user+0x1c/0xb0
[   86.024894][ T4160]  copy_from_sockptr+0x5e/0x90
[   86.025000][ T4160]  packet_setsockopt+0x7c1/0xfd0
[   86.025022][ T4160]  ? __pfx_packet_setsockopt+0x10/0x10
[   86.025051][ T4160]  __sys_setsockopt+0x184/0x200
[   86.025121][ T4160]  __x64_sys_setsockopt+0x64/0x80
[   86.025198][ T4160]  x64_sys_call+0x2327/0x3020
[   86.025226][ T4160]  do_syscall_64+0x12c/0x370
[   86.025271][ T4160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.025332][ T4160] RIP: 0033:0x7f542d59c629
[   86.025348][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.025414][ T4160] RSP: 002b:00007f542bfef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   86.025440][ T4160] RAX: ffffffffffffffda RBX: 00007f542d815fa0 RCX: 00007f542d59c629
[   86.025458][ T4160] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
[   86.025474][ T4160] RBP: 00007f542bfef090 R08: 0000000000000010 R09: 0000000000000000
[   86.025553][ T4160] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[   86.025566][ T4160] R13: 00007f542d816038 R14: 00007f542d815fa0 R15: 00007ffe81782a78
[   86.025591][ T4160]  </TASK>
[   86.211713][ T4164] loop5: detected capacity change from 0 to 128
[   86.286577][ T4166] EXT4-fs (loop1): 1 orphan inode deleted
[   86.303616][ T4166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.373648][ T4166] can0: slcan on ttyS3.
[   86.594818][ T4166] can0 (unregistered): slcan off ttyS3.
[   86.636433][ T4175] program syz.0.118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.645967][   T28] audit: type=1400 audit(1771687851.911:216): avc:  denied  { write } for  pid=4174 comm="syz.0.118" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   86.689335][ T4177] =======================================================
[   86.689335][ T4177] WARNING: The mand mount option has been deprecated and
[   86.689335][ T4177]          and is ignored by this kernel. Remove the mand
[   86.689335][ T4177]          option from the mount to silence this warning.
[   86.689335][ T4177] =======================================================
[   86.743859][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.772214][   T28] audit: type=1326 audit(1771687852.051:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4182 comm="syz.1.119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0424e2c629 code=0x0
[   86.815753][   T28] audit: type=1400 audit(1771687852.101:218): avc:  denied  { create } for  pid=4180 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   86.932260][ T4187] hub 8-0:1.0: USB hub found
[   86.937301][ T4187] hub 8-0:1.0: 8 ports detected
[   86.958101][ T4187] netlink: 'syz.2.120': attribute type 10 has an invalid length.
[   86.966503][ T4187] veth1_vlan: left allmulticast mode
[   87.210693][   T28] audit: type=1400 audit(1771687852.121:219): avc:  denied  { nlmsg_read } for  pid=4180 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   87.273768][   T28] audit: type=1400 audit(1771687852.121:220): avc:  denied  { write } for  pid=4180 comm="syz.3.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   87.341716][ T4193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.429563][ T4195] loop3: detected capacity change from 0 to 164
[   87.440000][ T4193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.637692][ T4199] loop2: detected capacity change from 0 to 2048
[   87.664892][ T4199] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[   87.728150][   T28] audit: type=1400 audit(1771687852.991:221): avc:  denied  { create } for  pid=4198 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   87.804968][ T4202] loop3: detected capacity change from 0 to 512
[   87.816041][ T4202] EXT4-fs: Ignoring removed nobh option
[   87.873015][ T4202] EXT4-fs (loop3): 1 orphan inode deleted
[   87.891092][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.979302][ T4202] can0: slcan on ttyS3.
[   88.064587][   T28] audit: type=1400 audit(1771687852.991:222): avc:  denied  { connect } for  pid=4198 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   88.075220][ T4202] can0 (unregistered): slcan off ttyS3.
[   88.255218][   T28] audit: type=1400 audit(1771687853.531:223): avc:  denied  { create } for  pid=4204 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   88.332469][   T28] audit: type=1400 audit(1771687853.561:224): avc:  denied  { ioctl } for  pid=4204 comm="syz.1.126" path="socket:[6630]" dev="sockfs" ino=6630 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   88.472799][ T4197] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.124: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   88.517234][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.634872][   T28] audit: type=1400 audit(1771687853.871:225): avc:  denied  { create } for  pid=4209 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.654504][   T28] audit: type=1400 audit(1771687853.871:226): avc:  denied  { ioctl } for  pid=4209 comm="syz.1.128" path="socket:[7537]" dev="sockfs" ino=7537 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.678967][   T28] audit: type=1400 audit(1771687853.871:227): avc:  denied  { connect } for  pid=4209 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.808635][   T28] audit: type=1400 audit(1771687853.871:228): avc:  denied  { read } for  pid=4209 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.828499][   T28] audit: type=1400 audit(1771687853.931:229): avc:  denied  { write } for  pid=4209 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.893423][ T4217] netlink: 596 bytes leftover after parsing attributes in process `syz.5.130'.
[   88.933559][ T4218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.942524][ T4218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.486762][ T4222] loop5: detected capacity change from 0 to 512
[   89.503066][ T4222] EXT4-fs: Ignoring removed nobh option
[   89.560677][ T4222] EXT4-fs (loop5): 1 orphan inode deleted
[   89.577836][ T4222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.646438][ T4222] can0: slcan on ttyS3.
[   89.805219][ T4222] can0 (unregistered): slcan off ttyS3.
[   89.956090][   T28] audit: type=1400 audit(1771687855.241:230): avc:  denied  { ioctl } for  pid=4226 comm="syz.2.133" path="socket:[7562]" dev="sockfs" ino=7562 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   90.087951][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.240347][ T4225] netlink: 'syz.1.132': attribute type 10 has an invalid length.
[   90.285214][ T4230] SELinux:  Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped).
[   90.318777][   T28] audit: type=1400 audit(1771687855.561:231): avc:  denied  { mac_admin } for  pid=4229 comm="syz.5.134" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   90.348557][ T4225] 8021q: adding VLAN 0 to HW filter on device team0
[   90.385422][ T4225] bond0: (slave team0): Enslaving as an active interface with an up link
[   90.814929][ T4247] 9p: Bad value for 'rfdno'
[   90.915964][ T4250] hub 8-0:1.0: USB hub found
[   90.921158][ T4250] hub 8-0:1.0: 8 ports detected
[   91.235442][ T4256] loop2: detected capacity change from 0 to 128
[   91.560995][ T4255] loop0: detected capacity change from 0 to 164
[   91.907277][ T4296] tipc: Failed to obtain node identity
[   91.921360][ T4296] tipc: Enabling of bearer <ib:ipvlan1> rejected, failed to enable media
[   91.950015][ T4296] 9p: Bad value for 'rfdno'
[   91.976680][ T4296] iso9660: Corrupted directory entry in block 4 of inode 1792
[   92.489226][ T4322] loop5: detected capacity change from 0 to 512
[   92.501559][ T4322] EXT4-fs: Ignoring removed nobh option
[   92.554119][ T4322] EXT4-fs (loop5): 1 orphan inode deleted
[   92.568485][ T4322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.638318][ T4322] can0: slcan on ttyS3.
[   93.168773][ T4322] can0 (unregistered): slcan off ttyS3.
[   93.252903][ T4320] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.144: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   93.485100][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.549577][ T4340] netlink: 'syz.0.147': attribute type 10 has an invalid length.
[   94.618253][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   94.618270][   T28] audit: type=1400 audit(1771687859.901:242): avc:  denied  { bind } for  pid=4341 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   94.833820][   T28] audit: type=1400 audit(1771687860.111:243): avc:  denied  { name_bind } for  pid=4347 comm="syz.0.152" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   96.848056][ T4351] loop1: detected capacity change from 0 to 512
[   96.854956][ T4351] EXT4-fs: Ignoring removed nobh option
[   96.937637][ T4353] loop3: detected capacity change from 0 to 512
[   96.944382][ T4353] EXT4-fs: Ignoring removed nobh option
[   97.037788][ T4351] EXT4-fs (loop1): 1 orphan inode deleted
[   97.044615][ T4351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.072680][ T4349] can0: slcan on ttyS3.
[   97.076957][ T4353] EXT4-fs (loop3): 1 orphan inode deleted
[   97.077882][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.194758][ T4349] can0 (unregistered): slcan off ttyS3.
[   97.203738][ T4350] can0: slcan on ttyS3.
[   97.248772][ T4358] loop2: detected capacity change from 0 to 1764
[   97.262179][ T4346] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.151: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   97.305429][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.354680][ T4343] can0 (unregistered): slcan off ttyS3.
[   97.361117][ T4344] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.150: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[   97.412275][   T28] audit: type=1400 audit(1771687862.691:244): avc:  denied  { create } for  pid=4362 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.461101][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.606235][ T4382] netlink: 'syz.2.155': attribute type 10 has an invalid length.
[   97.614994][   T28] audit: type=1400 audit(1771687862.711:245): avc:  denied  { setopt } for  pid=4362 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.635235][   T28] audit: type=1400 audit(1771687862.711:246): avc:  denied  { write } for  pid=4362 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.707407][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.716170][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.251980][ T4384] loop5: detected capacity change from 0 to 512
[   98.728046][ T4384] EXT4-fs: Ignoring removed nobh option
[   98.981353][ T4384] EXT4-fs (loop5): 1 orphan inode deleted
[   99.001697][ T4384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.075547][ T4384] can0: slcan on ttyS3.
[   99.205875][ T4384] can0 (unregistered): slcan off ttyS3.
[   99.457496][ T4406] hub 8-0:1.0: USB hub found
[   99.462356][ T4406] hub 8-0:1.0: 8 ports detected
[   99.481235][ T4406] netlink: 'syz.0.159': attribute type 10 has an invalid length.
[   99.571370][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.918151][ T4413] loop5: detected capacity change from 0 to 4096
[   99.965085][ T4413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.058988][ T4413] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.161: corrupted inode contents
[  100.090261][ T4413] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.161: mark_inode_dirty error
[  100.112191][ T4399] loop3: detected capacity change from 0 to 512
[  100.125874][   T28] audit: type=1400 audit(1771687865.411:247): avc:  denied  { remove_name } for  pid=4411 comm="syz.5.161" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  100.150867][   T28] audit: type=1400 audit(1771687865.411:248): avc:  denied  { rename } for  pid=4411 comm="syz.5.161" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  100.174364][   T28] audit: type=1400 audit(1771687865.411:249): avc:  denied  { unlink } for  pid=4411 comm="syz.5.161" name="file3" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  100.176869][ T4413] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.161: corrupted inode contents
[  100.231475][ T4413] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.161: mark_inode_dirty error
[  100.245389][ T4413] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.161: corrupted inode contents
[  100.257835][ T4413] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.161: mark_inode_dirty error
[  100.262127][ T4399] EXT4-fs: Ignoring removed nobh option
[  100.270166][ T4413] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.161: corrupted inode contents
[  100.270362][ T4413] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.161: mark_inode_dirty error
[  100.270539][ T4413] EXT4-fs error (device loop5) in ext4_setattr:5983: Corrupt filesystem
[  100.314940][ T4419] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.161: corrupted inode contents
[  100.348231][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.161'.
[  100.349074][ T4424] loop0: detected capacity change from 0 to 128
[  100.359528][   T28] audit: type=1400 audit(1771687865.631:250): avc:  denied  { mount } for  pid=4411 comm="syz.5.161" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  100.402458][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.161'.
[  100.464151][ T4413] macvlan2: entered promiscuous mode
[  100.530422][ T4413] macvlan2: entered allmulticast mode
[  100.540253][   T28] audit: type=1400 audit(1771687865.631:251): avc:  denied  { append } for  pid=4411 comm="syz.5.161" path="/14/file1/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  100.556881][ T4413] veth0_virt_wifi: entered allmulticast mode
[  100.573053][ T4430] loop2: detected capacity change from 0 to 512
[  100.643151][ T4433] loop1: detected capacity change from 0 to 512
[  100.650855][ T4433] EXT4-fs: Ignoring removed nobh option
[  100.746934][ T4433] EXT4-fs (loop1): 1 orphan inode deleted
[  100.753541][ T4433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.774722][ T4430] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.164: inode has both inline data and extents flags
[  100.852246][ T4430] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  100.852590][ T4430] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.164: couldn't read orphan inode 15 (err -117)
[  100.861799][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  100.861816][    C1] EXT4-fs (loop2): initial error at time 1771687866: ext4_orphan_get:1391: inode 15
[  100.861841][    C1] EXT4-fs (loop2): last error at time 1771687866: ext4_orphan_get:1391: inode 15
[  100.920101][ T4433] can0: slcan on ttyS3.
[  101.024724][ T4436] can0 (unregistered): slcan off ttyS3.
[  101.078700][ T4399] EXT4-fs (loop3): 1 orphan inode deleted
[  101.099596][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.125967][ T4430] loop2: lost filesystem error report for type 5 error -117
[  101.127014][ T4430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.194851][ T4399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.227069][ T4438] loop5: detected capacity change from 0 to 128
[  101.249251][   T28] audit: type=1400 audit(1771687866.491:252): avc:  denied  { setattr } for  pid=4429 comm="syz.2.164" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  101.271567][ T4438] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  101.293995][ T4438] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  101.294961][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.315384][   T28] audit: type=1400 audit(1771687866.521:253): avc:  denied  { create } for  pid=4429 comm="syz.2.164" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  101.480452][   T28] audit: type=1400 audit(1771687866.761:254): avc:  denied  { create } for  pid=4443 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.512767][ T4399] can0: slcan on ttyS3.
[  101.528146][ T4444] EXT4-fs: Ignoring removed nobh option
[  101.550266][ T4428] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.165: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  101.569622][ T4444] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  101.577857][   T28] audit: type=1400 audit(1771687866.761:255): avc:  denied  { connect } for  pid=4443 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  101.614966][   T28] audit: type=1400 audit(1771687866.781:256): avc:  denied  { create } for  pid=4437 comm="syz.5.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  101.647872][ T4444] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.168: attempt to clear invalid blocks 1 len 1
[  101.685733][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.709715][ T4444] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  101.709886][ T4444] EXT4-fs (loop2): Remounting filesystem read-only
[  101.719153][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  101.719177][    C0] EXT4-fs (loop2): initial error at time 1771687866: ext4_clear_blocks:876: inode 13
[  101.719212][    C0] EXT4-fs (loop2): last error at time 1771687866: ext4_clear_blocks:876: inode 13
[  101.754858][ T4444] EXT4-fs (loop2): 1 truncate cleaned up
[  101.766518][ T4444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.991133][ T4469] netlink: 'syz.5.170': attribute type 10 has an invalid length.
[  102.111425][ T4469] macvlan1: entered allmulticast mode
[  102.118776][ T4469] veth1_vlan: entered allmulticast mode
[  102.127176][ T4469] team0: Port device macvlan1 added
[  102.298330][ T4473] set_capacity_and_notify: 1 callbacks suppressed
[  102.298546][ T4473] loop1: detected capacity change from 0 to 512
[  102.530131][ T4473] EXT4-fs: Ignoring removed nobh option
[  102.586594][ T4473] EXT4-fs (loop1): 1 orphan inode deleted
[  102.603811][ T4473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.664266][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.124747][ T4473] can0 (unregistered): slcan off ttyS3.
[  103.214318][ T4484] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.238931][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.286149][ T4487] netlink: 'syz.2.172': attribute type 10 has an invalid length.
[  103.712360][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.804225][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.176'.
[  103.890592][ T4507] loop5: detected capacity change from 0 to 512
[  103.925171][ T4507] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.176: corrupted inode contents
[  103.937084][ T4507] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  103.939066][ T4507] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  103.948269][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  103.948308][    C1] EXT4-fs (loop5): initial error at time 1771687869: ext4_do_update_inode:5569: inode 15
[  103.948338][    C1] EXT4-fs (loop5): last error at time 1771687869: ext4_do_update_inode:5569: inode 15
[  104.134006][ T4507] loop5: lost filesystem error report for type 5 error -117
[  104.134497][ T4507] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.176: corrupted inode contents
[  104.338623][ T4507] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  104.339456][ T4507] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.176: mark_inode_dirty error
[  104.460542][ T4507] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  104.464020][ T4507] EXT4-fs (loop5): 1 orphan inode deleted
[  104.481355][ T4507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.517636][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.655932][ T4527] loop1: detected capacity change from 0 to 512
[  104.666970][ T4527] EXT4-fs: Ignoring removed nobh option
[  104.804048][ T4527] EXT4-fs (loop1): 1 orphan inode deleted
[  104.820162][ T4527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.881962][ T4527] can0: slcan on ttyS3.
[  104.944981][ T4527] can0 (unregistered): slcan off ttyS3.
[  105.228123][ T4536] loop3: detected capacity change from 0 to 2048
[  105.322153][ T4540] netlink: 'syz.0.184': attribute type 10 has an invalid length.
[  105.354463][ T4521] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.180: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  105.655913][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.034481][ T4544] loop3: detected capacity change from 0 to 512
[  106.107323][ T4544] EXT4-fs: Ignoring removed nobh option
[  106.257990][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  106.258008][   T28] audit: type=1400 audit(1771687871.541:262): avc:  denied  { name_connect } for  pid=4547 comm="syz.1.187" dest=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  106.365099][ T4551] loop0: detected capacity change from 0 to 256
[  106.420341][   T28] audit: type=1400 audit(1771687871.701:263): avc:  denied  { listen } for  pid=4547 comm="syz.1.187" lport=54282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  106.473126][ T4552] loop1: detected capacity change from 0 to 128
[  106.540067][ T4552] msdos: Unknown parameter 'dos1xfl%›4?Ö…y'
[  106.642159][   T28] audit: type=1400 audit(1771687871.721:264): avc:  denied  { accept } for  pid=4547 comm="syz.1.187" lport=54282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  106.835983][   T28] audit: type=1400 audit(1771687871.731:265): avc:  denied  { name_bind } for  pid=4547 comm="syz.1.187" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  107.030703][   T28] audit: type=1400 audit(1771687871.731:266): avc:  denied  { node_bind } for  pid=4547 comm="syz.1.187" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  107.299725][ T4551] FAT-fs (loop0): Directory bread(block 64) failed
[  107.306597][ T4551] FAT-fs (loop0): Directory bread(block 65) failed
[  107.313303][ T4551] FAT-fs (loop0): Directory bread(block 66) failed
[  107.319974][ T4551] FAT-fs (loop0): Directory bread(block 67) failed
[  107.326798][ T4551] FAT-fs (loop0): Directory bread(block 68) failed
[  107.333449][ T4551] FAT-fs (loop0): Directory bread(block 69) failed
[  107.340376][ T4551] FAT-fs (loop0): Directory bread(block 70) failed
[  107.347109][ T4551] FAT-fs (loop0): Directory bread(block 71) failed
[  107.353693][ T4551] FAT-fs (loop0): Directory bread(block 72) failed
[  107.360599][ T4551] FAT-fs (loop0): Directory bread(block 73) failed
[  107.400981][ T4544] EXT4-fs (loop3): 1 orphan inode deleted
[  107.818688][ T4544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.424094][   T28] audit: type=1400 audit(1771687873.701:267): avc:  denied  { ioctl } for  pid=4558 comm="syz.2.189" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  108.450461][ T4557] hub 8-0:1.0: USB hub found
[  108.455626][ T4557] hub 8-0:1.0: 8 ports detected
[  108.471183][ T4557] netlink: 'syz.1.188': attribute type 10 has an invalid length.
[  108.779912][ T4564] loop1: detected capacity change from 0 to 256
[  108.836621][ T4564] vfat: Unknown parameter 'ungýi[e'
[  108.885035][ T4568] loop0: detected capacity change from 0 to 128
[  108.908137][ T4544] can0: slcan on ttyS3.
[  108.946545][   T28] audit: type=1400 audit(1771687874.231:268): avc:  denied  { remount } for  pid=4563 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  109.024654][ T4565] can0 (unregistered): slcan off ttyS3.
[  109.296575][   T28] audit: type=1400 audit(1771687874.581:269): avc:  denied  { name_connect } for  pid=4574 comm="syz.5.191" dest=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1
[  109.548169][   T28] audit: type=1400 audit(1771687874.821:270): avc:  denied  { create } for  pid=4578 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  109.783248][ T4581] loop5: detected capacity change from 0 to 512
[  109.810479][   T28] audit: type=1400 audit(1771687874.821:271): avc:  denied  { ioctl } for  pid=4578 comm="syz.5.195" path="socket:[7878]" dev="sockfs" ino=7878 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  109.875313][ T4581] EXT4-fs: Ignoring removed i_version option
[  109.905868][ T4581] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  109.928345][ T4581] EXT4-fs (loop5): 1 truncate cleaned up
[  109.935056][ T4581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.030045][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.233193][ T4586] loop1: detected capacity change from 0 to 512
[  110.255422][ T4588] hub 8-0:1.0: USB hub found
[  110.260533][ T4588] hub 8-0:1.0: 8 ports detected
[  110.274131][ T4588] netlink: 'syz.5.197': attribute type 10 has an invalid length.
[  110.347038][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.394669][ T4588] veth1_vlan: left allmulticast mode
[  110.533390][ T4586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.614504][ T4586] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.740384][ T4586] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  110.785703][ T4592] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  110.956249][ T4600] loop3: detected capacity change from 0 to 512
[  110.970792][ T4600] EXT4-fs: Ignoring removed nobh option
[  111.036443][ T4600] EXT4-fs (loop3): 1 orphan inode deleted
[  111.052208][ T4600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.123822][ T4600] can0: slcan on ttyS3.
[  111.205627][ T4600] can0 (unregistered): slcan off ttyS3.
[  111.453992][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.590404][ T4607] loop5: detected capacity change from 0 to 512
[  111.607753][ T4607] EXT4-fs: Ignoring removed nobh option
[  111.687876][ T4609] loop1: detected capacity change from 0 to 512
[  111.697356][ T4609] EXT4-fs: Ignoring removed nobh option
[  111.732718][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.772819][ T4609] EXT4-fs (loop1): 1 orphan inode deleted
[  111.790198][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.865590][ T4609] can0: slcan on ttyS3.
[  111.917979][ T4607] EXT4-fs (loop5): 1 orphan inode deleted
[  111.936687][ T4607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.025093][ T4609] can0 (unregistered): slcan off ttyS3.
[  112.079835][ T4607] can0: slcan on ttyS3.
[  112.231663][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  112.231680][   T28] audit: type=1400 audit(1771687877.511:275): avc:  denied  { read } for  pid=3040 comm="dhcpcd" name="n74" dev="tmpfs" ino=2896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.287614][   T28] audit: type=1400 audit(1771687877.541:276): avc:  denied  { open } for  pid=3040 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=2896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.314487][ T4604] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.201: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  112.375875][   T28] audit: type=1400 audit(1771687877.541:277): avc:  denied  { getattr } for  pid=3040 comm="dhcpcd" path="/run/udev/data/n74" dev="tmpfs" ino=2896 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.408658][ T4619] netlink: 'syz.3.203': attribute type 10 has an invalid length.
[  112.430836][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.446950][ T4605] can0 (unregistered): slcan off ttyS3.
[  112.456667][ T4606] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.202: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  112.646247][   T28] audit: type=1400 audit(1771687877.921:278): avc:  denied  { create } for  pid=4617 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.726663][   T28] audit: type=1400 audit(1771687877.921:279): avc:  denied  { write } for  pid=4617 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.824737][   T28] audit: type=1400 audit(1771687877.921:280): avc:  denied  { append } for  pid=4617 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  112.889366][   T28] audit: type=1400 audit(1771687878.061:281): avc:  denied  { unlink } for  pid=4630 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2909 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  113.123235][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.162262][ T4648] FAULT_INJECTION: forcing a failure.
[  113.162262][ T4648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.164457][   T28] audit: type=1400 audit(1771687878.441:282): avc:  denied  { setopt } for  pid=4647 comm="syz.5.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  113.175545][ T4648] CPU: 1 UID: 0 PID: 4648 Comm: syz.5.204 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  113.175653][ T4648] Tainted: [W]=WARN
[  113.175674][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  113.175713][ T4648] Call Trace:
[  113.175734][ T4648]  <TASK>
[  113.175756][ T4648]  __dump_stack+0x1d/0x30
[  113.175844][ T4648]  dump_stack_lvl+0x95/0xd0
[  113.175924][ T4648]  dump_stack+0x15/0x1b
[  113.175995][ T4648]  should_fail_ex+0x263/0x280
[  113.176066][ T4648]  should_fail+0xb/0x20
[  113.176091][ T4648]  should_fail_usercopy+0x1a/0x20
[  113.176293][ T4648]  _copy_to_iter+0xd2/0xea0
[  113.176364][ T4648]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  113.176435][ T4648]  ? skb_recv_datagram+0xf9/0x140
[  113.176568][ T4648]  raw_recvmsg+0x134/0x360
[  113.176662][ T4648]  ? __pfx_raw_recvmsg+0x10/0x10
[  113.176761][ T4648]  sock_recvmsg+0x139/0x160
[  113.176877][ T4648]  ____sys_recvmsg+0xf5/0x280
[  113.177013][ T4648]  ___sys_recvmsg+0x11f/0x3b0
[  113.177231][ T4648]  do_recvmmsg+0x1ef/0x560
[  113.177333][ T4648]  ? fput+0x8f/0xc0
[  113.177445][ T4648]  __x64_sys_recvmmsg+0xe5/0x170
[  113.177496][ T4648]  x64_sys_call+0x80f/0x3020
[  113.177615][ T4648]  do_syscall_64+0x12c/0x370
[  113.177726][ T4648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.177797][ T4648] RIP: 0033:0x7f0df20cc629
[  113.177848][ T4648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.177903][ T4648] RSP: 002b:00007f0df0b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  113.178007][ T4648] RAX: ffffffffffffffda RBX: 00007f0df2345fa0 RCX: 00007f0df20cc629
[  113.178050][ T4648] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003
[  113.178092][ T4648] RBP: 00007f0df0b27090 R08: 0000000000000000 R09: 0000000000000000
[  113.178134][ T4648] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001
[  113.178179][ T4648] R13: 00007f0df2346038 R14: 00007f0df2345fa0 R15: 00007ffc07aeb328
[  113.178253][ T4648]  </TASK>
[  113.404469][ T4649] loop0: detected capacity change from 0 to 1024
[  113.412408][   T28] audit: type=1400 audit(1771687878.441:283): avc:  denied  { bind } for  pid=4647 comm="syz.5.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  113.433066][ T4649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  113.445452][ T4649] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.558599][   T28] audit: type=1400 audit(1771687878.841:284): avc:  denied  { append } for  pid=4645 comm="syz.0.205" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  113.616230][ T4659] loop5: detected capacity change from 0 to 512
[  113.627610][ T4659] EXT4-fs: Ignoring removed nobh option
[  113.701218][ T4659] EXT4-fs (loop5): 1 orphan inode deleted
[  113.717401][ T4659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.790849][ T4659] can0: slcan on ttyS3.
[  113.854714][ T4656] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  113.878052][ T4659] can0 (unregistered): slcan off ttyS3.
[  113.968715][ T4665] loop1: detected capacity change from 0 to 1024
[  113.975708][ T4665] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.982739][ T4665] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.128529][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.368568][ T4653] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.206: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  114.439519][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.481455][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.528612][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  114.937096][ T4687] loop0: detected capacity change from 0 to 512
[  114.954957][ T4687] EXT4-fs: Ignoring removed nobh option
[  114.996558][ T4688] netlink: 'syz.3.212': attribute type 10 has an invalid length.
[  115.058435][ T4687] EXT4-fs (loop0): 1 orphan inode deleted
[  115.073738][ T4687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.143704][ T4687] can0: slcan on ttyS3.
[  115.245279][ T4687] can0 (unregistered): slcan off ttyS3.
[  115.330326][ T4685] loop5: detected capacity change from 0 to 512
[  115.368932][ T4685] EXT4-fs: Ignoring removed nobh option
[  115.411004][ T4694] loop2: detected capacity change from 0 to 128
[  115.419070][ T4685] EXT4-fs (loop5): 1 orphan inode deleted
[  115.425481][ T4685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.492995][ T4685] can0: slcan on ttyS3.
[  115.554711][ T4685] can0 (unregistered): slcan off ttyS3.
[  115.610165][ T4703] loop3: detected capacity change from 0 to 512
[  115.646840][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.702228][ T4703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.734277][ T4703] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.803638][ T4721] netlink: 596 bytes leftover after parsing attributes in process `syz.0.219'.
[  115.859238][ T4725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.221'.
[  116.079563][ T4738] hub 8-0:1.0: USB hub found
[  116.084916][ T4738] hub 8-0:1.0: 8 ports detected
[  116.096638][ T4738] netlink: 'syz.1.223': attribute type 10 has an invalid length.
[  116.122695][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.475071][ T4753] loop3: detected capacity change from 0 to 512
[  116.485711][ T4753] EXT4-fs: Ignoring removed nobh option
[  117.088917][ T4753] EXT4-fs (loop3): 1 orphan inode deleted
[  117.107134][ T4753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.166443][ T4753] can0: slcan on ttyS3.
[  117.524709][ T4753] can0 (unregistered): slcan off ttyS3.
[  117.646143][ T4766] netlink: 'syz.0.228': attribute type 10 has an invalid length.
[  117.657694][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.061007][   T28] kauditd_printk_skb: 38 callbacks suppressed
[  118.061025][   T28] audit: type=1400 audit(1771687883.341:323): avc:  denied  { create } for  pid=4767 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  118.091235][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.137499][   T28] audit: type=1400 audit(1771687883.411:324): avc:  denied  { mount } for  pid=4770 comm="syz.5.230" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  118.217140][   T28] audit: type=1400 audit(1771687883.491:325): avc:  denied  { getopt } for  pid=4775 comm="syz.5.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.323040][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'.
[  118.350687][ T4789] FAULT_INJECTION: forcing a failure.
[  118.350687][ T4789] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.384623][ T4789] CPU: 0 UID: 0 PID: 4789 Comm: syz.3.236 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  118.384715][ T4789] Tainted: [W]=WARN
[  118.384723][ T4789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  118.384739][ T4789] Call Trace:
[  118.384748][ T4789]  <TASK>
[  118.384757][ T4789]  __dump_stack+0x1d/0x30
[  118.384799][ T4789]  dump_stack_lvl+0x95/0xd0
[  118.384890][ T4789]  dump_stack+0x15/0x1b
[  118.384916][ T4789]  should_fail_ex+0x263/0x280
[  118.384942][ T4789]  should_fail+0xb/0x20
[  118.384963][ T4789]  should_fail_usercopy+0x1a/0x20
[  118.385061][ T4789]  _copy_to_user+0x20/0xa0
[  118.385088][ T4789]  simple_read_from_buffer+0xb5/0x130
[  118.385114][ T4789]  proc_fail_nth_read+0x10e/0x150
[  118.385146][ T4789]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  118.385179][ T4789]  vfs_read+0x1ab/0x7f0
[  118.385283][ T4789]  ? __rcu_read_unlock+0x4e/0x70
[  118.385309][ T4789]  ? __fget_files+0x184/0x1c0
[  118.385448][ T4789]  ? mutex_lock+0x57/0x90
[  118.385497][ T4789]  ksys_read+0xdc/0x1a0
[  118.385558][ T4789]  __x64_sys_read+0x40/0x50
[  118.385596][ T4789]  x64_sys_call+0x2886/0x3020
[  118.385694][ T4789]  do_syscall_64+0x12c/0x370
[  118.385778][ T4789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.385873][ T4789] RIP: 0033:0x7f542d55cece
[  118.385888][ T4789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  118.385905][ T4789] RSP: 002b:00007f542bfeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  118.385924][ T4789] RAX: ffffffffffffffda RBX: 00007f542bfef6c0 RCX: 00007f542d55cece
[  118.385936][ T4789] RDX: 000000000000000f RSI: 00007f542bfef0a0 RDI: 0000000000000003
[  118.385967][ T4789] RBP: 00007f542bfef090 R08: 0000000000000000 R09: 0000000000000000
[  118.385983][ T4789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.386031][ T4789] R13: 00007f542d816038 R14: 00007f542d815fa0 R15: 00007ffe81782a78
[  118.386055][ T4789]  </TASK>
[  118.806565][ T4795] netlink: 'syz.5.237': attribute type 10 has an invalid length.
[  119.446054][ T4800] loop1: detected capacity change from 0 to 512
[  119.456395][ T4800] EXT4-fs: Ignoring removed nobh option
[  119.638887][ T4800] EXT4-fs (loop1): 1 orphan inode deleted
[  119.656643][ T4800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.722922][ T4800] can0: slcan on ttyS3.
[  119.934954][ T4800] can0 (unregistered): slcan off ttyS3.
[  120.050562][ T4808] loop3: detected capacity change from 0 to 128
[  120.064160][ T4798] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.239: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  120.104853][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.148827][ T4812] loop5: detected capacity change from 0 to 164
[  120.155598][ T4812] iso9660: Unknown parameter 'pn'
[  120.215311][ T4813] syz.3.242: attempt to access beyond end of device
[  120.215311][ T4813] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  120.288769][ T4811] loop0: detected capacity change from 0 to 256
[  120.318804][   T28] audit: type=1400 audit(1771687885.581:326): avc:  denied  { watch watch_reads } for  pid=4810 comm="syz.5.244" path="/32" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  120.349994][ T4813] batadv_slave_1: entered promiscuous mode
[  120.357108][ T4813] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  120.368557][ T4813] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  120.382435][ T4816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.393037][ T4813] vhci_hcd vhci_hcd.4: default hub control req: 0016 v0014 i0000 l0
[  120.420536][   T28] audit: type=1400 audit(1771687885.631:327): avc:  denied  { ioctl } for  pid=4807 comm="syz.3.242" path="socket:[8422]" dev="sockfs" ino=8422 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  120.422603][ T4816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.449824][ T4819] vhci_hcd vhci_hcd.4: default hub control req: 0000 v8000 i0003 l14
[  120.462870][   T28] audit: type=1400 audit(1771687885.641:328): avc:  denied  { append } for  pid=4807 comm="syz.3.242" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  120.511245][ T4821] hub 8-0:1.0: USB hub found
[  120.516101][ T4821] hub 8-0:1.0: 8 ports detected
[  120.530906][ T4821] netlink: 'syz.5.245': attribute type 10 has an invalid length.
[  120.552977][ T4811] FAT-fs (loop0): Directory bread(block 64) failed
[  120.575109][ T4811] FAT-fs (loop0): Directory bread(block 65) failed
[  120.642010][ T4811] FAT-fs (loop0): Directory bread(block 66) failed
[  120.654225][ T4811] FAT-fs (loop0): Directory bread(block 67) failed
[  120.661144][ T4811] FAT-fs (loop0): Directory bread(block 68) failed
[  120.667859][ T4811] FAT-fs (loop0): Directory bread(block 69) failed
[  120.680040][ T4811] FAT-fs (loop0): Directory bread(block 70) failed
[  120.687406][ T4811] FAT-fs (loop0): Directory bread(block 71) failed
[  120.696981][ T4811] FAT-fs (loop0): Directory bread(block 72) failed
[  120.704091][ T4811] FAT-fs (loop0): Directory bread(block 73) failed
[  120.883795][ T4807] batadv_slave_1: left promiscuous mode
[  120.972990][  T409] kworker/u8:7: attempt to access beyond end of device
[  120.972990][  T409] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  121.145139][ T4823] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.165100][   T28] audit: type=1326 audit(1771687886.451:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.3.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542d59c629 code=0x0
[  121.192233][ T4823] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.255782][ T4830] netlink: 'syz.5.248': attribute type 3 has an invalid length.
[  121.276902][ T4830] netlink: 132 bytes leftover after parsing attributes in process `syz.5.248'.
[  121.326436][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.248'.
[  121.656004][ T4838] hub 8-0:1.0: USB hub found
[  121.671396][ T4838] hub 8-0:1.0: 8 ports detected
[  121.702763][ T4838] netlink: 'syz.5.249': attribute type 10 has an invalid length.
[  122.213565][ T4847] loop3: detected capacity change from 0 to 512
[  122.229945][ T4847] EXT4-fs: Ignoring removed nobh option
[  122.414512][ T4847] EXT4-fs (loop3): 1 orphan inode deleted
[  122.447637][ T4847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.513358][ T4847] can0: slcan on ttyS3.
[  122.574942][ T4847] can0 (unregistered): slcan off ttyS3.
[  122.867925][ T4855] loop2: detected capacity change from 0 to 512
[  122.880234][ T4855] EXT4-fs: Ignoring removed nobh option
[  122.901166][ T4845] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.252: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  123.179482][ T4858] loop5: detected capacity change from 0 to 128
[  123.355482][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.393772][ T4855] EXT4-fs (loop2): 1 orphan inode deleted
[  123.416257][ T4855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.460106][ T4854] can0: slcan on ttyS3.
[  123.524985][ T4854] can0 (unregistered): slcan off ttyS3.
[  123.579458][   T28] audit: type=1400 audit(1771687888.861:330): avc:  denied  { ioctl } for  pid=4863 comm="syz.3.257" path="socket:[8191]" dev="sockfs" ino=8191 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  123.658062][ T4853] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.254: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  123.745462][ T4868] hub 8-0:1.0: USB hub found
[  123.750518][ T4868] hub 8-0:1.0: 8 ports detected
[  123.763801][ T4868] netlink: 'syz.1.258': attribute type 10 has an invalid length.
[  124.195175][   T28] audit: type=1400 audit(1771687888.881:331): avc:  denied  { getopt } for  pid=4863 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  124.197403][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.278802][   T28] audit: type=1400 audit(1771687889.541:332): avc:  denied  { create } for  pid=4870 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  124.331225][   T28] audit: type=1400 audit(1771687889.581:333): avc:  denied  { allowed } for  pid=4875 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  124.386826][   T28] audit: type=1400 audit(1771687889.581:334): avc:  denied  { sqpoll } for  pid=4875 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  124.880920][ T4895] loop1: detected capacity change from 0 to 512
[  124.941579][ T4895] EXT4-fs: Ignoring removed nobh option
[  125.063516][ T4895] EXT4-fs (loop1): 1 orphan inode deleted
[  125.173675][ T4895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.416099][ T4903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  125.421099][ T4895] can0: slcan on ttyS3.
[  125.422669][ T4903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  125.425326][ T4903] vhci_hcd vhci_hcd.0: Device attached
[  125.573052][ T4911] loop0: detected capacity change from 0 to 512
[  125.600712][ T4911] EXT4-fs: Ignoring removed nobh option
[  125.620515][   T28] audit: type=1400 audit(1771687890.891:335): avc:  denied  { ioctl } for  pid=4913 comm="syz.2.269" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8648 ioctlcmd=0x4b6a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  125.644604][ T4911] EXT4-fs (loop0): 1 orphan inode deleted
[  125.661984][ T4898] can0 (unregistered): slcan off ttyS3.
[  125.715441][ T4911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.762149][ T4911] can0: slcan on ttyS3.
[  125.769818][ T3486] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[  125.825152][   T28] audit: type=1400 audit(1771687891.101:336): avc:  denied  { bind } for  pid=4925 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.905140][ T4911] can0 (unregistered): slcan off ttyS3.
[  125.975167][ T4904] vhci_hcd: connection reset by peer
[  125.988838][  T409] vhci_hcd vhci_hcd.3: stop threads
[  125.994343][  T409] vhci_hcd vhci_hcd.3: release socket
[  126.018617][  T409] vhci_hcd vhci_hcd.3: disconnect device
[  126.123977][ T4939] hub 8-0:1.0: USB hub found
[  126.129163][ T4939] hub 8-0:1.0: 8 ports detected
[  126.144520][ T4939] netlink: 'syz.2.272': attribute type 10 has an invalid length.
[  126.157982][   T28] audit: type=1400 audit(1771687891.401:337): avc:  denied  { create } for  pid=4932 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  126.548651][   T28] audit: type=1400 audit(1771687891.401:338): avc:  denied  { setopt } for  pid=4932 comm="syz.2.272" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  126.583076][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.273'.
[  126.598885][ T4947] bridge0: entered promiscuous mode
[  126.604306][ T4947] macvtap1: entered promiscuous mode
[  126.611898][ T4947] bridge0: port 3(macvtap1) entered blocking state
[  126.618787][ T4947] bridge0: port 3(macvtap1) entered disabled state
[  126.625423][ T4947] macvtap1: entered allmulticast mode
[  126.630923][ T4947] bridge0: entered allmulticast mode
[  126.637674][ T4947] macvtap1: left allmulticast mode
[  126.642887][ T4947] bridge0: left allmulticast mode
[  126.658111][ T4947] bridge0: left promiscuous mode
[  126.675092][   T28] audit: type=1400 audit(1771687891.861:339): avc:  denied  { write } for  pid=4938 comm="syz.5.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  126.726951][ T4950] tun0: tun_chr_ioctl cmd 1074025675
[  126.732555][ T4950] tun0: persist enabled
[  126.748309][ T4950] tun0: tun_chr_ioctl cmd 1074025675
[  126.763143][ T4950] tun0: persist enabled
[  127.011681][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.063066][ T4965] loop1: detected capacity change from 0 to 128
[  127.130748][ T4968] loop3: detected capacity change from 0 to 256
[  127.149528][ T4968] FAT-fs (loop3): Directory bread(block 64) failed
[  127.167777][ T4968] FAT-fs (loop3): Directory bread(block 65) failed
[  127.184634][ T4968] FAT-fs (loop3): Directory bread(block 66) failed
[  127.191217][ T4968] FAT-fs (loop3): Directory bread(block 67) failed
[  127.216299][ T4968] FAT-fs (loop3): Directory bread(block 68) failed
[  127.234644][ T4968] FAT-fs (loop3): Directory bread(block 69) failed
[  127.245033][ T4968] FAT-fs (loop3): Directory bread(block 70) failed
[  127.272951][ T4968] FAT-fs (loop3): Directory bread(block 71) failed
[  127.290218][ T4968] FAT-fs (loop3): Directory bread(block 72) failed
[  127.297458][ T4968] FAT-fs (loop3): Directory bread(block 73) failed
[  127.397857][ T4974] FAULT_INJECTION: forcing a failure.
[  127.397857][ T4974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.434887][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.5.280 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  127.434923][ T4974] Tainted: [W]=WARN
[  127.434929][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  127.434941][ T4974] Call Trace:
[  127.434947][ T4974]  <TASK>
[  127.434953][ T4974]  __dump_stack+0x1d/0x30
[  127.434990][ T4974]  dump_stack_lvl+0x95/0xd0
[  127.435079][ T4974]  dump_stack+0x15/0x1b
[  127.435100][ T4974]  should_fail_ex+0x263/0x280
[  127.435123][ T4974]  should_fail+0xb/0x20
[  127.435147][ T4974]  should_fail_usercopy+0x1a/0x20
[  127.435175][ T4974]  _copy_to_user+0x20/0xa0
[  127.435250][ T4974]  simple_read_from_buffer+0xb5/0x130
[  127.435344][ T4974]  proc_fail_nth_read+0x10e/0x150
[  127.435376][ T4974]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  127.435401][ T4974]  vfs_read+0x1ab/0x7f0
[  127.435488][ T4974]  ? __rcu_read_unlock+0x4e/0x70
[  127.435508][ T4974]  ? __fget_files+0x184/0x1c0
[  127.435532][ T4974]  ? mutex_lock+0x57/0x90
[  127.435572][ T4974]  ksys_read+0xdc/0x1a0
[  127.435672][ T4974]  __x64_sys_read+0x40/0x50
[  127.435700][ T4974]  x64_sys_call+0x2886/0x3020
[  127.435727][ T4974]  do_syscall_64+0x12c/0x370
[  127.435845][ T4974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.435873][ T4974] RIP: 0033:0x7f0df208cece
[  127.435894][ T4974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  127.435911][ T4974] RSP: 002b:00007f0df0b26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  127.435952][ T4974] RAX: ffffffffffffffda RBX: 00007f0df0b276c0 RCX: 00007f0df208cece
[  127.435969][ T4974] RDX: 000000000000000f RSI: 00007f0df0b270a0 RDI: 0000000000000004
[  127.435985][ T4974] RBP: 00007f0df0b27090 R08: 0000000000000000 R09: 0000000000000000
[  127.436001][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.436016][ T4974] R13: 00007f0df2346038 R14: 00007f0df2345fa0 R15: 00007ffc07aeb328
[  127.436062][ T4974]  </TASK>
[  127.762771][ T4976] loop2: detected capacity change from 0 to 512
[  127.782641][ T4976] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  127.800416][ T4979] tun0: tun_chr_ioctl cmd 1074025675
[  127.802432][ T4976] EXT4-fs (loop2): 1 truncate cleaned up
[  127.806139][ T4979] tun0: persist enabled
[  127.815625][ T4976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.852187][ T4979] tun0: tun_chr_ioctl cmd 1074025675
[  127.857662][ T4979] tun0: persist enabled
[  127.910248][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.932930][ T4983] Illegal XDP return value 474431041 on prog  (id 97) dev syz_tun, expect packet loss!
[  127.988671][ T4976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'.
[  128.007124][ T4985] loop0: detected capacity change from 0 to 128
[  128.014047][ T4976] netlink: 'syz.2.281': attribute type 4 has an invalid length.
[  128.034951][ T4985] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.065954][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.089239][ T4985] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  128.112400][ T4988] IPv6: NLM_F_REPLACE set, but no existing node found!
[  128.125961][ T4988] loop5: detected capacity change from 0 to 128
[  128.378905][ T4992] netlink: 72 bytes leftover after parsing attributes in process `syz.0.284'.
[  129.272131][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  129.272194][   T28] audit: type=1400 audit(1771687894.551:347): avc:  denied  { connect } for  pid=4993 comm="syz.5.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  129.348599][   T36] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  129.406811][ T4994] batadv_slave_1: entered promiscuous mode
[  129.420100][ T4994] batadv_slave_1: left promiscuous mode
[  129.457189][   T28] audit: type=1400 audit(1771687894.741:348): avc:  denied  { getopt } for  pid=4993 comm="syz.5.287" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.489639][ T5001] loop2: detected capacity change from 0 to 512
[  129.635026][ T5001] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  129.656063][ T5003] hub 8-0:1.0: USB hub found
[  129.660889][ T5003] hub 8-0:1.0: 8 ports detected
[  129.680067][ T5003] netlink: 'syz.0.288': attribute type 10 has an invalid length.
[  130.263057][   T28] audit: type=1400 audit(1771687895.541:349): avc:  denied  { setopt } for  pid=5000 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  130.346639][ T5021] loop0: detected capacity change from 0 to 512
[  130.386813][ T5016] geneve2: entered promiscuous mode
[  130.393759][ T5022] dvmrp1: tun_chr_ioctl cmd 1074025673
[  130.427838][   T28] audit: type=1400 audit(1771687895.711:350): avc:  denied  { relabelfrom } for  pid=5023 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  130.451524][   T28] audit: type=1400 audit(1771687895.711:351): avc:  denied  { relabelto } for  pid=5023 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  130.504932][ T5021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.524092][ T5021] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.539055][ T5021] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #4: comm syz.0.294: corrupted inode contents
[  130.553078][ T5021] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #4: comm syz.0.294: mark_inode_dirty error
[  130.583005][ T5021] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #4: comm syz.0.294: corrupted inode contents
[  130.604102][ T5021] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.294: mark_inode_dirty error
[  130.615685][ T5032] FAULT_INJECTION: forcing a failure.
[  130.615685][ T5032] name failslab, interval 1, probability 0, space 0, times 0
[  130.628398][   T28] audit: type=1400 audit(1771687895.881:352): avc:  denied  { remove_name } for  pid=5020 comm="syz.0.294" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  130.671691][ T5021] Quota error (device loop0): write_blk: dquota write failed
[  130.679752][ T5032] CPU: 0 UID: 0 PID: 5032 Comm: syz.1.297 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  130.679785][ T5032] Tainted: [W]=WARN
[  130.679794][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  130.679810][ T5032] Call Trace:
[  130.679817][ T5032]  <TASK>
[  130.679825][ T5032]  __dump_stack+0x1d/0x30
[  130.679851][ T5032]  dump_stack_lvl+0x95/0xd0
[  130.679876][ T5032]  dump_stack+0x15/0x1b
[  130.679904][ T5032]  should_fail_ex+0x263/0x280
[  130.679931][ T5032]  should_failslab+0x8c/0xb0
[  130.679955][ T5032]  kmem_cache_alloc_noprof+0x66/0x400
[  130.679975][ T5032]  ? vm_area_alloc+0x2c/0xb0
[  130.679998][ T5032]  vm_area_alloc+0x2c/0xb0
[  130.680021][ T5032]  mmap_region+0x11ce/0x2050
[  130.680094][ T5032]  do_mmap+0x9b2/0xbd0
[  130.680129][ T5032]  vm_mmap_pgoff+0x183/0x2d0
[  130.680156][ T5032]  ksys_mmap_pgoff+0xc1/0x310
[  130.680180][ T5032]  ? __x64_sys_mmap+0x49/0x70
[  130.680211][ T5032]  x64_sys_call+0x14df/0x3020
[  130.680243][ T5032]  do_syscall_64+0x12c/0x370
[  130.680288][ T5032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.680308][ T5032] RIP: 0033:0x7f0424e2c392
[  130.680324][ T5032] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  130.680350][ T5032] RSP: 002b:00007f042387edf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  130.680369][ T5032] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0424e2c392
[  130.680382][ T5032] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  130.680393][ T5032] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000
[  130.680405][ T5032] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  130.680418][ T5032] R13: 00007f042387eee0 R14: 00007f042387eea0 R15: 0000200000000440
[  130.680441][ T5032]  </TASK>
[  130.681301][   T28] audit: type=1400 audit(1771687895.951:353): avc:  denied  { write } for  pid=5020 comm="syz.0.294" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  130.883761][ T5021] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  130.894817][ T3486] usb 7-1: enqueue for inactive port 0
[  130.900435][ T3486] usb 7-1: enqueue for inactive port 0
[  130.905980][ T5021] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  130.934612][ T5021] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.294: Failed to acquire dquot type 1
[  130.964878][ T5031] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #4: comm syz.0.294: ES cache extent failed: add [2,1,44,0x1] conflict with existing [2,327680,576460752303423487,0x18]
[  130.964878][ T5031] 
[  131.021158][ T5031] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #4: comm syz.0.294: corrupted inode contents
[  131.063575][ T5039] hub 8-0:1.0: USB hub found
[  131.068622][ T5039] hub 8-0:1.0: 8 ports detected
[  131.088542][ T5039] netlink: 'syz.1.298': attribute type 10 has an invalid length.
[  131.221475][ T5031] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #4: comm syz.0.294: mark_inode_dirty error
[  131.291228][ T5031] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #4: comm syz.0.294: corrupted inode contents
[  131.351740][ T5031] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.294: mark_inode_dirty error
[  131.389321][ T5031] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.294: Failed to acquire dquot type 1
[  131.526096][ T3486] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  131.564979][ T5021] syz.0.294 (5021) used greatest stack depth: 8632 bytes left
[  131.606584][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.685493][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.696274][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.833696][ T5050] netlink: 'syz.0.299': attribute type 10 has an invalid length.
[  131.858465][ T5048] loop2: detected capacity change from 0 to 512
[  131.874729][ T5048] EXT4-fs: Ignoring removed nobh option
[  131.955393][ T5048] EXT4-fs (loop2): 1 orphan inode deleted
[  131.971851][ T5048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.292143][ T5048] can0: slcan on ttyS3.
[  132.354667][ T5052] can0 (unregistered): slcan off ttyS3.
[  132.404885][ T5057] loop1: detected capacity change from 0 to 128
[  132.546881][ T5046] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.300: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  132.578141][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.684884][ T5064] loop0: detected capacity change from 0 to 512
[  132.707327][ T5064] EXT4-fs: Ignoring removed nobh option
[  132.718397][ T5064] EXT4-fs: Ignoring removed i_version option
[  132.784791][ T5064] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  132.798660][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'.
[  132.897917][ T5074] loop0: detected capacity change from 0 to 512
[  132.927128][ T5074] EXT4-fs: Ignoring removed nobh option
[  132.954940][ T5074] EXT4-fs (loop0): unsupported inode size: 4
[  132.961127][ T5074] EXT4-fs (loop0): blocksize: 1024
[  133.038414][ T5082] loop0: detected capacity change from 0 to 512
[  133.047600][ T5082] EXT4-fs: Ignoring removed nobh option
[  133.074972][ T5082] EXT4-fs (loop0): unsupported inode size: 4
[  133.093188][ T5082] EXT4-fs (loop0): blocksize: 1024
[  133.346188][ T5089] loop0: detected capacity change from 0 to 512
[  133.359519][ T5089] EXT4-fs: Ignoring removed nobh option
[  133.421786][ T5089] EXT4-fs (loop0): 1 orphan inode deleted
[  133.434296][ T5089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.488431][ T5089] can0: slcan on ttyS3.
[  133.565611][ T5089] can0 (unregistered): slcan off ttyS3.
[  133.900423][ T5107] hub 8-0:1.0: USB hub found
[  133.905849][ T5107] hub 8-0:1.0: 8 ports detected
[  134.137569][ T5103] loop3: detected capacity change from 0 to 512
[  134.247526][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.262416][ T5103] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.292022][ T5103] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  134.409145][ T5103] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  134.727482][ T5114] loop2: detected capacity change from 0 to 512
[  134.745382][ T5114] EXT4-fs: Ignoring removed nobh option
[  134.797888][ T5114] EXT4-fs (loop2): 1 orphan inode deleted
[  134.816067][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.886151][ T5114] can0: slcan on ttyS3.
[  134.955018][ T5114] can0 (unregistered): slcan off ttyS3.
[  135.161736][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.087786][ T5123] loop1: detected capacity change from 0 to 512
[  136.094397][ T5123] EXT4-fs: Ignoring removed nobh option
[  136.149255][ T5124] loop3: detected capacity change from 0 to 512
[  136.162859][ T5124] EXT4-fs: Ignoring removed nobh option
[  136.172376][ T5123] EXT4-fs (loop1): 1 orphan inode deleted
[  136.190625][ T5123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.197936][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.219263][ T5123] can0: slcan on ttyS3.
[  136.226087][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.260929][ T5124] EXT4-fs (loop3): 1 orphan inode deleted
[  136.282134][ T5124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.296019][ T5123] can0 (unregistered): slcan off ttyS3.
[  136.311666][ T5122] can0: slcan on ttyS3.
[  136.404613][ T5122] can0 (unregistered): slcan off ttyS3.
[  136.413857][ T5121] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.320: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  136.451940][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.509979][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.005168][   T28] kauditd_printk_skb: 115 callbacks suppressed
[  137.005183][   T28] audit: type=1400 audit(1771687902.291:467): avc:  denied  { ioctl } for  pid=5141 comm="syz.3.324" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  137.038741][ T5142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5142 comm=syz.3.324
[  137.081983][ T5139] loop0: detected capacity change from 0 to 256
[  137.096486][ T5142] ucma_write: process 226 (syz.3.324) changed security contexts after opening file descriptor, this is not allowed.
[  137.164482][ T5137] loop2: detected capacity change from 0 to 512
[  137.201133][ T5139] FAT-fs (loop0): Directory bread(block 64) failed
[  137.211271][ T5145] loop1: detected capacity change from 0 to 128
[  137.214377][ T5137] EXT4-fs: Ignoring removed nobh option
[  137.234897][ T5139] FAT-fs (loop0): Directory bread(block 65) failed
[  137.255223][ T5139] FAT-fs (loop0): Directory bread(block 66) failed
[  137.271556][ T5139] FAT-fs (loop0): Directory bread(block 67) failed
[  137.278856][ T5139] FAT-fs (loop0): Directory bread(block 68) failed
[  137.285790][ T5139] FAT-fs (loop0): Directory bread(block 69) failed
[  137.292636][ T5139] FAT-fs (loop0): Directory bread(block 70) failed
[  137.299854][ T5139] FAT-fs (loop0): Directory bread(block 71) failed
[  137.306902][ T5139] FAT-fs (loop0): Directory bread(block 72) failed
[  137.313566][ T5139] FAT-fs (loop0): Directory bread(block 73) failed
[  137.417926][ T5150] netlink: 'syz.3.327': attribute type 10 has an invalid length.
[  137.704569][ T5137] EXT4-fs (loop2): 1 orphan inode deleted
[  137.828952][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.167478][ T5137] can0: slcan on ttyS3.
[  138.234659][ T5155] can0 (unregistered): slcan off ttyS3.
[  138.282128][   T28] audit: type=1400 audit(1771687903.561:468): avc:  denied  { read } for  pid=5157 comm="syz.3.328" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  138.352847][   T28] audit: type=1400 audit(1771687903.561:469): avc:  denied  { open } for  pid=5157 comm="syz.3.328" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  138.414591][   T28] audit: type=1400 audit(1771687903.681:470): avc:  denied  { name_bind } for  pid=5157 comm="syz.3.328" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1
[  139.088686][ T5162] geneve2: entered promiscuous mode
[  139.236814][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.261644][   T28] audit: type=1400 audit(1771687904.541:471): avc:  denied  { setopt } for  pid=5163 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  139.420088][ T5170] hub 8-0:1.0: USB hub found
[  139.425137][ T5170] hub 8-0:1.0: 8 ports detected
[  139.681429][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.713724][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.147786][ T5174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.157767][ T5174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.364108][ T5178] loop2: detected capacity change from 0 to 512
[  140.379299][ T5178] EXT4-fs: Ignoring removed nobh option
[  140.508917][ T5178] EXT4-fs (loop2): 1 orphan inode deleted
[  140.525266][ T5178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.609369][ T5178] can0: slcan on ttyS3.
[  140.684978][ T5178] can0 (unregistered): slcan off ttyS3.
[  141.032678][ T5176] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.334: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  141.070403][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.156163][ T5186] loop0: detected capacity change from 0 to 8192
[  141.183266][ T5186] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  141.201205][ T5186] FAT-fs (loop0): Filesystem has been set read-only
[  141.257135][ T5188] loop2: detected capacity change from 0 to 512
[  141.270737][ T5188] EXT4-fs: Ignoring removed nobh option
[  141.323021][ T5188] EXT4-fs (loop2): 1 orphan inode deleted
[  141.336319][ T5188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.388732][ T5188] can0: slcan on ttyS3.
[  141.571205][ T5188] can0 (unregistered): slcan off ttyS3.
[  141.603163][ T5194] SELinux: failed to load policy
[  141.622587][   T28] audit: type=1400 audit(1771687906.881:472): avc:  denied  { load_policy } for  pid=5191 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  141.823422][ T5198] hub 8-0:1.0: USB hub found
[  141.828554][ T5198] hub 8-0:1.0: 8 ports detected
[  141.848094][ T5198] netlink: 'syz.0.338': attribute type 10 has an invalid length.
[  141.979394][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.352481][   T28] audit: type=1400 audit(1771688163.622:473): avc:  denied  { name_bind } for  pid=5200 comm="syz.2.339" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  142.434245][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'.
[  142.447171][ T5204] loop1: detected capacity change from 0 to 512
[  142.467291][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.480011][ T5204] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  142.537081][   T28] audit: type=1400 audit(1771688163.772:474): avc:  denied  { write } for  pid=5203 comm="syz.1.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  142.582513][ T5210] FAULT_INJECTION: forcing a failure.
[  142.582513][ T5210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.596444][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.0.341 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  142.596481][ T5210] Tainted: [W]=WARN
[  142.596488][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  142.596502][ T5210] Call Trace:
[  142.596509][ T5210]  <TASK>
[  142.596584][ T5210]  __dump_stack+0x1d/0x30
[  142.596613][ T5210]  dump_stack_lvl+0x95/0xd0
[  142.596639][ T5210]  dump_stack+0x15/0x1b
[  142.596750][ T5210]  should_fail_ex+0x263/0x280
[  142.596774][ T5210]  should_fail+0xb/0x20
[  142.596830][ T5210]  should_fail_usercopy+0x1a/0x20
[  142.596854][ T5210]  _copy_from_user+0x1c/0xb0
[  142.596882][ T5210]  copy_from_sockptr+0x5e/0x90
[  142.596941][ T5210]  packet_setsockopt+0x7c1/0xfd0
[  142.596966][ T5210]  ? __pfx_packet_setsockopt+0x10/0x10
[  142.596989][ T5210]  __sys_setsockopt+0x184/0x200
[  142.597036][ T5210]  __x64_sys_setsockopt+0x64/0x80
[  142.597086][ T5210]  x64_sys_call+0x2327/0x3020
[  142.597115][ T5210]  do_syscall_64+0x12c/0x370
[  142.597213][ T5210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.597283][ T5210] RIP: 0033:0x7ff8c1e0c629
[  142.597301][ T5210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.597322][ T5210] RSP: 002b:00007ff8c0867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  142.597343][ T5210] RAX: ffffffffffffffda RBX: 00007ff8c2085fa0 RCX: 00007ff8c1e0c629
[  142.597408][ T5210] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005
[  142.597422][ T5210] RBP: 00007ff8c0867090 R08: 0000000000000010 R09: 0000000000000000
[  142.597436][ T5210] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  142.597450][ T5210] R13: 00007ff8c2086038 R14: 00007ff8c2085fa0 R15: 00007ffcfd4d4c98
[  142.597472][ T5210]  </TASK>
[  142.794971][   T28] audit: type=1400 audit(1771688164.072:475): avc:  denied  { map } for  pid=5211 comm="syz.2.342" path="socket:[9114]" dev="sockfs" ino=9114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  142.818041][ T5212] netlink: 'syz.2.342': attribute type 10 has an invalid length.
[  142.826003][ T5212] bridge0: port 3(netdevsim1) entered blocking state
[  142.830047][   T28] audit: type=1400 audit(1771688164.072:476): avc:  denied  { read } for  pid=5211 comm="syz.2.342" path="socket:[9114]" dev="sockfs" ino=9114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  142.852607][ T5212] bridge0: port 3(netdevsim1) entered disabled state
[  142.866202][ T5212] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  142.874939][ T5212] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  142.882542][ T5212] bridge0: port 3(netdevsim1) entered blocking state
[  142.889502][ T5212] bridge0: port 3(netdevsim1) entered forwarding state
[  142.921468][   T28] audit: type=1400 audit(1771688164.192:477): avc:  denied  { execute } for  pid=5213 comm="syz.0.343" path="/65/cpu.stat" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  142.982935][   T28] audit: type=1400 audit(1771688164.252:478): avc:  denied  { kexec_image_load } for  pid=5213 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  143.515771][ T5225] loop3: detected capacity change from 0 to 512
[  143.531591][ T5225] EXT4-fs: Ignoring removed nobh option
[  143.609900][ T5225] EXT4-fs (loop3): 1 orphan inode deleted
[  143.627911][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.676685][ T5221] can0: slcan on ttyS3.
[  143.754736][ T5221] can0 (unregistered): slcan off ttyS3.
[  143.783339][   T28] audit: type=1400 audit(1771688165.052:479): avc:  denied  { mounton } for  pid=5218 comm="syz.0.345" path="/66/file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  144.062128][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.071744][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.381491][ T5241] netlink: 'syz.3.348': attribute type 10 has an invalid length.
[  145.117071][ T5244] FAULT_INJECTION: forcing a failure.
[  145.117071][ T5244] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  145.130926][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: syz.0.350 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  145.131045][ T5244] Tainted: [W]=WARN
[  145.131052][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  145.131102][ T5244] Call Trace:
[  145.131109][ T5244]  <TASK>
[  145.131120][ T5244]  __dump_stack+0x1d/0x30
[  145.131195][ T5244]  dump_stack_lvl+0x95/0xd0
[  145.131225][ T5244]  dump_stack+0x15/0x1b
[  145.131296][ T5244]  should_fail_ex+0x263/0x280
[  145.131324][ T5244]  should_fail_alloc_page+0xf2/0x100
[  145.131353][ T5244]  __alloc_frozen_pages_noprof+0x108/0x360
[  145.131424][ T5244]  alloc_pages_mpol+0xb3/0x260
[  145.131456][ T5244]  alloc_pages_noprof+0x8f/0x130
[  145.131492][ T5244]  get_free_pages_noprof+0xc/0x40
[  145.131524][ T5244]  __se_sys_mincore+0xdc/0x480
[  145.131624][ T5244]  __x64_sys_mincore+0x43/0x50
[  145.131653][ T5244]  x64_sys_call+0x29f1/0x3020
[  145.131689][ T5244]  do_syscall_64+0x12c/0x370
[  145.131776][ T5244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.131797][ T5244] RIP: 0033:0x7ff8c1e0c629
[  145.131815][ T5244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.131833][ T5244] RSP: 002b:00007ff8c0867028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[  145.131891][ T5244] RAX: ffffffffffffffda RBX: 00007ff8c2085fa0 RCX: 00007ff8c1e0c629
[  145.131910][ T5244] RDX: 0000200000000680 RSI: 0000000000800000 RDI: 0000200000000000
[  145.131926][ T5244] RBP: 00007ff8c0867090 R08: 0000000000000000 R09: 0000000000000000
[  145.131946][ T5244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.131999][ T5244] R13: 00007ff8c2086038 R14: 00007ff8c2085fa0 R15: 00007ffcfd4d4c98
[  145.132025][ T5244]  </TASK>
[  145.747926][ T5237] loop1: detected capacity change from 0 to 512
[  145.754741][ T5237] EXT4-fs: Ignoring removed nobh option
[  145.801649][ T5242] loop2: detected capacity change from 0 to 512
[  145.812243][ T5242] EXT4-fs: Ignoring removed nobh option
[  145.844096][ T5237] EXT4-fs (loop1): 1 orphan inode deleted
[  145.850510][ T5237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.857250][ T5242] EXT4-fs (loop2): 1 orphan inode deleted
[  145.874461][ T5237] can0: slcan on ttyS3.
[  145.878360][ T5242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.014727][ T5237] can0 (unregistered): slcan off ttyS3.
[  146.023709][ T5235] can0: slcan on ttyS3.
[  146.174500][ T5255] loop0: detected capacity change from 0 to 512
[  146.182217][ T5255] EXT4-fs: Ignoring removed orlov option
[  146.274769][ T5231] can0 (unregistered): slcan off ttyS3.
[  146.360287][ T5259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.403534][ T5259] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.610761][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.625315][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.635197][ T5255] EXT4-fs (loop0): 1 truncate cleaned up
[  146.641372][ T5255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.661989][ T5250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.351'.
[  146.831456][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.101761][ T5308] loop3: detected capacity change from 0 to 512
[  147.114307][ T5308] EXT4-fs: Ignoring removed nobh option
[  147.177000][ T5308] EXT4-fs (loop3): 1 orphan inode deleted
[  147.193670][ T5308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.267084][ T5308] can0: slcan on ttyS3.
[  147.491474][ T5316] netlink: 'syz.1.361': attribute type 4 has an invalid length.
[  147.598388][ T5312] netlink: 'syz.1.361': attribute type 4 has an invalid length.
[  147.714769][ T5308] can0 (unregistered): slcan off ttyS3.
[  147.740070][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.874254][ T5340] loop3: detected capacity change from 0 to 512
[  147.902900][   T28] audit: type=1400 audit(1771688169.142:480): avc:  denied  { name_connect } for  pid=5338 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  147.932956][ T5340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  148.007551][ T5340] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.366: bad orphan inode 131083
[  148.046174][ T5335] loop2: detected capacity change from 0 to 512
[  148.054632][ T5340] loop3: lost filesystem error report for type 5 error -117
[  148.055727][ T5340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.086873][ T5287] chnl_net:caif_netlink_parms(): no params data found
[  148.092172][ T5335] EXT4-fs: Ignoring removed nobh option
[  148.142027][ T5335] EXT4-fs (loop2): 1 orphan inode deleted
[  148.160867][ T5335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.336108][   T28] audit: type=1400 audit(1771688169.612:481): avc:  denied  { setopt } for  pid=5336 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  148.376649][ T5335] can0: slcan on ttyS3.
[  148.427466][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.431697][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.435192][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.451319][ T5287] bridge_slave_0: entered allmulticast mode
[  148.458437][ T5287] bridge_slave_0: entered promiscuous mode
[  148.466191][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.468261][ T5353] can0 (unregistered): slcan off ttyS3.
[  148.473908][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.486303][ T5287] bridge_slave_1: entered allmulticast mode
[  148.492929][ T5287] bridge_slave_1: entered promiscuous mode
[  148.531059][ T5287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.547505][ T5287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.603264][ T5287] team0: Port device team_slave_0 added
[  148.618924][ T5287] team0: Port device team_slave_1 added
[  148.645486][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.652531][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.980988][ T5287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.022634][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.050074][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  149.126108][ T5287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.216198][ T5287] hsr_slave_0: entered promiscuous mode
[  149.222953][ T5287] hsr_slave_1: entered promiscuous mode
[  149.237064][ T5287] debugfs: 'hsr0' already exists in 'hsr'
[  149.258341][ T5287] Cannot create hsr debugfs directory
[  149.331206][ T5391] netlink: 'syz.1.376': attribute type 10 has an invalid length.
[  149.377795][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.604697][   T28] audit: type=1400 audit(1771688170.832:482): avc:  denied  { listen } for  pid=5393 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  149.891707][ T5287] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  149.919085][ T5287] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  149.939829][ T5287] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  149.960056][ T5287] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  150.114048][ T5428] loop0: detected capacity change from 0 to 512
[  150.128520][ T5428] EXT4-fs: Ignoring removed nobh option
[  150.318227][ T5428] EXT4-fs (loop0): 1 orphan inode deleted
[  150.335805][ T5428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.482391][ T5428] can0: slcan on ttyS3.
[  150.544714][ T5431] can0 (unregistered): slcan off ttyS3.
[  150.693074][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.758098][ T5421] loop3: detected capacity change from 0 to 512
[  150.789724][ T5441] hub 8-0:1.0: USB hub found
[  150.794468][ T5441] hub 8-0:1.0: 8 ports detected
[  150.842010][ T5441] netlink: 'syz.1.385': attribute type 10 has an invalid length.
[  150.928190][ T5418] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.382: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  151.171656][ T5421] EXT4-fs: Ignoring removed nobh option
[  151.323220][ T5287] 8021q: adding VLAN 0 to HW filter on device team0
[  151.342148][ T5287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.353216][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.374656][ T5287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.407379][  T409] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.414641][  T409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.436405][  T409] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.443524][  T409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.512219][ T5421] EXT4-fs (loop3): 1 orphan inode deleted
[  151.614259][ T5421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.670333][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.738436][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.794762][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.891382][ T5421] can0: slcan on ttyS3.
[  151.974731][ T5462] can0 (unregistered): slcan off ttyS3.
[  152.014005][ T5451] loop0: detected capacity change from 0 to 512
[  152.118679][ T5451] EXT4-fs: Ignoring removed nobh option
[  152.141928][ T5456] loop1: detected capacity change from 0 to 512
[  152.289279][ T5456] EXT4-fs: Ignoring removed nobh option
[  152.437663][ T5451] EXT4-fs (loop0): 1 orphan inode deleted
[  152.452928][ T5451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.487539][ T5287] veth0_vlan: entered promiscuous mode
[  152.582695][ T5287] veth1_vlan: entered promiscuous mode
[  152.615473][ T5451] can0: slcan on ttyS3.
[  152.640846][ T5287] veth0_macvtap: entered promiscuous mode
[  152.686928][ T5287] veth1_macvtap: entered promiscuous mode
[  152.721657][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.731075][ T5456] EXT4-fs (loop1): 1 orphan inode deleted
[  152.755975][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.784909][ T3932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.823046][ T3932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.836103][ T5456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.837656][ T5445] can0 (unregistered): slcan off ttyS3.
[  152.862733][ T3932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.884375][ T3932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.934863][   T28] audit: type=1400 audit(1771688174.202:483): avc:  denied  { mounton } for  pid=5287 comm="syz-executor" path="/root/syzkaller.8DeOX9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  153.292871][ T5507] loop6: detected capacity change from 0 to 8192
[  153.343551][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.396970][ T5509] FAULT_INJECTION: forcing a failure.
[  153.396970][ T5509] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  153.421143][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'.
[  153.450428][ T5509] CPU: 1 UID: 0 PID: 5509 Comm: syz.6.391 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  153.450486][ T5509] Tainted: [W]=WARN
[  153.450494][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  153.450558][ T5509] Call Trace:
[  153.450600][ T5509]  <TASK>
[  153.450676][ T5509]  __dump_stack+0x1d/0x30
[  153.450712][ T5509]  dump_stack_lvl+0x95/0xd0
[  153.450761][ T5509]  dump_stack+0x15/0x1b
[  153.450813][ T5509]  should_fail_ex+0x263/0x280
[  153.450844][ T5509]  should_fail_alloc_page+0xf2/0x100
[  153.450873][ T5509]  __alloc_frozen_pages_noprof+0x108/0x360
[  153.450912][ T5509]  alloc_pages_mpol+0xb3/0x260
[  153.450942][ T5509]  alloc_pages_noprof+0x8f/0x130
[  153.451035][ T5509]  pte_alloc_one+0x1e/0xd0
[  153.451062][ T5509]  __pte_alloc+0x32/0x2c0
[  153.451092][ T5509]  handle_mm_fault+0x204e/0x3020
[  153.451127][ T5509]  ? mt_find+0x291/0x3d0
[  153.451167][ T5509]  ? lock_mm_and_find_vma+0x8b/0x440
[  153.451235][ T5509]  do_user_addr_fault+0x3fd/0x1050
[  153.451280][ T5509]  exc_page_fault+0x62/0xa0
[  153.451315][ T5509]  asm_exc_page_fault+0x26/0x30
[  153.451393][ T5509] RIP: 0010:rep_movs_alternative+0xf/0x90
[  153.451457][ T5509] Code: c4 10 e9 04 1a 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 19 02 00 66 2e
[  153.451476][ T5509] RSP: 0018:ffffc9000146fe08 EFLAGS: 00050202
[  153.451493][ T5509] RAX: ffff888101cbcc78 RBX: 0000000000000004 RCX: 0000000000000004
[  153.451512][ T5509] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc9000146fe44
[  153.451530][ T5509] RBP: 0000000000000000 R08: 00000000000001df R09: 0000000000000000
[  153.451545][ T5509] R10: 0001c9000146fe44 R11: 0001c9000146fe47 R12: 0000000000000000
[  153.451592][ T5509] R13: ffff888107edda00 R14: ffffc9000146fe44 R15: 00002000000000c0
[  153.451619][ T5509]  _copy_from_user+0x6f/0xb0
[  153.451652][ T5509]  do_sock_getsockopt+0xf1/0x210
[  153.451707][ T5509]  __x64_sys_getsockopt+0x11d/0x1a0
[  153.451736][ T5509]  x64_sys_call+0x2dcf/0x3020
[  153.451762][ T5509]  do_syscall_64+0x12c/0x370
[  153.451829][ T5509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.451859][ T5509] RIP: 0033:0x7f3c7feac629
[  153.451878][ T5509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.451937][ T5509] RSP: 002b:00007f3c7e8ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  153.451960][ T5509] RAX: ffffffffffffffda RBX: 00007f3c80125fa0 RCX: 00007f3c7feac629
[  153.451978][ T5509] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003
[  153.451994][ T5509] RBP: 00007f3c7e8ff090 R08: 00002000000000c0 R09: 0000000000000000
[  153.452012][ T5509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.452028][ T5509] R13: 00007f3c80126038 R14: 00007f3c80125fa0 R15: 00007ffc04d3c8e8
[  153.452051][ T5509]  </TASK>
[  153.742406][   T28] audit: type=1400 audit(1771688175.012:484): avc:  denied  { write } for  pid=5510 comm="syz.0.390" path="socket:[10138]" dev="sockfs" ino=10138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  153.866845][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.036258][ T5522] netlink: 'syz.0.394': attribute type 10 has an invalid length.
[  154.114977][   T28] audit: type=1400 audit(1771688175.382:485): avc:  denied  { lock } for  pid=5523 comm="syz.3.395" path="socket:[10780]" dev="sockfs" ino=10780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  154.388372][   T28] audit: type=1326 audit(1771688175.532:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.2.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x0
[  154.471720][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.845814][ T5547] FAULT_INJECTION: forcing a failure.
[  154.845814][ T5547] name failslab, interval 1, probability 0, space 0, times 0
[  154.885403][ T5547] CPU: 1 UID: 0 PID: 5547 Comm: syz.0.402 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  154.885451][ T5547] Tainted: [W]=WARN
[  154.885458][ T5547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  154.885552][ T5547] Call Trace:
[  154.885560][ T5547]  <TASK>
[  154.885569][ T5547]  __dump_stack+0x1d/0x30
[  154.885615][ T5547]  dump_stack_lvl+0x95/0xd0
[  154.885638][ T5547]  dump_stack+0x15/0x1b
[  154.885662][ T5547]  should_fail_ex+0x263/0x280
[  154.885683][ T5547]  should_failslab+0x8c/0xb0
[  154.885712][ T5547]  kmem_cache_alloc_noprof+0x66/0x400
[  154.885735][ T5547]  ? do_getname_kernel+0x53/0x190
[  154.885768][ T5547]  do_getname_kernel+0x53/0x190
[  154.885798][ T5547]  kern_path+0x23/0xf0
[  154.885908][ T5547]  lookup_bdev+0x66/0x150
[  154.885935][ T5547]  ? __pfx_ext4_fill_super+0x10/0x10
[  154.885999][ T5547]  get_tree_bdev_flags+0x59/0x300
[  154.886106][ T5547]  ? __pfx_ext4_fill_super+0x10/0x10
[  154.886127][ T5547]  get_tree_bdev+0x1f/0x30
[  154.886208][ T5547]  ext4_get_tree+0x1c/0x30
[  154.886231][ T5547]  vfs_get_tree+0x57/0x1d0
[  154.886266][ T5547]  vfs_cmd_create+0x8a/0x140
[  154.886300][ T5547]  vfs_fsconfig_locked+0x6f/0x210
[  154.886370][ T5547]  __se_sys_fsconfig+0x684/0x7d0
[  154.886408][ T5547]  __x64_sys_fsconfig+0x67/0x80
[  154.886485][ T5547]  x64_sys_call+0xd6e/0x3020
[  154.886511][ T5547]  do_syscall_64+0x12c/0x370
[  154.886550][ T5547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.886665][ T5547] RIP: 0033:0x7ff8c1e0c629
[  154.886731][ T5547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.886823][ T5547] RSP: 002b:00007ff8c0867028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  154.886848][ T5547] RAX: ffffffffffffffda RBX: 00007ff8c2085fa0 RCX: 00007ff8c1e0c629
[  154.886865][ T5547] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  154.886881][ T5547] RBP: 00007ff8c0867090 R08: 0000000000000000 R09: 0000000000000000
[  154.886896][ T5547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.886907][ T5547] R13: 00007ff8c2086038 R14: 00007ff8c2085fa0 R15: 00007ffcfd4d4c98
[  154.886976][ T5547]  </TASK>
[  155.130778][ T5542] loop1: detected capacity change from 0 to 512
[  155.145447][ T5542] EXT4-fs: Ignoring removed nobh option
[  155.190871][ T5543] loop3: detected capacity change from 0 to 512
[  155.210573][ T5542] EXT4-fs (loop1): 1 orphan inode deleted
[  155.223363][ T5542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.247153][ T5550] loop6: detected capacity change from 0 to 128
[  155.277735][ T5550] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.291948][ T5542] can0: slcan on ttyS3.
[  155.330957][ T5543] EXT4-fs: Ignoring removed nobh option
[  155.414776][ T5550] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  155.446611][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'.
[  155.464931][   T28] audit: type=1400 audit(1771688176.742:487): avc:  denied  { setattr } for  pid=5549 comm="syz.6.403" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  155.657205][ T5543] EXT4-fs (loop3): 1 orphan inode deleted
[  155.741715][ T5287] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.983088][ T5543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.002423][ T5560] can0 (unregistered): slcan off ttyS3.
[  156.170314][ T5576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.320119][ T5576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.355507][ T5581] loop6: detected capacity change from 0 to 512
[  156.505323][ T5581] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  156.506434][ T5543] can0: slcan on ttyS3.
[  156.553042][ T5581] EXT4-fs (loop6): 1 truncate cleaned up
[  156.559902][ T5581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.615520][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.945581][ T5536] can0 (unregistered): slcan off ttyS3.
[  157.088421][ T5606] loop6: detected capacity change from 0 to 512
[  157.099772][ T5606] EXT4-fs: Ignoring removed nobh option
[  157.105913][ T5595] loop0: detected capacity change from 0 to 512
[  157.194934][ T5595] EXT4-fs: Ignoring removed nobh option
[  157.229583][ T5606] EXT4-fs (loop6): 1 orphan inode deleted
[  157.243473][ T5606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.300194][ T5606] can0: slcan on ttyS3.
[  157.345070][ T5606] can0 (unregistered): slcan off ttyS3.
[  157.401696][ T5595] EXT4-fs (loop0): 1 orphan inode deleted
[  157.437572][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.487699][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.498029][ T5595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.634704][ T5619] netlink: 'syz.3.411': attribute type 10 has an invalid length.
[  157.703573][ T5621] netlink: 'syz.1.412': attribute type 10 has an invalid length.
[  158.199190][ T5595] can0: slcan on ttyS3.
[  158.363685][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.484648][ T5590] can0 (unregistered): slcan off ttyS3.
[  158.625001][ T5634] loop6: detected capacity change from 0 to 512
[  158.640079][ T5634] EXT4-fs: Ignoring removed nobh option
[  158.759979][ T5634] EXT4-fs (loop6): 1 orphan inode deleted
[  158.778425][ T5634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.866831][ T5634] can0: slcan on ttyS3.
[  158.954836][ T5634] can0 (unregistered): slcan off ttyS3.
[  159.237220][ T5637] loop1: detected capacity change from 0 to 512
[  159.262048][ T5637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  159.288009][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'.
[  159.312822][ T5629] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.413: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  159.332767][ T5637] EXT4-fs (loop1): 1 truncate cleaned up
[  159.358924][ T5637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.385199][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.467359][ T5659] netlink: 20 bytes leftover after parsing attributes in process `syz.6.417'.
[  159.722994][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.846781][ T5684] geneve2: entered promiscuous mode
[  159.943176][ T5685] loop1: detected capacity change from 0 to 512
[  159.956497][ T5685] EXT4-fs: Ignoring removed nobh option
[  159.973814][ T3932] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 35551 - 0
[  159.992307][ T3932] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 35551 - 0
[  160.076605][ T5685] EXT4-fs (loop1): 1 orphan inode deleted
[  160.096167][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.251076][ T5685] can0: slcan on ttyS3.
[  160.291951][ T3932] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 35551 - 0
[  160.314776][ T5687] can0 (unregistered): slcan off ttyS3.
[  160.408470][ T3932] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 35551 - 0
[  160.642910][ T5690] loop3: detected capacity change from 0 to 512
[  160.655469][ T5690] EXT4-fs: Ignoring removed nobh option
[  160.704211][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.720847][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.734211][ T5690] EXT4-fs (loop3): 1 orphan inode deleted
[  160.749582][ T5690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.807210][ T5690] can0: slcan on ttyS3.
[  160.867309][ T5704] hub 8-0:1.0: USB hub found
[  160.872146][ T5704] hub 8-0:1.0: 8 ports detected
[  160.880298][ T5704] netlink: 'syz.0.426': attribute type 10 has an invalid length.
[  160.914889][ T5690] can0 (unregistered): slcan off ttyS3.
[  160.936334][ T5710] loop1: detected capacity change from 0 to 256
[  160.984294][   T28] audit: type=1326 audit(1771688182.252:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.023312][ T5708] hub 8-0:1.0: USB hub found
[  161.031222][ T5708] hub 8-0:1.0: 8 ports detected
[  161.041211][ T5708] netlink: 'syz.6.429': attribute type 10 has an invalid length.
[  161.068913][ T5708] macvlan1: entered allmulticast mode
[  161.068929][   T28] audit: type=1326 audit(1771688182.292:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.075150][   T28] audit: type=1326 audit(1771688182.292:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.107475][ T5720] loop0: detected capacity change from 0 to 512
[  161.142680][   T28] audit: type=1326 audit(1771688182.292:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.163015][ T5708] veth1_vlan: entered allmulticast mode
[  161.216129][ T5689] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.424: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  161.216837][ T5720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.235445][   T28] audit: type=1326 audit(1771688182.292:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.271995][   T28] audit: type=1326 audit(1771688182.292:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.304759][ T5720] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.325535][   T28] audit: type=1326 audit(1771688182.292:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.349368][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.359533][ T5708] team0: Port device macvlan1 added
[  161.396758][ T5719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.435'.
[  161.409591][ T5719] bridge1: entered promiscuous mode
[  161.419039][   T28] audit: type=1326 audit(1771688182.292:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.443154][ T5719] bridge1: entered allmulticast mode
[  161.468248][ T5727] loop1: detected capacity change from 0 to 512
[  161.495200][   T28] audit: type=1326 audit(1771688182.292:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.550607][ T5727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  161.571136][   T28] audit: type=1326 audit(1771688182.292:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f62f3c629 code=0x7ffc0000
[  161.614253][ T5727] EXT4-fs (loop1): 1 truncate cleaned up
[  161.668823][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.693075][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.712888][ T5739] FAULT_INJECTION: forcing a failure.
[  161.712888][ T5739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.779423][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: syz.3.441 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  161.779460][ T5739] Tainted: [W]=WARN
[  161.779468][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  161.779520][ T5739] Call Trace:
[  161.779527][ T5739]  <TASK>
[  161.779578][ T5739]  __dump_stack+0x1d/0x30
[  161.779611][ T5739]  dump_stack_lvl+0x95/0xd0
[  161.779641][ T5739]  dump_stack+0x15/0x1b
[  161.779668][ T5739]  should_fail_ex+0x263/0x280
[  161.779703][ T5739]  should_fail+0xb/0x20
[  161.779780][ T5739]  should_fail_usercopy+0x1a/0x20
[  161.779804][ T5739]  _copy_to_user+0x20/0xa0
[  161.779852][ T5739]  simple_read_from_buffer+0xb5/0x130
[  161.779877][ T5739]  proc_fail_nth_read+0x10e/0x150
[  161.779907][ T5739]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  161.779940][ T5739]  vfs_read+0x1ab/0x7f0
[  161.780101][ T5739]  ? __rcu_read_unlock+0x4e/0x70
[  161.780121][ T5739]  ? __fget_files+0x184/0x1c0
[  161.780160][ T5739]  ? mutex_lock+0x57/0x90
[  161.780194][ T5739]  ksys_read+0xdc/0x1a0
[  161.780264][ T5739]  __x64_sys_read+0x40/0x50
[  161.780363][ T5739]  x64_sys_call+0x2886/0x3020
[  161.780397][ T5739]  do_syscall_64+0x12c/0x370
[  161.780508][ T5739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.780530][ T5739] RIP: 0033:0x7f542d55cece
[  161.780572][ T5739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  161.780595][ T5739] RSP: 002b:00007f542bfeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  161.780621][ T5739] RAX: ffffffffffffffda RBX: 00007f542bfef6c0 RCX: 00007f542d55cece
[  161.780639][ T5739] RDX: 000000000000000f RSI: 00007f542bfef0a0 RDI: 0000000000000005
[  161.780654][ T5739] RBP: 00007f542bfef090 R08: 0000000000000000 R09: 0000000000000000
[  161.780668][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.780722][ T5739] R13: 00007f542d816038 R14: 00007f542d815fa0 R15: 00007ffe81782a78
[  161.780744][ T5739]  </TASK>
[  162.050241][ T5745] hub 8-0:1.0: USB hub found
[  162.054978][ T5745] hub 8-0:1.0: 8 ports detected
[  162.062780][ T5745] netlink: 'syz.0.443': attribute type 10 has an invalid length.
[  162.075203][ T5747] dummy0: entered promiscuous mode
[  162.080417][ T5747] macsec1: entered promiscuous mode
[  162.086062][ T5747] macsec1: entered allmulticast mode
[  162.093485][ T5747] dummy0: entered allmulticast mode
[  162.104802][ T5747] dummy0: left allmulticast mode
[  162.110031][ T5747] dummy0: left promiscuous mode
[  162.234880][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.293174][ T5756] loop0: detected capacity change from 0 to 4096
[  162.343437][ T5756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.564668][ T5771] loop1: detected capacity change from 0 to 512
[  162.577717][ T5771] EXT4-fs: Ignoring removed nobh option
[  162.616955][ T5771] EXT4-fs (loop1): 1 orphan inode deleted
[  162.629737][ T5771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.682738][ T5771] can0: slcan on ttyS3.
[  162.767062][ T5771] can0 (unregistered): slcan off ttyS3.
[  162.828823][ T5785] netlink: 60 bytes leftover after parsing attributes in process `syz.6.451'.
[  162.847521][ T5776] loop2: detected capacity change from 0 to 512
[  162.937028][ T5776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.961588][ T5785] loop6: detected capacity change from 0 to 128
[  162.987332][ T5776] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.205766][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.283929][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.358431][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.461861][ T5816] hub 8-0:1.0: USB hub found
[  163.466731][ T5816] hub 8-0:1.0: 8 ports detected
[  163.474383][ T5816] netlink: 'syz.2.457': attribute type 10 has an invalid length.
[  163.524898][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.757050][ T5831] loop6: detected capacity change from 0 to 512
[  163.781680][ T5831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  163.798060][ T5831] System zones: 1-12
[  163.806589][ T5831] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.460: Directory hole found for htree index block 0
[  163.860148][ T5831] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  163.860361][ T5831] EXT4-fs (loop6): Remounting filesystem read-only
[  163.869564][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  163.869592][    C0] EXT4-fs (loop6): initial error at time 1771688185: dx_probe:791: inode 2
[  163.869635][    C0] EXT4-fs (loop6): last error at time 1771688185: dx_probe:791: inode 2
[  163.912797][ T5831] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[  163.929702][ T5831] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  163.941787][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'.
[  163.952626][ T5831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.995487][ T5287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.040583][ T5843] netlink: 112 bytes leftover after parsing attributes in process `syz.6.464'.
[  164.122051][ T5844] hub 8-0:1.0: USB hub found
[  164.137840][ T5844] hub 8-0:1.0: 8 ports detected
[  164.138979][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.464'.
[  164.175198][ T5852] netlink: 'syz.1.461': attribute type 10 has an invalid length.
[  164.201481][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.464'.
[  164.454043][ T5859] loop3: detected capacity change from 0 to 8192
[  164.496359][ T5859] syz.3.469: attempt to access beyond end of device
[  164.496359][ T5859] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  164.541430][ T5859] Buffer I/O error on dev loop3, logical block 57847, async page read
[  164.584199][ T5863] loop2: detected capacity change from 0 to 512
[  164.639933][ T5863] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  164.691759][ T5863] EXT4-fs (loop2): 1 truncate cleaned up
[  164.786255][ T5871] hub 8-0:1.0: USB hub found
[  164.791015][ T5871] hub 8-0:1.0: 8 ports detected
[  164.798827][ T5871] netlink: 'syz.3.472': attribute type 10 has an invalid length.
[  164.831061][ T5863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.164615][    C1] ==================================================================
[  165.172768][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  165.180030][    C1] 
[  165.182382][    C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0:
[  165.190476][    C1]  wq_worker_tick+0x60/0x230
[  165.195127][    C1]  sched_tick+0xda/0x210
[  165.199422][    C1]  update_process_times+0x15e/0x190
[  165.204673][    C1]  tick_nohz_handler+0x275/0x3d0
[  165.209661][    C1]  __hrtimer_run_queues+0x218/0x4f0
[  165.214901][    C1]  hrtimer_interrupt+0x269/0x810
[  165.219876][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1f0
[  165.225815][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  165.231493][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.237601][    C1]  __sanitizer_cov_trace_const_cmp8+0x7e/0x90
[  165.243713][    C1]  pty_write+0x36/0x90
[  165.247925][    C1]  tty_put_char+0x8f/0xc0
[  165.252306][    C1]  __process_echoes+0x2f9/0x6b0
[  165.257208][    C1]  n_tty_receive_buf_common+0x918/0xc10
[  165.262800][    C1]  n_tty_receive_buf2+0x33/0x40
[  165.267698][    C1]  tty_ldisc_receive_buf+0x66/0xf0
[  165.272844][    C1]  tty_port_default_receive_buf+0x59/0x90
[  165.278615][    C1]  flush_to_ldisc+0x148/0x340
[  165.283343][    C1]  process_scheduled_works+0x4de/0x9e0
[  165.289112][    C1]  worker_thread+0x581/0x770
[  165.293760][    C1]  kthread+0x22a/0x280
[  165.297861][    C1]  ret_from_fork+0x150/0x360
[  165.302512][    C1]  ret_from_fork_asm+0x1a/0x30
[  165.307326][    C1] 
[  165.309689][    C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1:
[  165.317879][    C1]  wq_worker_tick+0x60/0x230
[  165.322606][    C1]  sched_tick+0xda/0x210
[  165.326895][    C1]  update_process_times+0x15e/0x190
[  165.332147][    C1]  tick_nohz_handler+0x275/0x3d0
[  165.337131][    C1]  __hrtimer_run_queues+0x218/0x4f0
[  165.342380][    C1]  hrtimer_interrupt+0x269/0x810
[  165.347364][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1f0
[  165.353295][    C1]  sysvec_apic_timer_interrupt+0x6f/0x80
[  165.358979][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  165.365004][    C1]  __sanitizer_cov_trace_pc+0x10/0x70
[  165.370424][    C1]  tty_ldisc_ref+0x42/0x70
[  165.374875][    C1]  tty_port_default_lookahead_buf+0x3d/0xc0
[  165.380796][    C1]  flush_to_ldisc+0x288/0x340
[  165.385519][    C1]  process_scheduled_works+0x4de/0x9e0
[  165.391014][    C1]  worker_thread+0x581/0x770
[  165.395659][    C1]  kthread+0x22a/0x280
[  165.399748][    C1]  ret_from_fork+0x150/0x360
[  165.404455][    C1]  ret_from_fork_asm+0x1a/0x30
[  165.409262][    C1] 
[  165.411625][    C1] value changed: 0x00000000000927c0 -> 0x0000000000094ed0
[  165.418750][    C1] 
[  165.421114][    C1] Reported by Kernel Concurrency Sanitizer on:
[  165.427294][    C1] CPU: 1 UID: 0 PID: 309 Comm: kworker/u8:6 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  165.438253][    C1] Tainted: [W]=WARN
[  165.442074][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  165.452149][    C1] Workqueue: events_unbound flush_to_ldisc
[  165.457985][    C1] ==================================================================
[  165.478542][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.