last executing test programs:

22.237520691s ago: executing program 4 (id=81):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28500, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x42ac0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000007fff", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

21.253352879s ago: executing program 4 (id=89):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x8, 0x1414}, 0x50)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x3, 0x1a23})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r2=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000100)=0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc)
kcmp(r2, r3, 0x5, r0, r1)

21.170452365s ago: executing program 4 (id=90):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, &(0x7f0000000000)='UL', 0x2, 0x24000854, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x7)

21.071324641s ago: executing program 4 (id=91):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
poll(0x0, 0x0, 0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES16], 0x2, 0x0, &(0x7f0000000000))
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socketpair(0x1d, 0xc29d83dbad83c0d3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000c40)={'gre0\x00', <r4=>0x0, 0x1, 0x720, 0x15a, 0x7fffffff, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x68, 0x0, 0xb, 0x4, 0x0, @loopback, @loopback, {[@rr={0x7, 0x7, 0x64, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @generic={0x82, 0xe, "ef267d1dec884e35652cf72d"}, @rr={0x7, 0x17, 0xaf, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x20, 0x21, 0x0, 0xc, [0x4c0, 0x7ff, 0x6, 0x10000, 0x5, 0x8001, 0x229d]}, @timestamp={0x44, 0x1c, 0xa1, 0x0, 0x9, [0x0, 0x9, 0x34c25147, 0xfffffff1, 0xfffffffb, 0x8]}]}}}}})
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000002500)='\f7', 0x2}, {0x0}], 0x2)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40), 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x7a99, 0xc8, &(0x7f0000000580)=""/200, 0x40f00, 0x42, '\x00', r4, 0x25, r5, 0x8, &(0x7f00000006c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0xd, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000dc0)=[r6], &(0x7f0000000e00)=[{0x0, 0x1, 0x6}, {0x5, 0x5, 0x6, 0x6}, {0x5, 0x1, 0xd, 0x1}, {0x3, 0x5, 0x4}, {0x2, 0x3, 0x6, 0x2}, {0x1, 0x2, 0x4, 0x8}, {0x4, 0x3, 0x10, 0x4}, {0x5, 0x5, 0x10, 0x957dade7c3b1f8f8}], 0x10, 0x1}, 0x94)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x74, r7, 0x4d0534bafe63a7af, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4004014)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'rose0\x00', 0x8})
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8180}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x31}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x840)

20.935098018s ago: executing program 4 (id=92):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="8c0700005a000d030000000000000000700700807c"], 0x78c}], 0x1, 0x0, 0x0, 0x4004}, 0x0)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffc}}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c9"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

20.723839391s ago: executing program 4 (id=94):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
get_robust_list(0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x20, 0x11, 0xaa, {0xaa, 0x7, "f43593251b817280630c0fd3564c08b8fd8482d15fb17ed76b9b31e4562e346b27373b4103d8df0d51e944b062e46b5f0564b34f2b4caa7570a83ce5cc38bf945d400ec17187af69e7b392d36387cbdec1ee163564a120e84ab6d348898f95948b37a66c4c3dcff1ba5b7889c7a0808da69146b19863c2ee1beb9e1998c0a00d1383dffa7545c682f44a7966ca571539d585e3953680ce29859f7591b01604ab87aeab4cb8636f26"}}, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe3, 0x3, 0x0, 0x81, "bfd471c0", "59c807f8"}}, 0x0}, 0x0)

20.723711731s ago: executing program 32 (id=94):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
get_robust_list(0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x20, 0x11, 0xaa, {0xaa, 0x7, "f43593251b817280630c0fd3564c08b8fd8482d15fb17ed76b9b31e4562e346b27373b4103d8df0d51e944b062e46b5f0564b34f2b4caa7570a83ce5cc38bf945d400ec17187af69e7b392d36387cbdec1ee163564a120e84ab6d348898f95948b37a66c4c3dcff1ba5b7889c7a0808da69146b19863c2ee1beb9e1998c0a00d1383dffa7545c682f44a7966ca571539d585e3953680ce29859f7591b01604ab87aeab4cb8636f26"}}, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe3, 0x3, 0x0, 0x81, "bfd471c0", "59c807f8"}}, 0x0}, 0x0)

9.081442401s ago: executing program 0 (id=139):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e723000000ffdbdf251500000024001d812000"], 0x38}}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r2=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = bpf$MAP_CREATE(0x1101000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={<r6=>0x0, @dev, @dev}, &(0x7f0000000340)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x32, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc440}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xced}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x967d}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x1000, &(0x7f0000000900)=""/4096, 0x40f00, 0x14, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r5], &(0x7f0000000400)=[{0x5, 0x4, 0x9, 0x6}, {0x5, 0x2, 0x10, 0x6}, {0x2, 0x5, 0x8, 0x3}], 0x10, 0x7}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r7 = dup(r5)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
fcntl$setstatus(r8, 0x4, 0x0)
r9 = dup(r8)
copy_file_range(r8, 0x0, r9, &(0x7f0000000640)=0x8800000, 0x20000009, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, r11, 0x1, 0x0, 0x25dfdbfc, {0x1a}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008004)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1020c0, &(0x7f0000000440)=ANY=[])
setsockopt$inet_opts(r4, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1)
getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f00000004c0))

9.080769291s ago: executing program 1 (id=140):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040027060000fddbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB='\f\x00X\x00\\\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00P\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00p\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00V'], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4008880)
r2 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x12700, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
connect$inet(r2, &(0x7f0000001600)={0x2, 0x4e22, @empty}, 0x10)
syz_open_procfs$userns(r3, &(0x7f0000001300))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000015c0)={0xe4, 0x0, &(0x7f0000001400)=[@decrefs, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/4096, 0x1000, 0x1, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @enter_looper, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000013c0)={0x30, 0x30, 0x30}}, 0x40}, @decrefs={0x40046307, 0x3}, @dead_binder_done, @free_buffer={0x40086303, r8}], 0xa4, 0x0, &(0x7f0000001500)="88ea5cf77af4f2e80495367664f0729d54469cbd98acddbe1a22a401e20fa51a6d46422463e5824f3480fbe711976ac48d7ca7285705d7f26926eb0e3fe0dfc34c568cfc313daf0b07b9addcc167686fcca7b7e4a036b1f2f38b2026b873b9803781aaa8209f5fe4f1b475e174c89260832e09d8d31518fb19f3d60577cb80020b070e7fedb1c9eca70dccead06124e93a99d9cc4cac0a9f779ad7f71ebf1b595223d2d5"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f00000001c0))
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}}, 0x20008044)

9.080151661s ago: executing program 3 (id=142):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r1 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x12700, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e22, @empty}, 0x10)
syz_open_procfs$userns(r2, &(0x7f0000001300))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000015c0)={0xe4, 0x0, &(0x7f0000001400)=[@decrefs, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/4096, 0x1000, 0x1, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @enter_looper, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000013c0)={0x30, 0x30, 0x30}}, 0x40}, @decrefs={0x40046307, 0x3}, @dead_binder_done, @free_buffer={0x40086303, r7}], 0xa4, 0x0, &(0x7f0000001500)="88ea5cf77af4f2e80495367664f0729d54469cbd98acddbe1a22a401e20fa51a6d46422463e5824f3480fbe711976ac48d7ca7285705d7f26926eb0e3fe0dfc34c568cfc313daf0b07b9addcc167686fcca7b7e4a036b1f2f38b2026b873b9803781aaa8209f5fe4f1b475e174c89260832e09d8d31518fb19f3d60577cb80020b070e7fedb1c9eca70dccead06124e93a99d9cc4cac0a9f779ad7f71ebf1b595223d2d5"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f00000001c0))
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}}, 0x20008044)

7.465373987s ago: executing program 0 (id=143):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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")
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

7.464525507s ago: executing program 1 (id=144):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x403, 0x100000, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x81063}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x20}], @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$eJzs3c9vI1cdAPDvTOJtsptiFxAqlSgVLcpWsHbS0DZCCMoFTpWAcl9C4kRR7DiKnbKJKkjFf4CQQOLEiQsSfwBS1QN/AKpUCS6IAwIEQrCFA+JHB9ke041jJ6k2yezGn4/04vdmxvN9byy/+eGXmQAm1lMR8VJETEXEsxFRzqeneYrDfuou987d11a7KYkse+WvSST5tMG6uuXpiLiRv20mIr725YhvJsfjtvcPtlYajfpuXq51mju19v7Brc3mykZ9o769tLT4wvKLy88vL2S5+2pnZZD5yZc+/8anv/W723+++e1utT73kSjFUDvOU7/ppd62GOhuo92LCFaAqbw9paIrAgDAmXSP8T8YEZ/oHf+XY6p3NDdkqoiaAQAAAOcl+8Jc/CeJyAAAAIArK42IuUjSaj4WYC7S9Fp+beDDcT1ttNqdT6239rbXuvMiKlFK1zcb9YV8rHAlSkm3vJiPsR2UnxsqL0XEYxHx/fJsr1xdbTXWCr72AQAAAJPixtD5/z/KaS9/uhH/JwAAAAA8uCpjCwAAAMBV4ZQfAAAArr7h8/83CqoHAAAAcCG+8vLL3ZQNnn+99ur+3lbr1Vtr9fZWtbm3Wl1t7e5UN1qtjd49+5qnra/Rau18Jrb37tQ69Xan1t4/uN1s7W13bm8eeQQ2AAAAcIke+/ibv04i4vCzs70U+X0AAY74Q9EVAM7TVNEVAArjLt4wuUpFVwAoXHLKfIN3AADg4Tf/0eO//w+e/+/aAFxtxvoAwOSZjtmiqwAUpGQEIEy0NCI+0M8+Mm6Zsb////KsUbIs4q3yvVNcXwQAgMs110tJWs3PA+YiTavViEcj0kqUkvXNRn0hPz/4Vbn0SLe82HtncuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgL8uSyAAAAIArLSL9U9K7m3/EfPmZueHrA9eSf5bjj3nhR6/84M5Kp7O72J3+t96zvK5FROeH+fTnxj4+DAAAADhvyeHYWf3z9Px18VJrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAEeOfua6uDdJlx//LFiKiMij8dM73XmShFxPW/JzF9z/uSiJg6h/iHr0fE46PiJ/FulmWVvBbD8dOImL3g+JXephkf/8Y5xIdJ9ma3/3lp1Pcvjad6r6O/f9N5ul/j+780j/x4r58b1f89emxtzZExnnj7Z7Wx8V+PeGJ6dP8z6H+TMfGfPra2f2dZdjzGN75+cDAufvbjiPmR+5/kSKxap7lTa+8f3NpsrmzUN+rbS0uLLyy/uPz88kJtfbNRz/+OjPG9j/383ZPaf31E/N/+pt//ntT+Z8atdMh/375z90P9bGlU/JtPj9z/zsSY+Gm+7/tknu/Onx/kD/v5ez3507eePKn9a2O2/2mf/80ztv/Zr37392dcFAC4BO39g62VRqO+e0Jm5gzLPIyZX8w8ENV4n5nsO/1P7oRlysXV8F9nXrh7tPrelEGrCt+8RzLZpcWaigekyf/PFNotAQAAF+C9g/6iawIAAAAAAAAAAAAAAAAAAACT6zJuJzYc87CYpgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOh/AQAA///uxuBB")
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}})
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x5, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x10}, {0x9b000000}, {}, {0x80000}, {}, {0xfffffffe}, {0x0, 0x4}, {}, {}]}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000019c0)=""/156, 0x85, 0x9c, 0x1}, 0x28)

7.463130457s ago: executing program 2 (id=145):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006a0001000000000000000000010dee0302000900bb80828be58d3400"], 0x20}}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mprotect(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f00000002c0)={&(0x7f0000000280)=""/18, 0x12})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000500)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r4, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000001c0)={@multicast1, @broadcast, 0x0, 0x3, [@local, @local, @multicast2]}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@filename='./file0\x00', 0x0, &(0x7f0000000100)='./file0\x00')
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10}, {0x2, 0x1000000c99, 0x800, 0x2dd}, 0x0, 0x0, 0x2, 0x1, 0x1, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d3, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xff, 0x7}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x1, 0x3, 0x0, 0x0, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040)
ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000300))
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x5)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40510f0)

7.462971047s ago: executing program 3 (id=146):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

5.756502668s ago: executing program 0 (id=147):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x28, 0x0, @wg=@data={0x220, 0x0, 0x0, "200200"/16}}}}}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast2, 0xb}}, {{0xa, 0x4e20, 0x3ff, @loopback, 0xcd004ef}}}, 0x108)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000"], 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be000c"], 0xfdef)
unshare(0x64000600)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@RTM_NEWNSID={0x1c, 0x58, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NETNSA_FD={0x8}]}, 0x1c}}, 0x0)
socket(0x1e, 0x3, 0x2)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$sock(r5, &(0x7f0000000240)={&(0x7f0000000000)=@isdn={0x22, 0x6, 0x8, 0x3d, 0x49}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="6dd243f7983731f7b5a13ea6914ff71567e87f38bf894a86b48ba23af67d1b450dc7be2ddefe086a1788fb653c9c437b8313b463699c43be39480de45bc39eea775ea0709d09c8632d96ded05739d70076a952bd73090020fb67410c8b456dace8de9c3a84c75271cfbc5604824c53dd47c314bddaf681fee5a0", 0x7a}, {&(0x7f0000000100)="1ff03f82b3da9f41f4b9f3dbc839a0e095efab8150f2ef30a921df4af84b7d314063a65395b97b0f1823fb0c9309cdc28049a4c565db6e08d79ed5c6c4f86cd777978a", 0x43}], 0x2, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18}}], 0x60}, 0x814)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt(r5, 0x111, 0x5, 0x0, 0x0)

5.754931048s ago: executing program 1 (id=148):
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0xfc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4040004)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000300)="37c5e00d312e560aaf94a7af5bc2043d4630d16aceee1cbe80e0c2181b3fc32a26aa96b4a654198b89e6a761427aa4aa0d4221c318572f61918eb4", 0x3b}, {&(0x7f0000000440)="754c0a4ea2a4c5da11250f716e7c845eda422682c1446f94dc33ae523be51e34df4c1f9e69bde73e66ef5251fb52cc8a6442abeb88c74f7e7e3a8fc739bf92777dc5627e920ce1d8fa0832776e18004d43ad9d11f4b440f4be0dcffa4f835859005bf2f7a124255ec4dc04049bf339", 0x6f}, {&(0x7f0000000640)="f90accfbdfafaaba0c65c3d86660d87823e6cd93d95e46cb6c6e05185fc000476c2349ac936c20af599c0a72f5ecbf23c3c7c957eabd439858c01cc5add323b0364979933c111cb0d459c33fd9775b872f8cd15d55208cdc589035b1fbcf573e98c52f333500ee4733b2a7b7419cfc0902658045afce7fe4b9e9a141b2a0975c2db6d87fb651f5bc8f0fc93e35c52874113345c0e3f1211e60c79b9513c654038bd9030e5742f80c335d08c74532ea3aef6d69392d364bd613969b983170d63b57a27ef296d8fb784c668b75b996cff151deec401d737cf1002062b327e1f338fc6bda84ed38529a51547fcd12012927d83db752762618", 0xf7}, {&(0x7f0000000740)="9eb16ec90b8f809a786c048f3a9c2bde8bbc5e0ae2bd392d7968e74bb58514dffc612eb3774a0ca49659c38c3343082873305b70ac8a8c99b75690b3ce839810171425730ecac90becce8dd2f696f99359097bdc22c431d59d9fd6486ecba849619b2d85645525835410bc999ff4b115005eec00f7450d2e4702c793129691e10d40ef800172dd022b6b20be3b3926bce8d573e5d3eaf7fe9a24e4aac8c91f2f8de59dd64eab49cabc53cd6fb73e3f275aaf7aae028cc86ce7353cad4da7a1da0d648a4a6f316bc1d7382749f4cbb7d5aeb7d7f49afce5ee", 0xd8}, {&(0x7f00000004c0)="b063845ef3c8cdf05d41dd3473a205984cd40d80b58c9c229c2efd869e0f9f5ffe5d620bbfd0032bec444fa9998227e65259c6545bbebde54e162b2de9585faa6b7f8cee263057", 0x47}, {&(0x7f00000008c0)="8ea8c2f4c9e66585444d4e9f8ed8ac78dac99eb17731bd9465bb7640747d9f1e4a9b804ef84b4ec19e7ee8946f6e25cf00c26a30112d52aefb9a958692b764d41bcefed07d4f81027b306b21", 0x4c}, {&(0x7f0000000380)="fe873cf3172e", 0x6}, {&(0x7f0000000a80)="0b62b72e5f1eec47636856dbda6fe7436b339b54022cafa4c439a7591528635794fa428296a9979609337192d636015a9d22e36f665df85e7d371a271274594b0fce75d8557fd1ec9a51f89f1d352af5805948924f0087537196eb068606a72eadb55917", 0x64}, {&(0x7f0000000b00)="50c8b3be6d0d773c6cf3942732fd9318d25210793485f6b96a35d41b4b9f6277a0b9d789ac67e2570a90bf14871635162733bd13d2af5d32296d5cf0f4ef2dbb896ecdacdcee37a5e3ccf3799ce9ed16b39e6c9502113c63578665af01c670cbe47445a3239eaf8457e5b93a435375", 0x6f}, {&(0x7f0000000b80)="8752d2c41e6451e1761d9a023979b54f9a3ad735a067efd9d92551e59d9a220e484866b8c80406175b2ccd507b73510b2bd24ddabaa2466d34d6e78ad0cb76d4fc20ad6c8e3d6bdc7c4ab079763a796ed02576e7e71ff95028534bfd72cb5bc7dfd110691fa5cc03e6847e9cecc14d84018b2be3ac144dfd25cfd3c5557617f9c999fb67b047c18661678882d002f93174c257264542e1546a9d2e8b462b5948c74de352b83f058c22210dcfd4e1c31b1dcdcd01f4adf8a95c2ecbc54d65036926bebee9152fffab6bcd781160a44893f5944bfaf951fee0430ba7cce4c8b86f5c24d1239f9b2a42c0bb478c472ff3e7120e9a9a5d11", 0xf6}], 0xa, &(0x7f0000001280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000f3a6000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3], 0x58, 0x200088c5}}], 0x1, 0x20044025)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000019080)={0x2020}, 0x2020)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r6, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r8, {0x5}, {0x81ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)

5.753786749s ago: executing program 2 (id=149):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nouser_xattr}, {@quota}, {@test_dummy_encryption_v1}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

5.753609839s ago: executing program 3 (id=150):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0xb)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1}, 0x28)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071116300000000008510000002000000850000000000000095000000000100009500a5050000000060affbeaef66d1d3aa64533600e4f21dde192b8319283650132081c9316022cf42e9e53d219a8bb79e5004baedf8e04555cd1d891f568bf69c5cf222c4c64a5400"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

5.681708773s ago: executing program 2 (id=151):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x7e, @loopback, 0x1}, 0x1c)
listen(r1, 0x2)

3.925718987s ago: executing program 0 (id=152):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0xa000, 0x4)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, r2)
getpriority(0x1, r2)

3.925095877s ago: executing program 1 (id=153):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040027060000fddbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB='\f\x00X\x00\\\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00P\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00p\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00V'], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4008880)
r2 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x12700, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
connect$inet(r2, &(0x7f0000001600)={0x2, 0x4e22, @empty}, 0x10)
syz_open_procfs$userns(r3, &(0x7f0000001300))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000900)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000015c0)={0xe4, 0x0, &(0x7f0000001400)=[@decrefs, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/4096, 0x1000, 0x1, 0x23}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @enter_looper, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000013c0)={0x30, 0x30, 0x30}}, 0x40}, @decrefs={0x40046307, 0x3}, @dead_binder_done, @free_buffer={0x40086303, r8}], 0xa4, 0x0, &(0x7f0000001500)="88ea5cf77af4f2e80495367664f0729d54469cbd98acddbe1a22a401e20fa51a6d46422463e5824f3480fbe711976ac48d7ca7285705d7f26926eb0e3fe0dfc34c568cfc313daf0b07b9addcc167686fcca7b7e4a036b1f2f38b2026b873b9803781aaa8209f5fe4f1b475e174c89260832e09d8d31518fb19f3d60577cb80020b070e7fedb1c9eca70dccead06124e93a99d9cc4cac0a9f779ad7f71ebf1b595223d2d5"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f00000001c0))
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}}, 0x20008044)

3.924617367s ago: executing program 2 (id=154):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$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")
chdir(&(0x7f0000000000)='./cgroup\x00')
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8)

3.924506647s ago: executing program 3 (id=155):
setresuid(0x0, 0xee00, 0x0)
fsopen(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1000000}, 0x139}, 0x48)

2.01742334s ago: executing program 0 (id=156):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@bsdgroups}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x477, &(0x7f0000001e00)="$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")
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

2.01642869s ago: executing program 1 (id=157):
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xe, 0x0, &(0x7f0000000200))
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x2, r1, 0x4, 0x8, 0xfffffffc, 0xe19a, 0x0, 0x9, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040814}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 64)
accept(r6, &(0x7f0000000280)=@generic, &(0x7f00000000c0)=0x80) (rerun: 64)
r8 = socket(0x400000000010, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) (rerun: 32)

2.01582224s ago: executing program 2 (id=158):
unshare(0x400)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4})
prlimit64(0x0, 0x9, &(0x7f0000000140)={0xa, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000040), 0x0}, 0x20)
write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './bus'}, 0x9)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0xb0400, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
r9 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r9, &(0x7f0000000280)={0xffffffffffffffff, 0x2d, 0x80000000000000, 0xa, 0xfffffffffffffffe, 0x2c}, 0x48)
r10 = getpgrp(0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r10, 0x2, 0x5001)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10200, 0x2, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000040))
splice(r4, 0x0, r5, 0x0, 0x1000, 0x9)
splice(r2, 0x0, r7, 0x0, 0x80, 0x0)

2.01534438s ago: executing program 3 (id=159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000040), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r2)
r3 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472a96e733d66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00'])
r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
pwritev(r4, &(0x7f0000004800)=[{0x0}], 0x1, 0xfffff223, 0x7ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x803)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10000248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
tkill(r6, 0x38)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8010, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x7f00, &(0x7f0000000000))
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f0000000680)=@ethtool_eee={0x1, 0x800, 0xff, 0x400, 0xed, 0x8000, 0x7fffffff, 0x7ff, [0xffffff13, 0x4]}})
connect$bt_rfcomm(r5, &(0x7f0000000380)={0x1f, @any, 0x7}, 0xa)

538.47µs ago: executing program 0 (id=160):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000006a0001000000000000000000010dee0302000900bb80828be58d3400"], 0x20}}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mprotect(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x200880, 0x0)
ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000002c0)={&(0x7f0000000280)=""/18, 0x12})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000500)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r4, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r6 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000001c0)={@multicast1, @broadcast, 0x0, 0x3, [@local, @local, @multicast2]}, 0x1c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@filename='./file0\x00', 0x0, &(0x7f0000000100)='./file0\x00')
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10}, {0x2, 0x1000000c99, 0x800, 0x2dd}, 0x0, 0x0, 0x2, 0x1, 0x1, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d3, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xff, 0x7}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1ff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x1, 0x3, 0x0, 0x0, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040)
ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000300))
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x5)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40510f0)

352.36µs ago: executing program 1 (id=161):
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet(r3, &(0x7f0000000740)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x2400c042)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x20000008b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080))
ioctl$RTC_AIE_ON(r4, 0x7001)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1})

150.53µs ago: executing program 2 (id=162):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
socket(0x2, 0xa, 0x300)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42048142, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6008120000242b0000000000000000000002ffffac1414bbfe8000000000000000000000000000aa3a02020100000000000000000100"], 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, 0x0)
r2 = open(0x0, 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_emit_ethernet(0xeb, &(0x7f0000002200)={@local, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xb5, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[@routing={0x11, 0xc, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @ipv4={'\x00', '\xff\xff', @remote}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0x7, "a78ce540aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0a0b000000be27df3e34066d42c60a5c15b37ada6e"}, {0x1f}, {0x5}]}}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 3 (id=163):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000029000000711816000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts.
[   20.182593][   T24] audit: type=1400 audit(1769560473.240:64): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.183567][  T267] cgroup: Unknown subsys name 'net'
[   20.205228][   T24] audit: type=1400 audit(1769560473.240:65): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.232474][   T24] audit: type=1400 audit(1769560473.270:66): avc:  denied  { unmount } for  pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.232650][  T267] cgroup: Unknown subsys name 'devices'
[   20.461182][  T267] cgroup: Unknown subsys name 'hugetlb'
[   20.466804][  T267] cgroup: Unknown subsys name 'rlimit'
[   20.633672][   T24] audit: type=1400 audit(1769560473.690:67): avc:  denied  { setattr } for  pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.656880][   T24] audit: type=1400 audit(1769560473.690:68): avc:  denied  { mounton } for  pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   20.658564][  T269] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.690132][   T24] audit: type=1400 audit(1769560473.690:69): avc:  denied  { mount } for  pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.713417][   T24] audit: type=1400 audit(1769560473.750:70): avc:  denied  { relabelto } for  pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.738827][   T24] audit: type=1400 audit(1769560473.750:71): avc:  denied  { write } for  pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.738953][  T267] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.764443][   T24] audit: type=1400 audit(1769560473.790:72): avc:  denied  { read } for  pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.764457][   T24] audit: type=1400 audit(1769560473.790:73): avc:  denied  { open } for  pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.147578][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.154668][  T275] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.162025][  T275] device bridge_slave_0 entered promiscuous mode
[   21.168720][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.175754][  T275] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.182987][  T275] device bridge_slave_1 entered promiscuous mode
[   21.214070][  T275] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.221124][  T275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.228337][  T275] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.235361][  T275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.250775][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.257998][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.265332][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   21.273146][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.281782][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.289955][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.296949][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.305869][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.314180][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.321209][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.332694][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   21.341805][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   21.354554][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   21.364899][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   21.373084][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   21.381084][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   21.389290][  T275] device veth0_vlan entered promiscuous mode
[   21.400545][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   21.410861][  T275] device veth1_macvtap entered promiscuous mode
[   21.421569][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   21.435682][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   21.453196][  T275] request_module fs-gadgetfs succeeded, but still no fs?
[   21.464574][  T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   21.566648][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.573814][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.581374][  T284] device bridge_slave_0 entered promiscuous mode
[   21.589130][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.596314][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.603643][  T283] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   21.610128][  T284] device bridge_slave_1 entered promiscuous mode
[   21.612316][  T283] EXT4-fs (loop0): 1 truncate cleaned up
[   21.623792][  T283] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,jqfmt=vfsv0,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,barrier,max_dir_size_kb=0x0000000000000003,,errors=continue
[   21.636874][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.652650][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.665429][  T285] device bridge_slave_0 entered promiscuous mode
[   21.686260][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.693321][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.703417][  T285] device bridge_slave_1 entered promiscuous mode
[   21.746104][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.753165][  T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.760417][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.767419][  T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.786347][  T287] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.793449][  T287] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.800783][  T287] device bridge_slave_0 entered promiscuous mode
[   21.810139][  T287] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.817167][  T287] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.824513][  T287] device bridge_slave_1 entered promiscuous mode
[   21.834983][  T304] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure
[   21.902404][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   21.910270][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.917513][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.964095][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   21.972350][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.979410][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.987544][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   21.996036][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.003096][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.010565][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.018532][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.040882][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.047914][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.055378][  T286] device bridge_slave_0 entered promiscuous mode
[   22.063410][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.071148][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.078604][  T286] device bridge_slave_1 entered promiscuous mode
[   22.095670][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.117252][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.125209][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.132715][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.141922][  T284] device veth0_vlan entered promiscuous mode
[   22.170426][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.177843][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.195027][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.203295][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.211810][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.218850][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.226507][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.235067][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.243321][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.250357][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.257744][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.274835][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.282945][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.294652][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.302500][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.312893][  T284] device veth1_macvtap entered promiscuous mode
[   22.330354][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   22.338758][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.347055][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   22.355157][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.363642][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.371666][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.380121][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.388188][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.395218][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.402639][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.411124][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.419200][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.426237][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.433681][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   22.441111][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   22.448427][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   22.456716][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   22.465019][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.472048][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.479467][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   22.487870][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   22.496141][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.503178][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.510507][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   22.518488][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.526475][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   22.534463][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.560697][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.568356][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   22.576345][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   22.588090][  T309] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7'.
[   22.590939][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   22.605068][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.613581][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.625865][  T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.653823][  T287] device veth0_vlan entered promiscuous mode
[   22.663825][  T285] device veth0_vlan entered promiscuous mode
[   22.671859][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.681030][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   22.689525][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   22.698090][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   22.706680][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   22.715083][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.723292][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.731749][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   22.740300][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   22.748622][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   22.756547][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.770367][  T286] device veth0_vlan entered promiscuous mode
[   22.782305][  T286] device veth1_macvtap entered promiscuous mode
[   22.791948][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   22.800156][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.807915][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.815474][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.822999][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.830910][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   22.838820][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   22.847028][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   22.883815][  T285] device veth1_macvtap entered promiscuous mode
[   23.599579][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.608796][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.617160][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.625624][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.634720][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.643361][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.651845][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.660663][  T320] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.667836][  T320] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.675210][  T320] device bridge0 entered promiscuous mode
[   23.681861][  T320] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   23.706041][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.718915][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.747021][  T287] device veth1_macvtap entered promiscuous mode
[   23.767433][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.781674][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.790270][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   23.798429][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   23.806693][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   23.820115][  T332] ======================================================
[   23.820115][  T332] WARNING: the mand mount option is being deprecated and
[   23.820115][  T332]          will be removed in v5.15!
[   23.820115][  T332] ======================================================
[   23.886100][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   23.894703][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   23.903109][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   23.914828][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   23.943547][  T332] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue
[   23.955449][  T332] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   23.981689][  T332] xt_hashlimit: size too large, truncated to 1048576
[   23.990086][  T327] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   23.997839][  T327] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   24.012859][  T327] F2FS-fs (loop0): invalid crc value
[   24.041934][  T327] F2FS-fs (loop0): Found nat_bits in checkpoint
[   24.063775][  T346] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   24.151041][  T327] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   24.158584][  T327] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   24.249728][  T298] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   24.273538][  T353] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   24.570752][  T346] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue
[   24.692767][  T346] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   24.729771][  T298] usb 5-1: Using ep0 maxpacket: 16
[   25.007960][  T327] attempt to access beyond end of device
[   25.007960][  T327] loop0: rw=10241, want=45104, limit=40427
[   25.039734][  T298] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[   25.047881][  T298] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   25.121182][  T298] usb 5-1: config 0 has no interface number 0
[   25.127362][  T298] usb 5-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   25.140376][  T298] usb 5-1: config 0 interface 41 has no altsetting 0
[   25.189934][   T24] kauditd_printk_skb: 77 callbacks suppressed
[   25.189943][   T24] audit: type=1400 audit(1769560478.250:151): avc:  denied  { ioctl } for  pid=367 comm="syz.1.17" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   25.191149][  T368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   25.260773][  T370] netlink: 'syz.1.17': attribute type 11 has an invalid length.
[   25.286006][  T370] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   25.307620][  T370] netlink: 66 bytes leftover after parsing attributes in process `syz.1.17'.
[   25.319762][  T298] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   25.328873][  T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   25.329000][  T365] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[   25.341727][  T298] usb 5-1: Product: syz
[   25.353870][  T298] usb 5-1: Manufacturer: syz
[   25.358538][  T298] usb 5-1: SerialNumber: syz
[   25.363741][  T365] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   25.372461][  T298] usb 5-1: config 0 descriptor??
[   25.378291][  T365] F2FS-fs (loop3): invalid crc value
[   25.400756][  T375] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002]
[   25.401190][  T365] F2FS-fs (loop3): Found nat_bits in checkpoint
[   25.409979][  T375] System zones: 0-2, 18-18, 34-34
[   25.420945][  T375] EXT4-fs (loop1): orphan cleanup on readonly fs
[   25.427560][  T375] EXT4-fs error (device loop1): ext4_orphan_get:1421: comm syz.1.18: bad orphan inode 13
[   25.440410][  T375] ext4_test_bit(bit=12, block=18) = 1
[   25.445791][  T375] is_bad_inode(inode)=0
[   25.459879][  T375] NEXT_ORPHAN(inode)=2130706432
[   25.467040][  T375] max_ino=32
[   25.474946][  T375] i_nlink=1
[   25.481400][  T375] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,discard,usrquota,noinit_itable,data_err=ignore,,errors=continue
[   25.494674][  T365] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   25.504152][  T365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   25.855484][  T386] netlink: 124 bytes leftover after parsing attributes in process `syz.1.18'.
[   25.864399][  T386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'.
[   25.889948][   T24] audit: type=1400 audit(1769560478.720:152): avc:  denied  { accept } for  pid=380 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   26.023815][  T389] binder: 334:389 unknown command 0
[   26.036441][  T389] binder: 334:389 ioctl c0306201 200000004a40 returned -22
[   26.051390][   T24] audit: type=1400 audit(1769560478.910:153): avc:  denied  { create } for  pid=374 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.080952][   T24] audit: type=1400 audit(1769560478.910:154): avc:  denied  { write } for  pid=374 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.104485][  T287] attempt to access beyond end of device
[   26.104485][  T287] loop3: rw=2049, want=45104, limit=40427
[   26.120074][  T298] dm9601: probe of 5-1:0.41 failed with error -22
[   26.130751][  T298] sr9700: probe of 5-1:0.41 failed with error -22
[   26.146810][  T391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   26.180746][  T391] exfat: Bad value for 'uid'
[   26.296846][   T24] audit: type=1400 audit(1769560479.350:155): avc:  denied  { create } for  pid=390 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   26.316069][   T24] audit: type=1400 audit(1769560479.350:156): avc:  denied  { bind } for  pid=390 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   26.338547][  T388] usb 5-1: USB disconnect, device number 2
[   26.364094][   T24] audit: type=1400 audit(1769560479.420:157): avc:  denied  { create } for  pid=395 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   26.411414][   T24] audit: type=1400 audit(1769560479.420:158): avc:  denied  { create } for  pid=394 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   26.430785][   T24] audit: type=1400 audit(1769560479.420:159): avc:  denied  { ioctl } for  pid=395 comm="syz.1.22" path="socket:[15349]" dev="sockfs" ino=15349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   26.489631][   T24] audit: type=1400 audit(1769560479.420:160): avc:  denied  { map } for  pid=395 comm="syz.1.22" path="pipe:[15336]" dev="pipefs" ino=15336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   26.835243][  T298] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   26.898883][  T408] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   27.086818][  T410] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000000008,noquota,norecovery,bsddf,,errors=continue
[   27.102678][  T410] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.239854][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   27.359709][  T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   27.371813][  T415] IPv6: sit1: Disabled Multicast RS
[   27.396909][  T298] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[   27.429401][  T418] FAULT_INJECTION: forcing a failure.
[   27.429401][  T418] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   27.446912][  T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.477370][  T298] usb 3-1: config 0 descriptor??
[   27.489771][  T418] CPU: 1 PID: 418 Comm: syz.4.27 Not tainted syzkaller #0
[   27.496914][  T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   27.506969][  T418] Call Trace:
[   27.510265][  T418]  __dump_stack+0x21/0x24
[   27.514577][  T418]  dump_stack_lvl+0x1a7/0x208
[   27.519249][  T418]  ? thaw_kernel_threads+0x220/0x220
[   27.524531][  T418]  ? show_regs_print_info+0x18/0x18
[   27.529721][  T418]  dump_stack+0x15/0x1c
[   27.533865][  T418]  should_fail+0x3c1/0x510
[   27.538278][  T418]  should_fail_usercopy+0x1a/0x20
[   27.543415][  T418]  strncpy_from_user+0x24/0x2e0
[   27.548259][  T418]  ? kmem_cache_alloc+0x162/0x2d0
[   27.553280][  T418]  ? getname_flags+0xb9/0x500
[   27.557951][  T418]  getname_flags+0xf4/0x500
[   27.562441][  T418]  user_path_at_empty+0x2f/0x50
[   27.567287][  T418]  __se_sys_mount+0x2eb/0x390
[   27.571952][  T418]  ? fput+0x1a/0x20
[   27.575747][  T418]  ? __x64_sys_mount+0xd0/0xd0
[   27.580532][  T418]  __x64_sys_mount+0xbf/0xd0
[   27.585105][  T418]  do_syscall_64+0x31/0x40
[   27.589506][  T418]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   27.595383][  T418] RIP: 0033:0x7fdf9495deb9
[   27.599784][  T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   27.619377][  T418] RSP: 002b:00007fdf933ba028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   27.627776][  T418] RAX: ffffffffffffffda RBX: 00007fdf94bd8fa0 RCX: 00007fdf9495deb9
[   27.635743][  T418] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000
[   27.643711][  T418] RBP: 00007fdf933ba090 R08: 0000200000000580 R09: 0000000000000000
[   27.651675][  T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   27.659633][  T418] R13: 00007fdf94bd9038 R14: 00007fdf94bd8fa0 R15: 00007ffe66497f48
[   27.850449][  T426] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   27.859509][  T426] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   27.963164][  T434] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.970356][  T434] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.977715][  T434] device bridge0 entered promiscuous mode
[   27.987514][  T434] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   28.011926][   T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   28.270980][  T298] isku 0003:1E7D:3264.0001: unbalanced delimiter at end of report description
[   28.285204][  T298] isku 0003:1E7D:3264.0001: parse failed
[   28.297116][  T298] isku: probe of 0003:1E7D:3264.0001 failed with error -22
[   28.304777][   T20] usb 5-1: Using ep0 maxpacket: 8
[   28.469793][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[   28.483073][  T298] usb 3-1: USB disconnect, device number 2
[   28.559805][   T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.575877][   T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   28.584986][   T20] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 113, using maximum allowed: 30
[   28.586138][  T440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   28.595906][   T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   28.603025][  T440] IPv6: NLM_F_CREATE should be set when creating new route
[   28.620109][   T20] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 113
[   28.745972][  T440] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.753164][  T440] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.879779][   T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   28.889061][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.898418][   T20] usb 5-1: Product: syz
[   28.902664][  T444] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   28.912076][  T444] EXT4-fs (loop3): Mount option "journal_async_commit" incompatible with ext3
[   28.920973][   T20] usb 5-1: Manufacturer: syz
[   28.925561][   T20] usb 5-1: SerialNumber: syz
[   28.963376][  T442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'.
[   29.090871][  T449] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   29.111201][  T449] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #17: comm syz.2.38: inode has both inline data and extents flags
[   29.124363][  T449] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.38: couldn't read orphan inode 17 (err -117)
[   29.129787][  T460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33808 sclass=netlink_route_socket pid=460 comm=syz.1.37
[   29.150449][  T449] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   29.290544][  T465] EXT4-fs (loop0): Ignoring removed bh option
[   29.301330][  T465] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000005,nogrpid,bh,,errors=continue
[   29.313578][  T465] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   29.324075][   T20] usb 5-1: 0:2 : does not exist
[   29.331130][   T20] usb 5-1: USB disconnect, device number 3
[   29.349717][    T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   29.534598][  T282] udevd[282]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.746593][  T475] EXT4-fs warning (device loop4): ext4_multi_mount_protect:300: Invalid MMP block in superblock
[   29.769874][    T5] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.779722][    T5] usb 4-1: config 0 interface 0 has no altsetting 0
[   29.786324][    T5] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   29.795369][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.805846][    T5] usb 4-1: config 0 descriptor??
[   29.931305][  T481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'.
[   29.950605][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.958843][  T481] device bridge_slave_1 left promiscuous mode
[   29.965622][  T481] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.974582][  T483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.48: bg 0: block 248: padding at end of block bitmap is not set
[   29.988974][  T483] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.48: Failed to acquire dquot type 1
[   30.000978][  T483] EXT4-fs (loop2): 1 truncate cleaned up
[   30.006660][  T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   30.013810][  T475] EXT4-fs (loop4): Unrecognized mount option "mb_optimize_scan=0x0000000000000000" or missing value
[   30.015802][  T483] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   30.044217][  T489] capability: warning: `syz.0.45' uses 32-bit capabilities (legacy support in use)
[   30.189780][   T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   30.301425][    T5] kye 0003:0458:5010.0002: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0
[   30.312453][    T5] kye 0003:0458:5010.0002: tablet-enabling feature report not found
[   30.320483][    T5] kye 0003:0458:5010.0002: tablet enabling failed
[   30.343078][   T24] kauditd_printk_skb: 18 callbacks suppressed
[   30.343088][   T24] audit: type=1400 audit(1769560483.400:177): avc:  denied  { mount } for  pid=492 comm="syz.4.49" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   30.352594][  T500] xt_l2tp: missing protocol rule (udp|l2tpip)
[   30.388247][   T24] audit: type=1400 audit(1769560483.440:178): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   30.410528][   T24] audit: type=1400 audit(1769560483.470:179): avc:  denied  { remount } for  pid=499 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   30.488630][   T24] audit: type=1400 audit(1769560483.540:180): avc:  denied  { write } for  pid=503 comm="syz.4.52" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.511935][   T24] audit: type=1400 audit(1769560483.540:181): avc:  denied  { open } for  pid=503 comm="syz.4.52" path="/dev/input/event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   30.535947][   T24] audit: type=1400 audit(1769560483.540:182): avc:  denied  { create } for  pid=503 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   30.555170][   T24] audit: type=1400 audit(1769560483.540:183): avc:  denied  { setopt } for  pid=503 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   30.574507][   T24] audit: type=1400 audit(1769560483.580:184): avc:  denied  { create } for  pid=503 comm="syz.4.52" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   30.589803][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   30.595227][   T24] audit: type=1400 audit(1769560483.580:185): avc:  denied  { read } for  pid=503 comm="syz.4.52" name="file1" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   30.605808][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   30.627963][   T24] audit: type=1400 audit(1769560483.580:186): avc:  denied  { open } for  pid=503 comm="syz.4.52" path="/6/file1" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   30.637862][  T506] SELinux:  duplicate or incompatible mount options
[   30.666028][   T20] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[   30.675192][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.722902][   T20] usb 2-1: config 0 descriptor??
[   31.200316][   T20] isku 0003:1E7D:3264.0003: unbalanced delimiter at end of report description
[   31.219844][   T20] isku 0003:1E7D:3264.0003: parse failed
[   31.225580][   T20] isku: probe of 0003:1E7D:3264.0003 failed with error -22
[   31.413870][  T519] usb 2-1: USB disconnect, device number 2
[   32.289729][   T20] usb 4-1: USB disconnect, device number 2
[   32.328247][  T526] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   32.345838][  T526] FAULT_INJECTION: forcing a failure.
[   32.345838][  T526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   32.359158][  T526] CPU: 1 PID: 526 Comm: syz.2.57 Not tainted syzkaller #0
[   32.366255][  T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   32.376298][  T526] Call Trace:
[   32.379618][  T526]  __dump_stack+0x21/0x24
[   32.383933][  T526]  dump_stack_lvl+0x1a7/0x208
[   32.388598][  T526]  ? show_regs_print_info+0x18/0x18
[   32.393782][  T526]  ? sysvec_reschedule_ipi+0x69/0x70
[   32.399049][  T526]  ? asm_sysvec_reschedule_ipi+0x12/0x20
[   32.404668][  T526]  dump_stack+0x15/0x1c
[   32.408809][  T526]  should_fail+0x3c1/0x510
[   32.413208][  T526]  should_fail_usercopy+0x1a/0x20
[   32.418216][  T526]  _copy_from_user+0x20/0xd0
[   32.422787][  T526]  vti6_ioctl+0x3b4/0xe30
[   32.427102][  T526]  ? vti6_tnl_xmit+0x1620/0x1620
[   32.432030][  T526]  ? full_name_hash+0xbd/0xf0
[   32.436697][  T526]  dev_ifsioc+0x6b4/0xa90
[   32.440998][  T526]  ? dev_ioctl+0xb80/0xb80
[   32.445386][  T526]  ? __rcu_read_unlock+0x5e/0xa0
[   32.450296][  T526]  dev_ioctl+0x5ea/0xb80
[   32.454510][  T526]  sock_ioctl+0x6ce/0x760
[   32.458811][  T526]  ? sock_poll+0x350/0x350
[   32.463197][  T526]  ? __fget_files+0x2c4/0x320
[   32.467881][  T526]  ? security_file_ioctl+0x84/0xa0
[   32.472989][  T526]  ? sock_poll+0x350/0x350
[   32.477419][  T526]  __se_sys_ioctl+0x121/0x1a0
[   32.482071][  T526]  __x64_sys_ioctl+0x7b/0x90
[   32.486634][  T526]  do_syscall_64+0x31/0x40
[   32.491023][  T526]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   32.496884][  T526] RIP: 0033:0x7fe475e37eb9
[   32.501304][  T526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   32.520893][  T526] RSP: 002b:00007fe474852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   32.529283][  T526] RAX: ffffffffffffffda RBX: 00007fe4760b3180 RCX: 00007fe475e37eb9
[   32.537228][  T526] RDX: 0000200000010640 RSI: 00000000000089f1 RDI: 0000000000000009
[   32.545183][  T526] RBP: 00007fe474852090 R08: 0000000000000000 R09: 0000000000000000
[   32.553137][  T526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.561088][  T526] R13: 00007fe4760b3218 R14: 00007fe4760b3180 R15: 00007ffebf257428
[   32.659659][    C0] sched: RT throttling activated
[   33.078059][  T533] EXT4-fs (loop0): Unrecognized mount option "„" or missing value
[   33.233465][  T547] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.262593][  T547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   33.272646][  T533] EXT4-fs (loop0): Unrecognized mount option "„" or missing value
[   33.286682][  T547] EXT4-fs (loop4): 1 truncate cleaned up
[   33.292824][  T547] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,
[   33.374666][  T547] EXT4-fs error (device loop4): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.4.64: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   33.380862][  T533] EXT4-fs (loop0): Unrecognized mount option "„" or missing value
[   33.403198][  T547] EXT4-fs (loop4): Remounting filesystem read-only
[   33.409959][  T547] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem
[   33.418939][  T547] EXT4-fs warning (device loop4): ext4_rename_delete:3901: inode #2: comm syz.4.64: Deleting old file: nlink 4, error=-117
[   33.429777][   T20] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   33.517716][  T555] xt_hashlimit: size too large, truncated to 1048576
[   33.527229][  T533] EXT4-fs (loop0): Unrecognized mount option "„" or missing value
[   33.641392][   T54] hid (null): global environment stack underflow
[   33.648082][   T54] hid (null): unknown global tag 0xe
[   33.655564][   T54] hid-generic 000E:80000000:0004.0004: unknown main item tag 0x7
[   33.663408][   T54] hid-generic 000E:80000000:0004.0004: global environment stack underflow
[   33.672085][   T54] hid-generic 000E:80000000:0004.0004: item 0 2 1 11 parsing failed
[   33.680253][   T54] hid-generic: probe of 000E:80000000:0004.0004 failed with error -22
[   33.700298][  T560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'.
[   33.771402][   T20] usb 3-1: too many configurations: 172, using maximum allowed: 8
[   33.859799][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   33.871800][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   33.912640][  T569] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[   33.932140][  T569] EXT4-fs (loop0): Test dummy encryption mode enabled
[   33.950528][  T569] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,discard,noblock_validity,discard,,errors=continue
[   33.971618][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.007428][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.089743][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.100073][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.179774][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.190117][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.269788][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.280108][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.289841][  T519] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   34.359805][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.370144][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.449769][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.471002][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.529717][  T519] usb 1-1: Using ep0 maxpacket: 32
[   34.569746][   T20] usb 3-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config
[   34.585838][   T20] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   34.595579][  T583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   34.614353][  T583] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   34.659739][  T519] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   34.668458][  T519] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   34.678651][  T519] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   34.693340][  T519] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[   34.711793][  T519] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   34.719855][   T20] usb 3-1: New USB device found, idVendor=5df2, idProduct=8c36, bcdDevice=b8.d2
[   34.734208][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=248
[   34.742599][   T20] usb 3-1: SerialNumber: syz
[   34.748060][   T20] usb 3-1: config 0 descriptor??
[   35.021305][  T592] EXT4-fs (loop3): Ignoring removed bh option
[   35.121369][  T592] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue
[   35.123248][  T519] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   35.132340][  T592] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   35.141401][  T519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.154999][  T579] F2FS-fs (loop4): Test dummy encryption mode enabled
[   35.159463][  T519] usb 1-1: Product: syz
[   35.166701][  T579] F2FS-fs (loop4): invalid crc value
[   35.173239][  T519] usb 1-1: Manufacturer: syz
[   35.181067][  T519] usb 1-1: SerialNumber: syz
[   35.199567][  T579] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (9621037545273099749, 1348741209720293)
[   35.432890][  T579] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[   35.473992][  T579] F2FS-fs (loop4): Failed to read root inode
[   35.481597][  T569] tipc: Invalid UDP bearer configuration
[   35.481618][  T569] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   35.520295][  T569] xt_hashlimit: size too large, truncated to 1048576
[   35.710857][  T610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'.
[   35.728327][  T610] IPv6: sit1: Disabled Multicast RS
[   35.760390][  T519] usb 1-1: 0:2 : does not exist
[   35.765347][  T519] usb 1-1: unit 5 not found!
[   35.790262][  T519] usb 1-1: USB disconnect, device number 2
[   35.850063][   T24] kauditd_printk_skb: 22 callbacks suppressed
[   35.850073][   T24] audit: type=1400 audit(1769560488.910:209): avc:  denied  { map } for  pid=613 comm="syz.3.80" path="socket:[15929]" dev="sockfs" ino=15929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   35.919428][   T24] audit: type=1400 audit(1769560488.940:210): avc:  denied  { watch watch_reads } for  pid=613 comm="syz.3.80" path="/16/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   35.962840][   T24] audit: type=1400 audit(1769560489.010:211): avc:  denied  { append } for  pid=618 comm="syz.4.81" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   35.997968][  T620] device bridge0 entered promiscuous mode
[   35.999292][   T24] audit: type=1400 audit(1769560489.010:212): avc:  denied  { create } for  pid=618 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   36.014468][  T620] device vlan2 entered promiscuous mode
[   36.390864][   T24] audit: type=1400 audit(1769560489.450:213): avc:  denied  { bind } for  pid=625 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   36.401145][  T626] cgroup: syz.0.84 (626) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   36.425982][  T626] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   36.526507][  T626] FAT-fs (loop0): Directory bread(block 32) failed
[   36.531405][   T20] usb 3-1: USB disconnect, device number 3
[   36.547769][  T626] FAT-fs (loop0): Directory bread(block 33) failed
[   36.554720][  T626] FAT-fs (loop0): Directory bread(block 34) failed
[   36.561641][  T626] FAT-fs (loop0): Directory bread(block 35) failed
[   36.568405][  T626] FAT-fs (loop0): Directory bread(block 36) failed
[   36.575190][  T626] FAT-fs (loop0): Directory bread(block 37) failed
[   36.588405][  T626] FAT-fs (loop0): Directory bread(block 38) failed
[   36.595252][  T626] FAT-fs (loop0): Directory bread(block 39) failed
[   36.602020][  T626] FAT-fs (loop0): Directory bread(block 40) failed
[   36.608624][  T626] FAT-fs (loop0): Directory bread(block 41) failed
[   36.618010][   T24] audit: type=1400 audit(1769560489.670:214): avc:  denied  { shutdown } for  pid=628 comm="syz.1.85" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   36.640482][  T629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.85'.
[   36.645976][  T626] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   36.656927][  T626] FAT-fs (loop0): Filesystem has been set read-only
[   36.929839][   T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   37.063376][  T647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   37.072466][  T647] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   37.137873][  T638] F2FS-fs (loop0): Unrecognized mount option "0000000000000000000300000000000000000000003" or missing value
[   37.149836][   T24] audit: type=1400 audit(1769560490.210:215): avc:  denied  { remount } for  pid=646 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   37.169188][  T647] EXT4-fs (loop4): Unrecognized mount option "01777777777777777777777ÿÿÿÿ18446744073709551615ÿÿÿ" or missing value
[   37.184415][   T24] audit: type=1404 audit(1769560490.250:216): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   37.208436][   T24] audit: type=1400 audit(1769560490.260:217): avc:  denied  { map_create } for  pid=646 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   37.209426][  T286] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   37.233618][   T24] audit: type=1400 audit(1769560490.260:218): avc:  denied  { create } for  pid=646 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   37.265330][  T286] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   37.569736][   T54] usb 2-1: device descriptor read/all, error -71
[   37.840487][   T49] device bridge_slave_0 left promiscuous mode
[   37.846608][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.854354][   T49] device veth1_macvtap left promiscuous mode
[   37.860365][   T49] device veth0_vlan left promiscuous mode
[   37.983458][  T665] FAULT_INJECTION: forcing a failure.
[   37.983458][  T665] name failslab, interval 1, probability 0, space 0, times 1
[   38.009699][  T665] CPU: 1 PID: 665 Comm: syz.0.97 Not tainted syzkaller #0
[   38.016823][  T665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   38.026890][  T665] Call Trace:
[   38.030160][  T665]  __dump_stack+0x21/0x24
[   38.034465][  T665]  dump_stack_lvl+0x1a7/0x208
[   38.039114][  T665]  ? show_regs_print_info+0x18/0x18
[   38.044285][  T665]  ? kvm_sched_clock_read+0x18/0x40
[   38.049461][  T665]  dump_stack+0x15/0x1c
[   38.053593][  T665]  should_fail+0x3c1/0x510
[   38.057981][  T665]  ? kvmalloc_node+0x88/0x130
[   38.062636][  T665]  __should_failslab+0xa4/0xe0
[   38.067377][  T665]  should_failslab+0x9/0x20
[   38.071853][  T665]  __kmalloc+0x60/0x330
[   38.075980][  T665]  kvmalloc_node+0x88/0x130
[   38.080467][  T665]  alloc_netdev_mqs+0x88/0xc80
[   38.085217][  T665]  ? strlcpy+0x89/0xd0
[   38.089257][  T665]  ? reject_tg6_check+0x240/0x240
[   38.094254][  T665]  vti6_locate+0x539/0x660
[   38.098640][  T665]  ? __switch_to_asm+0x34/0x60
[   38.103376][  T665]  ? vti6_link_config+0x560/0x560
[   38.108374][  T665]  ? memcpy+0x56/0x70
[   38.112327][  T665]  vti6_ioctl+0x7d1/0xe30
[   38.116625][  T665]  ? vti6_tnl_xmit+0x1620/0x1620
[   38.121533][  T665]  ? full_name_hash+0xbd/0xf0
[   38.126184][  T665]  dev_ifsioc+0x6b4/0xa90
[   38.130484][  T665]  ? dev_ioctl+0xb80/0xb80
[   38.134871][  T665]  dev_ioctl+0x5ea/0xb80
[   38.139084][  T665]  sock_ioctl+0x6ce/0x760
[   38.143385][  T665]  ? sock_poll+0x350/0x350
[   38.147771][  T665]  ? __fget_files+0x2c4/0x320
[   38.152423][  T665]  ? security_file_ioctl+0x84/0xa0
[   38.157511][  T665]  ? sock_poll+0x350/0x350
[   38.161904][  T665]  __se_sys_ioctl+0x121/0x1a0
[   38.166555][  T665]  __x64_sys_ioctl+0x7b/0x90
[   38.171120][  T665]  do_syscall_64+0x31/0x40
[   38.175520][  T665]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   38.181391][  T665] RIP: 0033:0x7fe77bd3ceb9
[   38.185794][  T665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.205384][  T665] RSP: 002b:00007fe77a799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   38.213771][  T665] RAX: ffffffffffffffda RBX: 00007fe77bfb7fa0 RCX: 00007fe77bd3ceb9
[   38.221715][  T665] RDX: 0000200000010640 RSI: 00000000000089f1 RDI: 0000000000000006
[   38.229661][  T665] RBP: 00007fe77a799090 R08: 0000000000000000 R09: 0000000000000000
[   38.237605][  T665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.245655][  T665] R13: 00007fe77bfb8038 R14: 00007fe77bfb7fa0 R15: 00007ffe8273dc78
[   39.037242][  T680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   39.044514][  T680] IPv6: NLM_F_CREATE should be set when creating new route
[   39.088810][  T680] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.095956][  T680] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.182263][  T682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'.
[   39.192496][  T682] device vlan2 entered promiscuous mode
[   39.198049][  T682] device dummy0 entered promiscuous mode
[   41.464096][   T24] kauditd_printk_skb: 88 callbacks suppressed
[   41.464105][   T24] audit: type=1400 audit(1769560494.520:307): avc:  denied  { execmem } for  pid=704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   41.491992][   T24] audit: type=1400 audit(1769560494.530:308): avc:  denied  { read write } for  pid=705 comm="syz.0.111" name="usbmon5" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0
[   41.515719][   T24] audit: type=1400 audit(1769560494.530:309): avc:  denied  { read } for  pid=712 comm="syz.2.113" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   41.539015][   T24] audit: type=1400 audit(1769560494.530:310): avc:  denied  { read write } for  pid=712 comm="syz.2.113" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0
[   41.539027][   T24] audit: type=1400 audit(1769560494.530:311): avc:  denied  { remount } for  pid=712 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0
[   41.539040][   T24] audit: type=1400 audit(1769560494.530:312): avc:  denied  { create } for  pid=712 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   41.539103][   T24] audit: type=1400 audit(1769560494.530:313): avc:  denied  { read write } for  pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   41.539185][   T24] audit: type=1400 audit(1769560494.550:314): avc:  denied  { create } for  pid=714 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   41.562894][  T715] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   41.581760][   T24] audit: type=1400 audit(1769560494.550:315): avc:  denied  { create } for  pid=714 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   41.680754][   T24] audit: type=1400 audit(1769560494.550:316): avc:  denied  { read write } for  pid=275 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   44.841873][  T758] syz.1.128 uses obsolete (PF_INET,SOCK_PACKET)
[   44.896585][  T761] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   46.280723][  T775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'.
[   46.616507][   T24] kauditd_printk_skb: 164 callbacks suppressed
[   46.616516][   T24] audit: type=1400 audit(1769560499.670:481): avc:  denied  { read write } for  pid=275 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   46.997437][   T24] audit: type=1400 audit(1769560500.050:482): avc:  denied  { read write } for  pid=287 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   47.022315][   T24] audit: type=1400 audit(1769560500.090:483): avc:  denied  { read write } for  pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   47.060746][   T24] audit: type=1400 audit(1769560500.120:484): avc:  denied  { read write } for  pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   47.576210][   T24] audit: type=1400 audit(1769560500.620:485): avc:  denied  { execmem } for  pid=776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   47.595899][   T24] audit: type=1400 audit(1769560500.620:486): avc:  denied  { create } for  pid=779 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   47.616784][   T24] audit: type=1400 audit(1769560500.620:487): avc:  denied  { create } for  pid=779 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   47.651679][   T24] audit: type=1400 audit(1769560500.620:488): avc:  denied  { create } for  pid=779 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   47.672248][   T24] audit: type=1400 audit(1769560500.620:489): avc:  denied  { create } for  pid=779 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[   47.692481][   T24] audit: type=1400 audit(1769560500.620:490): avc:  denied  { map_create } for  pid=779 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   49.118749][  T790] device bridge0 entered promiscuous mode
[   49.139769][  T790] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   49.179882][  T794] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   49.195682][  T796] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   50.723801][  T804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[   50.740385][  T801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'.
[   50.750136][  T801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[   52.426059][   T24] kauditd_printk_skb: 67 callbacks suppressed
[   52.426068][   T24] audit: type=1400 audit(1769560505.480:558): avc:  denied  { execmem } for  pid=806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   52.462194][   T24] audit: type=1400 audit(1769560505.490:559): avc:  denied  { map_create } for  pid=808 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   52.481358][   T24] audit: type=1400 audit(1769560505.490:560): avc:  denied  { prog_load } for  pid=810 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   52.500608][   T24] audit: type=1400 audit(1769560505.490:561): avc:  denied  { read write } for  pid=810 comm="syz.2.149" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.532327][   T24] audit: type=1400 audit(1769560505.490:562): avc:  denied  { create } for  pid=810 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   52.551964][   T24] audit: type=1400 audit(1769560505.500:563): avc:  denied  { read write } for  pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.600414][   T24] audit: type=1400 audit(1769560505.510:564): avc:  denied  { create } for  pid=807 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   52.637408][   T24] audit: type=1400 audit(1769560505.510:565): avc:  denied  { execmem } for  pid=808 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   52.662375][   T24] audit: type=1400 audit(1769560505.510:566): avc:  denied  { create } for  pid=807 comm="syz.0.147" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0
[   52.699809][   T24] audit: type=1400 audit(1769560505.510:567): avc:  denied  { mounton } for  pid=807 comm="syz.0.147" path="/37" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   53.001530][  T814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[   54.280472][  T824] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   58.181755][   T24] kauditd_printk_skb: 46 callbacks suppressed
[   58.181764][   T24] audit: type=1400 audit(1769560511.240:614): avc:  denied  { execmem } for  pid=842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   58.228813][   T24] audit: type=1400 audit(1769560511.240:615): avc:  denied  { write } for  pid=267 comm="syz-executor" path="pipe:[1493]" dev="pipefs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[   58.313816][   T24] audit: type=1400 audit(1769560511.240:616): avc:  denied  { write } for  pid=267 comm="syz-executor" path="pipe:[1493]" dev="pipefs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[   58.337420][   T24] audit: type=1400 audit(1769560511.240:617): avc:  denied  { write } for  pid=267 comm="syz-executor" path="pipe:[1493]" dev="pipefs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[   58.360619][   T24] audit: type=1400 audit(1769560511.240:618): avc:  denied  { write } for  pid=267 comm="syz-executor" path="pipe:[1493]" dev="pipefs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[   58.383795][   T24] audit: type=1400 audit(1769560511.240:619): avc:  denied  { write } for  pid=267 comm="syz-executor" path="pipe:[1493]" dev="pipefs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[   58.410717][   T24] audit: type=1400 audit(1769560511.270:620): avc:  denied  { prog_load } for  pid=845 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   58.429750][   T24] audit: type=1400 audit(1769560511.300:621): avc:  denied  { create } for  pid=843 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   59.320305][  T330] device bridge_slave_1 left promiscuous mode
[   59.326426][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.333800][  T330] device bridge_slave_0 left promiscuous mode
[   59.340052][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.860330][  T330] device bridge_slave_1 left promiscuous mode
[   60.866438][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.873804][  T330] device bridge_slave_0 left promiscuous mode
[   60.880012][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.887658][  T330] device bridge_slave_1 left promiscuous mode
[   60.893844][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.901134][  T330] device bridge_slave_0 left promiscuous mode
[   60.907302][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.915005][  T330] device bridge_slave_1 left promiscuous mode
[   60.921236][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.928459][  T330] device bridge_slave_0 left promiscuous mode
[   60.934589][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.942249][  T330] device veth1_macvtap left promiscuous mode
[   60.948243][  T330] device veth0_vlan left promiscuous mode
[   60.954131][  T330] device veth1_macvtap left promiscuous mode
[   60.960158][  T330] device veth0_vlan left promiscuous mode