last executing test programs:

18.316433756s ago: executing program 0 (id=1134):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x4, 0x26d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7dffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000)
syz_clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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")
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

17.967908981s ago: executing program 0 (id=1138):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), 0x0}, 0x20)
r2 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r2, 0x2, 0x0, 0x0)

17.834508178s ago: executing program 0 (id=1142):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000001b80))
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000280)={0x10000, 0x0, 0x13}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x32040, 0x20}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8c8}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.816900551s ago: executing program 0 (id=1144):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = creat(&(0x7f0000000000)='./file2\x00', 0x149)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000080)='./file1\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000010203000000000000000000020000492c0001800c0002800500011061000000140001"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008884)
r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xf, 0x400, 0xa, 0x3, 0x3ff, 0x6, 0x8, {<r3=>0x0, @in={{0x2, 0x4e24, @remote}}, 0x40, 0xd9e, 0x4, 0x7, 0x3}}, &(0x7f00000002c0)=0xb0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r3, @in6={{0xa, 0x5, 0xffffffff, @private0, 0xbd75}}}, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x5, 0x4, 0x6104}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x61, 0x2}]}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

17.618649186s ago: executing program 0 (id=1150):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x70)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x3c, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fd2effffff0000000015e63e3bf7cbeeb3b7c4dee1c3a1b326d461ec6939a2450003349ef5fcbebe64a907c0115d51d4dbc02aaf5cc6a8c6a2185af6b5e6138361d122b9ea4a4d4157dff5f002c13796d0e144bd15e2743186dffe8231bef703514f989e8647c59eb5abaee5305227dc02a1771e1f2fe0d0c9ff7ad133ed3d208a02e80fad5e63a7c17532ecd3e1aefcd24d6870b05f4c1375cb8773e76c9f087c082430e422822fb6ed6c8fc495f6982cc93575aec9a758cecf9b1704c3defdbd195601e73d786bff06"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x4, &(0x7f0000000040)=""/4, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a00000080000480130001"], 0x94}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}, 0x94)

17.346572161s ago: executing program 0 (id=1154):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000001b80))
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000280)={0x10000, 0x0, 0x13}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x32040, 0x20}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8c8}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.331962373s ago: executing program 32 (id=1154):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000001b80))
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000280)={0x10000, 0x0, 0x13}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x32040, 0x20}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8c8}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.860089041s ago: executing program 1 (id=1452):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0)

1.853753132s ago: executing program 1 (id=1453):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x110, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
clock_adjtime(0x0, &(0x7f0000000140)={0x8a8d, 0x0, 0x2, 0x0, 0x800000, 0xfffffffffffffffd, 0xe00, 0xfffffffffffffffc, 0xff, 0x6, 0x400000000000000, 0xc53, 0x0, 0x3, 0x0, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2})
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a07000/0x4000)=nil, 0x7, &(0x7f0000000080)=[{0x1, 0x4, 0x6}], 0x1, 0x9, 0x2d, 0x44, 0x4, 0x20})
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000000)={0x0, 0x33})
mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
ptrace$pokeuser(0x6, r2, 0x9, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x110, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) (async)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) (async)
clock_adjtime(0x0, &(0x7f0000000140)={0x8a8d, 0x0, 0x2, 0x0, 0x800000, 0xfffffffffffffffd, 0xe00, 0xfffffffffffffffc, 0xff, 0x6, 0x400000000000000, 0xc53, 0x0, 0x3, 0x0, 0x2, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}) (async)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a07000/0x4000)=nil, 0x7, &(0x7f0000000080)=[{0x1, 0x4, 0x6}], 0x1, 0x9, 0x2d, 0x44, 0x4, 0x20}) (async)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async)
ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000000)={0x0, 0x33}) (async)
mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) (async)
getpid() (async)
syz_pidfd_open(r2, 0x0) (async)
ptrace$pokeuser(0x6, r2, 0x9, 0x0) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)

1.836446114s ago: executing program 1 (id=1454):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000280000000000000189"], 0x340a)

1.778431262s ago: executing program 1 (id=1455):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@errors_remount}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x40000, 0x0, 0x200000, 0x0, 0x1})
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000002980)=ANY=[@ANYBLOB="78100000", @ANYRES16=0x0, @ANYBLOB="00022cbd70f3fb9b73a61d318e6617032559d7764908000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1078}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="d61a0ad5febb8fd28b6db5f9675f514fdc0ad8f30f7d0f9d8d2793ccda999d1e25b17d4af93fa8f0fc6175d9aca524de"], 0x8)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)={0x32}, 0x8)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0x5, 0x26, 0x80, r0, 0xfffff5e4, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x4008005)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x82, &(0x7f00000003c0)={r8, 0xcb}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={r8, 0xc}, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10c00, 0x6, 0x0, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00')
readv(r9, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1)

1.568073729s ago: executing program 2 (id=1463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)

1.55374238s ago: executing program 2 (id=1465):
mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='tix\x00\x00\x00\x00\x00\x00\x00\b\x00'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90)

1.518276945s ago: executing program 2 (id=1466):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
dup(r3)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0)
shutdown(r3, 0x1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8002, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000240)={0x1, &(0x7f0000001600)=[{}]})

898.477754ms ago: executing program 1 (id=1471):
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x9, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}}, 0x0)
fcntl$notify(r0, 0x402, 0x39)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x7f, 0xff}, {0x6, 0x80, 0x0, 0x1ff}]})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000200), &(0x7f0000000100)=0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000400000000000000fdffffffffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000003005ea7"], 0x1bc}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x70}}, 0x42004)
socket$inet_sctp(0x2, 0x5, 0x84)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e80), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r8, 0x8, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x1)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x40, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000)=0x7, 0x4ffffff)
futex_waitv(&(0x7f0000000940)=[{0xa, &(0x7f0000000040)=0x80008, 0x2}, {0x5, &(0x7f0000000080)=0x3, 0x2}, {0x0, &(0x7f00000000c0)=0x9, 0x2}, {0x200000, &(0x7f0000000100)=0x4, 0x82}, {0x6, &(0x7f0000000140)=0x1, 0x82}, {0x80000000, &(0x7f0000000180)=0x401, 0x82}, {0x9, &(0x7f00000001c0)=0x80000001, 0x82}, {0xffffffffffff0000, &(0x7f0000000200)=0x7, 0x2}, {0xac71, &(0x7f0000000240)=0x100, 0x2}, {0x2, &(0x7f0000000280)=0x7, 0x82}, {0x7, &(0x7f00000002c0)=0x6}, {0x806, &(0x7f0000000300)=0xe99, 0x82}, {0x85, &(0x7f0000000340)=0x81, 0x82}, {0x4, &(0x7f0000000380)=0x8, 0x80}, {0x7fffffff, &(0x7f00000003c0)=0x7, 0x82}, {0x6, &(0x7f0000000400)=0x5, 0x2}, {0x2, &(0x7f0000000440)=0x1, 0x82}, {0xffffffff, &(0x7f0000000480)=0x3ff, 0x82}, {0x1, &(0x7f00000004c0), 0x2}, {0x9, &(0x7f0000000500)=0x7ff, 0x2}, {0x1, &(0x7f0000000540)=0x10, 0x2}, {0x4222, &(0x7f0000000580)=0xca27, 0x82}, {0x1, &(0x7f00000005c0)=0x2, 0x2}, {0x32, &(0x7f0000000600)=0xff, 0x2}, {0x3, &(0x7f0000000640)=0x8994, 0x82}, {0x5, &(0x7f0000000680)=0x4, 0x82}, {0x7, &(0x7f00000006c0)=0x401, 0x82}, {0x2, &(0x7f0000000700)=0x7fffffff, 0x82}, {0x8000000000000001, &(0x7f0000000740)=0x334, 0x2}, {0x6, &(0x7f0000000780)=0x6a9a2b29}, {0x7, &(0x7f00000007c0)=0x1, 0x82}, {0x9, &(0x7f0000000800)=0x9, 0x2}, {0x6, &(0x7f0000000840)=0x1, 0x2}, {0x7f, &(0x7f0000000880)=0xbf3, 0x2}, {0x8, &(0x7f00000008c0)=0x6, 0x82}, {0xb, &(0x7f0000000900)=0x8, 0x82}], 0x24, 0x0, &(0x7f0000000cc0)={0x0, 0x989680}, 0x1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

744.842984ms ago: executing program 3 (id=1474):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1a7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x180, 0x10000, 0x5, 0x6, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4000, @multicast2}}}, 0x118)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000340)="0be7e7139e9bf2e612364ab4a70ccfe916a925c4f3e6926347431ad210540d67ac5bb1a00000000000008d048076d6", 0x2f, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'wg1\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x28, 0x26, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xd}, {0x3, 0xfff3}, {0xfff2, 0xd}}, [{0x4}]}, 0x28}, 0x1, 0xf0ffffffffffff}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001a00010a0000000000dfffff80"], 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00'})

661.380705ms ago: executing program 3 (id=1478):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

641.187647ms ago: executing program 3 (id=1479):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x804)
syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz82JwkAABeA3+5MNe0oJu6Vkr+vVk01YQsBaImhjViEjxiDoXUT4vsvjMW8GJjxVmWOYomb7fXP4fje/9v/jukmGn99s+rekTUqbpO8y/k01q/NsUbLrm5Tu82u+eBhrrZe3PrLcP/Z3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAaTgEAAP//LuQOEw==")

640.411307ms ago: executing program 2 (id=1480):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
stat(0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xe8b82)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="bf6a0244", 0x4}], 0x1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
symlink(&(0x7f0000000540)='./control\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd})
fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r6 = getpid()
tgkill(r6, r6, 0x26)
fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8})
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r5}}, '\x00'})

615.470481ms ago: executing program 4 (id=1481):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4048810)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x100, 0x70bd2d, 0x25dfdbf9, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f00000001c0))
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x800)

508.279705ms ago: executing program 4 (id=1482):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000001d00)={[{@noinit_itable}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@grpjquota}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0xab00}}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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")
unshare(0x22020400)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x5)
fchdir(r2)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000ac0)={[{@map_acorn}, {@session={'session', 0x3d, 0x4e}}, {@block={'block', 0x3d, 0x400}}]}, 0x1, 0x566, &(0x7f0000000c00)="$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")
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400)
r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120)
getdents64(r3, 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x4eb)
r4 = syz_open_procfs(0x0, 0x0)
preadv(r4, &(0x7f0000000140)=[{0x0}], 0x1, 0xe7, 0xf)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3048a0, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@auto_da_alloc}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x20000000000002}}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee01}}]}, 0x3, 0x572, &(0x7f0000001680)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)

507.870015ms ago: executing program 3 (id=1483):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @enum={0xf, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x7fffffff}, {0xe, 0x1ff}, {0xf, 0x2}, {0xa, 0x81}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0x1000}, {0x1, 0x3}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x0, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000180)=""/14, 0x8a, 0xe, 0x1, 0x1, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x7, 0xc1, 0xc, 0x1008, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2, r1}, 0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0xa, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @enum={0xf, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x7fffffff}, {0xe, 0x1ff}, {0xf, 0x2}, {0xa, 0x81}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0x1000}, {0x1, 0x3}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x0, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000180)=""/14, 0x8a, 0xe, 0x1, 0x1, 0x10000}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x7, 0xc1, 0xc, 0x1008, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffd}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2, r1}, 0x6) (async)

497.685866ms ago: executing program 3 (id=1484):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000740)=0xe)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000001b80))
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000280)={0x10000, 0x0, 0x13}, 0x18)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x32040, 0x20}, 0x18)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r1, @ANYBLOB="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"], 0x8c8}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

464.00062ms ago: executing program 3 (id=1485):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
r4 = dup(r3)
connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000200), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, &(0x7f0000000200))
fcntl$setownex(r6, 0xf, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x587, &(0x7f00000045c0)="$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")
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x4}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r8], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x56)
recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80)
sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x22004010}, 0x20000000)
getsockname(r8, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x80)
recvmmsg$unix(r4, &(0x7f0000002d80)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000000340)=""/36, 0x24}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/7, 0x7}, {&(0x7f0000000640)=""/250, 0xfa}, {&(0x7f0000000740)=""/111, 0x6f}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/221, 0xdd}, {&(0x7f00000007c0)=""/69, 0x45}, {&(0x7f0000002ac0)=""/214, 0xd6}], 0xa, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/18, 0x12}, {&(0x7f0000002cc0)=""/75, 0x4b}], 0x2}}], 0x2, 0x1, &(0x7f0000002e00))

313.57145ms ago: executing program 4 (id=1486):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x51)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, 0x1c)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3ff, 0x7f, 0x6a2, 0x4, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x2c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe8d}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0xfffff800, 0x2, &(0x7f0000000480)=""/2, 0x41100, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000680)=[r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x4, 0x8, 0x9}, {0x3, 0x2, 0x10, 0xb}, {0x1, 0x1, 0xb, 0x2}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x9}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r8, 0x305, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000800)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff76}, {0x8, 0x15, 0xfffffffb}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000ac0)={'wg2\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl0\x00', <r12=>0x0, 0x1, 0x20, 0x4781731b, 0x5, {{0x15, 0x4, 0x1, 0x22, 0x54, 0x64, 0x0, 0x10, 0x4, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x22, 0x3, 0x3, [{@rand_addr=0x64010100, 0x80}]}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x7, 0x46, [@remote]}, @timestamp={0x44, 0x18, 0x39, 0x0, 0x4, [0x7, 0x4, 0x23f5d026, 0x1ff, 0xfffffff7]}, @ssrr={0x89, 0xf, 0xd6, [@remote, @rand_addr=0x64010100, @empty]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c00)={'syztnl1\x00', <r13=>0x0, 0x10, 0x20, 0x7fffffff, 0x0, {{0x34, 0x4, 0x0, 0x7, 0xd0, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x2b, 0x27, [@multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101, @rand_addr=0x64010100, @rand_addr=0x64010101, @broadcast, @multicast1]}, @timestamp={0x44, 0x18, 0x92, 0x0, 0x6, [0x800, 0x68000, 0x400, 0xb46, 0x11]}, @cipso={0x86, 0x75, 0x2, [{0x6, 0x10, "0a65621d1b7f073fc2b867a415ba"}, {0x5, 0x12, "13c30147b931bf4c5b4d7a0b4ddfa7bd"}, {0x5, 0xa, "3e85ffe92f5f6b4c"}, {0x0, 0x9, "9d0741d28b0710"}, {0x1, 0x5, "a849ce"}, {0x2, 0x10, "eec8bea4065d8d292ac88b0c1f85"}, {0x1, 0xf, "cb4b62502a39440d716a94ab9b"}, {0xe, 0x12, "62b45147943812136e99450c59b23aff"}, {0x2, 0x4, "a731"}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'syztnl1\x00', &(0x7f0000000d40)={'syztnl2\x00', <r14=>0x0, 0x29, 0xb6, 0xac, 0xfffff4ac, 0x30, @rand_addr=' \x01\x00', @mcast1, 0x0, 0x8, 0x4, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000e00)={'wg2\x00', <r15=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, <r16=>0x0}, &(0x7f0000000e80)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'ip6_vti0\x00', &(0x7f0000000ec0)={'syztnl1\x00', <r17=>0x0, 0x4, 0x1, 0xf8, 0x6, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x40, 0x7800, 0xb, 0x1}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x110, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{r6}, &(0x7f0000001140), &(0x7f0000001180)='%pI4   \x00'}, 0x20)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f00000012c0)={&(0x7f0000001200), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r8, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40810)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001300)={0x3a, 0xc, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3f}, @private0, @local, @remote, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x68)
r18 = syz_open_dev$sg(&(0x7f0000001380), 0x6e94, 0x2)
ioctl$SG_GET_VERSION_NUM(r18, 0x2282, &(0x7f00000013c0))

313.09021ms ago: executing program 4 (id=1487):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x80c0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0xffffffffffffffff, 0xffffd000)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

310.57442ms ago: executing program 2 (id=1488):
mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='tix\x00\x00\x00\x00\x00\x00\x00\b\x00'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90)

310.15068ms ago: executing program 4 (id=1489):
openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

300.168552ms ago: executing program 5 (id=1490):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)

195.748365ms ago: executing program 4 (id=1491):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x60)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
dup(r3)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0)
shutdown(r3, 0x1)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000240)={0x1, &(0x7f0000001600)=[{}]})

195.526275ms ago: executing program 5 (id=1492):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002076000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14147b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ff0200000000000000000000000000010000000032"], 0x23c}}, 0x0)

194.871615ms ago: executing program 2 (id=1493):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
rmdir(&(0x7f0000000100)='./control\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000000)=0x10, 0x4)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)

193.906005ms ago: executing program 5 (id=1494):
r0 = timerfd_create(0x7, 0x80000)
r1 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001040)={0xc000001c})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@nouid32}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@delalloc}, {@sb={'sb', 0x3d, 0x8}}, {}]}, 0x1, 0x5d7, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143a41, 0xd)
r3 = geteuid()
r4 = geteuid()
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000d80)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000c40)={<r6=>0x0, @empty}, &(0x7f0000000d40)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="090000000700000010000000f8bb000000020000", @ANYRES32=r2, @ANYBLOB="ff00"/20, @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="04000000030000000100"/28], 0x50)
stat(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x800)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/freeze_filesystems', 0x0, 0x3)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r11=>0x0})
r12 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r12, 0x114, 0x5, 0x0, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010025bd7000fadbdf2500000000", @ANYRES32=r11, @ANYBLOB="138000002b9201001c00128009000100626f6e64000000000c00028008000200297d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r13=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r14=>0x0}, &(0x7f0000cab000)=0xc)
sendmmsg$unix(r13, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14}}}], 0x20}}], 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc)
fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010003000000000002000500", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB='\x007\x00\x00', @ANYRES32=r14, @ANYBLOB="02000700", @ANYRES32=r9, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="040004000000000010000500000000002000020000000000"], 0x74, 0x1)
pwritev2(r2, &(0x7f0000001a00)=[{&(0x7f0000000080)="fb", 0x1}], 0x1, 0xe7b, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x145402, 0x8)
semget(0x1, 0x3, 0x7b4)
r15 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r15, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r6, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}})

144.940281ms ago: executing program 5 (id=1495):
syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00')
r0 = socket(0x10, 0x80003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120e0000000000950000040000354b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2100000a00200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000bd72003159ab1b9d00"/112], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c7"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
getpgrp(0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close_range(r0, 0xffffffffffffffff, 0x0)

62.073762ms ago: executing program 5 (id=1496):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002076000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000010000000000dd020000000000000000000000000000000000000000000084010500ac14147b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ff0200000000000000000000000000010000000032"], 0x23c}}, 0x0)

412.09µs ago: executing program 1 (id=1497):
r0 = socket(0x1e, 0x1, 0x0)
r1 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1de)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00))
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010011, &(0x7f0000000800)={[{@dioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x5, 0x546, &(0x7f0000000180)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0xfe, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3004d91, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@minixdf}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80f}}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==")
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$can_j1939(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x1d, r5, 0x1, {0x2}}, 0x18, &(0x7f0000000740)={&(0x7f0000000700)="7764bba2c6c126a70ac5cba8d07f59651acb5a9a5f957b3537ebd898ef66c7870b24d8ca8e", 0x25}, 0x1, 0x0, 0x0, 0x4048800}, 0x4040005)

0s ago: executing program 5 (id=1498):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000001300)={0x2, 0x8, 0x2000000, 0x5})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000000000000000000fbffffff85000000d000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

kernel console output (not intermixed with test programs):

4967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.320183][   T29] audit: type=1326 audit(1768834392.667:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.344241][   T29] audit: type=1326 audit(1768834392.667:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.367867][   T29] audit: type=1326 audit(1768834392.667:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.391173][   T29] audit: type=1326 audit(1768834392.667:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.414531][   T29] audit: type=1326 audit(1768834392.667:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.450557][   T29] audit: type=1326 audit(1768834392.827:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.492505][   T29] audit: type=1326 audit(1768834392.827:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4625 comm="syz.1.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   43.515917][   T29] audit: type=1326 audit(1768834392.867:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.4.282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f432bb5acb9 code=0x0
[   43.548929][ T4641] set_capacity_and_notify: 4 callbacks suppressed
[   43.548945][ T4641] loop3: detected capacity change from 0 to 1024
[   43.603847][ T4651] loop3: detected capacity change from 0 to 512
[   43.630986][ T4651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[   43.658385][ T4656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'.
[   43.673732][ T4659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.289'.
[   43.686077][ T4651] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.720394][ T4663] loop0: detected capacity change from 0 to 512
[   43.731249][ T4663] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.291: invalid indirect mapped block 256 (level 2)
[   43.749170][ T4651] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.287: path /56/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0
[   43.772691][ T4663] EXT4-fs (loop0): 2 truncates cleaned up
[   43.779509][ T4651] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.287: path /56/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[   43.802072][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[   43.807376][ T4663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.814300][ T4651] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.287: path /56/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[   43.859910][ T4663] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[   43.950447][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[   43.974115][ T4663] 9pnet_fd: Insufficient options for proto=fd
[   44.023413][ T4689] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   44.034885][ T4690] netlink: 'syz.3.297': attribute type 1 has an invalid length.
[   44.168596][ T4677] netlink: 'syz.1.295': attribute type 39 has an invalid length.
[   44.268427][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.325593][ T4717] loop0: detected capacity change from 0 to 512
[   44.342936][ T4717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.364571][ T4717] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.379151][ T4729] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   44.399017][ T4723] SELinux:  policydb version -684233466 does not match my version range 15-35
[   44.409401][ T4729] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.298: Failed to acquire dquot type 0
[   44.452933][ T4723] SELinux: failed to load policy
[   44.513309][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.601779][ T4753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.304'.
[   44.611148][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   44.699582][ T4758] loop3: detected capacity change from 0 to 128
[   44.711841][ T4758] msdos: Bad value for 'fmask'
[   44.726121][ T4762] loop3: detected capacity change from 0 to 128
[   44.736220][ T3970] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   44.740551][ T4762] msdos: Bad value for 'fmask'
[   44.754375][ T3970] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   44.786407][ T3970] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   44.819233][ T3970] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   44.900017][ T4781] mmap: syz.2.313 (4781) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   44.920605][ T4784] loop3: detected capacity change from 0 to 128
[   44.941843][ T4784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   44.961673][ T4789] tmpfs: Bad value for 'mpol'
[   44.978824][ T4784] ext4 filesystem being mounted at /syzcgroup/unified/syz3/syz1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.141314][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'.
[   45.179126][ T4801] tmpfs: Bad value for 'mpol'
[   45.268560][ T4803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.278905][ T4803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.384914][ T4803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.395257][ T4803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.452534][ T4803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.462973][ T4803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.551578][ T4803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   45.562075][ T4803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.630704][ T3979] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   45.638956][ T3979] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.731488][ T3979] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   45.739760][ T3979] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.748545][ T3979] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   45.756815][ T3979] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.797477][ T3979] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   45.805727][ T3979] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.849762][ T4827] syzkaller1: entered allmulticast mode
[   45.927632][ T4847] kernel profiling enabled (shift: 17)
[   46.443107][ T4893] syzkaller1: entered promiscuous mode
[   46.448595][ T4893] syzkaller1: entered allmulticast mode
[   46.527114][ T4898] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.609122][ T4898] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.652797][ T4898] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.723179][ T4898] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.809694][ T3979] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.828812][ T3979] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.847026][ T3979] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.855603][ T3979] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.835469][ T4997] netlink: 'syz.3.379': attribute type 41 has an invalid length.
[   48.237898][ T5014] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[   48.266740][   T29] kauditd_printk_skb: 1214 callbacks suppressed
[   48.266755][   T29] audit: type=1400 audit(1768834397.637:2436): avc:  denied  { map } for  pid=5013 comm="syz.1.383" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[   48.347393][   T29] audit: type=1400 audit(1768834397.687:2437): avc:  denied  { setattr } for  pid=5013 comm="syz.1.383" name="tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   48.376711][ T3982] Bluetooth: hci0: Frame reassembly failed (-84)
[   48.559467][   T29] audit: type=1400 audit(1768834397.927:2438): avc:  denied  { write } for  pid=5018 comm="syz.0.385" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   48.599773][   T29] audit: type=1400 audit(1768834397.957:2439): avc:  denied  { mounton } for  pid=5018 comm="syz.0.385" path="/syzcgroup/unified/syz0/cgroup.procs" dev="cgroup2" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   48.654099][   T29] audit: type=1400 audit(1768834398.027:2440): avc:  denied  { getopt } for  pid=5026 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   48.798944][   T29] audit: type=1400 audit(1768834398.167:2441): avc:  denied  { kexec_image_load } for  pid=5057 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   48.859868][ T5078] __nla_validate_parse: 9 callbacks suppressed
[   48.859882][ T5078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.405'.
[   48.861012][ T5081] netlink: 'syz.3.406': attribute type 21 has an invalid length.
[   48.882881][ T5081] IPv6: NLM_F_CREATE should be specified when creating new route
[   48.890846][ T5081] IPv6: Can't replace route, no match found
[   48.921628][ T5086] FAULT_INJECTION: forcing a failure.
[   48.921628][ T5086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.934789][ T5086] CPU: 1 UID: 0 PID: 5086 Comm: syz.3.408 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.934812][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   48.934872][ T5086] Call Trace:
[   48.934875][ T5086]  <TASK>
[   48.934879][ T5086]  __dump_stack+0x1d/0x30
[   48.934894][ T5086]  dump_stack_lvl+0x95/0xd0
[   48.934987][ T5086]  dump_stack+0x15/0x1b
[   48.934998][ T5086]  should_fail_ex+0x263/0x280
[   48.935011][ T5086]  ? __pfx_pppol2tp_ioctl+0x10/0x10
[   48.935054][ T5086]  should_fail+0xb/0x20
[   48.935093][ T5086]  should_fail_usercopy+0x1a/0x20
[   48.935106][ T5086]  _copy_from_user+0x1c/0xb0
[   48.935122][ T5086]  pppol2tp_ioctl+0x568/0x630
[   48.935197][ T5086]  ? __pfx_pppol2tp_ioctl+0x10/0x10
[   48.935281][ T5086]  pppox_ioctl+0xcb/0x160
[   48.935348][ T5086]  sock_do_ioctl+0x73/0x230
[   48.935360][ T5086]  sock_ioctl+0x41b/0x610
[   48.935369][ T5086]  ? mutex_lock+0x57/0x90
[   48.935405][ T5086]  ? __pfx_sock_ioctl+0x10/0x10
[   48.935415][ T5086]  __se_sys_ioctl+0xce/0x140
[   48.935431][ T5086]  __x64_sys_ioctl+0x43/0x50
[   48.935448][ T5086]  x64_sys_call+0x14b0/0x3000
[   48.935461][ T5086]  do_syscall_64+0xc0/0x2a0
[   48.935520][ T5086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.935532][ T5086] RIP: 0033:0x7f2ce597acb9
[   48.935541][ T5086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.935632][ T5086] RSP: 002b:00007f2ce43d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   48.935645][ T5086] RAX: ffffffffffffffda RBX: 00007f2ce5bf5fa0 RCX: 00007f2ce597acb9
[   48.935652][ T5086] RDX: 0000000000000000 RSI: 0000000080487436 RDI: 0000000000000003
[   48.935659][ T5086] RBP: 00007f2ce43d7090 R08: 0000000000000000 R09: 0000000000000000
[   48.935666][ T5086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.935673][ T5086] R13: 00007f2ce5bf6038 R14: 00007f2ce5bf5fa0 R15: 00007ffe09adf728
[   48.935712][ T5086]  </TASK>
[   49.157554][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[   49.279940][   T29] audit: type=1400 audit(1768834398.657:2442): avc:  denied  { read } for  pid=5099 comm="syz.4.413" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   49.310998][   T29] audit: type=1400 audit(1768834398.657:2443): avc:  denied  { open } for  pid=5099 comm="syz.4.413" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   49.418185][ T5123] FAULT_INJECTION: forcing a failure.
[   49.418185][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.431360][ T5123] CPU: 0 UID: 0 PID: 5123 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   49.431384][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   49.431394][ T5123] Call Trace:
[   49.431399][ T5123]  <TASK>
[   49.431406][ T5123]  __dump_stack+0x1d/0x30
[   49.431425][ T5123]  dump_stack_lvl+0x95/0xd0
[   49.431496][ T5123]  dump_stack+0x15/0x1b
[   49.431572][ T5123]  should_fail_ex+0x263/0x280
[   49.431591][ T5123]  should_fail+0xb/0x20
[   49.431606][ T5123]  should_fail_usercopy+0x1a/0x20
[   49.431629][ T5123]  _copy_to_user+0x20/0xa0
[   49.431667][ T5123]  simple_read_from_buffer+0xb5/0x130
[   49.431703][ T5123]  proc_fail_nth_read+0x10e/0x150
[   49.431767][ T5123]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   49.431791][ T5123]  vfs_read+0x1ab/0x7f0
[   49.431829][ T5123]  ? __rcu_read_unlock+0x4e/0x70
[   49.431845][ T5123]  ? __fget_files+0x184/0x1c0
[   49.431862][ T5123]  ? mutex_lock+0x57/0x90
[   49.431888][ T5123]  ksys_read+0xdc/0x1a0
[   49.431907][ T5123]  __x64_sys_read+0x40/0x50
[   49.431926][ T5123]  x64_sys_call+0x2889/0x3000
[   49.431948][ T5123]  do_syscall_64+0xc0/0x2a0
[   49.431991][ T5123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.432011][ T5123] RIP: 0033:0x7fe5b3c6b58e
[   49.432027][ T5123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   49.432121][ T5123] RSP: 002b:00007fe5b2706fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   49.432141][ T5123] RAX: ffffffffffffffda RBX: 00007fe5b27076c0 RCX: 00007fe5b3c6b58e
[   49.432155][ T5123] RDX: 000000000000000f RSI: 00007fe5b27070a0 RDI: 0000000000000005
[   49.432187][ T5123] RBP: 00007fe5b2707090 R08: 0000000000000000 R09: 0000000000000000
[   49.432197][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   49.432207][ T5123] R13: 00007fe5b3f26038 R14: 00007fe5b3f25fa0 R15: 00007ffc0e931148
[   49.432223][ T5123]  </TASK>
[   49.680248][ T5132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'.
[   49.689154][ T5132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.423'.
[   49.706045][   T29] audit: type=1400 audit(1768834399.077:2444): avc:  denied  { setopt } for  pid=5131 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   49.710450][ T5132] bridge0: port 3(vlan2) entered blocking state
[   49.726397][   T29] audit: type=1400 audit(1768834399.077:2445): avc:  denied  { listen } for  pid=5131 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   49.732514][ T5132] bridge0: port 3(vlan2) entered disabled state
[   49.758784][ T5132] vlan2: entered allmulticast mode
[   49.764054][ T5132] bridge0: entered allmulticast mode
[   49.771113][ T5132] vlan2: left allmulticast mode
[   49.776024][ T5132] bridge0: left allmulticast mode
[   50.060260][ T5145] netlink: 'syz.2.427': attribute type 21 has an invalid length.
[   50.068031][ T5145] netlink: 128 bytes leftover after parsing attributes in process `syz.2.427'.
[   50.077824][ T5145] netlink: 'syz.2.427': attribute type 5 has an invalid length.
[   50.085520][ T5145] netlink: 'syz.2.427': attribute type 6 has an invalid length.
[   50.093248][ T5145] netlink: 3 bytes leftover after parsing attributes in process `syz.2.427'.
[   50.170587][ T5155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.430'.
[   50.439336][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   50.439434][   T44] Bluetooth: hci0: command 0x1003 tx timeout
[   50.801784][ T5186] netlink: 'syz.0.441': attribute type 11 has an invalid length.
[   50.852976][ T5079] IPVS: starting estimator thread 0...
[   50.858776][ T5193] batman_adv: batadv0: Adding interface: ipvlan2
[   50.865187][ T5193] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   50.890586][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.901029][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.910864][ T5193] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   50.944227][ T5191] netlink: 'syz.0.443': attribute type 3 has an invalid length.
[   50.959366][ T5192] IPVS: using max 2256 ests per chain, 112800 per kthread
[   51.122120][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   51.130984][ T5211] netlink: 80 bytes leftover after parsing attributes in process `syz.1.448'.
[   51.139957][ T5211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'.
[   51.306038][ T5222] netlink: zone id is out of range
[   51.311219][ T5222] netlink: zone id is out of range
[   51.316357][ T5222] netlink: get zone limit has 4 unknown bytes
[   51.350806][ T5218] ip6t_rpfilter: unknown options
[   51.569800][    T9] IPVS: starting estimator thread 0...
[   51.659352][ T5255] IPVS: using max 2352 ests per chain, 117600 per kthread
[   52.376451][ T5358] SELinux: security_context_str_to_sid () failed with errno=-22
[   52.578251][ T5397] netlink: 'syz.3.476': attribute type 4 has an invalid length.
[   52.637612][ T5397] .`: renamed from bond0 (while UP)
[   52.719847][ T5407] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.270223][   T29] kauditd_printk_skb: 510 callbacks suppressed
[   53.270238][   T29] audit: type=1326 audit(1768834402.647:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.359327][   T29] audit: type=1326 audit(1768834402.647:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.382715][   T29] audit: type=1326 audit(1768834402.647:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.406523][   T29] audit: type=1326 audit(1768834402.647:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.430062][   T29] audit: type=1326 audit(1768834402.647:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.453510][   T29] audit: type=1326 audit(1768834402.647:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.476866][   T29] audit: type=1326 audit(1768834402.647:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.500501][   T29] audit: type=1326 audit(1768834402.647:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.523854][   T29] audit: type=1326 audit(1768834402.647:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.547205][   T29] audit: type=1326 audit(1768834402.647:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5399 comm="syz.0.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe5b3c6b58e code=0x7ffc0000
[   53.732989][ T5469] tipc: Enabling of bearer <edp:s> rejected, media not registered
[   53.762099][ T5469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5469 comm=syz.0.500
[   53.812913][ T5480] vlan2: entered allmulticast mode
[   53.819509][ T5469] netlink: 'syz.0.500': attribute type 1 has an invalid length.
[   53.865357][ T5485] ------------[ cut here ]------------
[   53.870890][ T5485] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[   53.895518][ T5485] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.503/5485
[   53.906511][ T5485] Modules linked in:
[   53.910587][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: syz.2.503 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.920466][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.921355][ T5487] __nla_validate_parse: 7 callbacks suppressed
[   53.921367][ T5487] netlink: 92 bytes leftover after parsing attributes in process `syz.2.503'.
[   53.930604][ T5485] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660
[   53.951886][ T5485] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08
[   53.971599][ T5485] RSP: 0018:ffffc9000129b3a0 EFLAGS: 00010246
[   53.977696][ T5485] RAX: ffff88813d6fed90 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd
[   53.985700][ T5485] RDX: ffffffff867fcb7d RSI: ffffffff866c6e11 RDI: ffffffff86fb6fe0
[   53.993239][ T5488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'.
[   53.993703][ T5485] RBP: ffff88814eabc270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[   54.010512][ T5485] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88814eabc230
[   54.018471][ T5485] R13: 00000000ffffdfcc R14: ffff88814eabc27c R15: ffff88814eabc268
[   54.026519][ T5485] FS:  00007f1e6b9866c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000
[   54.035523][ T5485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   54.042698][ T5485] CR2: 00007f1e6b985ff8 CR3: 000000011e514000 CR4: 00000000003506f0
[   54.051051][ T5485] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   54.059081][ T5485] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   54.067085][ T5485] Call Trace:
[   54.070374][ T5485]  <TASK>
[   54.073294][ T5485]  reg_set_min_max+0x1c8/0x260
[   54.078040][ T5485]  check_cond_jmp_op+0x13bd/0x1a80
[   54.083224][ T5485]  do_check+0x3356/0x8250
[   54.087588][ T5485]  do_check_common+0xccf/0x1300
[   54.092452][ T5485]  bpf_check+0x2f85/0xc890
[   54.096865][ T5485]  ? __alloc_frozen_pages_noprof+0x18a/0x350
[   54.102853][ T5485]  ? __vmap_pages_range_noflush+0xb9c/0xcc0
[   54.108741][ T5485]  ? css_rstat_updated+0xbb/0x280
[   54.113794][ T5485]  ? try_charge_memcg+0x215/0xa10
[   54.118822][ T5485]  ? pcpu_block_refresh_hint+0x10b/0x170
[   54.124536][ T5485]  ? pcpu_block_update_hint_alloc+0x640/0x660
[   54.130634][ T5485]  ? _find_next_zero_bit+0x29/0xa0
[   54.135744][ T5485]  ? pcpu_block_update_hint_alloc+0x640/0x660
[   54.141938][ T5485]  ? css_rstat_updated+0xbb/0x280
[   54.146969][ T5485]  ? mod_memcg_state+0x182/0x260
[   54.151912][ T5485]  ? __rcu_read_unlock+0x4e/0x70
[   54.156843][ T5485]  ? pcpu_memcg_post_alloc_hook+0xec/0x170
[   54.162715][ T5485]  ? pcpu_alloc_noprof+0xd18/0x1210
[   54.167954][ T5485]  ? should_fail_ex+0x30/0x280
[   54.172846][ T5485]  ? __kmalloc_noprof+0x2a3/0x580
[   54.177867][ T5485]  ? security_bpf_prog_load+0x60/0x140
[   54.183360][ T5485]  ? selinux_bpf_prog_load+0xac/0xd0
[   54.188648][ T5485]  ? security_bpf_prog_load+0x9e/0x140
[   54.194121][ T5485]  bpf_prog_load+0xf76/0x1140
[   54.198796][ T5485]  ? security_bpf+0x2b/0x90
[   54.203354][ T5485]  __sys_bpf+0x469/0x7b0
[   54.207598][ T5485]  __x64_sys_bpf+0x41/0x50
[   54.212033][ T5485]  x64_sys_call+0x28e1/0x3000
[   54.216699][ T5485]  do_syscall_64+0xc0/0x2a0
[   54.221210][ T5485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.227095][ T5485] RIP: 0033:0x7f1e6cf4acb9
[   54.231539][ T5485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.251288][ T5485] RSP: 002b:00007f1e6b986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   54.259721][ T5485] RAX: ffffffffffffffda RBX: 00007f1e6d1c6090 RCX: 00007f1e6cf4acb9
[   54.267794][ T5485] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005
[   54.275835][ T5485] RBP: 00007f1e6cfb8bf7 R08: 0000000000000000 R09: 0000000000000000
[   54.283846][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.291848][ T5485] R13: 00007f1e6d1c6128 R14: 00007f1e6d1c6090 R15: 00007ffc8302ca88
[   54.299930][ T5485]  </TASK>
[   54.302941][ T5485] ---[ end trace 0000000000000000 ]---
[   54.389842][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'.
[   54.721841][ T5525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.515'.
[   54.732167][ T5525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.515'.
[   54.836510][ T5538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.520'.
[   54.885654][ T5547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65526 sclass=netlink_route_socket pid=5547 comm=syz.3.522
[   55.688898][ T5575] FAULT_INJECTION: forcing a failure.
[   55.688898][ T5575] name failslab, interval 1, probability 0, space 0, times 0
[   55.701652][ T5575] CPU: 1 UID: 0 PID: 5575 Comm: syz.4.529 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.701683][ T5575] Tainted: [W]=WARN
[   55.701703][ T5575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.701724][ T5575] Call Trace:
[   55.701731][ T5575]  <TASK>
[   55.701763][ T5575]  __dump_stack+0x1d/0x30
[   55.701787][ T5575]  dump_stack_lvl+0x95/0xd0
[   55.701807][ T5575]  dump_stack+0x15/0x1b
[   55.701826][ T5575]  should_fail_ex+0x263/0x280
[   55.701887][ T5575]  should_failslab+0x8c/0xb0
[   55.701906][ T5575]  kmem_cache_alloc_noprof+0x68/0x490
[   55.701923][ T5575]  ? getname_flags+0x7f/0x3b0
[   55.701946][ T5575]  getname_flags+0x7f/0x3b0
[   55.702020][ T5575]  do_readlinkat+0x64/0x340
[   55.702045][ T5575]  __x64_sys_readlink+0x47/0x60
[   55.702069][ T5575]  x64_sys_call+0x2af1/0x3000
[   55.702090][ T5575]  do_syscall_64+0xc0/0x2a0
[   55.702108][ T5575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.702125][ T5575] RIP: 0033:0x7f432bb5acb9
[   55.702139][ T5575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.702179][ T5575] RSP: 002b:00007f432a596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[   55.702199][ T5575] RAX: ffffffffffffffda RBX: 00007f432bdd6090 RCX: 00007f432bb5acb9
[   55.702213][ T5575] RDX: 000000000000004f RSI: 00002000000004c0 RDI: 0000200000000280
[   55.702226][ T5575] RBP: 00007f432a596090 R08: 0000000000000000 R09: 0000000000000000
[   55.702239][ T5575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.702252][ T5575] R13: 00007f432bdd6128 R14: 00007f432bdd6090 R15: 00007ffcede0acd8
[   55.702346][ T5575]  </TASK>
[   55.979574][ T5586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'.
[   55.988476][ T5586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'.
[   55.997422][ T5586] netlink: 'syz.1.531': attribute type 6 has an invalid length.
[   56.010606][ T5585] netlink: 'syz.4.532': attribute type 2 has an invalid length.
[   56.030506][ T5588] 9p: Could not find request transport: fd�f
[   56.213645][ T5599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'.
[   56.291938][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'.
[   56.324241][ T5602] IPVS: length: 252 != 136222752312
[   56.636556][ T5628] netlink: zone id is out of range
[   56.641745][ T5628] netlink: zone id is out of range
[   56.646840][ T5628] netlink: zone id is out of range
[   56.651991][ T5628] netlink: zone id is out of range
[   56.657089][ T5628] netlink: zone id is out of range
[   56.662220][ T5628] netlink: zone id is out of range
[   56.667314][ T5628] netlink: zone id is out of range
[   56.672587][ T5628] netlink: del zone limit has 8 unknown bytes
[   57.205675][ T3958] Bluetooth: hci0: Frame reassembly failed (-84)
[   57.615436][ T5699] bridge0: port 3(bond0) entered blocking state
[   57.621783][ T5699] bridge0: port 3(bond0) entered disabled state
[   57.628592][ T5699] bond0: entered allmulticast mode
[   57.633768][ T5699] bond_slave_0: entered allmulticast mode
[   57.639747][ T5699] bond_slave_1: entered allmulticast mode
[   57.646875][ T5699] bond0: entered promiscuous mode
[   57.651971][ T5699] bond_slave_0: entered promiscuous mode
[   57.657797][ T5699] bond_slave_1: entered promiscuous mode
[   57.673101][ T5703] loop0: detected capacity change from 0 to 512
[   57.712515][ T5703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.726202][ T5703] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.829960][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.966888][ T5715] loop0: detected capacity change from 0 to 512
[   57.977364][ T5715] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   57.987350][ T5715] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[   58.162309][ T5725] loop0: detected capacity change from 0 to 512
[   58.184266][ T5725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.197249][ T5725] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.208937][ T5725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.280058][   T29] kauditd_printk_skb: 1424 callbacks suppressed
[   58.280077][   T29] audit: type=1326 audit(1768834407.657:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.310272][   T29] audit: type=1326 audit(1768834407.687:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.339340][   T29] audit: type=1326 audit(1768834407.707:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.362740][   T29] audit: type=1326 audit(1768834407.707:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.386038][   T29] audit: type=1326 audit(1768834407.707:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.409400][   T29] audit: type=1326 audit(1768834407.707:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.432717][   T29] audit: type=1326 audit(1768834407.707:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.463485][   T29] audit: type=1326 audit(1768834407.757:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.487027][   T29] audit: type=1326 audit(1768834407.757:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.510359][   T29] audit: type=1326 audit(1768834407.757:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5710 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2ce593b58e code=0x7ffc0000
[   58.965438][ T5764] __nla_validate_parse: 1 callbacks suppressed
[   58.965454][ T5764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.586'.
[   59.060226][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'.
[   59.113648][ T5778] loop0: detected capacity change from 0 to 1024
[   59.151334][ T5778] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.591: Failed to acquire dquot type 0
[   59.151663][ T5778] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   59.151909][ T5778] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.591: corrupted inode contents
[   59.152068][ T5778] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #13: comm syz.0.591: mark_inode_dirty error
[   59.152267][ T5778] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.591: corrupted inode contents
[   59.152362][ T5778] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.591: mark_inode_dirty error
[   59.152523][ T5778] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.591: corrupted inode contents
[   59.152670][ T5778] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   59.153139][ T5778] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #13: comm syz.0.591: corrupted inode contents
[   59.153253][ T5778] EXT4-fs error (device loop0): ext4_truncate:4635: inode #13: comm syz.0.591: mark_inode_dirty error
[   59.153564][ T5778] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   59.154056][ T5778] EXT4-fs (loop0): 1 truncate cleaned up
[   59.240242][ T5783] netlink: 14 bytes leftover after parsing attributes in process `syz.1.588'.
[   59.245976][ T3836] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   59.260116][ T5778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.321764][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.347694][ T5783] bond0 (unregistering): (slave batadv0): Releasing backup interface
[   59.380347][ T5783] bond0 (unregistering): Released all slaves
[   59.451519][ T5790] loop0: detected capacity change from 0 to 1024
[   59.467368][ T5790] EXT4-fs: Ignoring removed bh option
[   59.492415][ T5790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   59.510555][ T5790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c09c, mo2=0002]
[   59.530250][ T5790] System zones: 0-1, 3-36
[   59.539375][ T5790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.609082][ T5801] 9pnet_fd: Insufficient options for proto=fd
[   59.621068][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.621617][ T5801] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   59.640858][ T5801] bridge0: entered promiscuous mode
[   59.646185][ T5801] bridge0: entered allmulticast mode
[   59.698644][ T5805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'.
[   59.713962][ T5811] netlink: 'syz.3.601': attribute type 10 has an invalid length.
[   59.731273][ T5811] vlan1: entered allmulticast mode
[   59.736405][ T5811] veth0_vlan: entered allmulticast mode
[   59.768626][ T5814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.602'.
[   59.791501][ T5811] team0: Port device vlan1 added
[   59.800722][ T5816] tmpfs: Unknown parameter '
 '
[   59.883496][ T5829] sg_write: data in/out 1530911619/1 bytes for SCSI command 0x8e-- guessing data in;
[   59.883496][ T5829]    program syz.3.607 not setting count and/or reply_len properly
[   59.902276][ T5829] Driver unsupported XDP return value 0 on prog  (id 196) dev N/A, expect packet loss!
[   59.931463][ T5832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5832 comm=syz.1.603
[   59.976694][ T5825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'.
[   59.989590][ T5825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'.
[   60.044442][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[   60.442238][ T5856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.615'.
[   60.451175][ T5856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.615'.
[   60.526820][ T5858] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   60.586585][ T5866] loop0: detected capacity change from 0 to 128
[   60.595781][ T5866] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   60.626034][ T5868] bond0: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[   60.640441][ T5866] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   60.648325][ T5866] FAT-fs (loop0): Filesystem has been set read-only
[   60.674157][ T5866] bio_check_eod: 115 callbacks suppressed
[   60.674174][ T5866] syz.0.619: attempt to access beyond end of device
[   60.674174][ T5866] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[   60.696650][ T5866] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   60.704641][ T5866] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[   60.714012][ T5868] bond0 (unregistering): Released all slaves
[   60.728235][ T5870] pimreg3: entered allmulticast mode
[   60.761626][ T5866] syz.0.619: attempt to access beyond end of device
[   60.761626][ T5866] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   60.819456][ T5866] syz.0.619: attempt to access beyond end of device
[   60.819456][ T5866] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   61.013536][ T5893] netlink: 'syz.4.627': attribute type 3 has an invalid length.
[   61.044398][ T5896] loop0: detected capacity change from 0 to 1024
[   61.052002][ T5896] EXT4-fs: Ignoring removed orlov option
[   61.057958][ T5896] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.071608][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.350642][ T5910] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[   61.420368][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.710135][ T5933] netlink: 'syz.1.638': attribute type 1 has an invalid length.
[   61.833053][ T5926] netlink: 'syz.0.639': attribute type 7 has an invalid length.
[   61.850063][ T5926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.881544][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.057780][ T5940] bond1: option downdelay: invalid value (18446744073709551615)
[   62.065554][ T5940] bond1: option downdelay: allowed values 0 - 2147483647
[   62.091496][ T5940] bond1 (unregistering): Released all slaves
[   62.269622][ T5977] netlink: 'syz.2.651': attribute type 2 has an invalid length.
[   62.279472][ T5977] netlink: 'syz.2.651': attribute type 2 has an invalid length.
[   62.592972][ T6005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=6005 comm=syz.2.658
[   62.878021][ T6014] netlink: 'syz.3.661': attribute type 13 has an invalid length.
[   62.953000][ T6014] 8021q: adding VLAN 0 to HW filter on device .`
[   62.984413][ T6014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.051617][ T6019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   63.117703][ T6021] bridge0: entered promiscuous mode
[   63.390951][   T29] kauditd_printk_skb: 343 callbacks suppressed
[   63.390965][   T29] audit: type=1400 audit(1768834412.767:4741): avc:  denied  { setattr } for  pid=6039 comm="syz.2.666" name="SCTPv6" dev="sockfs" ino=13170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   63.623119][   T29] audit: type=1400 audit(1768834412.997:4742): avc:  denied  { read } for  pid=6072 comm="syz.2.679" path="socket:[13295]" dev="sockfs" ino=13295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.654600][ T6075] 9p: Bad value for 'wfdno'
[   63.701171][ T6078] tmpfs: Bad value for 'mpol'
[   63.723207][   T29] audit: type=1326 audit(1768834413.097:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.789719][   T29] audit: type=1326 audit(1768834413.097:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.791801][ T6082] x_tables: duplicate underflow at hook 2
[   63.813200][   T29] audit: type=1326 audit(1768834413.097:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.842093][   T29] audit: type=1326 audit(1768834413.097:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.865573][   T29] audit: type=1326 audit(1768834413.097:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.889097][   T29] audit: type=1326 audit(1768834413.097:4748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.912427][   T29] audit: type=1326 audit(1768834413.097:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.935761][   T29] audit: type=1326 audit(1768834413.097:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6068 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   63.969019][ T6083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.969601][ T6085] __nla_validate_parse: 11 callbacks suppressed
[   63.969615][ T6085] netlink: 504 bytes leftover after parsing attributes in process `syz.4.681'.
[   63.979391][ T6083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0
[   64.108279][ T6083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.118664][ T6083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0
[   64.207583][ T6083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.217916][ T6083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0
[   64.288996][ T6083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.299332][ T6083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0
[   64.317179][ T3985] Bluetooth: hci0: Frame reassembly failed (-84)
[   64.337987][ T3959] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 65535 - 0
[   64.346502][ T3959] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   64.358027][ T3959] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 65535 - 0
[   64.366361][ T3959] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   64.379925][ T3959] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 65535 - 0
[   64.388224][ T3959] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   64.399748][ T3959] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 65535 - 0
[   64.408119][ T3959] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   64.537915][ T6103] can0: slcan on ttyS3.
[   64.558531][ T6113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6113 comm=syz.3.689
[   64.609434][ T6102] can0 (unregistered): slcan off ttyS3.
[   64.650927][ T6118] xt_hashlimit: size too large, truncated to 1048576
[   64.701611][ T6128] �
: renamed from lo (while UP)
[   64.718066][ T6128] loop0: detected capacity change from 0 to 512
[   64.775965][ T6128] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.825340][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'.
[   64.842672][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.852863][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'.
[   64.856932][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'.
[   64.861679][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'.
[   64.880488][ T6128] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[   64.894299][ T6128] EXT4-fs (loop0): orphan cleanup on readonly fs
[   64.903773][ T6128] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   64.921074][ T6128] EXT4-fs (loop0): Remounting filesystem read-only
[   64.927674][ T6128] EXT4-fs (loop0): 1 truncate cleaned up
[   64.933775][ T3982] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started
[   64.944403][ T3982] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started
[   64.984942][ T6141] infiniband syz1: set active
[   64.989808][ T6141] infiniband syz1: added syz_tun
[   64.997861][ T3982] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   65.014327][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   65.045979][ T6141] RDS/IB: syz1: added
[   65.057045][ T6141] smc: adding ib device syz1 with port count 1
[   65.079868][ T6141] smc:    ib device syz1 port 1 has no pnetid
[   65.315666][ T6181] bpf: Bad value for 'gid'
[   65.329078][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.599890][ T6211] loop0: detected capacity change from 0 to 512
[   65.609249][ T6211] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.711: corrupted in-inode xattr: invalid ea_ino
[   65.631710][ T6211] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.711: couldn't read orphan inode 15 (err -117)
[   65.644988][ T6211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.738566][ T6223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.777730][ T6211] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   65.789315][ T6211] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   65.799452][ T6211] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.711: Corrupt directory, running e2fsck is recommended
[   65.815583][ T6211] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.711: path /144/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   65.815622][ T6223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.870788][ T6229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.714'.
[   65.923871][ T6223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.958157][ T6226] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.711: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0
[   66.010151][ T6223] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.060782][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.082303][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'.
[   66.112874][ T3994] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.132568][ T3982] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.145958][ T3994] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.165700][ T3994] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.221119][ T6260] bond1: entered allmulticast mode
[   66.281761][ T6269] loop0: detected capacity change from 0 to 512
[   66.288895][ T6269] EXT4-fs: Ignoring removed mblk_io_submit option
[   66.302599][ T6269] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[   66.318833][ T6271] x_tables: duplicate underflow at hook 1
[   66.331205][ T6269] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.729: attempt to clear invalid blocks 2 len 1
[   66.349178][ T6269] EXT4-fs (loop0): Remounting filesystem read-only
[   66.356747][ T6269] EXT4-fs (loop0): 1 truncate cleaned up
[   66.365562][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.378433][ T3836] Bluetooth: hci0: command 0x1003 tx timeout
[   66.384495][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   66.412833][ T6269] EXT4-fs: Ignoring removed orlov option
[   66.418647][ T6269] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   66.430242][ T6269] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   66.510322][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.837798][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'.
[   66.846723][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.746'.
[   66.898629][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[   67.398135][ T6379] netlink: zone id is out of range
[   67.403328][ T6379] netlink: zone id is out of range
[   67.437249][ T6379] netlink: zone id is out of range
[   67.447031][ T6379] netlink: zone id is out of range
[   67.488379][ T6379] netlink: set zone limit has 8 unknown bytes
[   68.140137][ T6423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   69.693997][ T6474] loop0: detected capacity change from 0 to 1024
[   69.721283][ T6474] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.794163][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   69.832661][ T6474] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.966645][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   70.401920][ T6498] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[   70.429688][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.450687][ T6498] __nla_validate_parse: 4 callbacks suppressed
[   70.450700][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'.
[   70.478638][ T6498] macvlan2: entered promiscuous mode
[   70.484186][ T6498] macvlan2: entered allmulticast mode
[   70.490154][ T6501] netlink: 'syz.3.809': attribute type 10 has an invalid length.
[   70.510420][ T6498] bond0: entered promiscuous mode
[   70.518144][ T6498] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.533747][   T29] kauditd_printk_skb: 232 callbacks suppressed
[   70.533761][   T29] audit: type=1400 audit(1768834419.907:4975): avc:  denied  { create } for  pid=6505 comm="syz.4.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   70.563996][   T29] audit: type=1400 audit(1768834419.937:4976): avc:  denied  { sys_admin } for  pid=6505 comm="syz.4.811" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   70.586517][ T6498] bond0: left promiscuous mode
[   70.601479][ T6501] .`: (slave netdevsim1): Enslaving as an active interface with an up link
[   70.690598][   T29] audit: type=1400 audit(1768834420.067:4977): avc:  denied  { lock } for  pid=6509 comm="syz.3.813" path="socket:[14279]" dev="sockfs" ino=14279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   70.750936][   T29] audit: type=1326 audit(1768834420.067:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.0.812" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5b3caacb9 code=0x0
[   70.762740][ T6516] loop0: detected capacity change from 0 to 128
[   70.783492][   T29] audit: type=1326 audit(1768834420.157:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce597acb9 code=0x7ffc0000
[   70.784283][ T6516] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   70.806881][   T29] audit: type=1326 audit(1768834420.157:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce597acb9 code=0x7ffc0000
[   70.842315][   T29] audit: type=1326 audit(1768834420.157:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce597acb9 code=0x7ffc0000
[   70.865787][   T29] audit: type=1326 audit(1768834420.157:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ce597acb9 code=0x7ffc0000
[   70.889619][ T6516] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.920680][   T29] audit: type=1326 audit(1768834420.187:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce597acb9 code=0x7ffc0000
[   70.944102][   T29] audit: type=1326 audit(1768834420.187:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6513 comm="syz.3.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ce597aa22 code=0x7ffc0000
[   71.188538][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'.
[   71.272965][ T6514] hsr_slave_1 (unregistering): left promiscuous mode
[   71.438959][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'.
[   71.521944][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   71.561445][ T6544] IPv6: sit1: Disabled Multicast RS
[   71.621558][ T6545] loop0: detected capacity change from 0 to 512
[   71.667319][ T6545] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE
[   71.677790][ T6545] EXT4-fs (loop0): bad block size 65536
[   71.721658][ T6545] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[   71.742572][ T6545] SELinux: failed to load policy
[   71.773313][ T6555] loop0: detected capacity change from 0 to 512
[   71.818749][ T6555] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   71.828667][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'.
[   72.242295][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'.
[   72.269943][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'.
[   73.019099][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'.
[   73.034363][ T6629] bridge0: port 1(veth0_to_bridge) entered blocking state
[   73.041609][ T6629] bridge0: port 1(veth0_to_bridge) entered disabled state
[   73.049592][ T6629] veth0_to_bridge: entered allmulticast mode
[   73.056146][ T6629] veth0_to_bridge: entered promiscuous mode
[   73.062764][ T6629] bridge0: port 1(veth0_to_bridge) entered blocking state
[   73.069933][ T6629] bridge0: port 1(veth0_to_bridge) entered forwarding state
[   73.211840][ T6642] netlink: 'syz.1.858': attribute type 1 has an invalid length.
[   73.243791][ T6642] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.292237][ T6642] bond3: (slave ip6gretap2): making interface the new active one
[   73.300956][ T6642] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[   73.342224][ T6643] macvlan2: entered promiscuous mode
[   73.347546][ T6643] macvlan2: entered allmulticast mode
[   73.369968][ T6643] bond3: entered promiscuous mode
[   73.375059][ T6643] ip6gretap2: entered promiscuous mode
[   73.392688][ T6643] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   73.410105][ T6643] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   73.452664][ T6643] bond3: left promiscuous mode
[   73.457476][ T6643] ip6gretap2: left promiscuous mode
[   73.491109][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.498706][ T6657] batadv_slave_0: entered promiscuous mode
[   73.504568][ T6657] batadv_slave_0: entered allmulticast mode
[   73.654392][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[   73.674362][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[   73.683719][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[   73.924086][ T6694] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.001531][ T6694] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.061804][ T6694] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.112484][ T6694] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.251132][ T3992] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.273570][ T3992] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.287699][ T3992] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.297588][ T3992] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.325874][ T6713] IPv6: NLM_F_CREATE should be specified when creating new route
[   74.418780][ T6722] ip6gre0: entered promiscuous mode
[   74.462560][ T6722] team0: Device ip6gre0 is of different type
[   74.745856][ T6754] 9p: Unknown access argument 18446744073709551615: -34
[   75.309642][ T6782] tipc: Enabling of bearer <edp:s> rejected, media not registered
[   75.576217][   T29] kauditd_printk_skb: 227 callbacks suppressed
[   75.576233][   T29] audit: type=1400 audit(75.542:5212): avc:  denied  { shutdown } for  pid=6791 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   75.668196][   T29] audit: type=1326 audit(75.642:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.699342][   T29] audit: type=1326 audit(75.672:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.723009][   T29] audit: type=1326 audit(75.672:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.745716][   T29] audit: type=1326 audit(75.672:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.768970][   T29] audit: type=1326 audit(75.672:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.792194][   T29] audit: type=1326 audit(75.672:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.814894][   T29] audit: type=1326 audit(75.672:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.837535][   T29] audit: type=1326 audit(75.672:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   75.860797][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.860920][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.869401][   T29] audit: type=1326 audit(75.672:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   76.025639][ T6851] __nla_validate_parse: 5 callbacks suppressed
[   76.025653][ T6851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.919'.
[   76.040741][ T6851] tipc: Invalid UDP bearer configuration
[   76.040754][ T6851] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.308889][ T6882] loop0: detected capacity change from 0 to 128
[   76.329967][ T6882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.461450][ T6891] FAULT_INJECTION: forcing a failure.
[   76.461450][ T6891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.474575][ T6891] CPU: 0 UID: 0 PID: 6891 Comm: syz.2.932 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   76.474712][ T6891] Tainted: [W]=WARN
[   76.474718][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   76.474727][ T6891] Call Trace:
[   76.474734][ T6891]  <TASK>
[   76.474780][ T6891]  __dump_stack+0x1d/0x30
[   76.474811][ T6891]  dump_stack_lvl+0x95/0xd0
[   76.474831][ T6891]  dump_stack+0x15/0x1b
[   76.474910][ T6891]  should_fail_ex+0x263/0x280
[   76.474931][ T6891]  should_fail+0xb/0x20
[   76.474947][ T6891]  should_fail_usercopy+0x1a/0x20
[   76.474972][ T6891]  _copy_from_user+0x1c/0xb0
[   76.474997][ T6891]  ___sys_sendmsg+0xc1/0x1e0
[   76.475092][ T6891]  __x64_sys_sendmsg+0xd4/0x160
[   76.475122][ T6891]  x64_sys_call+0x17ba/0x3000
[   76.475144][ T6891]  do_syscall_64+0xc0/0x2a0
[   76.475179][ T6891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.475196][ T6891] RIP: 0033:0x7f1e6cf4acb9
[   76.475213][ T6891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.475228][ T6891] RSP: 002b:00007f1e6b9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   76.475254][ T6891] RAX: ffffffffffffffda RBX: 00007f1e6d1c5fa0 RCX: 00007f1e6cf4acb9
[   76.475287][ T6891] RDX: 0000000020000004 RSI: 0000200000001fc0 RDI: 0000000000000003
[   76.475297][ T6891] RBP: 00007f1e6b9a7090 R08: 0000000000000000 R09: 0000000000000000
[   76.475368][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.475380][ T6891] R13: 00007f1e6d1c6038 R14: 00007f1e6d1c5fa0 R15: 00007ffc8302ca88
[   76.475395][ T6891]  </TASK>
[   76.683072][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[   76.692007][ T6899] netlink: 'syz.1.935': attribute type 5 has an invalid length.
[   76.692096][ T6899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'.
[   76.694403][ T6899] geneve2: entered promiscuous mode
[   76.694419][ T6899] geneve2: entered allmulticast mode
[   76.695711][ T3959] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   76.695806][ T3959] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   76.695869][ T3959] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   76.695899][ T3959] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   76.715697][ T6905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'.
[   76.787352][ T6908] cgroup: No subsys list or none specified
[   76.897064][ T6925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.943'.
[   77.072461][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.376826][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'.
[   77.607673][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.960'.
[   78.206057][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'.
[   78.235103][ T7017] dvmrp0: entered allmulticast mode
[   78.242072][ T7019] xt_CT: No such helper "netbios-ns"
[   78.266275][ T7023] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.978'.
[   78.275371][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.978'.
[   78.944934][ T7070] program syz.4.995 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.025048][ T7076] SET target dimension over the limit!
[   79.075286][ T7082] loop0: detected capacity change from 0 to 1024
[   79.339443][ T7082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.504934][ T7082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7082 comm=syz.0.999
[   79.634855][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.649985][ T7102] random: crng reseeded on system resumption
[   79.735946][ T7109] loop0: detected capacity change from 0 to 8192
[   79.776124][ T3314] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   79.784009][ T3314] FAT-fs (loop0): Filesystem has been set read-only
[   79.830376][ T7114] loop0: detected capacity change from 0 to 1024
[   79.864045][ T7114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.899772][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.192287][ T7139] loop0: detected capacity change from 0 to 512
[   80.217964][ T7139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.404578][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.477619][ T7156] xt_CT: No such helper "syz0"
[   80.496596][ T3993] Bluetooth: hci0: Frame reassembly failed (-84)
[   80.518715][ T7164] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   80.577407][ T7170] netlink: 'syz.1.1025': attribute type 21 has an invalid length.
[   81.007301][   T29] kauditd_printk_skb: 690 callbacks suppressed
[   81.007317][   T29] audit: type=1400 audit(80.982:5912): avc:  denied  { bind } for  pid=7206 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.177351][ T7218] 9p: Bad value for 'wfdno'
[   81.588503][   T29] audit: type=1326 audit(81.562:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.2.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cf4acb9 code=0x0
[   82.049229][ T7233] __nla_validate_parse: 6 callbacks suppressed
[   82.049245][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'.
[   82.283308][ T7251] bond2: (slave bond_slave_1): Device is not our slave
[   82.290842][ T7251] bond2: option active_slave: invalid value (bond_slave_1)
[   82.331190][ T7251] bond2 (unregistering): Released all slaves
[   82.519724][ T3836] Bluetooth: hci0: command 0x1003 tx timeout
[   82.520150][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   82.804551][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[   82.952579][ T7231] syz.4.1044 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   82.963679][ T7231] CPU: 0 UID: 0 PID: 7231 Comm: syz.4.1044 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   82.963708][ T7231] Tainted: [W]=WARN
[   82.963714][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   82.963726][ T7231] Call Trace:
[   82.963734][ T7231]  <TASK>
[   82.963742][ T7231]  __dump_stack+0x1d/0x30
[   82.963789][ T7231]  dump_stack_lvl+0x95/0xd0
[   82.963825][ T7231]  dump_stack+0x15/0x1b
[   82.963850][ T7231]  dump_header+0x80/0x240
[   82.963871][ T7231]  oom_kill_process+0x295/0x350
[   82.963916][ T7231]  out_of_memory+0x97d/0xb80
[   82.963934][ T7231]  try_charge_memcg+0x62e/0xa10
[   82.963964][ T7231]  charge_memcg+0x51/0xc0
[   82.963986][ T7231]  __mem_cgroup_charge+0x28/0xb0
[   82.964073][ T7231]  filemap_add_folio+0x110/0x350
[   82.964096][ T7231]  __filemap_get_folio_mpol+0x326/0x680
[   82.964119][ T7231]  filemap_fault+0x473/0xbb0
[   82.964139][ T7231]  ? __rcu_read_lock+0x36/0x50
[   82.964163][ T7231]  __do_fault+0xbc/0x200
[   82.964191][ T7231]  handle_mm_fault+0xfa1/0x3030
[   82.964291][ T7231]  ? vma_start_read+0x1c7/0x2c0
[   82.964370][ T7231]  do_user_addr_fault+0x62f/0x1050
[   82.964469][ T7231]  ? arch_exit_work+0x30/0x40
[   82.964551][ T7231]  ? irqentry_exit+0x3c/0x510
[   82.964574][ T7231]  exc_page_fault+0x62/0xa0
[   82.964655][ T7231]  asm_exc_page_fault+0x26/0x30
[   82.964674][ T7231] RIP: 0033:0x7f432ba2f520
[   82.964688][ T7231] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 b1 94 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3
[   82.964702][ T7231] RSP: 002b:00007ffcede0ad70 EFLAGS: 00010206
[   82.964781][ T7231] RAX: 0000001b34023e30 RBX: fffffffffffffe30 RCX: ffffffff81909b47
[   82.964795][ T7231] RDX: 0000001b34023e2c RSI: 0000000000000004 RDI: 00007f432c905720
[   82.964809][ T7231] RBP: 0000000000000000 R08: 00007f432bdc0000 R09: 00007f432bdc2000
[   82.964826][ T7231] R10: 0000000081909b4b R11: 000000000000000a R12: 0000000000000000
[   82.964862][ T7231] R13: 000000000007ffff R14: ffffffff81909e59 R15: 00007f432c905720
[   82.964877][ T7231]  ? page_counter_try_charge+0x289/0x300
[   82.964905][ T7231]  ? page_counter_charge+0x1b7/0x230
[   82.964959][ T7231]  </TASK>
[   82.964965][ T7231] memory: usage 307200kB, limit 307200kB, failcnt 1759
[   83.191094][ T7231] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0
[   83.199046][ T7231] kmem: usage 303536kB, limit 9007199254740988kB, failcnt 0
[   83.206355][ T7231] Memory cgroup stats for /syz4:
[   83.236958][ T7231] cache 4096
[   83.245381][ T7231] rss 3747840
[   83.248833][ T7231] shmem 0
[   83.251797][ T7231] mapped_file 0
[   83.255311][ T7231] dirty 0
[   83.258236][ T7231] writeback 0
[   83.262221][ T7231] workingset_refault_anon 144
[   83.266973][ T7231] workingset_refault_file 4482
[   83.271771][ T7231] swap 581632
[   83.275047][ T7231] swapcached 0
[   83.278492][ T7231] pgpgin 157695
[   83.281970][ T7231] pgpgout 156779
[   83.285670][ T7231] pgfault 85013
[   83.289125][ T7231] pgmajfault 63
[   83.293272][ T7231] inactive_anon 0
[   83.294576][ T7291] netlink: 'syz.3.1065': attribute type 1 has an invalid length.
[   83.296904][ T7231] active_anon 0
[   83.296913][ T7231] inactive_file 3751936
[   83.310437][ T7291] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.312328][ T7231] active_file 0
[   83.312337][ T7231] unevictable 0
[   83.326573][ T7231] hierarchical_memory_limit 314572800
[   83.331962][ T7231] hierarchical_memsw_limit 9223372036854771712
[   83.338191][ T7231] total_cache 4096
[   83.341981][ T7231] total_rss 3747840
[   83.345768][ T7231] total_shmem 0
[   83.350058][ T7231] total_mapped_file 0
[   83.354031][ T7231] total_dirty 0
[   83.357473][ T7231] total_writeback 0
[   83.361279][ T7231] total_workingset_refault_anon 144
[   83.366457][ T7231] total_workingset_refault_file 4482
[   83.371809][ T7231] total_swap 581632
[   83.375676][ T7231] total_swapcached 0
[   83.380280][ T7231] total_pgpgin 157695
[   83.384245][ T7231] total_pgpgout 156779
[   83.388340][ T7231] total_pgfault 85013
[   83.392326][ T7231] total_pgmajfault 63
[   83.396294][ T7231] total_inactive_anon 0
[   83.400461][ T7231] total_active_anon 0
[   83.404500][ T7231] total_inactive_file 3751936
[   83.409166][ T7231] total_active_file 0
[   83.413886][ T7231] total_unevictable 0
[   83.417857][ T7231] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1044,pid=7231,uid=0
[   83.432527][ T7231] Memory cgroup out of memory: Killed process 7231 (syz.4.1044) total-vm:94132kB, anon-rss:4916kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[   83.464219][ T7295] program syz.0.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.465181][ T7291] bond2: (slave dummy0): making interface the new active one
[   83.521644][ T7291] bond2: (slave dummy0): Enslaving as an active interface with an up link
[   83.530747][ T7293] bond2: entered allmulticast mode
[   83.539711][ T7293] dummy0: entered allmulticast mode
[   83.578555][ T7295] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   83.591986][   T29] audit: type=1326 audit(83.572:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.614885][   T29] audit: type=1326 audit(83.572:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.638291][   T29] audit: type=1326 audit(83.572:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.661876][   T29] audit: type=1326 audit(83.572:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.684656][   T29] audit: type=1326 audit(83.572:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.708063][   T29] audit: type=1326 audit(83.572:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.731432][   T29] audit: type=1326 audit(83.572:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.754217][   T29] audit: type=1326 audit(83.572:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b3caacb9 code=0x7ffc0000
[   83.822926][ T7298] -1: renamed from syzkaller0
[   83.859044][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'.
[   83.902013][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'.
[   84.076267][ T7316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1069'.
[   84.093217][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[   84.104059][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'.
[   84.120694][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'.
[   84.476276][ T7322] program syz.2.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.485679][ T7322] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   85.154076][ T7343] bridge0: entered allmulticast mode
[   85.166772][ T7343] loop0: detected capacity change from 0 to 1024
[   85.221501][ T7343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   85.601344][ T7370] veth2: entered promiscuous mode
[   85.606402][ T7370] veth2: entered allmulticast mode
[   85.616081][ T7331] delete_channel: no stack
[   85.625069][ T7369] bridge0: entered promiscuous mode
[   85.678520][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   85.921315][ T7389] 9p: Bad value for 'wfdno'
[   86.025548][   T29] kauditd_printk_skb: 378 callbacks suppressed
[   86.025563][   T29] audit: type=1400 audit(86.002:6300): avc:  denied  { read write } for  pid=7392 comm="syz.0.1095" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[   86.058078][   T29] audit: type=1400 audit(86.002:6301): avc:  denied  { open } for  pid=7392 comm="syz.0.1095" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[   86.274663][ T7397] gre1: entered allmulticast mode
[   86.302974][ T7402] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1095'.
[   86.313324][   T29] audit: type=1400 audit(86.292:6302): avc:  denied  { ioctl } for  pid=7392 comm="syz.0.1095" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object"
[   86.451744][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'.
[   86.759490][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   86.898528][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b1c4600: rx timeout, send abort
[   86.933925][   T29] audit: type=1400 audit(86.912:6303): avc:  denied  { read } for  pid=2986 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   86.960510][   T29] audit: type=1400 audit(86.912:6304): avc:  denied  { search } for  pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   86.982209][   T29] audit: type=1400 audit(86.912:6305): avc:  denied  { search } for  pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.003141][   T29] audit: type=1400 audit(86.912:6306): avc:  denied  { add_name } for  pid=2986 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   87.023892][   T29] audit: type=1400 audit(86.912:6307): avc:  denied  { create } for  pid=2986 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   87.043957][   T29] audit: type=1400 audit(86.912:6308): avc:  denied  { append open } for  pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   87.067027][   T29] audit: type=1400 audit(86.912:6309): avc:  denied  { getattr } for  pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   87.200699][ T7424] 9pnet: p9_errstr2errno: server reported unknown error ����
[   87.262628][ T7437] loop0: detected capacity change from 0 to 1024
[   87.274835][ T7437] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1111: Failed to acquire dquot type 0
[   87.286578][ T7437] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[   87.301695][ T7437] EXT4-fs (loop0): 1 truncate cleaned up
[   87.307959][ T7437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.346225][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.406909][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811b1c4600: abort rx timeout. Force session deactivation
[   87.615893][ T7472] __nla_validate_parse: 1 callbacks suppressed
[   87.615907][ T7472] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1121'.
[   87.664880][ T7472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1121'.
[   87.684226][ T7472] sctp: [Deprecated]: syz.0.1121 (pid 7472) Use of int in max_burst socket option.
[   87.684226][ T7472] Use struct sctp_assoc_value instead
[   87.778198][ T7486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   87.820449][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'.
[   88.009130][ T7504] loop0: detected capacity change from 0 to 512
[   88.064502][ T7504] EXT4-fs (loop0): 1 orphan inode deleted
[   88.080435][ T3994] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:62: Failed to release dquot type 1
[   88.112595][ T7504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.180053][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.416620][ T7558] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1131'.
[   88.538695][ T7574] loop0: detected capacity change from 0 to 512
[   88.552731][ T7574] EXT4-fs: Ignoring removed bh option
[   88.558283][ T7574] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.587848][ T7574] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   88.607823][ T7574] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   88.626147][ T7574] EXT4-fs (loop0): orphan cleanup on readonly fs
[   88.640764][ T7574] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1134: Failed to acquire dquot type 1
[   88.653876][ T7574] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1134: Invalid block bitmap block 0 in block_group 0
[   88.677059][ T7574] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1134: Invalid block bitmap block 0 in block_group 0
[   88.705396][ T7574] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1134: Invalid block bitmap block 0 in block_group 0
[   88.730150][ T7574] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1134: Failed to acquire dquot type 1
[   88.744931][ T7574] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1134: Failed to acquire dquot type 1
[   88.756830][ T7574] EXT4-fs (loop0): 1 orphan inode deleted
[   88.771891][ T7574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   88.837808][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.036293][ T7655] loop0: detected capacity change from 0 to 512
[   89.049767][ T7655] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   89.085154][ T7655] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   89.098383][ T7655] EXT4-fs (loop0): 1 truncate cleaned up
[   89.104571][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.137756][ T7655] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #15: comm syz.0.1144: corrupted xattr block 33: invalid header
[   89.151936][ T7655] EXT4-fs (loop0): Remounting filesystem read-only
[   89.159137][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'.
[   89.168835][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'.
[   89.293927][ T3821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.534295][ T3989] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   89.544209][ T3989] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   89.601324][ T3989] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   89.611334][ T3989] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   89.651110][ T3989] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   89.661094][ T3989] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   89.711165][ T3989] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   89.721068][ T3989] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   89.796716][ T7690] chnl_net:caif_netlink_parms(): no params data found
[   89.825873][ T3989] bridge_slave_1: left allmulticast mode
[   89.831674][ T3989] bridge_slave_1: left promiscuous mode
[   89.837287][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.940451][ T3989] bridge0 (unregistering): left allmulticast mode
[   90.013108][ T3989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.024090][ T3989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.033509][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'.
[   90.043660][ T3989] bond0 (unregistering): Released all slaves
[   90.054000][ T3989] bond1 (unregistering): Released all slaves
[   90.095601][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.102728][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.115183][ T7690] bridge_slave_0: entered allmulticast mode
[   90.122554][ T7690] bridge_slave_0: entered promiscuous mode
[   90.129847][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.136965][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.144586][ T7690] bridge_slave_1: entered allmulticast mode
[   90.151759][ T7690] bridge_slave_1: entered promiscuous mode
[   90.227877][ T7690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.296750][ T7690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.322888][ T3989] hsr_slave_0: left promiscuous mode
[   90.342322][ T3989] hsr_slave_1: left promiscuous mode
[   90.361360][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.368771][ T3989] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.453951][ T3989] veth1_macvtap: left promiscuous mode
[   90.473845][ T3989] veth0_macvtap: left promiscuous mode
[   90.505058][ T3989] veth1_vlan: left promiscuous mode
[   90.532806][ T3989] veth0_vlan: left promiscuous mode
[   90.741127][ T3989] team0 (unregistering): Port device team_slave_1 removed
[   90.751316][ T3989] team0 (unregistering): Port device team_slave_0 removed
[   90.801675][ T7690] team0: Port device team_slave_0 added
[   90.823949][ T7690] team0: Port device team_slave_1 added
[   90.872438][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.879473][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.906122][ T7690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.968453][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.975549][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.002103][ T7690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.052865][ T7690] hsr_slave_0: entered promiscuous mode
[   91.064120][ T7690] hsr_slave_1: entered promiscuous mode
[   91.075598][   T29] kauditd_printk_skb: 19 callbacks suppressed
[   91.075612][   T29] audit: type=1400 audit(91.052:6320): avc:  denied  { create } for  pid=7773 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.101974][ T3954] Bluetooth: hci0: Frame reassembly failed (-84)
[   91.109517][ T7690] debugfs: 'hsr0' already exists in 'hsr'
[   91.115264][ T7690] Cannot create hsr debugfs directory
[   91.230570][ T7690] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   91.240817][ T7690] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   91.250549][   T29] audit: type=1326 audit(91.232:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.274492][   T29] audit: type=1326 audit(91.232:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.297846][   T29] audit: type=1326 audit(91.232:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.313410][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'.
[   91.321539][   T29] audit: type=1326 audit(91.252:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.329605][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1176'.
[   91.346319][ T7803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1176'.
[   91.353349][   T29] audit: type=1326 audit(91.252:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.393283][   T29] audit: type=1326 audit(91.252:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.416281][   T29] audit: type=1326 audit(91.252:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.439922][   T29] audit: type=1326 audit(91.252:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.462627][   T29] audit: type=1326 audit(91.252:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432bb5acb9 code=0x7ffc0000
[   91.487076][ T7690] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   91.498053][ T7690] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   91.507937][ T3989] IPVS: stop unused estimator thread 0...
[   91.544695][ T7690] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.557283][ T7690] 8021q: adding VLAN 0 to HW filter on device team0
[   91.582759][ T7820] macvlan2: entered promiscuous mode
[   91.600983][ T3990] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.608089][ T3990] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.626442][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.633691][ T3990] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.762096][ T7838] 9p: Bad value for 'wfdno'
[   91.789825][ T7690] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.894297][ T7865] SELinux: security_context_str_to_sid (�O*3���!�L;���(x�?8��>${�S��7�#����!g��.&[n٦��9�P9\E�T�Wq��3�H*�
8��YYL����G�R�!I��*���'��CD��X
[   91.894297][ T7865] ��s0dn�ph���5L0����|�
q�����D8�1����A{ꈆ�nK�P��) failed with errno=-22
[   91.989743][ T7690] veth0_vlan: entered promiscuous mode
[   91.997140][ T7690] veth1_vlan: entered promiscuous mode
[   92.014112][ T7690] veth0_macvtap: entered promiscuous mode
[   92.021411][ T7690] veth1_macvtap: entered promiscuous mode
[   92.032202][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.048736][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.066616][ T3990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.080388][ T3985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.081344][ T7881] cgroup: Invalid name
[   92.096800][ T3985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.114632][ T3985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.322830][ T7904] loop5: detected capacity change from 0 to 1024
[   92.329751][ T7904] EXT4-fs: Ignoring removed mblk_io_submit option
[   92.366511][ T7904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   92.754576][ T7939] SELinux:  Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped).
[   92.805908][ T7943] __nla_validate_parse: 1 callbacks suppressed
[   92.805926][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1201'.
[   92.842158][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'.
[   92.853990][ T7948] macsec2: entered allmulticast mode
[   92.860382][ T7948] bridge0: port 2(macsec2) entered blocking state
[   92.866919][ T7948] bridge0: port 2(macsec2) entered disabled state
[   92.979729][ T7964] usb usb4: check_ctrlrecip: process 7964 (syz.4.1208) requesting ep 01 but needs 81
[   92.989235][ T7964] usb usb4: usbfs: process 7964 (syz.4.1208) did not claim interface 0 before use
[   93.159408][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   93.305114][ T7978] netlink: 'syz.4.1212': attribute type 10 has an invalid length.
[   93.329092][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'.
[   93.338128][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'.
[   93.347078][ T7980] netlink: 'syz.4.1213': attribute type 3 has an invalid length.
[   93.354830][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1213'.
[   93.594883][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'.
[   93.634588][ T7986] hsr_slave_1 (unregistering): left promiscuous mode
[   93.710369][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'.
[   93.793269][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'.
[   93.818905][ T8000] veth1_macvtap: left promiscuous mode
[   93.850804][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   93.959729][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1225'.
[   94.142821][ T3836] Bluetooth: hci0: sending frame failed (-49)
[   94.150517][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -49
[   94.158160][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.185832][ T8039] rdma_op ffff88822bdc6180 conn xmit_rdma 0000000000000000
[   94.207051][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'.
[   94.235280][ T8033] hsr_slave_1 (unregistering): left promiscuous mode
[   94.362228][ T8069] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   94.371501][ T8072] netlink: 'syz.2.1242': attribute type 3 has an invalid length.
[   94.575043][ T8102] bridge_slave_1: left allmulticast mode
[   94.580753][ T8102] bridge_slave_1: left promiscuous mode
[   94.586502][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.606565][ T8102] bridge_slave_0: left promiscuous mode
[   94.612409][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.972813][ T8135] macvlan2: entered promiscuous mode
[   95.120346][ T8158] IPVS: length: 101 != 327562839040
[   95.241401][ T8168] netlink: 'syz.3.1272': attribute type 11 has an invalid length.
[   95.396519][ T8161] hsr_slave_1 (unregistering): left promiscuous mode
[   95.573934][ T8183] sctp: [Deprecated]: syz.3.1279 (pid 8183) Use of int in max_burst socket option deprecated.
[   95.573934][ T8183] Use struct sctp_assoc_value instead
[   95.659645][ T8188] x_tables: duplicate underflow at hook 1
[   96.302004][   T29] kauditd_printk_skb: 399 callbacks suppressed
[   96.302020][   T29] audit: type=1400 audit(352.279:6729): avc:  denied  { bind } for  pid=8247 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   96.332689][   T29] audit: type=1400 audit(352.279:6730): avc:  denied  { execute } for  pid=8247 comm="syz.1.1303" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   96.386582][ T8251] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   96.406217][ T8258] loop5: detected capacity change from 0 to 512
[   96.414084][ T8258] EXT4-fs: Ignoring removed nobh option
[   96.426263][   T29] audit: type=1326 audit(352.399:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.450558][   T29] audit: type=1326 audit(352.409:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.473376][   T29] audit: type=1326 audit(352.409:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.496135][   T29] audit: type=1326 audit(352.409:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.518969][   T29] audit: type=1326 audit(352.409:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.541915][   T29] audit: type=1326 audit(352.409:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.564619][   T29] audit: type=1326 audit(352.409:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0dbbcacb9 code=0x7ffc0000
[   96.587443][   T29] audit: type=1326 audit(352.409:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8259 comm="syz.1.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0dbbcc547 code=0x7ffc0000
[   96.610563][ T8258] EXT4-fs (loop5): orphan cleanup on readonly fs
[   96.619589][ T8258] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.1306: ea_inode file size=4294967295 entry size=6
[   96.634281][ T8258] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   96.647762][ T8258] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1306: corrupted inode contents
[   96.660867][ T8258] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.1306: mark_inode_dirty error
[   96.697728][ T8258] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.1306: corrupted inode contents
[   96.728487][ T8258] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.1306: mark_inode_dirty error
[   96.757519][ T8258] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.1306: mark inode dirty (error -117)
[   96.794198][ T8258] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117)
[   96.803931][ T8258] EXT4-fs (loop5): 1 orphan inode deleted
[   96.810770][ T8284] netlink: 'syz.3.1313': attribute type 2 has an invalid length.
[   96.818507][ T8284] netlink: 'syz.3.1313': attribute type 3 has an invalid length.
[   96.828433][ T8258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   96.905524][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.984746][ T8298] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.067230][ T8298] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.101064][ T8310] bridge0: entered promiscuous mode
[   97.106283][ T8310] bridge0: entered allmulticast mode
[   97.123498][ T8298] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.150582][ T8314] netlink: 'syz.4.1325': attribute type 21 has an invalid length.
[   97.194140][ T8298] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.257451][ T3954] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.277404][ T3954] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.291089][ T3954] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.299361][ T3954] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.512869][ T8339] loop5: detected capacity change from 0 to 1024
[   97.521148][ T8339] EXT4-fs: Ignoring removed mblk_io_submit option
[   97.551576][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   97.691067][ T8362] netlink: 'syz.1.1335': attribute type 8 has an invalid length.
[   97.701617][ T8362] bridge2: entered promiscuous mode
[   98.295056][ T8370] hsr0: entered promiscuous mode
[   98.300541][ T8370] __nla_validate_parse: 19 callbacks suppressed
[   98.300553][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'.
[   98.315798][ T8370] hsr_slave_0: left promiscuous mode
[   98.331237][ T8370] hsr0 (unregistering): left promiscuous mode
[   98.363218][ T8376] sctp: [Deprecated]: syz.2.1342 (pid 8376) Use of int in maxseg socket option.
[   98.363218][ T8376] Use struct sctp_assoc_value instead
[   98.480781][ T8397] netlink: 'syz.4.1349': attribute type 1 has an invalid length.
[   98.512437][ T8397] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.535084][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'.
[   98.865439][ T3954] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.888858][ T3954] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.897426][ T3954] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.906267][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'.
[   98.915323][ T8444] netlink: 'syz.4.1357': attribute type 21 has an invalid length.
[   98.932290][ T3954] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.943070][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'.
[   99.678755][ T8459] veth0_to_team: default FDB implementation only supports local addresses
[   99.723284][ T8463] program syz.2.1368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   99.746982][ T8465] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.874398][ T8484] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1373'.
[   99.909993][ T8484] lo: entered promiscuous mode
[   99.914859][ T8484] lo: entered allmulticast mode
[   99.921077][ T8484] tunl0: entered promiscuous mode
[   99.926126][ T8484] tunl0: entered allmulticast mode
[   99.932452][ T8484] gre0: entered promiscuous mode
[   99.937401][ T8484] gre0: entered allmulticast mode
[   99.943925][ T8484] gretap0: entered promiscuous mode
[   99.949150][ T8484] gretap0: entered allmulticast mode
[   99.955739][ T8484] erspan0: entered promiscuous mode
[   99.961000][ T8484] erspan0: entered allmulticast mode
[   99.967417][ T8484] ip_vti0: entered promiscuous mode
[   99.972762][ T8484] ip_vti0: entered allmulticast mode
[   99.979556][ T8484] ip6_vti0: entered promiscuous mode
[   99.984840][ T8484] ip6_vti0: entered allmulticast mode
[   99.991670][ T8484] sit0: entered promiscuous mode
[   99.996604][ T8484] sit0: entered allmulticast mode
[  100.002730][ T8484] ip6tnl0: entered promiscuous mode
[  100.007928][ T8484] ip6tnl0: entered allmulticast mode
[  100.014217][ T8484] ip6gre0: entered promiscuous mode
[  100.019467][ T8484] ip6gre0: entered allmulticast mode
[  100.029158][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.038949][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.048336][ T8484] syz_tun: entered promiscuous mode
[  100.054489][ T8484] syz_tun: entered allmulticast mode
[  100.062221][ T8484] ip6gretap0: entered promiscuous mode
[  100.062238][ T8484] ip6gretap0: entered allmulticast mode
[  100.063257][ T8484] vcan0: entered promiscuous mode
[  100.063270][ T8484] vcan0: entered allmulticast mode
[  100.064363][ T8484] bond0: entered promiscuous mode
[  100.089986][ T8484] bond_slave_0: entered promiscuous mode
[  100.095642][ T8484] bond_slave_1: entered promiscuous mode
[  100.101452][ T8484] bond0: entered allmulticast mode
[  100.106619][ T8484] bond_slave_0: entered allmulticast mode
[  100.112975][ T8484] bond_slave_1: entered allmulticast mode
[  100.120885][ T8484] team0: entered promiscuous mode
[  100.125910][ T8484] team_slave_0: entered promiscuous mode
[  100.131850][ T8484] team_slave_1: entered promiscuous mode
[  100.137585][ T8484] team0: entered allmulticast mode
[  100.143242][ T8484] team_slave_0: entered allmulticast mode
[  100.148973][ T8484] team_slave_1: entered allmulticast mode
[  100.156535][ T8484] dummy0: entered promiscuous mode
[  100.161661][ T8484] dummy0: entered allmulticast mode
[  100.166989][ T8484] nlmon0: entered promiscuous mode
[  100.172691][ T8484] nlmon0: entered allmulticast mode
[  100.179020][ T8484] caif0: entered promiscuous mode
[  100.184112][ T8484] caif0: entered allmulticast mode
[  100.189207][ T8484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.212117][ T8489] erspan1: entered promiscuous mode
[  100.305101][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'.
[  100.710951][ T8523] netlink: 'syz.4.1387': attribute type 13 has an invalid length.
[  101.236609][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  101.293073][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'.
[  101.494417][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.776946][ T8577] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  101.776946][ T8577] The task syz.1.1398 (8577) triggered the difference, watch for misbehavior.
[  101.851652][ T8554] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  101.888268][ T3985] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.917509][ T3985] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.926206][ T3985] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.982019][ T3985] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.015902][ T8593] loop5: detected capacity change from 0 to 1024
[  102.050428][ T8593] EXT4-fs: Ignoring removed mblk_io_submit option
[  102.102260][ T8593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  102.174582][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  102.174598][   T29] audit: type=1400 audit(358.149:6759): avc:  denied  { lock } for  pid=8605 comm="syz.4.1406" path="socket:[23162]" dev="sockfs" ino=23162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  102.281648][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'.
[  102.303243][ T8617] vlan2: entered allmulticast mode
[  102.339487][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  102.877512][ T8684] xt_CT: You must specify a L4 protocol and not use inversions on it
[  102.891489][ T8684] xt_CT: You must specify a L4 protocol and not use inversions on it
[  102.920275][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  102.932889][   T29] audit: type=1400 audit(358.909:6760): avc:  denied  { getattr } for  pid=8688 comm="syz.4.1418" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=22180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  103.186736][   T29] audit: type=1326 audit(359.159:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.209661][   T29] audit: type=1326 audit(359.159:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.236083][   T29] audit: type=1326 audit(359.159:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.258978][   T29] audit: type=1326 audit(359.159:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.281841][   T29] audit: type=1326 audit(359.159:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.304543][   T29] audit: type=1326 audit(359.159:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.327516][   T29] audit: type=1326 audit(359.159:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.350220][   T29] audit: type=1326 audit(359.159:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8703 comm="syz.2.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6cf4acb9 code=0x7ffc0000
[  103.661893][ T8739] loop5: detected capacity change from 0 to 512
[  103.686822][ T8739] ------------[ cut here ]------------
[  103.692473][ T8739] EA inode 11 i_nlink=0
[  103.692500][ T8739] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.1435/8739
[  103.707483][ T8739] Modules linked in:
[  103.711587][ T8739] CPU: 1 UID: 0 PID: 8739 Comm: syz.5.1435 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  103.723031][ T8739] Tainted: [W]=WARN
[  103.726874][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  103.736999][ T8739] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[  103.743659][ T8739] Code: b4 ce 9b ff 4c 8d 2d 1d a7 3f 05 49 8d 7e 40 e8 64 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 98 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f b8 c5 03 66 66 66 66 66 66 2e
[  103.763389][ T8739] RSP: 0018:ffffc900026e7778 EFLAGS: 00010246
[  103.769532][ T8739] RAX: ffff88811bd95d10 RBX: ffff88811acf1348 RCX: ffffffff81bc6a88
[  103.777554][ T8739] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff86fc1190
[  103.785596][ T8739] RBP: 000000000000000b R08: 000188811acf12fb R09: 0000000000000000
[  103.793598][ T8739] R10: ffffc900026e76a8 R11: 0001c900026e76a8 R12: ffff88811acf12f8
[  103.801624][ T8739] R13: ffffffff86fc1190 R14: ffff88811acf12b0 R15: 0000000000000001
[  103.809764][ T8739] FS:  00007fcef63666c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000
[  103.811003][ T8747] netlink: 'syz.1.1438': attribute type 1 has an invalid length.
[  103.818703][ T8739] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.818721][ T8739] CR2: 00007f3b00db5000 CR3: 0000000121700000 CR4: 00000000003506f0
[  103.841219][ T8739] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300
[  103.849204][ T8739] DR3: 0000200000000300 DR6: 00000000ffff0fff DR7: 0000000000000600
[  103.857317][ T8739] Call Trace:
[  103.860649][ T8739]  <TASK>
[  103.863613][ T8739]  ext4_xattr_inode_dec_ref_all+0x57c/0x880
[  103.869557][ T8739]  ? errseq_check+0x2c/0x50
[  103.874062][ T8739]  ext4_xattr_delete_inode+0x6c1/0x7a0
[  103.879590][ T8739]  ext4_evict_inode+0xa1f/0xd40
[  103.884469][ T8739]  ? __pfx_ext4_evict_inode+0x10/0x10
[  103.889875][ T8739]  evict+0x2af/0x510
[  103.893779][ T8739]  ? __dquot_initialize+0x146/0x7c0
[  103.898982][ T8739]  iput+0x4b9/0x650
[  103.902830][ T8739]  ext4_process_orphan+0x1a9/0x1c0
[  103.907964][ T8739]  ext4_orphan_cleanup+0x6a8/0xa00
[  103.913187][ T8739]  ext4_fill_super+0x3476/0x3800
[  103.918213][ T8739]  ? set_blocksize+0x1a3/0x310
[  103.923022][ T8739]  ? setup_bdev_super+0x30e/0x370
[  103.928129][ T8739]  ? __pfx_ext4_fill_super+0x10/0x10
[  103.933460][ T8739]  get_tree_bdev_flags+0x291/0x300
[  103.938648][ T8739]  ? __pfx_ext4_fill_super+0x10/0x10
[  103.943962][ T8739]  get_tree_bdev+0x1f/0x30
[  103.948392][ T8739]  ext4_get_tree+0x1c/0x30
[  103.952854][ T8739]  vfs_get_tree+0x57/0x1d0
[  103.957261][ T8739]  do_new_mount+0x288/0x700
[  103.962036][ T8739]  path_mount+0x4c0/0xb90
[  103.966420][ T8739]  ? user_path_at+0xbf/0x130
[  103.966711][ T8751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1439'.
[  103.971122][ T8739]  __se_sys_mount+0x28c/0x2e0
[  103.971168][ T8739]  __x64_sys_mount+0x67/0x80
[  103.971186][ T8739]  x64_sys_call+0x2cca/0x3000
[  103.971207][ T8739]  do_syscall_64+0xc0/0x2a0
[  103.971285][ T8739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.971305][ T8739] RIP: 0033:0x7fcef792bf4a
[  103.971385][ T8739] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.971403][ T8739] RSP: 002b:00007fcef6365e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  103.971425][ T8739] RAX: ffffffffffffffda RBX: 00007fcef6365ee0 RCX: 00007fcef792bf4a
[  103.971476][ T8739] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fcef6365ea0
[  103.971490][ T8739] RBP: 0000200000000180 R08: 00007fcef6365ee0 R09: 0000000000800700
[  103.971505][ T8739] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  103.971518][ T8739] R13: 00007fcef6365ea0 R14: 0000000000000478 R15: 000000000000002c
[  103.971538][ T8739]  </TASK>
[  103.971547][ T8739] ---[ end trace 0000000000000000 ]---
[  103.971958][ T8739] EXT4-fs (loop5): 1 orphan inode deleted
[  104.092900][ T8739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.236568][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.300753][ T8760] loop5: detected capacity change from 0 to 512
[  104.308408][ T8760] EXT4-fs: Ignoring removed bh option
[  104.313903][ T8760] EXT4-fs: Ignoring removed mblk_io_submit option
[  104.331720][ T8760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.364874][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'.
[  104.393087][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.555474][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.598020][ T8786] netlink: 'syz.1.1447': attribute type 10 has an invalid length.
[  104.606443][ T8786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1447'.
[  104.750244][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.765523][ T8774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.810016][ T8774] macvlan2: left promiscuous mode
[  104.821907][ T3994] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.841222][ T3994] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.857972][ T3994] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.868236][ T3994] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.139614][ T8820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1458'.
[  105.245907][ T8832] loop5: detected capacity change from 0 to 512
[  105.253776][ T8832] ext3: Unknown parameter 'permit_directio'
[  105.306877][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1464'.
[  105.320260][ T8836] loop5: detected capacity change from 0 to 512
[  105.329344][ T8836] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  105.339754][ T8836] EXT4-fs (loop5): orphan cleanup on readonly fs
[  105.346580][ T8836] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1464: Allocating blocks 41-42 which overlap fs metadata
[  105.360779][ T8836] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1464: Allocating blocks 41-42 which overlap fs metadata
[  105.374743][ T8836] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1464: Failed to acquire dquot type 1
[  105.386326][ T8836] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  105.401166][ T8836] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1464: corrupted inode contents
[  105.415901][ T8836] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.1464: mark_inode_dirty error
[  105.427453][ T8836] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1464: corrupted inode contents
[  105.439863][ T8836] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1464: mark_inode_dirty error
[  105.451943][ T8836] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1464: corrupted inode contents
[  105.464181][ T8836] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  105.473021][ T8836] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1464: corrupted inode contents
[  105.485981][ T8836] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.1464: mark_inode_dirty error
[  105.497494][ T8836] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  105.506702][ T8836] EXT4-fs (loop5): 1 truncate cleaned up
[  105.512989][ T8836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.535314][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.632294][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1468'.
[  106.014365][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'.
[  106.095316][ T8875] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1471'.
[  106.225263][ T8893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8893 comm=syz.4.1481
[  106.238065][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'.
[  106.247528][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'.
[  106.261022][ T8893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=8893 comm=syz.4.1481
[  106.540696][ T8912] geneve2: entered promiscuous mode
[  106.546270][ T8912] geneve2: entered allmulticast mode
[  106.557944][ T3994] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  106.567045][ T3994] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  106.576061][ T3994] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  106.593440][ T3994] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  106.649740][ T8925] loop5: detected capacity change from 0 to 1024
[  106.658322][ T8925] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  106.816130][ T8937] loop5: detected capacity change from 0 to 512
[  106.841743][ T8937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.925736][ T8935] ==================================================================
[  106.933928][ T8935] BUG: KCSAN: data-race in __tipc_sendstream / tipc_poll
[  106.940940][ T8935] 
[  106.943252][ T8935] read-write to 0xffff888103e3a166 of 2 bytes by task 8942 on cpu 0:
[  106.951300][ T8935]  __tipc_sendstream+0x804/0xb60
[  106.956225][ T8935]  tipc_sendstream+0x3e/0x60
[  106.960800][ T8935]  __sock_sendmsg+0x145/0x170
[  106.965475][ T8935]  sock_write_iter+0x1d2/0x210
[  106.970230][ T8935]  vfs_write+0x5a6/0x9f0
[  106.974472][ T8935]  ksys_write+0xdc/0x1a0
[  106.978703][ T8935]  __x64_sys_write+0x40/0x50
[  106.983279][ T8935]  x64_sys_call+0x2847/0x3000
[  106.987952][ T8935]  do_syscall_64+0xc0/0x2a0
[  106.992460][ T8935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.998343][ T8935] 
[  107.000664][ T8935] read to 0xffff888103e3a166 of 2 bytes by task 8935 on cpu 1:
[  107.008189][ T8935]  tipc_poll+0x1f9/0x340
[  107.012470][ T8935]  sock_poll+0x21c/0x240
[  107.016705][ T8935]  __io_arm_poll_handler+0x1ee/0xb60
[  107.021986][ T8935]  io_poll_add+0x69/0xf0
[  107.026227][ T8935]  __io_issue_sqe+0xfd/0x2d0
[  107.030819][ T8935]  io_issue_sqe+0x56/0xa70
[  107.035329][ T8935]  io_submit_sqes+0x78a/0x11b0
[  107.040104][ T8935]  __se_sys_io_uring_enter+0x1bf/0x1c70
[  107.045640][ T8935]  __x64_sys_io_uring_enter+0x78/0x90
[  107.050998][ T8935]  x64_sys_call+0x27e4/0x3000
[  107.055669][ T8935]  do_syscall_64+0xc0/0x2a0
[  107.060161][ T8935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.066042][ T8935] 
[  107.068352][ T8935] value changed: 0x0186 -> 0x01c7
[  107.073356][ T8935] 
[  107.075663][ T8935] Reported by Kernel Concurrency Sanitizer on:
[  107.081810][ T8935] CPU: 1 UID: 0 PID: 8935 Comm: syz.1.1497 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  107.093083][ T8935] Tainted: [W]=WARN
[  107.096870][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  107.106905][ T8935] ==================================================================
[  107.653770][ T7690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.