last executing test programs:

3.420515931s ago: executing program 3 (id=569):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

3.196708725s ago: executing program 3 (id=572):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
getdents(r2, &(0x7f0000000200)=""/65, 0x41)
getdents(r2, 0xfffffffffffffffd, 0xbb)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000040000000a0000000c0001001851e1f42614dc0a"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x40a82, 0x0)
write$eventfd(r6, &(0x7f0000000000)=0x4299, 0x8)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=@newchain={0x80, 0x64, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x2}, {0x2, 0xfff3}, {0xf, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_UDP_SRC={0x6}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x1}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0xbfaf}, @TCA_FLOWER_INDEV={0x14, 0x2, 'macvlan1\x00'}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0x7fffffff}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x40)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000006d00e73c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040045ec000018003480eaff350076657468315f746f5f626f6e640000001400030076657468315f746f5f626f6e64000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8090)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r1)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x90}}, 0x0)

3.11510255s ago: executing program 3 (id=574):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r4, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0x32600)

2.252248079s ago: executing program 2 (id=595):
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x4, 0x4, 0xe000, 0x6, 0x4, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010100}}}}}}, 0x0)

2.179663163s ago: executing program 2 (id=598):
clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x4100000000000000, 0x0, 0x7, 0x100000000, 0xfffffffffffffffd, 0x80000000077, 0x0, 0x0, 0x0, 0x83, 0x248a, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x40000006, 0x5, 0x2000000, 0xf439})

2.072672179s ago: executing program 2 (id=599):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090afffffffffffffffb0000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0)

2.06991812s ago: executing program 0 (id=600):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="022d3ff472b30e17a54f7c14023b9597bd3425908d895c838ade3d7430122c390ab2643c2fc1aec323172f6efd2b6aaae4c7d113294b34a6e542363548", 0x3d}], 0x1)

2.006495363s ago: executing program 0 (id=601):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x4, 0x3, 0x1})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7)
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000050007"], 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040)
r12 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x5, 0x7}, 0x4, 0x32, 0x43a1bd76, 0x0, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002cbd7000fbdbdf251000000008000300", @ANYRES32=r11, @ANYBLOB="0c00d3ce0600000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
close_range(r2, 0xffffffffffffffff, 0x0)

1.941548327s ago: executing program 2 (id=602):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa4cb14bc9a1bc86dd6100272400303afffc020000000000000000000000000001ff020000eaffffff00000000000008010200907800009379663a794500023a00fc020000000000000000000000000005fe8000000000000000000000000000bb7df91c3b333114acf431058865f40acbc90f18a9e083cdbb6541fb3bdbe7"], 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000580)={'tunl0\x00', <r6=>0x0, 0x80, 0x7800, 0xff, 0x9, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @private=0xa010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x3c, [@multicast1, @remote, @rand_addr=0x64010101, @private=0xa010102, @multicast1]}, @generic={0x44, 0xa, "0a4f5e319099983d"}, @generic={0x88, 0xe, "f3adcde68b0c10d610114117"}, @timestamp_addr={0x44, 0x3c, 0x41, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}, {@private=0xa010102, 0x10001}, {@local, 0x7f}, {@broadcast, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x34, 0x1, 0x6, [{@loopback, 0xfffffffc}, {@multicast1, 0x5}]}, @rr={0x7, 0x7, 0x55, [@multicast2]}]}}}}})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r8=>r3, {0xb88e}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r9=>r5, {0x9}}, './file0\x00'})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x7, 0x4, 0x1, 0x10, 0x8}, @call={0x85, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x1, 0x5, 0x6}, {0x0, 0x5, 0x3, 0x6}, {0x2, 0x3, 0xf, 0xc}, {0x5, 0x3, 0xf, 0xa}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140))
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r12, 0x9}, 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

1.670528443s ago: executing program 0 (id=605):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xff05, &(0x7f0000000180))

1.627383945s ago: executing program 0 (id=606):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x63, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x3fff8002}, 0x0, 0x32, 0x43a1fd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
unshare(0x26020480)
syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
open(0x0, 0x64842, 0x2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r9, 0x400, 0x1)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

1.626591275s ago: executing program 2 (id=607):
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xa8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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")
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
open(&(0x7f0000000000)='./file0\x00', 0x40400, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2003a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x4, 0x400000, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket(0x2c, 0x3, 0x0)
write(r0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x500)
exit(0xe7)
setxattr$system_posix_acl(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x1)
statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/104)

1.491969573s ago: executing program 3 (id=609):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a30000000000500040002000000140007800500150000000000080011400000000c050005000800000005000100060000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48cc1)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94)
r2 = memfd_secret(0x80000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x8bf4}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3fe9}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4841)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.343503282s ago: executing program 1 (id=612):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

1.237283248s ago: executing program 3 (id=613):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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")
open(0x0, 0x8827e, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4625, 0x0, @remote, 0xfffffe01}}}, 0x108)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x11, 0x0}, 0x10)

1.171291061s ago: executing program 4 (id=615):
r0 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3fd, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x2}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x7, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)

1.136840794s ago: executing program 0 (id=616):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000300))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
syz_open_dev$vcsa(&(0x7f0000000100), 0x2, 0x200)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010)
socket$inet_sctp(0x2, 0x1, 0x84)

1.136268544s ago: executing program 1 (id=617):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r1 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000800000008500000083000000bf09000000000000550901000000000095000000000000000709000000000000bf91000000000000bf020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94)
rmdir(&(0x7f00000002c0)='./control\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540), 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000002400012d2cb57000fcdbdf25ff03000006000300"], 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000000000000000039"], 0x0, 0x40, 0x0, 0x1}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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")
r7 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
truncate(&(0x7f0000000000)='./bus\x00', 0x9471)
finit_module(r7, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4804)

1.112644775s ago: executing program 4 (id=618):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b936, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040f0}, 0x4890)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56547, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x3, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0xffffffff, 0x9, 0x7, 0xffffffffffffffff}}]}}}]}, 0x78}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

1.069645398s ago: executing program 3 (id=619):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
close_range(r3, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r4, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[], 0x32600)

1.01629048s ago: executing program 1 (id=620):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2552, 0x0, 0x0, 0x256}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x2d)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0xfffffff9, 0xa, 0x4, 0xfffffffe, 0x83, "db8f2d2b3b7596160c6981acf8805944823a7f"})
write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x83, "00000000000000000000ffff00000000000008"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x7)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0)

966.072664ms ago: executing program 4 (id=621):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendto(r0, 0x0, 0xa00, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x80fe, 0xfdff}, 0x80)

885.663188ms ago: executing program 4 (id=622):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="022d3ff472b30e17a54f7c14023b9597bd3425908d895c838ade3d7430122c390ab2643c2fc1aec323172f6efd2b6aaae4c7d113294b34a6e542363548998ea6a2d6ff9cf3d289", 0x47}], 0x1)

851.39219ms ago: executing program 4 (id=623):
r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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")
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c)
r2 = open(0x0, 0x4067bd, 0x5f)
mkdir(&(0x7f0000000000)='./file0\x00', 0x113)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x278, &(0x7f0000000500)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r5, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94)
getdents(r4, 0x0, 0xbb)
openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x200000000000000)
socket$inet_udp(0x2, 0x2, 0x0)
move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup/../file0/file0/file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x140)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x1f, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ffffffff000000006ff40000181b36110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000af8600007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181b0000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0xd2, &(0x7f0000000580)=""/210, 0x40f00, 0x20, '\x00', r7, @sk_skb, r8, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x8, &(0x7f00000006c0)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000700)=[{0x2, 0x1, 0x10}, {0x5, 0x2, 0x3, 0x4}, {0x3, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x2, 0x4}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x1, 0xb, 0x9}, {0x5, 0x3, 0x10, 0x6}, {0x2, 0x3, 0xe, 0xb}]}, 0x94)
r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xd, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC=r9], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4625, 0x0, @remote, 0xfffffe01}}}, 0x108)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

151.661011ms ago: executing program 2 (id=624):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb758}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x404000, 0x13, 0x8}, 0x18)
read$msr(r1, &(0x7f0000000300)=""/147, 0x93)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100fb8, 0x6, 0x0, 0xd, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r3, 0xa, 0x12)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = dup2(r3, r4)
fcntl$setown(r5, 0x8, r2)
tkill(r2, 0x13)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = fsopen(&(0x7f0000000000)='coda\x00', 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x80)
r10 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000001c00), 0x12)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]})
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f00000001c0)={0x2007})

91.501004ms ago: executing program 1 (id=625):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendto(r0, 0x0, 0x0, 0x4000810, &(0x7f00000008c0)=@can, 0x80)

91.125134ms ago: executing program 0 (id=626):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x2, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x6}, 0x10, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

87.186344ms ago: executing program 4 (id=627):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

29.672128ms ago: executing program 1 (id=628):
r0 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3fd, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x2}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x7, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 1 (id=629):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3250}, 0x0, 0x0, 0x4, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r3, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x7, 0x21, &(0x7f0000001180)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x1, 0x1, 0x6, 0xfffffffffffffff0, 0x10}, @ringbuf_query, @alu={0x7, 0x0, 0x1e, 0x7, 0x1, 0x2, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @snprintf], &(0x7f00000012c0)='syzkaller\x00', 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x0, 0xc, 0x80000001, 0xf978}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), 0x0}, 0x20)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003000), 0x201, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts.
[   33.448407][   T29] kauditd_printk_skb: 3 callbacks suppressed
[   33.448424][   T29] audit: type=1400 audit(1770292889.530:70): avc:  denied  { mounton } for  pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.477564][   T29] audit: type=1400 audit(1770292889.560:71): avc:  denied  { mount } for  pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.479847][ T3299] cgroup: Unknown subsys name 'net'
[   33.505386][   T29] audit: type=1400 audit(1770292889.590:72): avc:  denied  { unmount } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.637087][ T3299] cgroup: Unknown subsys name 'cpuset'
[   33.643342][ T3299] cgroup: Unknown subsys name 'rlimit'
[   33.765020][   T29] audit: type=1400 audit(1770292889.840:73): avc:  denied  { setattr } for  pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.795308][   T29] audit: type=1400 audit(1770292889.850:74): avc:  denied  { create } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.815868][   T29] audit: type=1400 audit(1770292889.850:75): avc:  denied  { write } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.836681][   T29] audit: type=1400 audit(1770292889.850:76): avc:  denied  { read } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.857066][   T29] audit: type=1400 audit(1770292889.870:77): avc:  denied  { read } for  pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   33.878038][   T29] audit: type=1400 audit(1770292889.870:78): avc:  denied  { mounton } for  pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.898406][ T3305] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   33.902999][   T29] audit: type=1400 audit(1770292889.870:79): avc:  denied  { mount } for  pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   33.941669][ T3299] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   35.121413][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   35.162411][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   35.229667][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   35.261635][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.268799][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.275933][ T3319] bridge_slave_0: entered allmulticast mode
[   35.282520][ T3319] bridge_slave_0: entered promiscuous mode
[   35.294141][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.301363][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.308575][ T3319] bridge_slave_1: entered allmulticast mode
[   35.314950][ T3319] bridge_slave_1: entered promiscuous mode
[   35.321736][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   35.343808][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.351064][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.358240][ T3312] bridge_slave_0: entered allmulticast mode
[   35.364709][ T3312] bridge_slave_0: entered promiscuous mode
[   35.388178][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.395312][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.402505][ T3312] bridge_slave_1: entered allmulticast mode
[   35.408986][ T3312] bridge_slave_1: entered promiscuous mode
[   35.422435][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.448262][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.483069][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.492900][ T3319] team0: Port device team_slave_0 added
[   35.511607][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.520871][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.527984][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.535223][ T3320] bridge_slave_0: entered allmulticast mode
[   35.541820][ T3320] bridge_slave_0: entered promiscuous mode
[   35.549149][ T3319] team0: Port device team_slave_1 added
[   35.555318][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.562428][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.569604][ T3320] bridge_slave_1: entered allmulticast mode
[   35.576318][ T3320] bridge_slave_1: entered promiscuous mode
[   35.610214][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.617494][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.624749][ T3314] bridge_slave_0: entered allmulticast mode
[   35.631310][ T3314] bridge_slave_0: entered promiscuous mode
[   35.639146][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.648430][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.655527][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.662754][ T3314] bridge_slave_1: entered allmulticast mode
[   35.669193][ T3314] bridge_slave_1: entered promiscuous mode
[   35.686435][ T3312] team0: Port device team_slave_0 added
[   35.698321][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.720150][ T3312] team0: Port device team_slave_1 added
[   35.730856][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.737923][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.764000][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.779689][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   35.794961][ T3320] team0: Port device team_slave_0 added
[   35.805759][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.812746][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.838788][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.851333][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.864779][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.879575][ T3320] team0: Port device team_slave_1 added
[   35.890410][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.897389][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.923383][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.954889][ T3319] hsr_slave_0: entered promiscuous mode
[   35.961181][ T3319] hsr_slave_1: entered promiscuous mode
[   35.983086][ T3314] team0: Port device team_slave_0 added
[   35.989062][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.996045][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.022469][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.033837][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.040852][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.066875][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.081095][ T3314] team0: Port device team_slave_1 added
[   36.091685][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.098735][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.124839][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.153572][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.160709][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.187351][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.198580][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.205555][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.231576][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.286669][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.293821][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.301326][ T3315] bridge_slave_0: entered allmulticast mode
[   36.308032][ T3315] bridge_slave_0: entered promiscuous mode
[   36.335208][ T3312] hsr_slave_0: entered promiscuous mode
[   36.341508][ T3312] hsr_slave_1: entered promiscuous mode
[   36.347489][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   36.353227][ T3312] Cannot create hsr debugfs directory
[   36.358980][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.366150][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.373629][ T3315] bridge_slave_1: entered allmulticast mode
[   36.380209][ T3315] bridge_slave_1: entered promiscuous mode
[   36.389105][ T3320] hsr_slave_0: entered promiscuous mode
[   36.395340][ T3320] hsr_slave_1: entered promiscuous mode
[   36.401480][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   36.407280][ T3320] Cannot create hsr debugfs directory
[   36.422294][ T3314] hsr_slave_0: entered promiscuous mode
[   36.428461][ T3314] hsr_slave_1: entered promiscuous mode
[   36.434543][ T3314] debugfs: 'hsr0' already exists in 'hsr'
[   36.440326][ T3314] Cannot create hsr debugfs directory
[   36.479564][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.507328][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.549058][ T3315] team0: Port device team_slave_0 added
[   36.567701][ T3315] team0: Port device team_slave_1 added
[   36.597466][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.604645][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.631122][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.652068][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.659119][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.685168][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.767778][ T3315] hsr_slave_0: entered promiscuous mode
[   36.774002][ T3315] hsr_slave_1: entered promiscuous mode
[   36.779969][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   36.785701][ T3315] Cannot create hsr debugfs directory
[   36.803387][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   36.817166][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   36.836642][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   36.850958][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   36.887172][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   36.896203][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   36.905231][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   36.920986][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   36.961783][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.972731][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   36.986691][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   36.999683][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   37.033350][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   37.043213][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   37.052635][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   37.062358][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   37.073525][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   37.082639][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   37.091558][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   37.108056][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   37.126304][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.149173][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   37.161500][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.168734][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.197282][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.204445][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.283013][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.304112][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.317329][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.331890][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   37.341759][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.358537][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.365716][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.374881][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.381989][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.396429][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   37.412228][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   37.425334][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   37.435712][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.442869][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.452798][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.459994][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.468889][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.475985][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.489730][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.496925][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.511770][ T1905] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.518977][ T1905] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.529034][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.550505][ T1905] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.557619][ T1905] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.592705][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.612717][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   37.720792][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.764227][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.779983][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.795811][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.838526][ T3319] veth0_vlan: entered promiscuous mode
[   37.872127][ T3319] veth1_vlan: entered promiscuous mode
[   37.928095][ T3319] veth0_macvtap: entered promiscuous mode
[   37.952544][ T3319] veth1_macvtap: entered promiscuous mode
[   37.973521][ T3315] veth0_vlan: entered promiscuous mode
[   37.986303][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.009673][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.024240][ T3314] veth0_vlan: entered promiscuous mode
[   38.050906][ T3315] veth1_vlan: entered promiscuous mode
[   38.059386][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.068309][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.082838][ T3312] veth0_vlan: entered promiscuous mode
[   38.090695][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.101635][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.118606][ T3314] veth1_vlan: entered promiscuous mode
[   38.124761][ T3320] veth0_vlan: entered promiscuous mode
[   38.147086][ T3312] veth1_vlan: entered promiscuous mode
[   38.165051][ T3320] veth1_vlan: entered promiscuous mode
[   38.174334][ T3315] veth0_macvtap: entered promiscuous mode
[   38.174850][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   38.207874][ T3315] veth1_macvtap: entered promiscuous mode
[   38.215160][ T3314] veth0_macvtap: entered promiscuous mode
[   38.224163][ T3320] veth0_macvtap: entered promiscuous mode
[   38.246539][ T3314] veth1_macvtap: entered promiscuous mode
[   38.254058][ T3320] veth1_macvtap: entered promiscuous mode
[   38.277897][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.290227][ T3481] syzkaller0: entered promiscuous mode
[   38.295824][ T3481] syzkaller0: entered allmulticast mode
[   38.304590][ T3312] veth0_macvtap: entered promiscuous mode
[   38.312247][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.324368][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.333431][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.345560][ T3312] veth1_macvtap: entered promiscuous mode
[   38.353347][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.365203][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.374877][   T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.384264][   T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.401114][   T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.413038][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.423190][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.428096][ T3481] 0: reclassify loop, rule prio 0, protocol 800
[   38.446978][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.454303][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.490145][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.497652][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.507995][   T29] kauditd_printk_skb: 32 callbacks suppressed
[   38.508011][   T29] audit: type=1400 audit(1770292894.590:112): avc:  denied  { map_create } for  pid=3483 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   38.533948][   T29] audit: type=1400 audit(1770292894.620:113): avc:  denied  { map_read map_write } for  pid=3483 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   38.566026][   T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.591840][   T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.628557][   T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.677696][   T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.698434][   T29] audit: type=1400 audit(1770292894.770:114): avc:  denied  { create } for  pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   38.718137][   T29] audit: type=1400 audit(1770292894.770:115): avc:  denied  { connect } for  pid=3491 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   38.737762][   T29] audit: type=1400 audit(1770292894.770:116): avc:  denied  { ioctl } for  pid=3491 comm="syz.2.7" path="socket:[4062]" dev="sockfs" ino=4062 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   38.766803][   T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.781063][   T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.821986][   T29] audit: type=1400 audit(1770292894.780:117): avc:  denied  { write } for  pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   38.829965][   T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.841419][   T29] audit: type=1400 audit(1770292894.870:118): avc:  denied  { create } for  pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.874169][ T3500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   38.907294][ T3500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   38.917344][   T29] audit: type=1400 audit(1770292894.960:119): avc:  denied  { write } for  pid=3492 comm="syz.4.5" path="socket:[4072]" dev="sockfs" ino=4072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.941520][   T29] audit: type=1400 audit(1770292894.960:121): avc:  denied  { create } for  pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   38.960916][   T29] audit: type=1400 audit(1770292894.960:120): avc:  denied  { read write } for  pid=3498 comm="syz.2.8" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.052355][   T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.069807][ T3508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'.
[   39.083075][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   39.124963][ T3512] tipc: Started in network mode
[   39.129959][ T3512] tipc: Node identity 5adf1c01c766, cluster identity 4711
[   39.137491][ T3512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.147298][ T3512] syzkaller0: MTU too low for tipc bearer
[   39.153152][ T3512] tipc: Disabling bearer <eth:syzkaller0>
[   39.163832][   T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.254656][ T3515] netlink: 'syz.1.10': attribute type 1 has an invalid length.
[   39.262541][ T3515] netlink: 'syz.1.10': attribute type 2 has an invalid length.
[   39.375966][ T3516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'.
[   39.605947][ T3531] netlink: 'syz.4.16': attribute type 8 has an invalid length.
[   39.832335][ T3536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.860813][ T3538] team0: entered promiscuous mode
[   39.865937][ T3538] team_slave_0: entered promiscuous mode
[   39.871851][ T3538] team_slave_1: entered promiscuous mode
[   40.009736][ T3545] veth0_vlan: entered allmulticast mode
[   40.055719][ T3545] veth0_vlan: left promiscuous mode
[   40.064752][ T3545] veth0_vlan: entered promiscuous mode
[   40.272169][ T3563] netlink: 'syz.4.27': attribute type 2 has an invalid length.
[   40.503905][ T3571] Ÿë
: port 1(veth0_to_team) entered blocking state
[   40.510839][ T3571] Ÿë
: port 1(veth0_to_team) entered disabled state
[   40.532602][ T3571] veth0_to_team: entered allmulticast mode
[   40.539436][ T3571] veth0_to_team: entered promiscuous mode
[   40.560710][ T3577] loop4: detected capacity change from 0 to 8192
[   40.574320][ T3577] =======================================================
[   40.574320][ T3577] WARNING: The mand mount option has been deprecated and
[   40.574320][ T3577]          and is ignored by this kernel. Remove the mand
[   40.574320][ T3577]          option from the mount to silence this warning.
[   40.574320][ T3577] =======================================================
[   40.641807][ T3585] Ÿë
: port 1(gretap0) entered blocking state
[   40.645343][ T3577] mmap: syz.4.36 (3577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   40.648289][ T3585] Ÿë
: port 1(gretap0) entered disabled state
[   40.668443][ T3585] gretap0: entered allmulticast mode
[   40.680123][ T3585] gretap0: entered promiscuous mode
[   40.701684][ T3320] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   40.709686][ T3320] FAT-fs (loop4): Filesystem has been set read-only
[   40.778376][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.789170][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.799868][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.810402][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.821259][ T3597] process 'syz.1.44' launched './file0' with NULL argv: empty string added
[   40.883951][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.924003][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.940294][ T3606] loop0: detected capacity change from 0 to 128
[   40.950041][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.955388][ T3606] FAT-fs (loop0): bogus number of reserved sectors
[   40.960987][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   40.966509][ T3606] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   40.966527][ T3606] FAT-fs (loop0): Can't find a valid FAT filesystem
[   40.996534][    C1] hrtimer: interrupt took 26956 ns
[   41.009156][ T3607] veth0_vlan: entered allmulticast mode
[   41.017019][ T3606] netlink: 104 bytes leftover after parsing attributes in process `syz.0.49'.
[   41.056860][ T3610] netlink: 34 bytes leftover after parsing attributes in process `syz.4.50'.
[   41.065522][ T3598] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[   41.132449][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'.
[   41.190821][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'.
[   41.215064][ T3612] loop4: detected capacity change from 0 to 8192
[   41.270240][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'.
[   41.311399][ T3320] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   41.319409][ T3320] FAT-fs (loop4): Filesystem has been set read-only
[   41.482668][ T3626] loop3: detected capacity change from 0 to 8192
[   41.530894][ T3314] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[   41.538904][ T3314] FAT-fs (loop3): Filesystem has been set read-only
[   41.672759][ T3636] geneve2: entered promiscuous mode
[   41.681369][ T3431] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 44365 - 0
[   41.691097][ T3431] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 44365 - 0
[   41.707162][ T3431] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 44365 - 0
[   41.721061][ T3431] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 44365 - 0
[   41.745751][ T3638] veth0_vlan: entered allmulticast mode
[   41.793509][ T3638] veth0_vlan: left promiscuous mode
[   41.802351][ T3638] veth0_vlan: entered promiscuous mode
[   41.857573][ T3646] veth0_vlan: entered allmulticast mode
[   41.868790][ T3642] loop4: detected capacity change from 0 to 8192
[   41.939905][ T3653] veth0_vlan: left promiscuous mode
[   41.967269][ T3653] veth0_vlan: entered promiscuous mode
[   42.012264][ T3320] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   42.014255][ T3648] syzkaller0: entered promiscuous mode
[   42.020319][ T3320] FAT-fs (loop4): Filesystem has been set read-only
[   42.032588][ T3648] syzkaller0: entered allmulticast mode
[   42.111894][ T3666] loop4: detected capacity change from 0 to 128
[   42.123531][ T3666] FAT-fs (loop4): bogus number of reserved sectors
[   42.130250][ T3666] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   42.140035][ T3666] FAT-fs (loop4): Can't find a valid FAT filesystem
[   42.150324][ T3666] netlink: 104 bytes leftover after parsing attributes in process `syz.4.70'.
[   42.427365][ T3682] loop0: detected capacity change from 0 to 8192
[   42.493267][ T3315] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   42.501281][ T3315] FAT-fs (loop0): Filesystem has been set read-only
[   42.572158][ T3700] syzkaller0: entered promiscuous mode
[   42.577719][ T3700] syzkaller0: entered allmulticast mode
[   42.718164][ T3705] syzkaller0: entered promiscuous mode
[   42.723722][ T3705] syzkaller0: entered allmulticast mode
[   42.913831][ T3718] veth0_vlan: left promiscuous mode
[   42.934788][ T3718] veth0_vlan: entered promiscuous mode
[   42.972625][ T3729] tipc: Started in network mode
[   42.977779][ T3729] tipc: Node identity ca969eb4aae4, cluster identity 4711
[   42.985146][ T3729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.995355][ T3726] tipc: Disabling bearer <eth:syzkaller0>
[   43.041250][ T3730] syzkaller0: entered promiscuous mode
[   43.047323][ T3730] syzkaller0: entered allmulticast mode
[   43.053881][ T3738] loop3: detected capacity change from 0 to 128
[   43.079974][ T3741] netlink: 34 bytes leftover after parsing attributes in process `syz.2.104'.
[   43.113724][ T3738] FAT-fs (loop3): bogus number of reserved sectors
[   43.120722][ T3738] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   43.130596][ T3738] FAT-fs (loop3): Can't find a valid FAT filesystem
[   43.137957][ T3736] loop0: detected capacity change from 0 to 8192
[   43.218128][ T3315] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   43.226414][ T3315] FAT-fs (loop0): Filesystem has been set read-only
[   43.317555][ T3755] netlink: 'syz.4.111': attribute type 8 has an invalid length.
[   43.478252][ T3774] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.543010][ T3779] syzkaller0: entered promiscuous mode
[   43.548657][ T3779] syzkaller0: entered allmulticast mode
[   43.573744][ T3779] net_ratelimit: 11734 callbacks suppressed
[   43.573764][ T3779] 0: reclassify loop, rule prio 0, protocol 800
[   43.616870][   T29] kauditd_printk_skb: 61 callbacks suppressed
[   43.616888][   T29] audit: type=1400 audit(1770292899.700:183): avc:  denied  { read write } for  pid=3737 comm="syz.3.102" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   43.646788][   T29] audit: type=1400 audit(1770292899.700:184): avc:  denied  { open } for  pid=3737 comm="syz.3.102" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   44.098616][ T3804] loop4: detected capacity change from 0 to 128
[   44.140478][ T3804] FAT-fs (loop4): bogus number of reserved sectors
[   44.147230][ T3804] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   44.157472][ T3804] FAT-fs (loop4): Can't find a valid FAT filesystem
[   44.181433][ T3806] veth0_vlan: left promiscuous mode
[   44.188054][ T3806] veth0_vlan: entered promiscuous mode
[   44.219730][ T3804] __nla_validate_parse: 6 callbacks suppressed
[   44.219860][ T3804] netlink: 104 bytes leftover after parsing attributes in process `syz.4.129'.
[   44.308808][   T29] audit: type=1400 audit(1770292900.380:185): avc:  denied  { ioctl } for  pid=3810 comm="syz.3.132" path="socket:[5662]" dev="sockfs" ino=5662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.456603][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'.
[   44.475206][ T3823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.138'.
[   44.494849][ T3823] FAULT_INJECTION: forcing a failure.
[   44.494849][ T3823] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   44.509111][ T3823] CPU: 0 UID: 0 PID: 3823 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.509192][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   44.509286][ T3823] Call Trace:
[   44.509299][ T3823]  <TASK>
[   44.509311][ T3823]  __dump_stack+0x1d/0x30
[   44.509353][ T3823]  dump_stack_lvl+0x95/0xd0
[   44.509381][ T3823]  dump_stack+0x15/0x1b
[   44.509462][ T3823]  should_fail_ex+0x263/0x280
[   44.509596][ T3823]  should_fail+0xb/0x20
[   44.509709][ T3823]  should_fail_usercopy+0x1a/0x20
[   44.509775][ T3823]  _copy_to_user+0x20/0xa0
[   44.509832][ T3823]  simple_read_from_buffer+0xb5/0x130
[   44.509871][ T3823]  proc_fail_nth_read+0x10e/0x150
[   44.509902][ T3823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   44.509935][ T3823]  vfs_read+0x1ab/0x7f0
[   44.510081][ T3823]  ? __rcu_read_unlock+0x4e/0x70
[   44.510127][ T3823]  ? __fget_files+0x184/0x1c0
[   44.510158][ T3823]  ? mutex_lock+0x57/0x90
[   44.510250][ T3823]  ksys_read+0xdc/0x1a0
[   44.510278][ T3823]  __x64_sys_read+0x40/0x50
[   44.510380][ T3823]  x64_sys_call+0x2889/0x3000
[   44.510411][ T3823]  do_syscall_64+0xc0/0x2a0
[   44.510443][ T3823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.510535][ T3823] RIP: 0033:0x7f32a320b78e
[   44.510566][ T3823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   44.510587][ T3823] RSP: 002b:00007f32a1ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.510641][ T3823] RAX: ffffffffffffffda RBX: 00007f32a1ca76c0 RCX: 00007f32a320b78e
[   44.510767][ T3823] RDX: 000000000000000f RSI: 00007f32a1ca70a0 RDI: 0000000000000004
[   44.510781][ T3823] RBP: 00007f32a1ca7090 R08: 0000000000000000 R09: 0000000000000000
[   44.510796][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   44.510812][ T3823] R13: 00007f32a34c6038 R14: 00007f32a34c5fa0 R15: 00007fff567c9048
[   44.510840][ T3823]  </TASK>
[   44.759483][ T3825] FAULT_INJECTION: forcing a failure.
[   44.759483][ T3825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.772727][ T3825] CPU: 0 UID: 0 PID: 3825 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.772760][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   44.772773][ T3825] Call Trace:
[   44.772780][ T3825]  <TASK>
[   44.772788][ T3825]  __dump_stack+0x1d/0x30
[   44.772929][ T3825]  dump_stack_lvl+0x95/0xd0
[   44.773011][ T3825]  dump_stack+0x15/0x1b
[   44.773035][ T3825]  should_fail_ex+0x263/0x280
[   44.773139][ T3825]  should_fail+0xb/0x20
[   44.773171][ T3825]  should_fail_usercopy+0x1a/0x20
[   44.773269][ T3825]  _copy_to_user+0x20/0xa0
[   44.773291][ T3825]  bpf_test_finish+0x1a2/0x500
[   44.773328][ T3825]  bpf_prog_test_run_skb+0xcb1/0xf50
[   44.773421][ T3825]  ? __fget_files+0x184/0x1c0
[   44.773456][ T3825]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   44.773496][ T3825]  bpf_prog_test_run+0x204/0x340
[   44.773597][ T3825]  __sys_bpf+0x4c0/0x7b0
[   44.773643][ T3825]  __x64_sys_bpf+0x41/0x50
[   44.773714][ T3825]  x64_sys_call+0x28e1/0x3000
[   44.773760][ T3825]  do_syscall_64+0xc0/0x2a0
[   44.773795][ T3825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.773829][ T3825] RIP: 0033:0x7f32a324aeb9
[   44.773850][ T3825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.773873][ T3825] RSP: 002b:00007f32a1ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   44.773898][ T3825] RAX: ffffffffffffffda RBX: 00007f32a34c5fa0 RCX: 00007f32a324aeb9
[   44.773912][ T3825] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a
[   44.773972][ T3825] RBP: 00007f32a1ca7090 R08: 0000000000000000 R09: 0000000000000000
[   44.774040][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.774056][ T3825] R13: 00007f32a34c6038 R14: 00007f32a34c5fa0 R15: 00007fff567c9048
[   44.774083][ T3825]  </TASK>
[   45.054806][ T3829] geneve2: entered promiscuous mode
[   45.083016][   T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 58122 - 0
[   45.092732][   T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 58122 - 0
[   45.102233][   T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 58122 - 0
[   45.112383][   T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 58122 - 0
[   45.185484][ T3319] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   45.193455][ T3319] FAT-fs (loop2): Filesystem has been set read-only
[   45.290594][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.352408][   T29] audit: type=1400 audit(1770292901.430:186): avc:  denied  { mount } for  pid=3843 comm="syz.0.145" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   45.377160][ T3844] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.386633][   T29] audit: type=1400 audit(1770292901.460:187): avc:  denied  { add_name } for  pid=3843 comm="syz.0.145" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.386664][   T29] audit: type=1400 audit(1770292901.460:188): avc:  denied  { create } for  pid=3843 comm="syz.0.145" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   45.386691][   T29] audit: type=1400 audit(1770292901.460:189): avc:  denied  { write } for  pid=3843 comm="syz.0.145" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.386724][   T29] audit: type=1400 audit(1770292901.460:190): avc:  denied  { open } for  pid=3843 comm="syz.0.145" path="/28/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.394911][   T29] audit: type=1400 audit(1770292901.470:191): avc:  denied  { read } for  pid=3843 comm="syz.0.145" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   45.466613][ T3861] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   45.592545][ T3863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.611649][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.719053][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.889394][ T3870] set_capacity_and_notify: 4 callbacks suppressed
[   45.889412][ T3870] loop0: detected capacity change from 0 to 8192
[   45.932585][ T3877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'.
[   45.941666][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[   45.978950][ T3315] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   45.987045][ T3315] FAT-fs (loop0): Filesystem has been set read-only
[   46.209354][ T3895] syzkaller0: entered promiscuous mode
[   46.215059][ T3895] syzkaller0: entered allmulticast mode
[   46.221712][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'.
[   46.230911][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'.
[   46.247381][ T3895] 0: reclassify loop, rule prio 0, protocol 800
[   46.283865][ T3897] netlink: 84 bytes leftover after parsing attributes in process `syz.2.168'.
[   46.303260][ T3897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.168'.
[   46.324192][ T3897] netlink: 176 bytes leftover after parsing attributes in process `syz.2.168'.
[   46.584925][ T3904] loop0: detected capacity change from 0 to 8192
[   46.584961][ T3911] veth0_vlan: left promiscuous mode
[   46.599755][ T3911] veth0_vlan: entered promiscuous mode
[   46.727029][ T3923] loop3: detected capacity change from 0 to 512
[   46.763219][ T3923] vfat: Unknown parameter 'u'
[   46.798645][ T3925] syzkaller0: entered promiscuous mode
[   46.804574][ T3925] syzkaller0: entered allmulticast mode
[   46.822020][ T3925] 0: reclassify loop, rule prio 0, protocol 800
[   46.838623][ T3315] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1)
[   46.846612][ T3315] FAT-fs (loop0): Filesystem has been set read-only
[   46.959667][ T3940] Zero length message leads to an empty skb
[   46.998714][ T3927] loop4: detected capacity change from 0 to 8192
[   47.207693][ T3946] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   47.286861][ T3956] bond1: entered promiscuous mode
[   47.292076][ T3956] bridge1: entered promiscuous mode
[   47.297466][ T3956] bond1: entered allmulticast mode
[   47.302700][ T3956] bridge1: entered allmulticast mode
[   47.351456][ T3320] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   47.359533][ T3320] FAT-fs (loop4): Filesystem has been set read-only
[   47.401291][ T3956] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.506892][ T3965] geneve2: entered promiscuous mode
[   47.522137][   T61] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 52039 - 0
[   47.534846][   T61] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 52039 - 0
[   47.567175][   T61] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 52039 - 0
[   47.596499][   T61] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 52039 - 0
[   47.689209][ T3982] loop3: detected capacity change from 0 to 128
[   47.721188][ T3982] FAT-fs (loop3): bogus number of reserved sectors
[   47.728028][ T3982] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   47.737598][ T3982] FAT-fs (loop3): Can't find a valid FAT filesystem
[   47.846032][ T3988] SELinux: ebitmap: truncated map
[   47.853161][ T3988] SELinux: failed to load policy
[   47.904376][ T3993] syzkaller0: entered promiscuous mode
[   47.910297][ T3993] syzkaller0: entered allmulticast mode
[   48.146507][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad0e600: rx timeout, send abort
[   48.154959][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad0e600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   48.170139][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad0ea00: rx timeout, send abort
[   48.180254][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ad0e400: rx timeout, send abort
[   48.189104][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad0ea00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   48.204016][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ad0e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   48.244874][ T4015] veth0_vlan: entered allmulticast mode
[   48.414934][ T4017] loop2: detected capacity change from 0 to 8192
[   48.485835][ T3319] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1)
[   48.494131][ T3319] FAT-fs (loop2): Filesystem has been set read-only
[   48.620600][ T4034] 9p: Bad value for 'rfdno'
[   48.747972][ T4038] loop2: detected capacity change from 0 to 512
[   48.763712][ T4038] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   48.785850][ T4040] netlink: 'syz.0.230': attribute type 8 has an invalid length.
[   48.809688][ T4038] EXT4-fs (loop2): 1 orphan inode deleted
[   48.827560][   T12] __quota_error: 21 callbacks suppressed
[   48.827579][   T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   48.843501][   T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1
[   48.856724][ T4038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.892495][ T4038] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.010521][ T4048] netlink: 'syz.4.231': attribute type 8 has an invalid length.
[   49.037797][   T29] audit: type=1400 audit(1770292905.110:210): avc:  denied  { read append open } for  pid=4032 comm="syz.2.227" path="/43/file1/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   49.094208][ T4052] veth0_vlan: left promiscuous mode
[   49.117070][ T4052] veth0_vlan: entered promiscuous mode
[   49.307534][   T29] audit: type=1400 audit(1770292905.390:211): avc:  denied  { connect } for  pid=4057 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   49.323787][ T4054] loop4: detected capacity change from 0 to 8192
[   49.349505][ T4058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4058 comm=syz.1.237
[   49.393387][   T29] audit: type=1400 audit(1770292905.470:212): avc:  denied  { write } for  pid=4059 comm="syz.1.238" name="icmp6" dev="proc" ino=4026532591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   49.418580][   T29] audit: type=1400 audit(1770292905.470:213): avc:  denied  { create } for  pid=4059 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   49.485867][ T3320] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[   49.495499][ T3320] FAT-fs (loop4): Filesystem has been set read-only
[   49.512361][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.984077][ T4050] loop0: detected capacity change from 0 to 8192
[   50.028360][ T4050] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   50.089285][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.100733][ T4050] FAT-fs (loop0): Filesystem has been set read-only
[   50.127917][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.152252][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.174751][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.188148][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.212612][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.224405][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.234942][   T29] audit: type=1400 audit(1770292906.310:214): avc:  denied  { setopt } for  pid=4087 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   50.235867][   T29] audit: type=1400 audit(1770292906.310:215): avc:  denied  { create } for  pid=4087 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   50.326695][   T29] audit: type=1400 audit(1770292906.410:216): avc:  denied  { append } for  pid=4091 comm="syz.1.251" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   50.352244][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.369836][ T4086] loop2: detected capacity change from 0 to 8192
[   50.370236][ T4086] /dev/loop2: Can't open blockdev
[   50.418057][ T4050] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   50.487495][ T4098] syzkaller0: entered promiscuous mode
[   50.493239][ T4098] syzkaller0: entered allmulticast mode
[   50.622641][ T4109] __nla_validate_parse: 12 callbacks suppressed
[   50.622735][ T4109] netlink: 376 bytes leftover after parsing attributes in process `syz.0.261'.
[   50.700419][ T4111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.898904][ T4120] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.264'.
[   50.988398][ T4122] veth0_vlan: left promiscuous mode
[   51.000771][ T4122] veth0_vlan: entered promiscuous mode
[   51.131082][ T4130] syzkaller0: entered promiscuous mode
[   51.136932][ T4130] syzkaller0: entered allmulticast mode
[   51.473523][ T4152] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.277'.
[   51.484499][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.554780][ T4156] syzkaller0: entered promiscuous mode
[   51.560598][ T4156] syzkaller0: entered allmulticast mode
[   51.771077][ T4170] veth0_vlan: left promiscuous mode
[   51.785879][ T4170] veth0_vlan: entered promiscuous mode
[   51.805754][ T4178] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.290'.
[   51.862746][ T4180] set_capacity_and_notify: 1 callbacks suppressed
[   51.862812][ T4180] loop3: detected capacity change from 0 to 4096
[   51.883127][ T4180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.045869][ T4189] netlink: 'syz.1.294': attribute type 8 has an invalid length.
[   52.127568][ T4193] syzkaller0: entered promiscuous mode
[   52.133515][ T4193] syzkaller0: entered allmulticast mode
[   52.161598][ T4197] FAULT_INJECTION: forcing a failure.
[   52.161598][ T4197] name failslab, interval 1, probability 0, space 0, times 0
[   52.174510][ T4197] CPU: 1 UID: 0 PID: 4197 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   52.174580][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   52.174597][ T4197] Call Trace:
[   52.174606][ T4197]  <TASK>
[   52.174614][ T4197]  __dump_stack+0x1d/0x30
[   52.174641][ T4197]  dump_stack_lvl+0x95/0xd0
[   52.174702][ T4197]  dump_stack+0x15/0x1b
[   52.174729][ T4197]  should_fail_ex+0x263/0x280
[   52.174772][ T4197]  should_failslab+0x8c/0xb0
[   52.174846][ T4197]  __kmalloc_noprof+0xb8/0x580
[   52.174892][ T4197]  ? tcf_idr_create+0x41/0x4a0
[   52.174936][ T4197]  tcf_idr_create+0x41/0x4a0
[   52.174968][ T4197]  ? tcf_idr_check_alloc+0x24e/0x2e0
[   52.175043][ T4197]  tcf_simp_init+0x2b2/0x490
[   52.175095][ T4197]  ? __pfx_tcf_simp_init+0x10/0x10
[   52.175214][ T4197]  tcf_action_init_1+0x395/0x4d0
[   52.175249][ T4197]  tcf_action_init+0x29c/0x700
[   52.175389][ T4197]  tc_ctl_action+0x29b/0x830
[   52.175444][ T4197]  ? __pfx_tc_ctl_action+0x10/0x10
[   52.175472][ T4197]  rtnetlink_rcv_msg+0x6a7/0x720
[   52.175502][ T4197]  netlink_rcv_skb+0x123/0x220
[   52.175619][ T4197]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   52.175648][ T4197]  rtnetlink_rcv+0x1c/0x30
[   52.175671][ T4197]  netlink_unicast+0x5c0/0x690
[   52.175715][ T4197]  netlink_sendmsg+0x5c8/0x6f0
[   52.175805][ T4197]  ? __pfx_netlink_sendmsg+0x10/0x10
[   52.175830][ T4197]  ____sys_sendmsg+0x5af/0x600
[   52.175861][ T4197]  ___sys_sendmsg+0x195/0x1e0
[   52.175904][ T4197]  __x64_sys_sendmsg+0xd4/0x160
[   52.176009][ T4197]  x64_sys_call+0x17ba/0x3000
[   52.176044][ T4197]  do_syscall_64+0xc0/0x2a0
[   52.176086][ T4197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.176112][ T4197] RIP: 0033:0x7f1d26dcaeb9
[   52.176213][ T4197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   52.176236][ T4197] RSP: 002b:00007f1d25827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   52.176261][ T4197] RAX: ffffffffffffffda RBX: 00007f1d27045fa0 RCX: 00007f1d26dcaeb9
[   52.176281][ T4197] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   52.176381][ T4197] RBP: 00007f1d25827090 R08: 0000000000000000 R09: 0000000000000000
[   52.176398][ T4197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.176413][ T4197] R13: 00007f1d27046038 R14: 00007f1d27045fa0 R15: 00007ffe7769f1d8
[   52.176439][ T4197]  </TASK>
[   52.425494][   T29] audit: type=1400 audit(1770292908.510:217): avc:  denied  { write } for  pid=4194 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   52.448385][ T4196] loop2: detected capacity change from 0 to 512
[   52.455653][ T4196] EXT4-fs: Ignoring removed i_version option
[   52.462119][ T4196] EXT4-fs: Ignoring removed bh option
[   52.474211][ T4197] syz.0.298 (4197) used greatest stack depth: 10040 bytes left
[   52.520273][ T4196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.536186][ T4196] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.548320][   T29] audit: type=1400 audit(1770292908.630:218): avc:  denied  { create } for  pid=4194 comm="syz.2.297" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[   52.550299][ T4205] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.301'.
[   52.618323][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.718092][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.802040][ T4228] loop4: detected capacity change from 0 to 1024
[   52.840003][ T4228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.853494][ T4235] syzkaller0: entered promiscuous mode
[   52.859397][ T4235] syzkaller0: entered allmulticast mode
[   52.918333][ T3398] IPVS: starting estimator thread 0...
[   52.968805][ T4242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'.
[   53.006299][ T4247] IPVS: using max 1824 ests per chain, 91200 per kthread
[   53.050401][ T4266] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.313'.
[   53.094916][ T4269] capability: warning: `syz.0.314' uses 32-bit capabilities (legacy support in use)
[   53.127043][ T4276] loop1: detected capacity change from 0 to 128
[   53.183775][ T4281] loop0: detected capacity change from 0 to 128
[   53.233527][ T4281] FAT-fs (loop0): bogus number of reserved sectors
[   53.240547][ T4281] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   53.250164][ T4281] FAT-fs (loop0): Can't find a valid FAT filesystem
[   53.268178][ T4281] netlink: 104 bytes leftover after parsing attributes in process `syz.0.317'.
[   53.791401][ T4299] syzkaller0: entered promiscuous mode
[   53.797140][ T4299] syzkaller0: entered allmulticast mode
[   53.821375][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.906623][ T4307] FAULT_INJECTION: forcing a failure.
[   53.906623][ T4307] name failslab, interval 1, probability 0, space 0, times 0
[   53.920028][ T4307] CPU: 1 UID: 0 PID: 4307 Comm: syz.0.325 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.920062][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   53.920078][ T4307] Call Trace:
[   53.920086][ T4307]  <TASK>
[   53.920096][ T4307]  __dump_stack+0x1d/0x30
[   53.920126][ T4307]  dump_stack_lvl+0x95/0xd0
[   53.920217][ T4307]  dump_stack+0x15/0x1b
[   53.920237][ T4307]  should_fail_ex+0x263/0x280
[   53.920336][ T4307]  should_failslab+0x8c/0xb0
[   53.920360][ T4307]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   53.920389][ T4307]  ? __alloc_skb+0x2f0/0x4b0
[   53.920429][ T4307]  __alloc_skb+0x2f0/0x4b0
[   53.920522][ T4307]  ? __alloc_skb+0x219/0x4b0
[   53.920706][ T4307]  netlink_alloc_large_skb+0xbf/0xf0
[   53.920741][ T4307]  netlink_sendmsg+0x40c/0x6f0
[   53.920835][ T4307]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.920891][ T4307]  ____sys_sendmsg+0x5af/0x600
[   53.920916][ T4307]  ___sys_sendmsg+0x195/0x1e0
[   53.920967][ T4307]  __sys_sendmmsg+0x185/0x320
[   53.921002][ T4307]  __x64_sys_sendmmsg+0x57/0x70
[   53.921027][ T4307]  x64_sys_call+0x1e28/0x3000
[   53.921057][ T4307]  do_syscall_64+0xc0/0x2a0
[   53.921153][ T4307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.921180][ T4307] RIP: 0033:0x7f1d26dcaeb9
[   53.921200][ T4307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.921219][ T4307] RSP: 002b:00007f1d25827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   53.921271][ T4307] RAX: ffffffffffffffda RBX: 00007f1d27045fa0 RCX: 00007f1d26dcaeb9
[   53.921285][ T4307] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[   53.921300][ T4307] RBP: 00007f1d25827090 R08: 0000000000000000 R09: 0000000000000000
[   53.921342][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.921356][ T4307] R13: 00007f1d27046038 R14: 00007f1d27045fa0 R15: 00007ffe7769f1d8
[   53.921383][ T4307]  </TASK>
[   54.324828][ T4336] veth0_vlan: left promiscuous mode
[   54.342735][ T4336] veth0_vlan: entered promiscuous mode
[   54.360680][ T4324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.334'.
[   54.388188][ T4338] syzkaller0: entered promiscuous mode
[   54.394269][ T4338] syzkaller0: entered allmulticast mode
[   54.461697][ T4341] netlink: 'syz.4.337': attribute type 4 has an invalid length.
[   54.487720][ T4346] loop3: detected capacity change from 0 to 512
[   54.526288][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   54.526308][   T29] audit: type=1400 audit(1770292910.560:253): avc:  denied  { wake_alarm } for  pid=4345 comm="syz.3.339" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   54.544884][ T4341] netlink: 'syz.4.337': attribute type 4 has an invalid length.
[   54.554046][   T29] audit: type=1400 audit(1770292910.560:254): avc:  denied  { search } for  pid=4345 comm="syz.3.339" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.587052][   T29] audit: type=1400 audit(1770292910.560:255): avc:  denied  { search } for  pid=4345 comm="syz.3.339" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.611749][   T29] audit: type=1400 audit(1770292910.560:256): avc:  denied  { read open } for  pid=4345 comm="syz.3.339" path="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   54.776177][ T4354] loop3: detected capacity change from 0 to 1024
[   54.797248][ T4352] netlink: 328 bytes leftover after parsing attributes in process `syz.4.342'.
[   54.817921][ T4354] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[   54.829268][ T4354] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   54.839754][ T4354] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.343: inode #4294967295: comm syz.3.343: iget: illegal inode #
[   54.853847][ T4354] EXT4-fs (loop3): no journal found
[   54.859287][ T4354] EXT4-fs (loop3): can't get journal size
[   54.865883][ T4354] EXT4-fs (loop3): failed to initialize system zone (-22)
[   54.873293][ T4354] EXT4-fs (loop3): mount failed
[   55.112816][ T4380] syzkaller0: entered promiscuous mode
[   55.118491][ T4380] syzkaller0: entered allmulticast mode
[   55.135860][ T4382] loop3: detected capacity change from 0 to 4096
[   55.154155][ T4380] 0: reclassify loop, rule prio 0, protocol 800
[   55.172175][ T4382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.220675][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.415908][ T4411] loop1: detected capacity change from 0 to 4096
[   55.433851][ T4412] loop4: detected capacity change from 0 to 4096
[   55.457518][ T4411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.478708][ T4414] syzkaller0: entered promiscuous mode
[   55.484425][ T4414] syzkaller0: entered allmulticast mode
[   55.490902][ T4412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.536563][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.606688][   T29] audit: type=1400 audit(1770292911.680:257): avc:  denied  { cpu } for  pid=4425 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   55.662510][   T29] audit: type=1400 audit(1770292911.740:258): avc:  denied  { setopt } for  pid=4409 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   55.718520][   T29] audit: type=1400 audit(1770292911.790:259): avc:  denied  { create } for  pid=4409 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   55.910786][ T4452] FAULT_INJECTION: forcing a failure.
[   55.910786][ T4452] name failslab, interval 1, probability 0, space 0, times 0
[   55.923686][ T4452] CPU: 1 UID: 0 PID: 4452 Comm: syz.1.383 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.923767][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.923781][ T4452] Call Trace:
[   55.923788][ T4452]  <TASK>
[   55.923824][ T4452]  __dump_stack+0x1d/0x30
[   55.923895][ T4452]  dump_stack_lvl+0x95/0xd0
[   55.923918][ T4452]  dump_stack+0x15/0x1b
[   55.923944][ T4452]  should_fail_ex+0x263/0x280
[   55.923991][ T4452]  should_failslab+0x8c/0xb0
[   55.924021][ T4452]  __kmalloc_noprof+0xb8/0x580
[   55.924050][ T4452]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[   55.924081][ T4452]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[   55.924180][ T4452]  genl_family_rcv_msg_doit+0x4b/0x1f0
[   55.924212][ T4452]  ? selinux_capable+0x31/0x40
[   55.924238][ T4452]  ? security_capable+0x7b/0x90
[   55.924273][ T4452]  ? ns_capable+0x7c/0xb0
[   55.924383][ T4452]  genl_rcv_msg+0x432/0x470
[   55.924408][ T4452]  ? __pfx_netlbl_cipsov4_add+0x10/0x10
[   55.924436][ T4452]  netlink_rcv_skb+0x123/0x220
[   55.924504][ T4452]  ? __pfx_genl_rcv_msg+0x10/0x10
[   55.924543][ T4452]  genl_rcv+0x28/0x40
[   55.924568][ T4452]  netlink_unicast+0x5c0/0x690
[   55.924707][ T4452]  netlink_sendmsg+0x5c8/0x6f0
[   55.924736][ T4452]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.924758][ T4452]  ____sys_sendmsg+0x5af/0x600
[   55.924842][ T4452]  ___sys_sendmsg+0x195/0x1e0
[   55.924955][ T4452]  __x64_sys_sendmsg+0xd4/0x160
[   55.924984][ T4452]  x64_sys_call+0x17ba/0x3000
[   55.925010][ T4452]  do_syscall_64+0xc0/0x2a0
[   55.925045][ T4452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.925144][ T4452] RIP: 0033:0x7f54c870aeb9
[   55.925165][ T4452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.925188][ T4452] RSP: 002b:00007f54c7167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.925257][ T4452] RAX: ffffffffffffffda RBX: 00007f54c8985fa0 RCX: 00007f54c870aeb9
[   55.925353][ T4452] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000005
[   55.925370][ T4452] RBP: 00007f54c7167090 R08: 0000000000000000 R09: 0000000000000000
[   55.925462][ T4452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.925478][ T4452] R13: 00007f54c8986038 R14: 00007f54c8985fa0 R15: 00007ffe644fea68
[   55.925502][ T4452]  </TASK>
[   56.175229][ T4456] __nla_validate_parse: 1 callbacks suppressed
[   56.182326][ T4456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'.
[   56.196687][ T4449] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   56.229979][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.354094][ T4463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'.
[   56.382525][ T4471] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.390: inode #0: comm syz.3.390: iget: illegal inode #
[   56.412340][ T4471] EXT4-fs (loop3): get orphan inode failed
[   56.418941][ T4471] EXT4-fs (loop3): mount failed
[   56.459623][ T4481] Cannot find add_set index 1 as target
[   56.492528][ T4485] netlink: 328 bytes leftover after parsing attributes in process `syz.4.395'.
[   56.531566][   T29] audit: type=1400 audit(1770292912.610:260): avc:  denied  { create } for  pid=4488 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   56.566862][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'.
[   56.576314][   T29] audit: type=1400 audit(1770292912.630:261): avc:  denied  { write } for  pid=4488 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   56.596563][   T29] audit: type=1400 audit(1770292912.630:262): avc:  denied  { bind } for  pid=4488 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   56.634985][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'.
[   56.732835][ T4506] syzkaller0: entered promiscuous mode
[   56.738560][ T4506] syzkaller0: entered allmulticast mode
[   56.750835][ T4506] 0: reclassify loop, rule prio 0, protocol 800
[   56.918179][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.032152][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.201337][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'.
[   57.249460][ T4539] FAULT_INJECTION: forcing a failure.
[   57.249460][ T4539] name failslab, interval 1, probability 0, space 0, times 0
[   57.262464][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.2.418 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.262573][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.262587][ T4539] Call Trace:
[   57.262674][ T4539]  <TASK>
[   57.262685][ T4539]  __dump_stack+0x1d/0x30
[   57.262790][ T4539]  dump_stack_lvl+0x95/0xd0
[   57.262820][ T4539]  dump_stack+0x15/0x1b
[   57.262847][ T4539]  should_fail_ex+0x263/0x280
[   57.262889][ T4539]  should_failslab+0x8c/0xb0
[   57.262961][ T4539]  kmem_cache_alloc_noprof+0x68/0x490
[   57.262990][ T4539]  ? getname_flags+0x7f/0x3b0
[   57.263060][ T4539]  getname_flags+0x7f/0x3b0
[   57.263087][ T4539]  do_sys_openat2+0x60/0x150
[   57.263127][ T4539]  __x64_sys_openat+0xf2/0x120
[   57.263210][ T4539]  x64_sys_call+0x2b07/0x3000
[   57.263239][ T4539]  do_syscall_64+0xc0/0x2a0
[   57.263282][ T4539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.263376][ T4539] RIP: 0033:0x7fef4757aeb9
[   57.263443][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.263468][ T4539] RSP: 002b:00007fef45fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   57.263492][ T4539] RAX: ffffffffffffffda RBX: 00007fef477f5fa0 RCX: 00007fef4757aeb9
[   57.263506][ T4539] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   57.263520][ T4539] RBP: 00007fef45fd7090 R08: 0000000000000000 R09: 0000000000000000
[   57.263538][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.263555][ T4539] R13: 00007fef477f6038 R14: 00007fef477f5fa0 R15: 00007ffe3fd429a8
[   57.263610][ T4539]  </TASK>
[   57.511943][ T4543] syzkaller0: entered promiscuous mode
[   57.518183][ T4543] syzkaller0: entered allmulticast mode
[   57.530546][ T4543] 0: reclassify loop, rule prio 0, protocol 800
[   57.573280][ T4549] set_capacity_and_notify: 2 callbacks suppressed
[   57.573300][ T4549] loop1: detected capacity change from 0 to 128
[   57.587742][ T4549] FAT-fs (loop1): bogus number of reserved sectors
[   57.594444][ T4549] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   57.604291][ T4549] FAT-fs (loop1): Can't find a valid FAT filesystem
[   57.613756][ T4549] netlink: 104 bytes leftover after parsing attributes in process `syz.1.423'.
[   57.661206][ T4552] loop2: detected capacity change from 0 to 512
[   57.768742][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   57.956851][ T4576] syzkaller0: entered promiscuous mode
[   57.962774][ T4576] syzkaller0: entered allmulticast mode
[   57.995030][ T4576] 0: reclassify loop, rule prio 0, protocol 800
[   58.189533][ T4596] capability: warning: `syz.0.443' uses deprecated v2 capabilities in a way that may be insecure
[   58.465191][ T4610] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   58.474186][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[   58.558514][ T4612] syzkaller0: entered promiscuous mode
[   58.564328][ T4612] syzkaller0: entered allmulticast mode
[   58.583105][ T4612] 0: reclassify loop, rule prio 0, protocol 800
[   58.697296][ T4614] cgroup2: Unknown parameter 'memory_hugeôlb_acdounting'
[   58.926142][ T4616] loop0: detected capacity change from 0 to 512
[   58.935478][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ae25a00: rx timeout, send abort
[   58.945751][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ae25a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   59.026498][ T4616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.046353][ T4616] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.069663][ T4614] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.452: iget: bad i_size value: 2533274857506816
[   59.084677][ T4616] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.452: iget: bad i_size value: 2533274857506816
[   59.330022][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.365220][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ae24e00: rx timeout, send abort
[   59.373746][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ae24e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   59.407522][ T4639] syzkaller0: entered promiscuous mode
[   59.413147][ T4639] syzkaller0: entered allmulticast mode
[   59.455099][ T4639] 0: reclassify loop, rule prio 0, protocol 800
[   59.882249][ T4648] loop0: detected capacity change from 0 to 512
[   59.941713][   T29] kauditd_printk_skb: 12 callbacks suppressed
[   59.941729][   T29] audit: type=1326 audit(1770292916.020:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.092083][   T29] audit: type=1326 audit(1770292916.060:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.117479][   T29] audit: type=1326 audit(1770292916.060:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.142494][   T29] audit: type=1326 audit(1770292916.070:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.166914][   T29] audit: type=1326 audit(1770292916.070:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.191604][   T29] audit: type=1326 audit(1770292916.070:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.216715][   T29] audit: type=1326 audit(1770292916.070:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.245202][   T29] audit: type=1326 audit(1770292916.070:282): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.270853][   T29] audit: type=1326 audit(1770292916.070:283): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.277510][ T4654] netlink: 376 bytes leftover after parsing attributes in process `syz.0.468'.
[   60.296108][   T29] audit: type=1326 audit(1770292916.070:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4638 comm="syz.2.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fef4757aeb9 code=0x7ffc0000
[   60.512034][ T4606] loop3: detected capacity change from 0 to 8192
[   60.575020][ T4606] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   60.641265][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.653652][ T4606] FAT-fs (loop3): Filesystem has been set read-only
[   60.682678][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.701548][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.729499][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.750983][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.762947][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.775132][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.789442][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.791054][ T4678] syz.2.474 (4678): attempted to duplicate a private mapping with mremap.  This is not supported.
[   60.818010][ T4681] loop0: detected capacity change from 0 to 4096
[   60.836650][ T4606] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   60.869235][ T4681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.071567][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.537910][ T4748] __nla_validate_parse: 2 callbacks suppressed
[   61.537935][ T4748] netlink: 376 bytes leftover after parsing attributes in process `syz.2.491'.
[   61.576923][ T4748] geneve2: entered promiscuous mode
[   61.607256][   T61] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55378 - 0
[   61.630036][   T61] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55378 - 0
[   61.645980][   T61] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55378 - 0
[   61.659375][   T61] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55378 - 0
[   61.800310][ T4764] loop4: detected capacity change from 0 to 512
[   61.808238][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ae27800: rx timeout, send abort
[   61.817318][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ae27800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   61.863870][ T4762] netlink: 'syz.3.498': attribute type 8 has an invalid length.
[   61.893887][ T4764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.912955][ T4771] netlink: 'syz.2.500': attribute type 10 has an invalid length.
[   61.921073][ T4771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.500'.
[   61.931171][ T4764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0002]
[   61.940391][ T4764] System zones: 1-2, 4-12, 8-8
[   61.949562][ T4771] geneve1: entered promiscuous mode
[   61.955797][ T4771] team0: Port device geneve1 added
[   61.988667][ T4775] FAULT_INJECTION: forcing a failure.
[   61.988667][ T4775] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   62.002427][ T4775] CPU: 1 UID: 0 PID: 4775 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   62.002485][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.002509][ T4775] Call Trace:
[   62.002518][ T4775]  <TASK>
[   62.002530][ T4775]  __dump_stack+0x1d/0x30
[   62.002565][ T4775]  dump_stack_lvl+0x95/0xd0
[   62.002593][ T4775]  dump_stack+0x15/0x1b
[   62.002647][ T4775]  should_fail_ex+0x263/0x280
[   62.002682][ T4775]  should_fail_alloc_page+0xf2/0x100
[   62.002709][ T4775]  __alloc_frozen_pages_noprof+0x108/0x350
[   62.002752][ T4775]  alloc_pages_mpol+0xb3/0x260
[   62.002849][ T4775]  vma_alloc_folio_noprof+0x1a9/0x300
[   62.002908][ T4775]  do_wp_page+0xf6d/0x2560
[   62.002955][ T4775]  ? css_rstat_updated+0xbb/0x280
[   62.003004][ T4775]  ? __rcu_read_lock+0x36/0x50
[   62.003059][ T4775]  handle_mm_fault+0x8c7/0x3030
[   62.003164][ T4775]  ? vma_start_read+0x1c7/0x2c0
[   62.003315][ T4775]  do_user_addr_fault+0x62f/0x1050
[   62.003351][ T4775]  ? ksys_mmap_pgoff+0xc1/0x310
[   62.003385][ T4775]  ? fpregs_assert_state_consistent+0xb3/0xe0
[   62.003413][ T4775]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[   62.003465][ T4775]  ? irqentry_exit+0x3c/0x510
[   62.003560][ T4775]  exc_page_fault+0x62/0xa0
[   62.003591][ T4775]  asm_exc_page_fault+0x26/0x30
[   62.003619][ T4775] RIP: 0033:0x7f1d26c827e3
[   62.003813][ T4775] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[   62.003842][ T4775] RSP: 002b:00007f1d25826470 EFLAGS: 00010202
[   62.003863][ T4775] RAX: 0000000000005005 RBX: 00007f1d25826530 RCX: 00007f1d1d407000
[   62.003895][ T4775] RDX: 00007f1d258266d0 RSI: 0000000000000003 RDI: 00007f1d258265d0
[   62.003912][ T4775] RBP: 000000000000009a R08: 0000000000000007 R09: 0000000000000041
[   62.003929][ T4775] R10: 0000000000000052 R11: 00007f1d25826530 R12: 0000000000000001
[   62.003945][ T4775] R13: 00007f1d26e77c80 R14: 0000000000000010 R15: 00007f1d258265d0
[   62.003971][ T4775]  </TASK>
[   62.003991][ T4775] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   62.094581][ T4774] loop3: detected capacity change from 0 to 2048
[   62.259018][ T4775] loop0: detected capacity change from 0 to 512
[   62.266249][ T4764] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.499: iget: bad i_size value: 38620345925642
[   62.299683][ T4764] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.499: couldn't read orphan inode 15 (err -117)
[   62.331143][ T3300] Alternate GPT is invalid, using primary GPT.
[   62.338670][ T3300]  loop3: p2 p3 p7
[   62.353554][ T4782] netlink: 'syz.1.506': attribute type 17 has an invalid length.
[   62.362277][ T4782] netlink: 'syz.1.506': attribute type 16 has an invalid length.
[   62.370278][ T4782] netlink: 152 bytes leftover after parsing attributes in process `syz.1.506'.
[   62.427183][ T4764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.476968][ T4775] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.502: corrupted inode contents
[   62.496438][ T4775] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.502: mark_inode_dirty error
[   62.551081][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.564423][ T4774] Alternate GPT is invalid, using primary GPT.
[   62.571031][ T4774]  loop3: p2 p3 p7
[   62.580012][ T4775] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.502: corrupted inode contents
[   62.610877][ T4775] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.502: mark_inode_dirty error
[   62.705212][ T4775] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.502: Failed to acquire dquot type 0
[   62.746934][ T4775] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.502: corrupted inode contents
[   62.770188][ T4794] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.510'.
[   62.796997][ T4775] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.502: mark_inode_dirty error
[   62.824566][ T4790] loop2: detected capacity change from 0 to 4096
[   62.833558][ T4775] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.502: corrupted inode contents
[   62.865151][ T4775] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.502: mark_inode_dirty error
[   62.889094][ T4798] IPv6: sit1: Disabled Multicast RS
[   62.890155][ T4790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.908347][ T4775] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.502: corrupted inode contents
[   62.915949][ T4798] sit1: entered allmulticast mode
[   62.961641][ T4775] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   62.985689][ T4775] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.502: corrupted inode contents
[   62.999380][ T4775] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.502: mark_inode_dirty error
[   63.012258][ T4775] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   63.023282][ T4775] EXT4-fs (loop0): 1 truncate cleaned up
[   63.030251][ T4775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.049591][ T4775] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.069367][ T4807] netlink: 'syz.4.514': attribute type 12 has an invalid length.
[   63.110001][ T4810] netlink: 256 bytes leftover after parsing attributes in process `syz.4.515'.
[   63.156642][ T4775] syz.0.502 (4775) used greatest stack depth: 9712 bytes left
[   63.194409][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.346372][ T4826] loop4: detected capacity change from 0 to 1024
[   63.356662][ T4826] EXT4-fs: Ignoring removed bh option
[   63.368117][ T4826] EXT4-fs: Ignoring removed nobh option
[   63.388175][ T4826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.563807][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.574058][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.650342][ T4840] netlink: 256 bytes leftover after parsing attributes in process `syz.2.527'.
[   63.667410][ T4844] netlink: 'syz.4.526': attribute type 9 has an invalid length.
[   63.675297][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'.
[   63.690006][ T4836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.528'.
[   63.745848][ T4847] netlink: 68 bytes leftover after parsing attributes in process `syz.0.530'.
[   63.771053][   T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.785876][ T4851] loop1: detected capacity change from 0 to 512
[   63.788219][ T4844] netlink: 'syz.4.526': attribute type 9 has an invalid length.
[   63.793636][   T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.800803][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'.
[   63.811484][ T4851] EXT4-fs: Ignoring removed orlov option
[   63.830495][   T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.846479][ T4851] EXT4-fs: Mount option(s) incompatible with ext2
[   63.852962][   T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.919362][ T4856] FAULT_INJECTION: forcing a failure.
[   63.919362][ T4856] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.932891][ T4856] CPU: 1 UID: 0 PID: 4856 Comm: syz.0.534 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   63.932998][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   63.933014][ T4856] Call Trace:
[   63.933022][ T4856]  <TASK>
[   63.933033][ T4856]  __dump_stack+0x1d/0x30
[   63.933065][ T4856]  dump_stack_lvl+0x95/0xd0
[   63.933171][ T4856]  dump_stack+0x15/0x1b
[   63.933200][ T4856]  should_fail_ex+0x263/0x280
[   63.933300][ T4856]  should_fail+0xb/0x20
[   63.933340][ T4856]  should_fail_usercopy+0x1a/0x20
[   63.933385][ T4856]  strncpy_from_user+0x27/0x250
[   63.933434][ T4856]  getname_flags+0xad/0x3b0
[   63.933464][ T4856]  user_path_at+0x28/0x130
[   63.933501][ T4856]  __se_sys_mount+0x25b/0x2e0
[   63.933531][ T4856]  ? fput+0x8f/0xc0
[   63.933604][ T4856]  __x64_sys_mount+0x67/0x80
[   63.933631][ T4856]  x64_sys_call+0x2cca/0x3000
[   63.933660][ T4856]  do_syscall_64+0xc0/0x2a0
[   63.933744][ T4856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.933777][ T4856] RIP: 0033:0x7f1d26dcaeb9
[   63.933797][ T4856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.933820][ T4856] RSP: 002b:00007f1d25827028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   63.933857][ T4856] RAX: ffffffffffffffda RBX: 00007f1d27045fa0 RCX: 00007f1d26dcaeb9
[   63.933927][ T4856] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[   63.933942][ T4856] RBP: 00007f1d25827090 R08: 0000200000000380 R09: 0000000000000000
[   63.933961][ T4856] R10: 0000000000204000 R11: 0000000000000246 R12: 0000000000000001
[   63.933978][ T4856] R13: 00007f1d27046038 R14: 00007f1d27045fa0 R15: 00007ffe7769f1d8
[   63.934008][ T4856]  </TASK>
[   64.260846][ T4871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.302767][ T4871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.349575][ T4871] ref_ctr_offset mismatch. inode: 0x24d offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0
[   64.361958][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119512c00: rx timeout, send abort
[   64.362044][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119512800: rx timeout, send abort
[   64.371287][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119512c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   64.371389][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119512800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   64.394475][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119512a00: rx timeout, send abort
[   64.410122][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119512a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   64.448117][ T4876] SELinux:  policydb magic number 0x1c0 does not match expected magic number 0xf97cff8c
[   64.451680][ T4864] loop0: detected capacity change from 0 to 128
[   64.463668][ T4876] SELinux: failed to load policy
[   64.694345][ T4888] syz.1.546 uses obsolete (PF_INET,SOCK_PACKET)
[   64.741783][ T4889] veth0_vlan: left promiscuous mode
[   64.749104][ T4889] veth0_vlan: entered promiscuous mode
[   64.803744][ T4892] 9p: Bad value for 'wfdno'
[   64.819425][ T4892] netlink: 'syz.1.548': attribute type 1 has an invalid length.
[   64.834825][ T4892] netlink: 'syz.1.548': attribute type 2 has an invalid length.
[   65.089804][ T4905] loop1: detected capacity change from 0 to 1024
[   65.126919][ T4905] EXT4-fs: Ignoring removed nomblk_io_submit option
[   65.319885][ T4905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   65.386843][ T4905] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.473105][ T4905] netlink: 'syz.1.554': attribute type 4 has an invalid length.
[   65.502906][ T4915] loop4: detected capacity change from 0 to 512
[   65.517985][ T4905] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.554: bg 0: block 112: padding at end of block bitmap is not set
[   65.534685][   T29] kauditd_printk_skb: 120 callbacks suppressed
[   65.534744][   T29] audit: type=1400 audit(1770292921.600:403): avc:  denied  { add_name } for  pid=4904 comm="syz.1.554" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   65.603521][ T4915] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   65.644439][ T4915] EXT4-fs (loop4): orphan cleanup on readonly fs
[   65.653703][ T4905] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.554: Freeing blocks not in datazone - block = 0, count = 16
[   65.654312][ T4915] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.557: corrupted inode contents
[   65.686742][   T29] audit: type=1400 audit(1770292921.770:404): avc:  denied  { ioctl } for  pid=4904 comm="syz.1.554" path="/122/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   65.713293][ T4915] EXT4-fs (loop4): Remounting filesystem read-only
[   65.722524][ T4915] EXT4-fs (loop4): 1 truncate cleaned up
[   65.729759][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   65.743709][   T12] Quota error (device loop4): write_blk: dquota write failed
[   65.753739][   T12] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[   65.764430][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   65.776098][   T12] Quota error (device loop4): write_blk: dquota write failed
[   65.784970][   T12] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[   65.796603][   T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   65.812315][   T12] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   65.829436][   T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   65.842704][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   65.856399][ T4915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   65.944970][   T29] audit: type=1400 audit(1770292922.020:405): avc:  denied  { bind } for  pid=4926 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   66.013047][ T4915] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.084708][ T4934] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[   66.119000][   T29] audit: type=1400 audit(1770292922.190:406): avc:  denied  { create } for  pid=4914 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   66.176003][ T4934] bond1: entered allmulticast mode
[   66.241373][ T4945] veth0_vlan: left promiscuous mode
[   66.264023][ T4945] veth0_vlan: entered promiscuous mode
[   66.297396][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.311532][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811ae0e800: rx timeout, send abort
[   66.324195][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ae0e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.389412][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119512c00: rx timeout, send abort
[   66.400948][    C0] vcan0: j1939_tp_rxtimer: 0xffff888119512800: rx timeout, send abort
[   66.409798][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119512c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.425931][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119512800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.938297][ T4995] __nla_validate_parse: 2 callbacks suppressed
[   66.938324][ T4995] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.581'.
[   67.355203][ T5008] SELinux: failed to load policy
[   67.587777][ T5031] validate_nla: 2 callbacks suppressed
[   67.587849][ T5031] netlink: 'syz.0.594': attribute type 8 has an invalid length.
[   67.626786][ T5035] loop4: detected capacity change from 0 to 512
[   67.657449][ T5035] EXT4-fs (loop4): orphan cleanup on readonly fs
[   67.667909][ T5035] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   67.689580][ T5035] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.596: invalid block
[   67.702821][ T5035] EXT4-fs (loop4): Remounting filesystem read-only
[   67.711847][ T5035] EXT4-fs (loop4): 1 truncate cleaned up
[   67.727291][ T5035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   67.792120][ T5035] loop4: Can't mount, would change RO state
[   67.862976][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.893505][ T4976] loop3: detected capacity change from 0 to 8192
[   67.964596][ T5051] netlink: 'syz.4.603': attribute type 46 has an invalid length.
[   67.995310][ T4976] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   68.032538][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.045251][ T4976] FAT-fs (loop3): Filesystem has been set read-only
[   68.068451][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.070702][ T5056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'.
[   68.094017][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.104435][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b0b1a00: rx timeout, send abort
[   68.105503][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811aedb200: rx timeout, send abort
[   68.106258][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b0b1a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   68.106487][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aedb200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   68.141804][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811ae01e00: rx timeout, send abort
[   68.142728][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ae01e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   68.229095][ T5064] loop2: detected capacity change from 0 to 1024
[   68.232782][ T5065] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[   68.251361][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.251837][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.252087][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.252407][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.252998][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.253236][ T4976] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   68.336775][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.519876][ T5065] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.586792][ T5092] loop3: detected capacity change from 0 to 4096
[   68.618899][ T5092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.640791][ T5098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.614'.
[   68.707492][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[   68.720342][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.737346][ T5104] loop1: detected capacity change from 0 to 256
[   68.767393][ T5104] Invalid ELF header magic: != ELF
[   68.833966][ T5117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.620'.
[   69.095641][ T5125] loop4: detected capacity change from 0 to 4096
[   69.637047][ T5125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.680135][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.741059][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.864525][ T5130] ==================================================================
[   69.872682][ T5130] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter
[   69.880305][ T5130] 
[   69.882674][ T5130] write to 0xffff88811faaa000 of 4096 bytes by task 5131 on cpu 0:
[   69.890699][ T5130]  _copy_from_iter+0x106/0xea0
[   69.895615][ T5130]  copy_page_from_iter+0x178/0x2a0
[   69.900791][ T5130]  process_vm_rw+0x6ad/0x9c0
[   69.905481][ T5130]  __x64_sys_process_vm_writev+0x78/0x90
[   69.911341][ T5130]  x64_sys_call+0x27ef/0x3000
[   69.916505][ T5130]  do_syscall_64+0xc0/0x2a0
[   69.921334][ T5130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.927271][ T5130] 
[   69.929639][ T5130] write to 0xffff88811faaa000 of 4096 bytes by task 5130 on cpu 1:
[   69.937573][ T5130]  _copy_from_iter+0x106/0xea0
[   69.942478][ T5130]  copy_page_from_iter+0x178/0x2a0
[   69.947884][ T5130]  process_vm_rw+0x6ad/0x9c0
[   69.952532][ T5130]  __x64_sys_process_vm_writev+0x78/0x90
[   69.958400][ T5130]  x64_sys_call+0x27ef/0x3000
[   69.963398][ T5130]  do_syscall_64+0xc0/0x2a0
[   69.968220][ T5130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.974329][ T5130] 
[   69.976874][ T5130] Reported by Kernel Concurrency Sanitizer on:
[   69.983251][ T5130] CPU: 1 UID: 0 PID: 5130 Comm: syz.0.626 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.993526][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   70.004652][ T5130] ==================================================================
[   70.130262][ T5143] netlink: 260 bytes leftover after parsing attributes in process `syz.1.630'.
[   70.253459][ T5112] loop3: detected capacity change from 0 to 8192
[   70.287426][ T5112] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   70.310888][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.324232][ T5112] FAT-fs (loop3): Filesystem has been set read-only
[   70.346542][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.360118][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.376169][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.390063][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.402248][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.412303][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.425505][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.435501][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[   70.447064][ T5112] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046)