last executing test programs:

11.428576054s ago: executing program 0 (id=414):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='fF'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x21, r0, 0x9, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x401, 0x6}, 0xd220, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x141900)
add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff)

11.259985065s ago: executing program 0 (id=419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4001, 0xb, 0x5, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000040), 0x4)
getpid()
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911002000000000095000000000000004fc000b81d08cc850df866411aa6619df0c66c84343b3b16dbed9f6bfac7b93b71a64830444c819f0166014ed022bf931ad7b74799412cc1378a8cf5b1be18578d915a15abe736f3069a57c05949004390bda7dd613bfff6b93960b4b9f2aae569590000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008dde0d0dadf35438119c000000f9b120bad8e40aa8e25387021e4b31e9d15e65df6503e66c8564bd8fce6f5c1c9d2a1298f8ffb7"], 0x96)

11.138758834s ago: executing program 0 (id=423):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0xa4, 0xcf, 0x0, &(0x7f0000000140))

11.072085228s ago: executing program 0 (id=424):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "004309630400"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f0000000200)=""/227, 0xe3)
read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xf)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88044, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x2b4e7e798d51016f}, 0xe)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000000000"], 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x20033, 0x51b)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
setpriority(0x0, 0x0, 0xfffffffffffff7f9)
recvmmsg(r3, &(0x7f0000005180), 0x0, 0x1a000, 0x0)

10.135822182s ago: executing program 3 (id=432):
r0 = geteuid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x4008000)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r1)
setreuid(0x0, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000080)=0x1, 0x4)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000000), 0x4)

9.86918076s ago: executing program 3 (id=433):
syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz7FNxDAABdBvJ3ZEkQaJnqWYB7EOBXNBwQZIRpjkRri74r3q+/vLksNNbevHkdZkSfpxevxv8tC+91pmnHp9zRhbkpb6tyn5aluWXs7FW01q+RzLfOpnPO2zbuf982WZ/vJ+hS8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN37DQAA//8t9AtB")
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000000c0)={0x8, 0x5551, 0x6, 0x0, 0xfff, 0x3, 0x0, &(0x7f0000000080)=[{0x13, 0x101, 0x3}, {0xa, 0xfe, 0x6131180}, {0xe, 0x101, 0x3}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x2000c0)
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

8.016015016s ago: executing program 0 (id=442):
prlimit64(0x0, 0x1, &(0x7f00000000c0)={0x400, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x62, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x244, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0xf, 0xb}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x214, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "f38b7f869dc5c3e26ac45fddcba0ca9d8b1f049df651f99cae564df88a24d842876061dbdf47258e824d497e760b8f9cbe9125090dff51a2571d4dc8de8d09c8d7a0d142fcbe91b0816252d3e22656cfc65722a377c91594e0b8539e22c3bffb59e36f8245041a164c6c84ddc21798a522106e087bbdb7776f6e4d64596ca20200cd1b462c15473697813f5ecf263d6e0530300565b55f91ef6778d920386e698f98bb2d7eab2acec199eb22dff43085e4b72ae0a3a4dc3e54ea506f695d494ec0a6544905af790f39b1bd6cd89040d3d877025715674be73f7f7b985ac540ec4b274ccf55c6d69cb9c196c0a72e6c14a6bd22b1b65e04520800"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x244}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c221000086dd6015690900482f00fc020000000000000000000000000000ff020000000000000000000000000001242088a8000000020006000000000800000086dd88a888be0800970f"], 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2003ff, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)

7.612779263s ago: executing program 3 (id=443):
socket$kcm(0x10, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2, 0x1)
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x10, 0x1418, 0x1, 0x2, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './cgroup', [{}, {0x20, '/dev/loop'}, {0x20, 'memory.events\x00'}, {}], 0xa, "027508000000000000000cfa"}, 0x33)

7.349629821s ago: executing program 1 (id=445):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat(0xffffffffffffff9c, 0x0, 0xc5ec3, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file2/file0\x00', 0x40, 0x83)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x10e200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv2(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x8000, 0x9, 0x1b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000050000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff62e58b43f8d4000e0000000007010000f8ffffffb702000008000000b603000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffc38, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000c00)={0x0, 0x8, 0xb7e})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
fsetxattr$system_posix_acl(r3, &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)

4.398203461s ago: executing program 4 (id=451):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040))
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1a43)
shutdown(r7, 0x2)

4.168029437s ago: executing program 2 (id=452):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000006a004d792a1f99fe73a14bbe29138d"], 0x18}}, 0x24040000)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x80000000, 0xfffffffc, 0x5b50, 0xffffffff, 0xfffc})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x4004010)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x401, 0x4}, 0x10a4aa, 0x10004, 0x40000001, 0x8, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x4000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20)

3.261651169s ago: executing program 1 (id=453):
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x4000011, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
open(0x0, 0x14927e, 0x20)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1bb5818a4d135ef}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
chdir(&(0x7f0000000040)='./file0/../file0\x00')
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
creat(&(0x7f0000000100)='./bus\x00', 0x1000000)

3.230623131s ago: executing program 3 (id=454):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0x100000001, 0x5}, 0x4, 0x8, 0x10000, 0x8, 0x2, 0x80000001, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
process_vm_writev(0x0, &(0x7f0000000080), 0x0, &(0x7f00000003c0), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x58, 0x30, 0xb, 0x0, 0x0, {}, [{0x44, 0x1, [@m_gact={0x40, 0x1, 0x0, 0x0, {{0x1}, {0x4}, {0x11, 0x6, "31a8f3f80f6fc0517e37238ec8"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x58}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a01040000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x24000040)
socket$inet6(0xa, 0x1, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r8, 0x83fae4fe955e3e1b, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)

3.161431775s ago: executing program 4 (id=455):
epoll_create1(0x80000)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x2, 0x1, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r1, r3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})

2.936019941s ago: executing program 2 (id=456):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0xb, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x80002014})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0)
socket$unix(0x1, 0x5, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.80806842s ago: executing program 2 (id=457):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, 0x0}, 0x94)
pipe(&(0x7f0000000500))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xae\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\x8d\x8b\x9e\xb1\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
close(r2)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x1, 0xaeaf)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff, 0x9, 0xb, 0x5}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d66000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)

2.416045636s ago: executing program 1 (id=458):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040))
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1a43)
shutdown(r7, 0x2)

2.398532817s ago: executing program 2 (id=459):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
gettid()
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
brk(0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2.141773265s ago: executing program 2 (id=460):
socket$kcm(0x10, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2, 0x1)
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x10, 0x1418, 0x1, 0x2, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$eJzs3M9rE1sUwPHzkrwmTWmTB48HT1APutFNaOPCpQZpQQwotSnqQpjaiYaMSZkJlYjYbMStf0dx6U5Q/4FuxI17d0UQ3HQhjnRm0k7atEk1v0q/Hyj3ZM493NtkWs4MZDbvvHpcLjqZolGTSEIlItKQLZH0dhT4KxgjXjwmYQ25OPH98+nbd+/dyOXzs/Oqc7mFS1lVnTr77smz1+c+1CYW30y9jctG+v7mt+yXjbGN/zd/LjwqOVpytFKtqaFL1WrNWLJMXS455YzqLcs0HFNLFce0W/JFq7qyUlejsjyZXLFNx1GjUteyWddaVWt2XY2HRqmimUxGJ5NygkVEYl1MK6zPzxu5A9NutKebQt+Ntzto27lG+2RhfQB7AgAAI+bw/t/v9Q/u//OL/niU/v+/zv2/CP1/nzRaXnXo/3FcXQ6f/badM5LB328r+n8AAAAAAAAAAAAAAAAAAAAAAI6DLddNua6b2h6DQ97ruIgkRMQN8kPeJvok/Pm7oZ8On/+VIW0XPRb64l5CxHq5Wlgt+KOfzxWlJJaYMi0p+eGdDwE/nruen51WT1reW2tB/dpqISrxZn1Tul39mX9m/Hptrf9bkuH1s5KSf9uvn21bPyYXzofqM5KSjw+kKpYse+f1bv3zGdVrN/N76se9eQfo5uEaAAAAAACMjIzu2Hf97uW9CQnZn/frQ/cHXNddO+z+wJ7r65ic4ioaAAAAAICBcOpPy4ZlmfZvBHER+YPy3geuKzL8bURlNN6N1uCqiIzANgYVJETEP6Lt5sQ6lH/dKe9qUbeLOTER2Q6iI/H+dA6G/Z8JAAAAQK/tNv1HKPr0oo87AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5On2eWDN+ftSzcQh5aHlogP/BQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAR8isAAP//RZUcDw==")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './cgroup', [{}, {0x20, '/dev/loop'}, {0x20, 'memory.events\x00'}, {}], 0xa, "027508000000000000000cfa"}, 0x33)

2.139056475s ago: executing program 4 (id=461):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0)

2.002966214s ago: executing program 4 (id=462):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x8, 0x0, &(0x7f0000001040))
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1a43)
shutdown(r7, 0x2)

925.106668ms ago: executing program 0 (id=463):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat(0xffffffffffffff9c, 0x0, 0xc5ec3, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file2/file0\x00', 0x40, 0x83)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x8000, 0x9, 0x1b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000050000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff62e58b43f8d4000e0000000007010000f8ffffffb702000008000000b603000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffc38, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000c00)={0x0, 0x8, 0xb7e})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
fsetxattr$system_posix_acl(r3, &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)

906.400199ms ago: executing program 1 (id=464):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="060000000000000000000000000000005de8e5fed78b53156c9cdb3ed5ccb8646b648880", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB], 0x48}}, 0x410)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f0000000440)=0xc)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0xfffffcc5, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x6c, 0xd, {}, {0x0, 0x2710}, {0x2, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "6084d60f5b369079"}}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x84844)
unshare(0x22020600)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
r4 = eventfd2(0x74a6, 0x80800)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x80003, 0x13, 0xd, 0x8}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

725.106861ms ago: executing program 4 (id=465):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000200)={[{@nombcache}, {@nogrpid}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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")
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0xc}}, 0x9, 0x3, 0x3, 0x8f, 0xd0, 0xd7, 0x80}, 0x9c)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252eccb7a5918c0a9060000c1e56cb60441b7000000000000006faa00", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69cd33cafe348efb4aa1475a"}}}}}}}, 0x0)

411.673462ms ago: executing program 1 (id=466):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x2404e084}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r2, 0x309, 0x70bd2c, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20c000, &(0x7f00000000c0)={[{@minixdf}, {@nombcache}]}, 0x2, 0xbd1, &(0x7f0000000f40)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
setresuid(0x0, 0xee01, 0x0) (async)
utimensat(r3, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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")

316.692179ms ago: executing program 2 (id=467):
socket$kcm(0x10, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2, 0x1)
r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xdc560000)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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")
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x10, 0x1418, 0x1, 0x2, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)

268.083042ms ago: executing program 4 (id=468):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044040}, 0x40)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)="17001315cf717229eacf26953adec274628909b28aef7c39f9ba4b22676f55d26c3402ccecec759c81c017e01155d01b089e9fc3e96454b81b44178b3f60ca54d4a99809")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000000)=0xff, 0x4)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r8, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x0, 0x1}, 0x8)
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x8000000000000003, {}, 0xfd}, 0x18)
close(r9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x3ffff)
sendfile(r6, r5, 0x0, 0x7ffff000)

267.598882ms ago: executing program 3 (id=469):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, 0x0}, 0x94)
pipe(&(0x7f0000000500))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xae\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\x8d\x8b\x9e\xb1\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
close(r2)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x1, 0xaeaf)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff, 0x9, 0xb, 0x5}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d66000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)

28.080908ms ago: executing program 1 (id=470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000040), 0x4)
getpid()
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911002000000000095000000000000004fc000b81d08cc850df866411aa6619df0c66c84343b3b16dbed9f6bfac7b93b71a64830444c819f0166014ed022bf931ad7b74799412cc1378a8cf5b1be18578d915a15abe736f3069a57c05949004390bda7dd613bfff6b93960b4b9f2aae569590000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008dde0d0dadf35438119c000000f9b120bad8e40aa8e25387021e4b31e9d15e65df6503e66c8564bd8fce6f5c1c9d2a1298f8ffb7"], 0x96)

0s ago: executing program 3 (id=471):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x85, 0x40}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x3}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x2e]}}, &(0x7f0000005bc0)=""/239, 0x2b, 0xef, 0x9, 0xffc}, 0x28)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9}}, './file1\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000980)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x7, 0x2d, 0x40, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, 0x700, 0x7, 0x4, 0x9b7}})
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xcb982ef96855fc44)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xfff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, <r6=>0x0}, &(0x7f0000000140)=0xc)
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000b00)={[], [{@dont_appraise}, {@appraise}, {@euid_lt={'euid<', r6}}, {@subj_user={'subj_user', 0x3d, 'multiq\x00'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@fowner_gt}, {@hash}, {@obj_role={'obj_role', 0x3d, '\x83'}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000001100))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="010029bd7000000000000400000014000600ff02000000000000000000000000000114000500200100000000000000000000000000020800020005"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="58000000020601040000000000000000000000200c000780080012400800000405000100000000000900020073797a310000000011000300686173683a6e65742c6e6e74000000001412f9b8301e7066f8aa8d018b00dde30c170426c5b5d64cbc12ba3779521dbf81a239e2c7ed8ad78108dcc1705e9dde80c89819e3832122779b8147142c0e3a9cb5724a7bafaa61e3fc975779b98e3cbdaade08b1e8b307e610ef54ee46411e7fb252ebbc7f0cf3a253377b1f6e161f847c442daa48f1f0778f8294ee7b5936bf8d1a04de3e837ad52b3b75027e00"/230], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
getdents64(r7, 0x0, 0x2e)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

75): avc:  denied  { write } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.635151][ T3304] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.647047][   T28] audit: type=1400 audit(1775368676.627:76): avc:  denied  { read } for  pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.675878][   T28] audit: type=1400 audit(1775368676.627:77): avc:  denied  { read } for  pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   24.676769][ T3299] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   24.697138][   T28] audit: type=1400 audit(1775368676.627:78): avc:  denied  { mounton } for  pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.730415][   T28] audit: type=1400 audit(1775368676.627:79): avc:  denied  { mount } for  pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   25.814561][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   25.894752][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   25.909781][ T3318] chnl_net:caif_netlink_parms(): no params data found
[   25.961071][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.968372][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.975535][ T3313] bridge_slave_0: entered allmulticast mode
[   25.981998][ T3313] bridge_slave_0: entered promiscuous mode
[   25.999927][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.007015][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.014067][ T3313] bridge_slave_1: entered allmulticast mode
[   26.020556][ T3313] bridge_slave_1: entered promiscuous mode
[   26.037654][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   26.081589][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.091115][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.098231][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.105325][ T3311] bridge_slave_0: entered allmulticast mode
[   26.111846][ T3311] bridge_slave_0: entered promiscuous mode
[   26.122364][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.129629][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.136899][ T3318] bridge_slave_0: entered allmulticast mode
[   26.143201][ T3318] bridge_slave_0: entered promiscuous mode
[   26.150654][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.168098][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.175234][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.182487][ T3311] bridge_slave_1: entered allmulticast mode
[   26.188955][ T3311] bridge_slave_1: entered promiscuous mode
[   26.200613][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.207739][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.214845][ T3318] bridge_slave_1: entered allmulticast mode
[   26.221525][ T3318] bridge_slave_1: entered promiscuous mode
[   26.228779][ T3313] team0: Port device team_slave_0 added
[   26.250098][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.264832][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.274677][ T3313] team0: Port device team_slave_1 added
[   26.284473][ T3320] chnl_net:caif_netlink_parms(): no params data found
[   26.302320][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.309417][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.316539][ T3310] bridge_slave_0: entered allmulticast mode
[   26.322962][ T3310] bridge_slave_0: entered promiscuous mode
[   26.333991][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.341123][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.348313][ T3310] bridge_slave_1: entered allmulticast mode
[   26.354582][ T3310] bridge_slave_1: entered promiscuous mode
[   26.362060][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.383292][ T3318] team0: Port device team_slave_0 added
[   26.393895][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.416201][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.423333][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.449410][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.461103][ T3318] team0: Port device team_slave_1 added
[   26.479388][ T3311] team0: Port device team_slave_0 added
[   26.489176][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.496206][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.522144][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.533922][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.543457][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.550438][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.577405][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.589147][ T3311] team0: Port device team_slave_1 added
[   26.594918][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.601954][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.628098][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.645398][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.678162][ T3310] team0: Port device team_slave_0 added
[   26.685104][ T3310] team0: Port device team_slave_1 added
[   26.693642][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.700617][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.726624][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.738153][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.745099][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.771197][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.804654][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.811762][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.819148][ T3320] bridge_slave_0: entered allmulticast mode
[   26.825331][ T3320] bridge_slave_0: entered promiscuous mode
[   26.852743][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.859857][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.867057][ T3320] bridge_slave_1: entered allmulticast mode
[   26.873466][ T3320] bridge_slave_1: entered promiscuous mode
[   26.883743][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.890782][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.918947][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.931774][ T3313] hsr_slave_0: entered promiscuous mode
[   26.937800][ T3313] hsr_slave_1: entered promiscuous mode
[   26.945668][ T3318] hsr_slave_0: entered promiscuous mode
[   26.951628][ T3318] hsr_slave_1: entered promiscuous mode
[   26.957609][ T3318] debugfs: 'hsr0' already exists in 'hsr'
[   26.963332][ T3318] Cannot create hsr debugfs directory
[   26.978519][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.985464][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.011545][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.029456][ T3311] hsr_slave_0: entered promiscuous mode
[   27.035495][ T3311] hsr_slave_1: entered promiscuous mode
[   27.041432][ T3311] debugfs: 'hsr0' already exists in 'hsr'
[   27.047180][ T3311] Cannot create hsr debugfs directory
[   27.062776][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   27.087009][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   27.098145][ T3310] hsr_slave_0: entered promiscuous mode
[   27.104253][ T3310] hsr_slave_1: entered promiscuous mode
[   27.110202][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   27.115910][ T3310] Cannot create hsr debugfs directory
[   27.169968][ T3320] team0: Port device team_slave_0 added
[   27.188994][ T3320] team0: Port device team_slave_1 added
[   27.253055][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.260105][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.286040][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.299254][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.306206][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   27.332189][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.392262][ T3320] hsr_slave_0: entered promiscuous mode
[   27.398422][ T3320] hsr_slave_1: entered promiscuous mode
[   27.404298][ T3320] debugfs: 'hsr0' already exists in 'hsr'
[   27.410047][ T3320] Cannot create hsr debugfs directory
[   27.434921][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   27.445008][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   27.460379][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   27.471546][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   27.501090][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   27.509692][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   27.518305][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   27.529376][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   27.573444][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   27.583866][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   27.592540][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   27.602031][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   27.654612][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   27.664409][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   27.673312][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   27.684022][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   27.707921][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   27.717640][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   27.732263][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   27.740940][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   27.751577][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.758717][ T3320] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.772163][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.781239][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.804958][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.819154][ T3318] 8021q: adding VLAN 0 to HW filter on device team0
[   27.830355][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   27.847689][  T318] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.854777][  T318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.863529][  T318] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.870580][  T318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.879089][  T318] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.886138][  T318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.897454][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.914104][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   27.924697][  T318] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.932236][  T318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.962324][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.969412][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.986314][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.993479][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.003861][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.029381][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   28.039988][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.065125][ T3320] 8021q: adding VLAN 0 to HW filter on device team0
[   28.088278][  T318] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.095439][  T318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.119140][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.126222][ T2197] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.142168][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.162738][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   28.174575][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   28.185350][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   28.205961][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.213335][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.239623][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.247762][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.259205][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.266276][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.302066][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.318659][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.400601][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.453856][ T3313] veth0_vlan: entered promiscuous mode
[   28.479969][ T3310] veth0_vlan: entered promiscuous mode
[   28.494429][ T3313] veth1_vlan: entered promiscuous mode
[   28.517366][ T3310] veth1_vlan: entered promiscuous mode
[   28.535958][ T3320] veth0_vlan: entered promiscuous mode
[   28.552889][ T3318] veth0_vlan: entered promiscuous mode
[   28.573146][ T3311] veth0_vlan: entered promiscuous mode
[   28.582837][ T3318] veth1_vlan: entered promiscuous mode
[   28.589320][ T3313] veth0_macvtap: entered promiscuous mode
[   28.600829][ T3313] veth1_macvtap: entered promiscuous mode
[   28.608128][ T3320] veth1_vlan: entered promiscuous mode
[   28.615353][ T3311] veth1_vlan: entered promiscuous mode
[   28.630120][ T3310] veth0_macvtap: entered promiscuous mode
[   28.645516][ T3310] veth1_macvtap: entered promiscuous mode
[   28.652852][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.663979][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.682405][ T3320] veth0_macvtap: entered promiscuous mode
[   28.689157][ T3318] veth0_macvtap: entered promiscuous mode
[   28.699222][ T3311] veth0_macvtap: entered promiscuous mode
[   28.707399][ T3318] veth1_macvtap: entered promiscuous mode
[   28.714124][   T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.723149][   T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.734373][ T3311] veth1_macvtap: entered promiscuous mode
[   28.741713][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.749449][ T3320] veth1_macvtap: entered promiscuous mode
[   28.756594][   T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.770532][   T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.784470][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.793690][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.810443][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.825253][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.833643][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.842719][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.843555][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.851781][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.873328][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.890792][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.899825][   T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.912895][   T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.939629][   T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.948637][   T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.961569][   T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.970878][   T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.989259][   T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.998266][   T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.014515][   T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.034137][   T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.043175][   T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   29.064096][   T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   29.074036][   T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   29.088704][   T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.142084][ T3493] FAULT_INJECTION: forcing a failure.
[   29.142084][ T3493] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   29.174967][ T3493] CPU: 0 UID: 0 PID: 3493 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) 
[   29.175040][ T3493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   29.175060][ T3493] Call Trace:
[   29.175067][ T3493]  <TASK>
[   29.175073][ T3493]  __dump_stack+0x1d/0x30
[   29.175101][ T3493]  dump_stack_lvl+0x95/0xd0
[   29.175150][ T3493]  dump_stack+0x15/0x1b
[   29.175171][ T3493]  should_fail_ex+0x263/0x280
[   29.175199][ T3493]  should_fail+0xb/0x20
[   29.175224][ T3493]  should_fail_usercopy+0x1a/0x20
[   29.175259][ T3493]  _copy_from_user+0x1c/0xb0
[   29.175339][ T3493]  ___sys_sendmsg+0xc1/0x1e0
[   29.175370][ T3493]  ? path_openat+0x1b01/0x2050
[   29.175400][ T3493]  __sys_sendmmsg+0x185/0x320
[   29.175446][ T3493]  __x64_sys_sendmmsg+0x57/0x70
[   29.175467][ T3493]  x64_sys_call+0x27aa/0x3020
[   29.175508][ T3493]  do_syscall_64+0x12c/0x370
[   29.175535][ T3493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   29.175620][ T3493] RIP: 0033:0x7fb7b6adc819
[   29.175644][ T3493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   29.175661][ T3493] RSP: 002b:00007fb7b552f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   29.175764][ T3493] RAX: ffffffffffffffda RBX: 00007fb7b6d55fa0 RCX: 00007fb7b6adc819
[   29.175805][ T3493] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000004
[   29.175825][ T3493] RBP: 00007fb7b552f090 R08: 0000000000000000 R09: 0000000000000000
[   29.175839][ T3493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   29.175852][ T3493] R13: 00007fb7b6d56038 R14: 00007fb7b6d55fa0 R15: 00007ffdeac73d18
[   29.175870][ T3493]  </TASK>
[   29.182799][    C1] hrtimer: interrupt took 37462 ns
[   29.346632][   T28] kauditd_printk_skb: 40 callbacks suppressed
[   29.346723][   T28] audit: type=1400 audit(1775368681.377:120): avc:  denied  { create } for  pid=3503 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   29.378277][   T28] audit: type=1400 audit(1775368681.427:121): avc:  denied  { create } for  pid=3486 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   29.384552][   T28] audit: type=1400 audit(1775368681.427:122): avc:  denied  { write } for  pid=3503 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   29.417585][ T3489] syz.0.1 (3489) used greatest stack depth: 10312 bytes left
[   29.437129][   T28] audit: type=1400 audit(1775368681.467:123): avc:  denied  { setopt } for  pid=3494 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   29.476179][   T28] audit: type=1400 audit(1775368681.477:124): avc:  denied  { write } for  pid=3494 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   29.496548][   T28] audit: type=1400 audit(1775368681.527:125): avc:  denied  { read write } for  pid=3509 comm="syz.3.11" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.520410][   T28] audit: type=1400 audit(1775368681.527:126): avc:  denied  { open } for  pid=3509 comm="syz.3.11" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.547287][   T28] audit: type=1400 audit(1775368681.597:127): avc:  denied  { ioctl } for  pid=3509 comm="syz.3.11" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.578035][   T28] audit: type=1400 audit(1775368681.597:128): avc:  denied  { tracepoint } for  pid=3509 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   29.641834][ T3523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15'.
[   29.654566][   T28] audit: type=1400 audit(1775368681.697:129): avc:  denied  { map_create } for  pid=3512 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   29.707582][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   29.716644][ T3510] loop3: detected capacity change from 0 to 4096
[   29.726020][ T3510] EXT4-fs: Ignoring removed bh option
[   29.740892][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.764013][ T3525] loop2: detected capacity change from 0 to 128
[   29.821606][ T3525] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   29.850866][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   29.855443][ T3525] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   29.895905][   T41] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   29.905002][   T41] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   29.915442][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   29.925329][   T41] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   29.949416][ T3536] Zero length message leads to an empty skb
[   29.949773][   T41] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   29.965243][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.048590][ T3544] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   30.048590][ T3544] The task syz.4.20 (3544) triggered the difference, watch for misbehavior.
[   30.086621][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   30.230643][ T3553] loop0: detected capacity change from 0 to 128
[   30.261273][ T3555] FAULT_INJECTION: forcing a failure.
[   30.261273][ T3555] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   30.371082][ T3555] CPU: 0 UID: 0 PID: 3555 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) 
[   30.371111][ T3555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   30.371122][ T3555] Call Trace:
[   30.371128][ T3555]  <TASK>
[   30.371135][ T3555]  __dump_stack+0x1d/0x30
[   30.371160][ T3555]  dump_stack_lvl+0x95/0xd0
[   30.371210][ T3555]  dump_stack+0x15/0x1b
[   30.371228][ T3555]  should_fail_ex+0x263/0x280
[   30.371252][ T3555]  should_fail+0xb/0x20
[   30.371271][ T3555]  should_fail_usercopy+0x1a/0x20
[   30.371304][ T3555]  _copy_to_user+0x20/0xa0
[   30.371332][ T3555]  simple_read_from_buffer+0xb5/0x130
[   30.371357][ T3555]  proc_fail_nth_read+0x10e/0x150
[   30.371410][ T3555]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   30.371434][ T3555]  vfs_read+0x1ab/0x7f0
[   30.371451][ T3555]  ? __rcu_read_unlock+0x4e/0x70
[   30.371590][ T3555]  ? __fget_files+0x184/0x1c0
[   30.371611][ T3555]  ? mutex_lock+0x57/0x90
[   30.371628][ T3555]  ksys_read+0xdc/0x1a0
[   30.371710][ T3555]  __x64_sys_read+0x40/0x50
[   30.371729][ T3555]  x64_sys_call+0x2886/0x3020
[   30.371831][ T3555]  do_syscall_64+0x12c/0x370
[   30.371859][ T3555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   30.371882][ T3555] RIP: 0033:0x7fd25eccd04e
[   30.371897][ T3555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   30.371912][ T3555] RSP: 002b:00007fd25d71cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   30.371959][ T3555] RAX: ffffffffffffffda RBX: 00007fd25d71d6c0 RCX: 00007fd25eccd04e
[   30.371974][ T3555] RDX: 000000000000000f RSI: 00007fd25d71d0a0 RDI: 0000000000000003
[   30.371988][ T3555] RBP: 00007fd25d71d090 R08: 0000000000000000 R09: 0000000000000000
[   30.372002][ T3555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   30.372064][ T3555] R13: 00007fd25ef86218 R14: 00007fd25ef86180 R15: 00007fff43adbdf8
[   30.372079][ T3555]  </TASK>
[   30.577707][ T3553] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   30.693691][ T3558] loop1: detected capacity change from 0 to 4096
[   30.718820][ T3558] EXT4-fs: Ignoring removed bh option
[   30.743956][ T3558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.926078][   T30] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   30.967508][ T3577] SELinux:  Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped).
[   31.050939][ T3578] loop4: detected capacity change from 0 to 1764
[   31.058303][ T3578] iso9660: Unknown parameter 'utF8'
[   31.127023][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.134297][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.227207][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   31.240595][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   31.329752][ T3580] netlink: 'syz.2.30': attribute type 29 has an invalid length.
[   31.460290][ T3583] loop0: detected capacity change from 0 to 512
[   31.483901][ T3583] EXT4-fs: Ignoring removed nomblk_io_submit option
[   31.508905][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   31.520969][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.544897][ T3583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   31.580151][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   31.592870][ T3583] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[   31.614564][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   31.623731][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   31.623747][    C0] EXT4-fs (loop0): initial error at time 1775368939: mb_free_blocks:2049: inode 11: block 64
[   31.623779][    C0] EXT4-fs (loop0): last error at time 1775368939: mb_free_blocks:2049: inode 11: block 64
[   31.651845][ T3583] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.33: corrupted inode contents
[   31.679550][ T3583] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   31.679737][ T3583] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #11: comm syz.0.33: mark_inode_dirty error
[   31.700537][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   31.709529][ T3583] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   31.709771][ T3583] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.33: invalid indirect mapped block 1 (level 1)
[   31.744878][ T3583] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   31.859672][ T3583] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.33: corrupted inode contents
[   31.880604][ T3583] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   31.881188][ T3583] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   31.899538][ T3577] syz.2.30 (3577) used greatest stack depth: 10104 bytes left
[   32.494783][ T3589] loop3: detected capacity change from 0 to 1764
[   32.501511][ T3589] iso9660: Unknown parameter 'utF8'
[   33.089176][ T3583] loop0: lost filesystem error report for type 5 error -117
[   33.089452][ T3583] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.33: corrupted inode contents
[   33.418677][ T3597] loop2: detected capacity change from 0 to 512
[   33.432210][ T3598] loop1: detected capacity change from 0 to 1764
[   33.438824][ T3598] iso9660: Unknown parameter 'utF8'
[   33.687272][ T3583] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   33.688459][ T3583] EXT4-fs error (device loop0): ext4_truncate:4602: inode #11: comm syz.0.33: mark_inode_dirty error
[   33.855658][ T3597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.866635][ T3598] FAULT_INJECTION: forcing a failure.
[   33.866635][ T3598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   33.879724][ T3598] CPU: 1 UID: 0 PID: 3598 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(full) 
[   33.879748][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   33.879824][ T3598] Call Trace:
[   33.879830][ T3598]  <TASK>
[   33.879839][ T3598]  __dump_stack+0x1d/0x30
[   33.879862][ T3598]  dump_stack_lvl+0x95/0xd0
[   33.879881][ T3598]  dump_stack+0x15/0x1b
[   33.879910][ T3598]  should_fail_ex+0x263/0x280
[   33.879938][ T3598]  should_fail+0xb/0x20
[   33.879988][ T3598]  should_fail_usercopy+0x1a/0x20
[   33.880036][ T3598]  _copy_from_user+0x1c/0xb0
[   33.880125][ T3598]  do_ip_vs_set_ctl+0x1a4/0xa60
[   33.880153][ T3598]  ? do_ip_setsockopt+0x1af1/0x2290
[   33.880355][ T3598]  nf_setsockopt+0x199/0x1b0
[   33.880376][ T3598]  ip_setsockopt+0x102/0x110
[   33.880437][ T3598]  sctp_setsockopt+0x126/0xea0
[   33.880473][ T3598]  sock_common_setsockopt+0x69/0x80
[   33.880495][ T3598]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   33.880574][ T3598]  __sys_setsockopt+0x184/0x200
[   33.880634][ T3598]  __x64_sys_setsockopt+0x64/0x80
[   33.880720][ T3598]  x64_sys_call+0x2327/0x3020
[   33.880748][ T3598]  do_syscall_64+0x12c/0x370
[   33.880783][ T3598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.880807][ T3598] RIP: 0033:0x7f8f35bac819
[   33.880824][ T3598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.880841][ T3598] RSP: 002b:00007f8f345c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   33.880926][ T3598] RAX: ffffffffffffffda RBX: 00007f8f35e26180 RCX: 00007f8f35bac819
[   33.880942][ T3598] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 000000000000000a
[   33.880955][ T3598] RBP: 00007f8f345c5090 R08: 0000000000000000 R09: 0000000000000000
[   33.880969][ T3598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.880983][ T3598] R13: 00007f8f35e26218 R14: 00007f8f35e26180 R15: 00007ffc2d68b148
[   33.881000][ T3598]  </TASK>
[   33.893762][ T3597] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   34.096138][ T3597] EXT4-fs (loop2): 1 truncate cleaned up
[   34.102315][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.106430][ T3583] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   34.125776][ T3583] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   34.138815][ T3602] loop3: detected capacity change from 0 to 128
[   34.153485][ T3583] loop0: lost filesystem error report for type 5 error -117
[   34.280272][ T3583] EXT4-fs (loop0): 1 truncate cleaned up
[   34.313111][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.332739][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.410205][ T3583] EXT4-fs (loop0): shut down requested (2)
[   34.418885][   T28] kauditd_printk_skb: 31 callbacks suppressed
[   34.418927][   T28] audit: type=1400 audit(1775368942.472:161): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   34.448407][ T3607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.37'.
[   34.483235][ T3607] tipc: Invalid UDP bearer configuration
[   34.483248][ T3607] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   34.508453][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.538434][   T28] audit: type=1400 audit(1775368942.472:162): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.634676][ T3604] EXT4-fs: Ignoring removed bh option
[   34.667259][   T28] audit: type=1400 audit(1775368942.472:163): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.715996][ T3604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.742575][ T3614] netlink: 'syz.0.40': attribute type 3 has an invalid length.
[   34.763922][ T3614] netlink: 772 bytes leftover after parsing attributes in process `syz.0.40'.
[   34.824804][   T28] audit: type=1400 audit(1775368942.472:164): avc:  denied  { add_name } for  pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.865984][ T3614] netlink: 'syz.0.40': attribute type 3 has an invalid length.
[   34.909387][ T3614] netlink: 772 bytes leftover after parsing attributes in process `syz.0.40'.
[   34.925074][ T3602] syz.3.37: attempt to access beyond end of device
[   34.925074][ T3602] loop3: rw=0, sector=121, nr_sectors = 920 limit=128
[   34.939805][   T28] audit: type=1400 audit(1775368942.472:165): avc:  denied  { create } for  pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   35.019975][   T28] audit: type=1400 audit(1775368942.472:166): avc:  denied  { append open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   35.069922][ T3619] set_capacity_and_notify: 1 callbacks suppressed
[   35.069936][ T3619] loop0: detected capacity change from 0 to 128
[   35.090079][   T28] audit: type=1400 audit(1775368942.472:167): avc:  denied  { getattr } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   35.113199][   T28] audit: type=1400 audit(1775368942.522:168): avc:  denied  { remount } for  pid=3582 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   35.132978][   T28] audit: type=1400 audit(1775368942.832:169): avc:  denied  { watch watch_reads } for  pid=3592 comm="syz.4.36" path="/8" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   35.144549][ T3619] FAT-fs (loop0): bogus number of reserved sectors
[   35.156194][   T28] audit: type=1400 audit(1775368943.072:170): avc:  denied  { read } for  pid=3617 comm="syz.0.41" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   35.180876][ T3621] loop1: detected capacity change from 0 to 2048
[   35.215115][ T3619] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   35.227226][ T3619] FAT-fs (loop0): Can't find a valid FAT filesystem
[   35.258224][ T3621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.371308][ T3621] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82
[   35.371587][ T3636] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   35.496048][ T3642] FAULT_INJECTION: forcing a failure.
[   35.496048][ T3642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.574740][ T3642] CPU: 0 UID: 0 PID: 3642 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) 
[   35.574768][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   35.574781][ T3642] Call Trace:
[   35.574788][ T3642]  <TASK>
[   35.574796][ T3642]  __dump_stack+0x1d/0x30
[   35.574824][ T3642]  dump_stack_lvl+0x95/0xd0
[   35.574844][ T3642]  dump_stack+0x15/0x1b
[   35.574885][ T3642]  should_fail_ex+0x263/0x280
[   35.574912][ T3642]  should_fail+0xb/0x20
[   35.574936][ T3642]  should_fail_usercopy+0x1a/0x20
[   35.575002][ T3642]  _copy_from_user+0x1c/0xb0
[   35.575035][ T3642]  kstrtouint_from_user+0x69/0xf0
[   35.575065][ T3642]  proc_fail_nth_write+0x50/0x160
[   35.575094][ T3642]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   35.575190][ T3642]  vfs_write+0x269/0x9f0
[   35.575206][ T3642]  ? __rcu_read_unlock+0x4e/0x70
[   35.575225][ T3642]  ? __fget_files+0x184/0x1c0
[   35.575283][ T3642]  ? mutex_lock+0x57/0x90
[   35.575350][ T3642]  ksys_write+0xdc/0x1a0
[   35.575370][ T3642]  __x64_sys_write+0x40/0x50
[   35.575390][ T3642]  x64_sys_call+0x27e1/0x3020
[   35.575417][ T3642]  do_syscall_64+0x12c/0x370
[   35.575488][ T3642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.575511][ T3642] RIP: 0033:0x7fb7b6a9d04e
[   35.575651][ T3642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   35.575668][ T3642] RSP: 002b:00007fb7b550dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   35.575686][ T3642] RAX: ffffffffffffffda RBX: 00007fb7b550e6c0 RCX: 00007fb7b6a9d04e
[   35.575724][ T3642] RDX: 0000000000000001 RSI: 00007fb7b550e0a0 RDI: 0000000000000005
[   35.575737][ T3642] RBP: 00007fb7b550e090 R08: 0000000000000000 R09: 0000000000000000
[   35.575751][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.575765][ T3642] R13: 00007fb7b6d56128 R14: 00007fb7b6d56090 R15: 00007ffdeac73d18
[   35.575785][ T3642]  </TASK>
[   35.772981][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.780197][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.821911][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   35.831717][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   35.864874][ T3643] netlink: 'syz.0.46': attribute type 29 has an invalid length.
[   35.881942][  T318] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.890901][  T318] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.900048][  T318] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.900477][ T3621] syz.1.43 (3621) used greatest stack depth: 8880 bytes left
[   35.908951][  T318] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   35.939747][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.119052][ T3651] loop1: detected capacity change from 0 to 512
[   36.159878][ T3651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.175536][ T3651] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.213410][ T3657] loop3: detected capacity change from 0 to 128
[   36.273356][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.348850][ T3665] loop1: detected capacity change from 0 to 128
[   36.522711][ T3669] loop0: detected capacity change from 0 to 128
[   37.495721][ T3604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   37.569952][ T3669] FAT-fs (loop0): bogus number of reserved sectors
[   38.478011][ T3669] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   38.505740][ T3669] FAT-fs (loop0): Can't find a valid FAT filesystem
[   38.521691][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.150848][ T3685] loop0: detected capacity change from 0 to 1024
[   39.189733][ T3686] loop1: detected capacity change from 0 to 512
[   39.196687][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.225576][ T3686] EXT4-fs: old and new quota format mixing
[   39.287735][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.376172][ T3698] loop0: detected capacity change from 0 to 1024
[   39.410490][ T3699] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.417671][ T3699] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.417807][ T3698] =======================================================
[   39.417807][ T3698] WARNING: The mand mount option has been deprecated and
[   39.417807][ T3698]          and is ignored by this kernel. Remove the mand
[   39.417807][ T3698]          option from the mount to silence this warning.
[   39.417807][ T3698] =======================================================
[   39.474761][ T3698] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002]
[   39.483224][ T3698] System zones: 0-1, 3-36
[   39.488605][ T3698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.503448][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.513338][ T3699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.539754][ T3707] loop2: detected capacity change from 0 to 512
[   39.569894][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'.
[   39.579741][ T3706] netlink: 'syz.3.63': attribute type 29 has an invalid length.
[   39.588026][   T70] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.597442][   T70] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.597867][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.606692][   T70] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.624899][   T70] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   39.645463][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'.
[   39.679408][ T3711] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   39.691903][ T3711] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   39.708476][   T28] kauditd_printk_skb: 18 callbacks suppressed
[   39.708491][   T28] audit: type=1400 audit(1775368947.742:189): avc:  denied  { create } for  pid=3712 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   39.749170][   T28] audit: type=1400 audit(1775368947.772:190): avc:  denied  { getopt } for  pid=3712 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   39.768546][   T28] audit: type=1400 audit(1775368947.772:191): avc:  denied  { bpf } for  pid=3712 comm="syz.0.67" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   39.789047][   T28] audit: type=1400 audit(1775368947.782:192): avc:  denied  { append } for  pid=3710 comm="syz.4.68" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/net_prio.prioidx" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.790103][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   39.833835][   T28] audit: type=1400 audit(1775368947.782:193): avc:  denied  { ioctl } for  pid=3710 comm="syz.4.68" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/net_prio.prioidx" dev="loop4" ino=14 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.833886][   T28] audit: type=1400 audit(1775368947.782:194): avc:  denied  { setattr } for  pid=3710 comm="syz.4.68" name="net_prio.prioidx" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   39.920608][   T28] audit: type=1400 audit(1775368947.972:195): avc:  denied  { perfmon } for  pid=3716 comm="syz.4.69" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   40.237649][ T3721] set_capacity_and_notify: 1 callbacks suppressed
[   40.237664][ T3721] loop3: detected capacity change from 0 to 128
[   40.320262][ T3723] loop3: detected capacity change from 0 to 1024
[   40.353629][ T3725] loop2: detected capacity change from 0 to 1024
[   40.367935][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.395556][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.433605][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.445001][   T28] audit: type=1400 audit(1775368948.492:196): avc:  denied  { map } for  pid=3722 comm="syz.3.71" path="pipe:[1683]" dev="pipefs" ino=1683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   40.509149][   T28] audit: type=1400 audit(1775368948.562:197): avc:  denied  { remount } for  pid=3731 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   40.941161][   T28] audit: type=1400 audit(1775368948.992:198): avc:  denied  { write } for  pid=3746 comm="syz.4.77" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   41.196867][ T3749] loop4: detected capacity change from 0 to 128
[   41.658022][ T3752] loop2: detected capacity change from 0 to 512
[   41.664933][ T3752] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   41.677756][ T3752] EXT4-fs (loop2): 1 truncate cleaned up
[   41.685520][ T3752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.101711][ T3679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   42.144433][ T3758] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   42.157771][ T3758] bridge0: entered allmulticast mode
[   42.175362][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.221636][ T3763] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20000
[   42.504007][ T3777] tipc: Can't bind to reserved service type 0
[   42.534906][ T3778] loop0: detected capacity change from 0 to 512
[   42.632755][ T3778] EXT4-fs: old and new quota format mixing
[   42.720856][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.402468][ T3804] loop2: detected capacity change from 0 to 256
[   43.412587][ T3806] loop1: detected capacity change from 0 to 128
[   43.481044][ T3807] loop4: detected capacity change from 0 to 128
[   43.502532][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'.
[   43.640525][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   43.779703][ T3810] hsr_slave_1 (unregistering): left promiscuous mode
[   43.980571][ T3821] netlink: 272 bytes leftover after parsing attributes in process `syz.3.99'.
[   44.021316][ T3823] syz.3.100 uses obsolete (PF_INET,SOCK_PACKET)
[   44.068023][ T3829] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   44.278618][ T3840] batman_adv: batadv0: Adding interface: dummy0
[   44.320386][ T3840] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.346006][ T3840] batman_adv: batadv0: Interface activated: dummy0
[   44.392220][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.400655][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   44.419260][ T3848] loop1: detected capacity change from 0 to 512
[   44.476657][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[   44.696570][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   44.785361][ T3855] EXT4-fs: Ignoring removed bh option
[   44.846265][   T28] kauditd_printk_skb: 39 callbacks suppressed
[   44.846288][   T28] audit: type=1400 audit(1775368952.892:238): avc:  denied  { nlmsg_write } for  pid=3852 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   44.883343][ T3863] hub 8-0:1.0: USB hub found
[   44.888116][ T3863] hub 8-0:1.0: 8 ports detected
[   44.900121][ T3863] netlink: 'syz.1.111': attribute type 36 has an invalid length.
[   44.914574][ T3863] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   44.924497][ T3863] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   44.937745][ T3863] netlink: 'syz.1.111': attribute type 10 has an invalid length.
[   44.946811][ T3863] macvlan1: entered allmulticast mode
[   44.956172][ T3863] veth1_vlan: entered allmulticast mode
[   44.967522][ T3863] team0: Port device macvlan1 added
[   44.976255][ T3860] FAT-fs (loop2): bogus number of reserved sectors
[   45.009348][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.031938][ T3860] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   45.095420][ T3860] FAT-fs (loop2): Can't find a valid FAT filesystem
[   45.228482][   T28] audit: type=1400 audit(1775368953.282:239): avc:  denied  { create } for  pid=3853 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   45.332198][   T28] audit: type=1400 audit(1775368953.382:240): avc:  denied  { module_request } for  pid=3870 comm="syz.2.115" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   45.388857][   T28] audit: type=1400 audit(1775368953.442:241): avc:  denied  { map } for  pid=3870 comm="syz.2.115" path="socket:[5547]" dev="sockfs" ino=5547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.412739][   T28] audit: type=1400 audit(1775368953.442:242): avc:  denied  { read } for  pid=3870 comm="syz.2.115" path="socket:[5547]" dev="sockfs" ino=5547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   45.450394][ T3877] capability: warning: `syz.3.117' uses deprecated v2 capabilities in a way that may be insecure
[   45.461934][   T28] audit: type=1400 audit(1775368953.512:243): avc:  denied  { read } for  pid=3876 comm="syz.3.117" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   45.485645][   T28] audit: type=1400 audit(1775368953.512:244): avc:  denied  { open } for  pid=3876 comm="syz.3.117" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   45.509625][   T28] audit: type=1400 audit(1775368953.532:245): avc:  denied  { ioctl } for  pid=3876 comm="syz.3.117" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   45.535118][   T28] audit: type=1400 audit(1775368953.532:246): avc:  denied  { write } for  pid=3876 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   45.596517][   T28] audit: type=1400 audit(1775368953.642:247): avc:  denied  { bind } for  pid=3882 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   45.597811][ T3881] netlink: 'syz.2.119': attribute type 10 has an invalid length.
[   45.625154][ T3885] set_capacity_and_notify: 2 callbacks suppressed
[   45.625171][ T3885] loop3: detected capacity change from 0 to 512
[   45.638711][ T3885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   45.650604][ T3885] EXT4-fs (loop3): 1 truncate cleaned up
[   45.656927][ T3885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.657856][ T3881] team0: Device xfrm0 is of different type
[   45.691988][ T3881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.119'.
[   45.702519][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.037997][ T3897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.125'.
[   46.240106][ T3905] loop3: detected capacity change from 0 to 4096
[   46.256653][ T3905] EXT4-fs: Ignoring removed bh option
[   46.271976][ T3905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.740947][ T3855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   47.775498][ T3881] syz.2.119 (3881) used greatest stack depth: 8840 bytes left
[   47.795660][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.815274][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.860908][ T3920] loop3: detected capacity change from 0 to 1024
[   47.884732][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   47.894032][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   47.908718][ T3924] FAULT_INJECTION: forcing a failure.
[   47.908718][ T3924] name failslab, interval 1, probability 0, space 0, times 1
[   47.926273][ T3920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.945501][ T3915] loop0: detected capacity change from 0 to 512
[   47.961517][ T3924] CPU: 1 UID: 0 PID: 3924 Comm: syz.4.130 Not tainted syzkaller #0 PREEMPT(full) 
[   47.961542][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   47.961553][ T3924] Call Trace:
[   47.961559][ T3924]  <TASK>
[   47.961565][ T3924]  __dump_stack+0x1d/0x30
[   47.961648][ T3924]  dump_stack_lvl+0x95/0xd0
[   47.961711][ T3924]  dump_stack+0x15/0x1b
[   47.961733][ T3924]  should_fail_ex+0x263/0x280
[   47.961761][ T3924]  should_failslab+0x8c/0xb0
[   47.961783][ T3924]  kmem_cache_alloc_noprof+0x66/0x400
[   47.961808][ T3924]  ? skb_clone+0x151/0x1f0
[   47.961877][ T3924]  skb_clone+0x151/0x1f0
[   47.961896][ T3924]  __netlink_deliver_tap+0x2c9/0x500
[   47.961995][ T3924]  netlink_unicast+0x66b/0x690
[   47.962025][ T3924]  netlink_sendmsg+0x5c8/0x6f0
[   47.962056][ T3924]  ? __pfx_netlink_sendmsg+0x10/0x10
[   47.962073][ T3924]  ____sys_sendmsg+0x563/0x5b0
[   47.962156][ T3924]  ___sys_sendmsg+0x195/0x1e0
[   47.962199][ T3924]  __x64_sys_sendmsg+0xd4/0x160
[   47.962262][ T3924]  x64_sys_call+0x194c/0x3020
[   47.962300][ T3924]  do_syscall_64+0x12c/0x370
[   47.962327][ T3924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.962350][ T3924] RIP: 0033:0x7fb7b6adc819
[   47.962367][ T3924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.962384][ T3924] RSP: 002b:00007fb7b552f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.962405][ T3924] RAX: ffffffffffffffda RBX: 00007fb7b6d55fa0 RCX: 00007fb7b6adc819
[   47.962420][ T3924] RDX: 00000000040080c0 RSI: 0000200000000080 RDI: 0000000000000003
[   47.962434][ T3924] RBP: 00007fb7b552f090 R08: 0000000000000000 R09: 0000000000000000
[   47.962464][ T3924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.962478][ T3924] R13: 00007fb7b6d56038 R14: 00007fb7b6d55fa0 R15: 00007ffdeac73d18
[   47.962498][ T3924]  </TASK>
[   48.164236][ T3915] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   48.193555][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.220620][ T3929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.136'.
[   48.233902][ T3915] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.131: invalid block
[   48.256699][ T3915] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.258240][ T3915] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.131: invalid indirect mapped block 4294967295 (level 1)
[   48.268081][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   48.268124][    C1] EXT4-fs (loop0): initial error at time 1775368956: ext4_get_branch:178: inode 11: block 4294967295
[   48.268637][    C1] EXT4-fs (loop0): last error at time 1775368956: ext4_get_branch:178: inode 11: block 4294967295
[   48.271734][ T3931] tipc: Started in network mode
[   48.340799][ T3915] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.341887][ T3915] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.131: invalid indirect mapped block 4294967295 (level 1)
[   48.354762][ T3931] tipc: Node identity 5ac037e74eb1, cluster identity 4711
[   48.354956][ T3931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.359745][ T3939] process 'syz.2.138' launched './file1' with NULL argv: empty string added
[   48.370365][ T3915] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   48.400318][ T3915] EXT4-fs (loop0): 2 truncates cleaned up
[   48.422110][ T3915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.436458][ T3940] syzkaller0: entered promiscuous mode
[   48.441945][ T3940] syzkaller0: entered allmulticast mode
[   48.465711][ T3936] netlink: 'syz.1.137': attribute type 10 has an invalid length.
[   48.481988][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.495870][ T3931] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[   48.550519][ T3949] netlink: 'syz.0.140': attribute type 10 has an invalid length.
[   48.558969][ T3936] team0: Device xfrm0 is of different type
[   48.573066][ T3954] loop4: detected capacity change from 0 to 512
[   48.580181][ T3954] EXT4-fs: old and new quota format mixing
[   48.589377][ T3941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.137'.
[   48.606746][ T3931] tipc: Resetting bearer <eth:syzkaller0>
[   48.622298][ T3949] team0: Device xfrm0 is of different type
[   48.645022][ T3930] tipc: Resetting bearer <eth:syzkaller0>
[   48.651783][ T3930] tipc: Disabling bearer <eth:syzkaller0>
[   48.659236][ T3955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.140'.
[   48.720228][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'.
[   48.772321][ T3963] loop2: detected capacity change from 0 to 4096
[   48.793644][ T3965] loop3: detected capacity change from 0 to 1024
[   48.802324][ T3963] EXT4-fs: Ignoring removed bh option
[   48.843475][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.873316][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.931558][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.769385][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   50.769400][   T28] audit: type=1400 audit(1775368958.822:257): avc:  denied  { bind } for  pid=3977 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   50.854187][   T28] audit: type=1400 audit(1775368958.902:258): avc:  denied  { setopt } for  pid=3981 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   50.866762][ T3983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40960 sclass=netlink_route_socket pid=3983 comm=syz.3.149
[   50.873542][   T28] audit: type=1400 audit(1775368958.902:259): avc:  denied  { connect } for  pid=3981 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   50.905413][   T28] audit: type=1400 audit(1775368958.902:260): avc:  denied  { watch } for  pid=3981 comm="syz.3.149" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   51.485227][ T3943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   51.523179][ T3985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.150'.
[   51.538235][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.698214][ T3998] loop4: detected capacity change from 0 to 1024
[   51.730643][ T3998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.757303][ T4007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.159'.
[   51.838209][   T28] audit: type=1400 audit(1775368959.862:261): avc:  denied  { setopt } for  pid=4002 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.863161][ T4013] team0 (unregistering): Port device team_slave_0 removed
[   51.900715][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.930832][ T4013] team0 (unregistering): Port device team_slave_1 removed
[   52.195595][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.160'.
[   52.240338][   T28] audit: type=1400 audit(1775368960.282:262): avc:  denied  { write } for  pid=3992 comm="syz.2.151" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   52.263930][   T28] audit: type=1400 audit(1775368960.282:263): avc:  denied  { open } for  pid=3992 comm="syz.2.151" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   52.353957][ T4026] loop4: detected capacity change from 0 to 512
[   52.361215][ T4026] EXT4-fs: old and new quota format mixing
[   52.445510][ T4032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.164'.
[   52.493181][   T28] audit: type=1400 audit(1775368960.542:264): avc:  denied  { ioctl } for  pid=4035 comm="syz.4.166" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   52.563754][   T28] audit: type=1400 audit(1775368960.612:265): avc:  denied  { accept } for  pid=4035 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   53.067108][ T4062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.176'.
[   53.375994][   T28] audit: type=1400 audit(1775368961.422:266): avc:  denied  { create } for  pid=4066 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   53.433388][ T4069] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   53.515694][ T4074] loop4: detected capacity change from 0 to 256
[   53.546396][ T4069] bond1 (unregistering): Released all slaves
[   53.566055][ T4074] vfat: Unknown parameter 's'
[   53.640239][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.181'.
[   53.722108][ T4077] ip6gre1: entered promiscuous mode
[   53.827524][ T4080] FAULT_INJECTION: forcing a failure.
[   53.827524][ T4080] name failslab, interval 1, probability 0, space 0, times 0
[   53.876502][ T4080] CPU: 1 UID: 0 PID: 4080 Comm: syz.4.181 Not tainted syzkaller #0 PREEMPT(full) 
[   53.876530][ T4080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   53.876542][ T4080] Call Trace:
[   53.876549][ T4080]  <TASK>
[   53.876633][ T4080]  __dump_stack+0x1d/0x30
[   53.876659][ T4080]  dump_stack_lvl+0x95/0xd0
[   53.876716][ T4080]  dump_stack+0x15/0x1b
[   53.876738][ T4080]  should_fail_ex+0x263/0x280
[   53.876766][ T4080]  should_failslab+0x8c/0xb0
[   53.876862][ T4080]  kmem_cache_alloc_noprof+0x66/0x400
[   53.876885][ T4080]  ? security_inode_alloc+0x37/0x100
[   53.876915][ T4080]  security_inode_alloc+0x37/0x100
[   53.877015][ T4080]  inode_init_always_gfp+0x4b7/0x500
[   53.877041][ T4080]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[   53.877073][ T4080]  alloc_inode+0x58/0x170
[   53.877096][ T4080]  new_inode+0x1d/0xe0
[   53.877174][ T4080]  __debugfs_create_file+0x97/0x2b0
[   53.877201][ T4080]  debugfs_create_file_full+0x3f/0x60
[   53.877228][ T4080]  ? __pfx_veth_setup+0x10/0x10
[   53.877249][ T4080]  ref_tracker_dir_debugfs+0x10e/0x220
[   53.877304][ T4080]  alloc_netdev_mqs+0x1a7/0xa40
[   53.877338][ T4080]  rtnl_create_link+0x239/0x720
[   53.877370][ T4080]  rtnl_newlink_create+0x174/0x650
[   53.877496][ T4080]  rtnl_newlink+0x10a0/0x1330
[   53.877568][ T4080]  ? __pfx_rtnl_newlink+0x10/0x10
[   53.877591][ T4080]  rtnetlink_rcv_msg+0x64b/0x720
[   53.877618][ T4080]  netlink_rcv_skb+0x123/0x220
[   53.877658][ T4080]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   53.877688][ T4080]  rtnetlink_rcv+0x1c/0x30
[   53.877708][ T4080]  netlink_unicast+0x5c0/0x690
[   53.877809][ T4080]  netlink_sendmsg+0x5c8/0x6f0
[   53.877832][ T4080]  ? __pfx_netlink_sendmsg+0x10/0x10
[   53.877853][ T4080]  ____sys_sendmsg+0x563/0x5b0
[   53.877884][ T4080]  ___sys_sendmsg+0x195/0x1e0
[   53.877949][ T4080]  __x64_sys_sendmsg+0xd4/0x160
[   53.877973][ T4080]  x64_sys_call+0x194c/0x3020
[   53.878000][ T4080]  do_syscall_64+0x12c/0x370
[   53.878027][ T4080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.878066][ T4080] RIP: 0033:0x7fb7b6adc819
[   53.878082][ T4080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.878134][ T4080] RSP: 002b:00007fb7b552f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   53.878156][ T4080] RAX: ffffffffffffffda RBX: 00007fb7b6d55fa0 RCX: 00007fb7b6adc819
[   53.878169][ T4080] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[   53.878180][ T4080] RBP: 00007fb7b552f090 R08: 0000000000000000 R09: 0000000000000000
[   53.878192][ T4080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.878202][ T4080] R13: 00007fb7b6d56038 R14: 00007fb7b6d55fa0 R15: 00007ffdeac73d18
[   53.878288][ T4080]  </TASK>
[   53.878304][ T4080] debugfs: out of free dentries, can not create file 'netdev@ffff88811b5e0560'
[   53.909419][ T4090] mmap: syz.1.182 (4090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   54.309266][ T4104] loop1: detected capacity change from 0 to 128
[   55.058694][ T4111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.188'.
[   55.556772][ T4130] loop0: detected capacity change from 0 to 2048
[   55.644744][ T4130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.760651][ T4130] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.880381][ T4136] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.889388][ T4130] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.195: bg 0: block 345: padding at end of block bitmap is not set
[   55.890806][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   55.890819][   T28] audit: type=1400 audit(1775368963.942:273): avc:  denied  { read } for  pid=4135 comm="syz.1.196" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   55.909873][ T4126] loop3: detected capacity change from 0 to 512
[   55.945693][   T28] audit: type=1400 audit(1775368963.942:274): avc:  denied  { open } for  pid=4135 comm="syz.1.196" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   55.956772][ T4130] EXT4-fs (loop0): Remounting filesystem read-only
[   55.970669][   T28] audit: type=1400 audit(1775368963.982:275): avc:  denied  { ioctl } for  pid=4135 comm="syz.1.196" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   56.044473][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.072110][ T4143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'.
[   56.094624][ T4141] netlink: 'syz.1.197': attribute type 10 has an invalid length.
[   56.113051][ T4126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.152790][ T4126] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.194650][ T4141] team0: Device xfrm0 is of different type
[   56.208638][ T4148] loop2: detected capacity change from 0 to 128
[   56.400921][ T4151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.197'.
[   56.572444][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.947461][ T4168] loop3: detected capacity change from 0 to 128
[   58.963653][ T4181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'.
[   59.016828][ T4181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'.
[   59.025934][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[   59.302914][   T28] audit: type=1400 audit(1775368967.352:276): avc:  denied  { read } for  pid=4185 comm="syz.2.212" name="event3" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   60.059758][   T28] audit: type=1326 audit(1775368968.112:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   60.112305][   T28] audit: type=1326 audit(1775368968.132:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   60.135429][ T4202] loop0: detected capacity change from 0 to 8192
[   60.206385][   T28] audit: type=1326 audit(1775368968.132:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   60.321677][   T28] audit: type=1326 audit(1775368968.132:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   60.381662][   T28] audit: type=1326 audit(1775368968.132:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   60.462210][   T28] audit: type=1326 audit(1775368968.132:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.420863][   T28] kauditd_printk_skb: 67 callbacks suppressed
[   61.420885][   T28] audit: type=1326 audit(1775368968.662:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.450803][   T28] audit: type=1326 audit(1775368968.662:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.474243][   T28] audit: type=1326 audit(1775368968.662:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.497918][   T28] audit: type=1326 audit(1775368968.662:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.521593][   T28] audit: type=1326 audit(1775368968.662:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.549804][   T28] audit: type=1326 audit(1775368968.812:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   61.615524][   T28] audit: type=1326 audit(1775368968.812:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd8cb87c582 code=0x7ffc0000
[   61.633827][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   61.638828][   T28] audit: type=1326 audit(1775368968.812:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd8cb87c617 code=0x7ffc0000
[   61.678118][   T28] audit: type=1326 audit(1775368968.812:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd8cb839511 code=0x7ffc0000
[   61.701560][   T28] audit: type=1326 audit(1775368968.812:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd8cb87d609 code=0x7ffc0000
[   61.734947][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'.
[   61.746111][ T4221] xt_policy: output policy not valid in PREROUTING and INPUT
[   61.931225][ T4233] netlink: 'syz.4.228': attribute type 10 has an invalid length.
[   62.155318][ T4233] team0: Device xfrm0 is of different type
[   62.378869][ T4239] loop0: detected capacity change from 0 to 128
[   62.683434][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   62.953739][ T4238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.228'.
[   63.208422][ T4233] syz.4.228 (4233) used greatest stack depth: 8648 bytes left
[   63.504820][ T4271] loop0: detected capacity change from 0 to 512
[   63.542444][ T4271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.582313][ T4271] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.760407][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.308341][ T4279] loop3: detected capacity change from 0 to 512
[   64.421547][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.436545][ T4279] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.470683][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.827255][ T4293] loop3: detected capacity change from 0 to 128
[   65.228172][ T4300] netlink: 'syz.2.247': attribute type 10 has an invalid length.
[   65.533952][ T4300] team0: Device xfrm0 is of different type
[   65.686148][ T4303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.247'.
[   66.048509][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.055683][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.073716][ T4305] batman_adv: batadv0: Interface deactivated: dummy0
[   66.235094][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.267857][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.308748][ T4305] veth1_vlan: left allmulticast mode
[   66.309297][ T4300] syz.2.247 (4300) used greatest stack depth: 8520 bytes left
[   66.342335][ T4320] loop3: detected capacity change from 0 to 4096
[   66.372960][ T4320] EXT4-fs: Ignoring removed bh option
[   66.414907][ T4320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.444202][ T2197] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.463302][ T2197] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.472370][ T2197] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.485483][ T2197] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.494944][ T2197] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.504661][ T2197] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.518142][ T2197] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.536507][ T2197] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.572536][ T4330] loop2: detected capacity change from 0 to 128
[   66.585185][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.599394][ T4330] FAT-fs (loop2): bogus number of reserved sectors
[   66.606762][ T4330] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   66.625809][ T4330] FAT-fs (loop2): Can't find a valid FAT filesystem
[   66.882230][ T4342] loop3: detected capacity change from 0 to 512
[   66.892271][ T4342] EXT4-fs: old and new quota format mixing
[   66.913696][ T4348] loop2: detected capacity change from 0 to 512
[   66.930150][ T4348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.942869][ T4348] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.692093][   T28] kauditd_printk_skb: 211 callbacks suppressed
[   67.717387][   T28] audit: type=1400 audit(1775368975.392:571): avc:  denied  { write } for  pid=4333 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   67.797719][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'.
[   67.816435][ T4358] bridge1: port 1(veth0_to_bond) entered blocking state
[   67.823744][ T4358] bridge1: port 1(veth0_to_bond) entered disabled state
[   67.831053][ T4358] veth0_to_bond: entered allmulticast mode
[   67.848455][ T4358] veth0_to_bond: entered promiscuous mode
[   67.862570][ T4358] vlan2: entered allmulticast mode
[   67.868162][ T4358] ip6gretap0: entered allmulticast mode
[   67.887613][ T4358] bridge1: port 2(vlan2) entered blocking state
[   67.894272][ T4358] bridge1: port 2(vlan2) entered disabled state
[   67.902074][ T4358] vlan2: entered promiscuous mode
[   67.908619][ T4358] ip6gretap0: entered promiscuous mode
[   67.940890][   T28] audit: type=1400 audit(1775368975.992:572): avc:  denied  { create } for  pid=4347 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   67.966412][ T4363] netlink: 56 bytes leftover after parsing attributes in process `syz.4.259'.
[   67.979646][   T28] audit: type=1400 audit(1775368975.992:573): avc:  denied  { sys_admin } for  pid=4347 comm="syz.0.257" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   67.989892][ T4356] netlink: 'syz.0.257': attribute type 27 has an invalid length.
[   68.060237][ T4356] netlink: 164 bytes leftover after parsing attributes in process `syz.0.257'.
[   68.062037][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.282700][ T4383] loop4: detected capacity change from 0 to 4096
[   68.298471][ T4383] EXT4-fs: Ignoring removed bh option
[   68.322427][ T4383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.163789][ T4393] loop0: detected capacity change from 0 to 512
[   69.182715][ T4393] EXT4-fs: old and new quota format mixing
[   69.675889][ T4335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.744438][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.759615][   T28] audit: type=1400 audit(1775368977.802:574): avc:  denied  { bind } for  pid=4397 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   69.759639][   T28] audit: type=1400 audit(1775368977.802:575): avc:  denied  { name_bind } for  pid=4397 comm="syz.2.267" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   69.759661][   T28] audit: type=1400 audit(1775368977.802:576): avc:  denied  { node_bind } for  pid=4397 comm="syz.2.267" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   69.936168][ T4407] loop3: detected capacity change from 0 to 512
[   70.003023][ T4407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.143396][ T4419] loop1: detected capacity change from 0 to 512
[   70.167288][ T4407] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.232338][ T4419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.259881][ T4419] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.331440][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.360949][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.585144][ T4431] loop1: detected capacity change from 0 to 128
[   70.890802][ T4433] loop3: detected capacity change from 0 to 4096
[   70.905447][ T4433] EXT4-fs: Ignoring removed bh option
[   70.960924][ T4433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.774549][ T4451] loop0: detected capacity change from 0 to 4096
[   71.781326][ T4451] EXT4-fs: Ignoring removed bh option
[   71.789566][ T4451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.958651][ T4413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.012391][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.043422][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.110607][ T4468] loop2: detected capacity change from 0 to 128
[   73.139152][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.146689][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.200901][ T4468] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   73.238470][ T4478] loop0: detected capacity change from 0 to 512
[   73.253487][ T4468] FAULT_INJECTION: forcing a failure.
[   73.253487][ T4468] name failslab, interval 1, probability 0, space 0, times 0
[   73.271509][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.282965][ T4478] EXT4-fs: old and new quota format mixing
[   73.289732][ T4468] CPU: 0 UID: 0 PID: 4468 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT(full) 
[   73.289759][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   73.289770][ T4468] Call Trace:
[   73.289780][ T4468]  <TASK>
[   73.289787][ T4468]  __dump_stack+0x1d/0x30
[   73.289833][ T4468]  dump_stack_lvl+0x95/0xd0
[   73.289853][ T4468]  dump_stack+0x15/0x1b
[   73.289872][ T4468]  should_fail_ex+0x263/0x280
[   73.289901][ T4468]  should_failslab+0x8c/0xb0
[   73.290029][ T4468]  kmem_cache_alloc_lru_noprof+0x6c/0x410
[   73.290121][ T4468]  ? __d_alloc+0x37/0x340
[   73.290150][ T4468]  __d_alloc+0x37/0x340
[   73.290174][ T4468]  d_alloc_parallel+0x54/0xce0
[   73.290242][ T4468]  ? __rcu_read_unlock+0x4e/0x70
[   73.290265][ T4468]  ? __d_lookup+0x316/0x340
[   73.290298][ T4468]  path_openat+0x8b9/0x2050
[   73.290360][ T4468]  do_file_open+0x16c/0x290
[   73.290421][ T4468]  do_sys_openat2+0x94/0x130
[   73.290451][ T4468]  __x64_sys_openat+0xf2/0x120
[   73.290478][ T4468]  x64_sys_call+0x1e39/0x3020
[   73.290570][ T4468]  do_syscall_64+0x12c/0x370
[   73.290599][ T4468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.290618][ T4468] RIP: 0033:0x7fdbf436c819
[   73.290669][ T4468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.290726][ T4468] RSP: 002b:00007fdbf2dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   73.290747][ T4468] RAX: ffffffffffffffda RBX: 00007fdbf45e5fa0 RCX: 00007fdbf436c819
[   73.290762][ T4468] RDX: 0000000000105142 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   73.290777][ T4468] RBP: 00007fdbf2dbf090 R08: 0000000000000000 R09: 0000000000000000
[   73.290823][ T4468] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001
[   73.290890][ T4468] R13: 00007fdbf45e6038 R14: 00007fdbf45e5fa0 R15: 00007fff762c43a8
[   73.290910][ T4468]  </TASK>
[   73.486557][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.603626][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'.
[   74.089823][  T177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.098871][  T177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.108186][  T177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.117141][  T177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.181665][ T4491] loop0: detected capacity change from 0 to 128
[   74.199351][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'.
[   74.335905][ T4493] loop1: detected capacity change from 0 to 4096
[   74.344445][ T4493] EXT4-fs: Ignoring removed bh option
[   74.381674][ T4493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.541184][ T4501] loop4: detected capacity change from 0 to 128
[   74.563675][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.581233][ T4501] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   74.688308][ T4508] loop4: detected capacity change from 0 to 128
[   74.699109][ T4508] FAT-fs (loop4): bogus number of reserved sectors
[   74.708709][ T4508] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   74.726873][ T4503] netlink: 'syz.2.292': attribute type 3 has an invalid length.
[   74.738713][ T4508] FAT-fs (loop4): Can't find a valid FAT filesystem
[   75.219171][ T4520] loop1: detected capacity change from 0 to 128
[   75.722079][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[   75.815043][ T4524] pimreg: entered allmulticast mode
[   75.821991][ T4524] pimreg: left allmulticast mode
[   75.907361][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'.
[   75.978610][ T4533] netlink: 'syz.3.301': attribute type 10 has an invalid length.
[   75.989838][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'.
[   76.000218][ T4535] tmpfs: Bad value for 'mpol'
[   76.005056][   T28] audit: type=1400 audit(1775368984.052:577): avc:  denied  { mounton } for  pid=4534 comm="syz.1.302" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   76.039200][ T4527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.301'.
[   76.526447][   T28] audit: type=1326 audit(1775368984.572:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   76.577230][   T28] audit: type=1326 audit(1775368984.572:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   76.607712][ T4543] Q�6�`Ҙ: renamed from lo
[   76.622395][   T28] audit: type=1326 audit(1775368984.572:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   76.665993][   T28] audit: type=1326 audit(1775368984.572:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   76.669051][ T4547] loop6: detected capacity change from 0 to 8
[   76.747138][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   76.757791][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   76.826568][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   76.837250][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   76.845480][ T4547]  loop6: unable to read partition table
[   76.860182][ T4547] loop_reread_partitions: partition scan of loop6 (�N�h*h�������p��� "�o��?<��ʺ��XD��
b��p0�O{���>.) failed (rc=-5)
[   76.884158][   T28] audit: type=1326 audit(1775368984.582:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   76.918055][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   76.928808][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   76.950784][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   76.961460][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   76.969307][ T3861]  loop6: unable to read partition table
[   76.987877][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   76.998674][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   77.003582][   T28] audit: type=1326 audit(1775368984.582:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   77.007974][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   77.032809][   T28] audit: type=1326 audit(1775368984.582:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8cb83d04e code=0x7ffc0000
[   77.040379][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   77.071791][ T4543]  loop6: unable to read partition table
[   77.078087][ T4543] loop_reread_partitions: partition scan of loop6 (�N�h*h�������p��� "�o��?<��ʺ��XD��
b��p0�O{���>.) failed (rc=-5)
[   77.092851][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   77.103523][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   77.111661][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   77.122276][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   77.130446][   T28] audit: type=1326 audit(1775368984.582:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   77.136356][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   77.164536][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   77.173864][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   77.184850][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   77.229919][   T28] audit: type=1326 audit(1775368984.582:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   77.303391][ T4558] netlink: 'syz.2.308': attribute type 29 has an invalid length.
[   77.460561][ T4565] loop3: detected capacity change from 0 to 512
[   77.507014][ T4565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.526469][ T4565] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.638758][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[   77.654958][ T4570] netlink: 'syz.1.309': attribute type 18 has an invalid length.
[   77.677505][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   77.755080][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[   77.766988][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[   78.064941][ T4579] loop4: detected capacity change from 0 to 128
[   78.672515][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'.
[   78.723416][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.235281][ T4603] loop4: detected capacity change from 0 to 512
[   79.242199][ T4603] EXT4-fs: Ignoring removed bh option
[   79.255066][ T4603] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   79.300300][ T4603] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6
[   79.338829][ T4603] loop4: detected capacity change from 0 to 512
[   79.384145][ T4615] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[   79.437397][ T4603] EXT4-fs: Ignoring removed mblk_io_submit option
[   79.494575][ T4603] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   79.505213][ T4603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002]
[   79.513277][ T4603] EXT4-fs (loop4): orphan cleanup on readonly fs
[   79.520134][ T4603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.322: bg 0: block 361: padding at end of block bitmap is not set
[   79.534467][ T4603] loop4: lost filesystem error report for type 5 error -117
[   79.534637][ T4603] EXT4-fs (loop4): Remounting filesystem read-only
[   79.541947][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   79.541968][    C0] EXT4-fs (loop4): initial error at time 1775368987: ext4_validate_block_bitmap:441
[   79.541988][    C0] EXT4-fs (loop4): last error at time 1775368987: ext4_validate_block_bitmap:441
[   79.587228][ T4603] EXT4-fs (loop4): 1 truncate cleaned up
[   79.598261][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   79.736009][ T4603] EXT4-fs: Ignoring removed bh option
[   79.762616][ T4603] System zones: 1-12
[   79.776917][ T4603] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000007.
[   79.810443][ T4603] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.322: error -117 reading directory block
[   79.969606][ T4603] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.322: error -117 reading directory block
[   80.005750][ T4603] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.322: error -117 reading directory block
[   80.040246][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   80.230995][ T4633] netlink: 'syz.2.330': attribute type 29 has an invalid length.
[   80.314221][ T4641] loop4: detected capacity change from 0 to 128
[   80.331095][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'.
[   80.475408][ T4644] loop1: detected capacity change from 0 to 1024
[   80.492184][ T4645] loop3: detected capacity change from 0 to 512
[   80.552978][ T4644] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   80.637378][ T4645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.680846][ T4644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.697903][ T4645] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.720728][ T4644] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   80.754137][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.995293][ T4644] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   81.017368][ T4644] EXT4-fs (loop1): This should not happen!! Data will be lost
[   81.017368][ T4644] 
[   81.027489][ T4644] EXT4-fs (loop1): Total free blocks count 0
[   81.033494][ T4644] EXT4-fs (loop1): Free/Dirty block details
[   81.039750][ T4644] EXT4-fs (loop1): free_blocks=20480
[   81.052841][ T4644] EXT4-fs (loop1): dirty_blocks=16
[   81.058056][ T4644] EXT4-fs (loop1): Block reservation details
[   81.064619][ T4644] EXT4-fs (loop1): i_reserved_data_blocks=1
[   81.072544][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   81.092531][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.142389][ T4679] loop2: detected capacity change from 0 to 128
[   81.166875][ T4679] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   81.180347][ T4679] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   81.227334][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.335813][ T4694] loop1: detected capacity change from 0 to 512
[   81.349125][ T4694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.377734][ T4697] netlink: 'syz.2.351': attribute type 29 has an invalid length.
[   81.454990][ T4694] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.501057][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.732340][ T4706] loop1: detected capacity change from 0 to 128
[   81.749340][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'.
[   81.760512][ T4702] loop3: detected capacity change from 0 to 128
[   81.787958][ T4702] FAT-fs (loop3): bogus number of reserved sectors
[   81.805809][ T4702] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   81.899471][ T4702] FAT-fs (loop3): Can't find a valid FAT filesystem
[   82.089605][   T28] kauditd_printk_skb: 50 callbacks suppressed
[   82.089696][   T28] audit: type=1400 audit(1775368990.142:637): avc:  denied  { unmount } for  pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   82.273640][ T4718] loop0: detected capacity change from 0 to 128
[   82.285450][   T28] audit: type=1326 audit(1775368990.332:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25ed0c819 code=0x7ffc0000
[   82.328628][ T4719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.341760][ T4718] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   82.354312][   T28] audit: type=1326 audit(1775368990.332:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25ed0c819 code=0x7ffc0000
[   82.379526][ T4717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.446634][ T4719] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   82.536520][ T4717] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.547724][ T4718] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   82.719655][   T28] audit: type=1326 audit(1775368990.332:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25ed0c819 code=0x7ffc0000
[   82.839238][ T4717] audit: audit_backlog=65 > audit_backlog_limit=64
[   82.869248][   T28] audit: type=1326 audit(1775368990.332:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd25ed0c819 code=0x7ffc0000
[   82.907406][ T4717] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   82.940897][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   82.967259][ T4717] audit: backlog limit exceeded
[   83.017138][   T28] audit: type=1326 audit(1775368990.332:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25ed0c819 code=0x7ffc0000
[   83.081740][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.155185][   T28] audit: type=1326 audit(1775368990.342:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4713 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25ed0c819 code=0x7ffc0000
[   83.310412][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.562659][ T4733] netlink: 'syz.2.363': attribute type 10 has an invalid length.
[   83.601863][ T4733] team0: Device xfrm0 is of different type
[   83.632349][ T4738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.363'.
[   83.689839][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.749518][ T4740] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.997474][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.458112][ T4748] set_capacity_and_notify: 4 callbacks suppressed
[   84.458128][ T4748] loop3: detected capacity change from 0 to 128
[   84.505080][ T4748] FAT-fs (loop3): bogus number of reserved sectors
[   84.525292][ T4748] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   84.534703][ T4748] FAT-fs (loop3): Can't find a valid FAT filesystem
[   84.803512][ T4761] netlink: 'syz.4.369': attribute type 29 has an invalid length.
[   85.139263][ T4768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'.
[   85.151605][ T4768] loop2: detected capacity change from 0 to 512
[   85.167706][ T4768] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   85.213211][ T4768] EXT4-fs (loop2): 1 truncate cleaned up
[   85.221030][ T4768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.353172][ T4780] loop3: detected capacity change from 0 to 512
[   85.381123][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.397042][ T4783] loop0: detected capacity change from 0 to 128
[   85.423753][ T4783] FAT-fs (loop0): bogus number of reserved sectors
[   85.431044][ T4783] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   85.441134][ T4783] FAT-fs (loop0): Can't find a valid FAT filesystem
[   85.448361][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.462215][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[   85.471172][ T4788] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.479617][ T4788] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.488812][ T4788] batman_adv: batadv0: Removing interface: dummy0
[   85.516577][ T4780] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.547439][ T4792] loop2: detected capacity change from 0 to 128
[   85.560399][ T4792] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   85.604351][ T4792] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   85.675447][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.828227][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.957840][ T4818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.387'.
[   86.342080][ T4828] netlink: 'syz.4.389': attribute type 29 has an invalid length.
[   86.763622][ T4832] loop2: detected capacity change from 0 to 128
[   86.772229][ T4832] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.794320][ T4832] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.840003][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.878729][ T4839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4839 comm=syz.2.394
[   86.893496][ T4839] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[   86.908316][ T4840] netlink: 'syz.1.390': attribute type 29 has an invalid length.
[   86.921246][ T4839] bond1: (slave bridge1): making interface the new active one
[   86.929147][ T4839] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   86.940535][ T4839] loop2: detected capacity change from 0 to 512
[   86.950153][ T4839] EXT4-fs (loop2): first meta block group too large: 2 (group descriptor block count 1)
[   87.012412][ T4847] loop2: detected capacity change from 0 to 128
[   87.038479][ T4849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'.
[   87.098657][   T28] kauditd_printk_skb: 91 callbacks suppressed
[   87.098752][   T28] audit: type=1400 audit(1775368995.152:735): avc:  denied  { ioctl } for  pid=4848 comm="syz.2.398" path="socket:[8987]" dev="sockfs" ino=8987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   87.759758][ T4865] FAULT_INJECTION: forcing a failure.
[   87.759758][ T4865] name failslab, interval 1, probability 0, space 0, times 0
[   87.772531][ T4865] CPU: 0 UID: 0 PID: 4865 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(full) 
[   87.772594][ T4865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[   87.772601][ T4865] Call Trace:
[   87.772606][ T4865]  <TASK>
[   87.772611][ T4865]  __dump_stack+0x1d/0x30
[   87.772628][ T4865]  dump_stack_lvl+0x95/0xd0
[   87.772641][ T4865]  dump_stack+0x15/0x1b
[   87.772730][ T4865]  should_fail_ex+0x263/0x280
[   87.772745][ T4865]  ? v9fs_init_fs_context+0x34/0x220
[   87.772764][ T4865]  should_failslab+0x8c/0xb0
[   87.772779][ T4865]  __kmalloc_cache_noprof+0x5f/0x410
[   87.772841][ T4865]  ? alloc_fs_context+0x46/0x580
[   87.772855][ T4865]  v9fs_init_fs_context+0x34/0x220
[   87.772898][ T4865]  alloc_fs_context+0x4a6/0x580
[   87.772912][ T4865]  fs_context_for_mount+0x22/0x30
[   87.772932][ T4865]  do_new_mount+0xe7/0x8d0
[   87.772944][ T4865]  ? security_capable+0x7b/0x90
[   87.772961][ T4865]  path_mount+0x4d0/0xbc0
[   87.772974][ T4865]  __se_sys_mount+0x28c/0x2e0
[   87.773040][ T4865]  ? fput+0x8f/0xc0
[   87.773056][ T4865]  __x64_sys_mount+0x67/0x80
[   87.773071][ T4865]  x64_sys_call+0x2d61/0x3020
[   87.773086][ T4865]  do_syscall_64+0x12c/0x370
[   87.773102][ T4865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.773115][ T4865] RIP: 0033:0x7f8f35bac819
[   87.773125][ T4865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.773200][ T4865] RSP: 002b:00007f8f34607028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   87.773212][ T4865] RAX: ffffffffffffffda RBX: 00007f8f35e25fa0 RCX: 00007f8f35bac819
[   87.773220][ T4865] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[   87.773227][ T4865] RBP: 00007f8f34607090 R08: 0000200000000180 R09: 0000000000000000
[   87.773235][ T4865] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[   87.773242][ T4865] R13: 00007f8f35e26038 R14: 00007f8f35e25fa0 R15: 00007ffc2d68b148
[   87.773316][ T4865]  </TASK>
[   88.066244][ T4872] erspan1: entered allmulticast mode
[   88.254686][   T28] audit: type=1400 audit(1775368996.302:736): avc:  denied  { create } for  pid=4881 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   88.473147][ T4889] loop4: detected capacity change from 0 to 512
[   88.479908][ T4889] EXT4-fs: Ignoring removed bh option
[   88.485713][ T4889] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   88.496510][ T4889] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.411: corrupted in-inode xattr: e_value size too large
[   88.510464][ T4889] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   88.513026][ T4889] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.411: couldn't read orphan inode 15 (err -117)
[   88.522237][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   88.522291][    C1] EXT4-fs (loop4): initial error at time 1775368996: ext4_iget_extra_inode:5040: inode 15
[   88.522324][    C1] EXT4-fs (loop4): last error at time 1775368996: ext4_iget_extra_inode:5040: inode 15
[   88.560315][ T4889] loop4: lost filesystem error report for type 5 error -117
[   88.560831][ T4889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.605294][ T4795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.660200][ T4893] macvtap1: entered promiscuous mode
[   88.665651][ T4893] macvtap1: entered allmulticast mode
[   88.674177][ T4893] veth1_vlan: entered allmulticast mode
[   88.774403][   T28] audit: type=1400 audit(1775368996.812:737): avc:  denied  { listen } for  pid=4903 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   88.857194][   T28] audit: type=1400 audit(1775368996.912:738): avc:  denied  { ioctl } for  pid=4913 comm="syz.3.420" path="socket:[8169]" dev="sockfs" ino=8169 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   88.950232][   T28] audit: type=1326 audit(1775368996.992:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   88.980656][   T28] audit: type=1326 audit(1775368996.992:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   89.006518][ T4923] loop1: detected capacity change from 0 to 128
[   89.013552][ T4923] FAT-fs (loop1): bogus number of reserved sectors
[   89.022305][ T4923] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   89.035898][ T4923] FAT-fs (loop1): Can't find a valid FAT filesystem
[   89.058076][   T28] audit: type=1326 audit(1775368996.992:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   89.105228][   T28] audit: type=1326 audit(1775368996.992:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   89.128989][   T28] audit: type=1326 audit(1775368996.992:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   89.153016][   T28] audit: type=1326 audit(1775368996.992:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4921 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cb87c819 code=0x7ffc0000
[   89.317052][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.103734][ T4948] netlink: 'syz.2.431': attribute type 11 has an invalid length.
[   90.134758][ T4948] netlink: 140 bytes leftover after parsing attributes in process `syz.2.431'.
[   90.177234][ T4951] netlink: 100 bytes leftover after parsing attributes in process `syz.2.431'.
[   90.429037][ T4953] set_capacity_and_notify: 1 callbacks suppressed
[   90.429056][ T4953] loop3: detected capacity change from 0 to 8192
[   91.149943][ T4961] loop1: detected capacity change from 0 to 128
[   91.184544][ T4961] FAT-fs (loop1): bogus number of reserved sectors
[   91.216485][ T4961] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   91.241811][ T4961] FAT-fs (loop1): Can't find a valid FAT filesystem
[   91.335603][ T4967] loop1: detected capacity change from 0 to 136
[   91.362945][ T4967] ISOFS: unable to read i-node block
[   91.372961][ T4967] isofs_fill_super: get root inode failed
[   91.440375][ T4969] macvtap1: entered promiscuous mode
[   91.445751][ T4969] syz_tun: entered promiscuous mode
[   91.452492][ T4969] macvtap1: entered allmulticast mode
[   91.458073][ T4969] syz_tun: entered allmulticast mode
[   91.513241][ T4969] syz_tun: left allmulticast mode
[   91.519027][ T4969] syz_tun: left promiscuous mode
[   91.519052][ T3302]  loop3: p2 p4
[   91.519158][ T3302] loop3: p2 start 4293394690 is beyond EOD, truncated
[   91.536489][ T3302] loop3: p4 size 100663296 extends beyond EOD, truncated
[   91.588898][ T4972] netlink: 'syz.2.439': attribute type 10 has an invalid length.
[   91.603447][ T4953]  loop3: p2 p4
[   91.608365][ T4953] loop3: p2 start 4293394690 is beyond EOD, truncated
[   91.635018][ T4953] loop3: p4 size 100663296 extends beyond EOD, truncated
[   91.698445][ T4972] team0: Device xfrm0 is of different type
[   91.729348][ T4977] ieee802154 phy0 wpan0: encryption failed: -22
[   91.763186][ T4974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.439'.
[   92.148753][ T4984] loop1: detected capacity change from 0 to 512
[   92.437135][ T4984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.476996][ T4984] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.751365][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.876469][ T5001] loop3: detected capacity change from 0 to 512
[   94.345144][ T5001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.358004][ T5001] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.402825][ T5005] loop1: detected capacity change from 0 to 128
[   94.502123][ T5009] loop4: detected capacity change from 0 to 512
[   94.519416][ T5009] vfat: Unknown parameter '00000000000000000000003'
[   96.866635][ T5025] loop1: detected capacity change from 0 to 512
[   96.938424][ T5025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.976510][ T5025] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.987577][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.385557][ T5038] netlink: 'syz.3.454': attribute type 10 has an invalid length.
[   97.564549][ T5040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'.
[   97.667658][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.547892][ T5057] loop2: detected capacity change from 0 to 512
[   99.188665][ T5057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.201288][ T5057] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.445019][ T5064] loop4: detected capacity change from 0 to 1024
[   99.451915][ T5064] EXT4-fs: inline encryption not supported
[   99.612332][ T5064] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[   99.656488][ T5064] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   99.667617][ T5064] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[   99.714543][ T5066] loop1: detected capacity change from 0 to 4096
[   99.790821][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.802091][ T5068] loop4: detected capacity change from 0 to 1024
[   99.824355][ T5068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   99.838395][ T5066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.861639][ T5068] System zones: 0-1, 3-36
[   99.876746][ T5068] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.468: bad orphan inode 134217728
[   99.939144][ T5068] loop4: lost filesystem error report for type 5 error -117
[   99.939826][ T5068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.010291][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.035283][ T5078] loop0: detected capacity change from 0 to 128
[  100.097592][ T5079] loop2: detected capacity change from 0 to 512
[  100.110470][ T5079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.123086][ T5079] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.143765][ T3313] ==================================================================
[  100.151885][ T3313] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[  100.159710][ T3313] 
[  100.162030][ T3313] read-write to 0xffff888237d27760 of 8 bytes by task 5078 on cpu 1:
[  100.170175][ T3313]  find_get_block_common+0x459/0x8a0
[  100.175463][ T3313]  bdev_getblk+0x333/0x3f0
[  100.179885][ T3313]  fat_alloc_new_dir+0x16f/0x550
[  100.184814][ T3313]  vfat_mkdir+0xa5/0x210
[  100.189059][ T3313]  vfs_mkdir+0x294/0x3e0
[  100.193292][ T3313]  filename_mkdirat+0x138/0x300
[  100.198170][ T3313]  __se_sys_mkdirat+0x32/0xf0
[  100.202923][ T3313]  __x64_sys_mkdirat+0x43/0x50
[  100.207775][ T3313]  x64_sys_call+0x2c4e/0x3020
[  100.212566][ T3313]  do_syscall_64+0x12c/0x370
[  100.217170][ T3313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.223084][ T3313] 
[  100.225414][ T3313] read to 0xffff888237d27760 of 8 bytes by task 3313 on cpu 0:
[  100.232957][ T3313]  has_bh_in_lru+0x35/0x1f0
[  100.237475][ T3313]  smp_call_function_many_cond+0x2c1/0xc30
[  100.243283][ T3313]  on_each_cpu_cond_mask+0x3c/0x80
[  100.248661][ T3313]  invalidate_bh_lrus+0x2a/0x30
[  100.253511][ T3313]  invalidate_bdev+0x42/0x70
[  100.258099][ T3313]  ext4_put_super+0x610/0x7b0
[  100.262780][ T3313]  generic_shutdown_super+0xee/0x220
[  100.268061][ T3313]  kill_block_super+0x2a/0x70
[  100.272734][ T3313]  ext4_kill_sb+0x42/0x80
[  100.277054][ T3313]  deactivate_locked_super+0x75/0x1c0
[  100.282423][ T3313]  deactivate_super+0x97/0xa0
[  100.287182][ T3313]  cleanup_mnt+0x2bb/0x330
[  100.291601][ T3313]  __cleanup_mnt+0x19/0x20
[  100.296024][ T3313]  task_work_run+0x130/0x1a0
[  100.300607][ T3313]  exit_to_user_mode_loop+0x1f4/0x6f0
[  100.305975][ T3313]  do_syscall_64+0x249/0x370
[  100.310647][ T3313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.316531][ T3313] 
[  100.318845][ T3313] value changed: 0xffff8881063570d0 -> 0xffff888106356958
[  100.325936][ T3313] 
[  100.328271][ T3313] Reported by Kernel Concurrency Sanitizer on:
[  100.334405][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  100.343940][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  100.354024][ T3313] ==================================================================
[  101.257200][ T5087] loop3: detected capacity change from 0 to 128
[  101.412712][ T5087] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  101.456939][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.470770][ T5087] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  101.675446][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  101.675462][   T28] audit: type=1400 audit(1775369009.722:757): avc:  denied  { getopt } for  pid=5085 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  101.757127][ T5087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'.
[  101.786771][   T28] audit: type=1400 audit(1775369009.782:758): avc:  denied  { create } for  pid=5085 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1
[  101.848717][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.866570][   T28] audit: type=1400 audit(1775369009.802:759): avc:  denied  { write } for  pid=5085 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1
[  101.929617][   T28] audit: type=1400 audit(1775369009.802:760): avc:  denied  { read } for  pid=5085 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1
[  101.972989][   T28] audit: type=1400 audit(1775369009.812:761): avc:  denied  { create } for  pid=5085 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1
[  102.016272][   T28] audit: type=1400 audit(1775369009.812:762): avc:  denied  { write } for  pid=5085 comm="syz.3.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1
[  102.706395][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.