last executing test programs:

7m4.697779345s ago: executing program 3 (id=49):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, 0x0, 0x0, 0x20000020, 0x0)

7m4.536948101s ago: executing program 3 (id=51):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005", @ANYRES16, @ANYRESHEX=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="2000000000000000b7080000000000007b8af8ff00000000bfa2000000e700000000000000ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3dd3565d, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000004c0))
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0)
sendto$inet(r3, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0)
shutdown(r3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000600)={0x0, 0x0})
r6 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil)
r7 = shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmdt(r7)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x5}, 0x8)
recvfrom$inet(r3, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000006a005f2526bd7000ffdbdf270206000000000000"], 0x18}}, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="480000007d010000004100080005674847580100000007000000000000000000080001000000f9190000f5c400000000000009002c5b2f272e21407b3a0300265d2801000001"], 0x48)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1010, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x9, 0x8}, 0x10000, 0xe7e, 0x2, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

7m3.635426964s ago: executing program 3 (id=59):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x6)
bind$inet6(r1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000042000000020000000800000000000000", @ANYBLOB="0000d7000000000040000000", @ANYRES32=0x0, @ANYRES32], 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0'}, 0x33)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x200000000000000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x0, 0xf2ffffffffffffff}, 0x38)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7ffe703ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

7m3.28865147s ago: executing program 3 (id=62):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xe}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x5, 0x8000001, 0x2000402)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180)={[{@user_xattr}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@quota}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@data_err_ignore}, {@data_journal}]}, 0x80, 0x63c, &(0x7f0000000200)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/uprobe_events\x00', 0x601, 0xd)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)='\v', 0x1}, {&(0x7f00000009c0)='s', 0x1}], 0x2)
syz_emit_ethernet(0xfdef, &(0x7f0000000a00)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x1000404, &(0x7f0000000ac0)={[{@dmode={'dmode', 0x3d, 0x5}}, {@map_normal}, {}, {@check_relaxed}, {@unhide}, {@overriderock}]}, 0x45, 0x581, &(0x7f0000000f00)="$eJzs3E1v3MYZAOChPmJZLdQCQWNH8YFxcnAPUbirWoaQS7cUJTFZLRckFcinIqjlwKiUFk0KNL4UvqQt0P6IoLf+gp5y6P8Jeu9FBZe7sq2vqIkspcbzAPaMyJec9yUWM9AKwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhChdS5JOFPr5YHsnPmohhND20rWy2Do8fnBwNHJyv38+15wxbghR8y/MzYWb7aGbrz49/ZPmv9vhRvvTjTDXNHPh8Q9euxZenZmaXH8s4e/m54flntOnnz/+9Ud7e7u/u+BErtYr547cyAZ5VeRbvY0szqsiXl1ZSd7dXK/i9byfVferOtuK0zLr1UUZ30l/GndWV5fjbOl+sT3YWOv1s8nBe+90k2Qlfn9pmPXKqhi8+/5SlW7m/X4+2BjFNKebmHvNB/GDvI7rrLcVxw8f7e0uj3OZOS3JJqhz/PD0+KP2NKj7TeV2k2630+l2Oyt3V+/eS5KZYweSI8KxiAv/0PJ/5gJnb/huDsbrPwAAAPDyikbfsTe//8+OvoePwnrez5JToq9dcnYAAADARRj95f9G08yG2RBuhqj9/f+PV50YAAAAcGH+/HSP3WhD1GiP3Y/fO9xjdz1Uw2vRV/8OZTkbPRnuvB3t95q43v54/9T00TvW64vRwvgmo2ZlZvxTmt2KXm+DXp9Efz1uHp601++ZPKLoAhIIfw2Lbczig7Z9MDnTjjK/nvezpbTov9cJvd7CVJ3t1L//5NEfwqj8vwy2FqLw8NHe7tKvfrP3YLhzfTzik/3xBopj+yjOyOWzw32PYeZoxf/6UXsqS9pxr4d23OTZ+qfamKn/YcwvwhttzBvzbTv/fP1zTf2dpdOqn2+z6Ax33l7Yf3JW5dNnZ3Grjbp1562meevOCVl0j2Zx7UgW3dGzGGfxrZ7FObJYPutZvBJCWD41ix+eKwuAq/Lw6Sp08rp7fOE/11w7OdvOcpezun8R3mxj3lwcTawziyfM6Mk3rW7JszP6t1jX/xFutzG3J8GnrbHNuH97blWN9r9sLvjy1HGrfjdqHuH0Z/u/Da99+vnjdx7tf/Tx7se7n3S7yyvJz5LkbjfMNrcLbZNYewA4QVZ+Hc3Xf4rKMh/+srO62unVm1lcFukHcZmvbWRxPqizMt3sDTayeFgWdZEW/abzYb6WVXG1PRwWZR2vF2U8LKp8Z/Tml/8ctK9+qbKt3qDO02rYz3pVFqfFoO6ldbyWV2k83P5FP682s3J0cTXM0nw9T3t1Xgziqtgu02wpjqsseyYwX8sGdb6eN91BPCzzrV55P/6w6G9vZfFaVqVlPqyL9oaTsfLBelFujW67NKr4q6t+5ABw5Q7fYPcCO1ddIwDwPKs0AAAAAAAAAAAAAAB8/522b+/vL3RH4FmdSWZXM/oL6UxdSjlz34NKX4LO5M1V57zqYPpyNtFeeufq5iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOM1/AwAA//+UDJmz")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
getdents64(0xffffffffffffffff, &(0x7f0000001500)=""/46, 0x3b)
syz_clone3(&(0x7f0000001540)={0x41200, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640), {0x17}, &(0x7f0000001680)=""/178, 0xb2, &(0x7f0000001740)=""/128, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
semget$private(0x0, 0x6, 0x0)

7m1.652254948s ago: executing program 3 (id=67):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20041891}, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
bind$inet6(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000042000000020000000800000000000000", @ANYBLOB="0000d7000000000040000000", @ANYRES32=0x0, @ANYRES32], 0x50)
unshare(0x22020600)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0'}, 0x33)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x200000000000000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, 0x0, 0xf2ffffffffffffff}, 0x38)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7ffe703ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

7m1.356449078s ago: executing program 3 (id=70):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xfc, 0x25e, &(0x7f0000000e80)="$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")
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xef, 0x7, 0x0, 0x8, 0x0, 0x0, 0xc9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffa, 0x0, @perf_bp={0x0, 0x8}, 0x10f138, 0x2000000000, 0x3, 0x5, 0xfffffffffffffff4, 0x7f, 0xfffd, 0x0, 0x9, 0x0, 0x3b}, 0x0, 0xc, 0xffffffffffffffff, 0xb)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000b80)=ANY=[], 0xfe33)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900000", @ANYRES16, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x9, 0x4}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0xe, 0x0, 0x0, @void, @value=0x0}, 0x20)
r3 = semget$private(0x0, 0x6, 0x0)
semop(r3, &(0x7f00000000c0)=[{0x0, 0x8000}, {0x2, 0xfffc}], 0x2)
semop(r3, &(0x7f0000000140)=[{0x0, 0x85fd, 0x1000}], 0x1)
semctl$GETZCNT(r3, 0x0, 0xf, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40, 0x8800000)

7m1.33999473s ago: executing program 32 (id=70):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x40, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xfc, 0x25e, &(0x7f0000000e80)="$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")
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xef, 0x7, 0x0, 0x8, 0x0, 0x0, 0xc9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffa, 0x0, @perf_bp={0x0, 0x8}, 0x10f138, 0x2000000000, 0x3, 0x5, 0xfffffffffffffff4, 0x7f, 0xfffd, 0x0, 0x9, 0x0, 0x3b}, 0x0, 0xc, 0xffffffffffffffff, 0xb)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000b80)=ANY=[], 0xfe33)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900000", @ANYRES16, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x9, 0x4}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0xe, 0x0, 0x0, @void, @value=0x0}, 0x20)
r3 = semget$private(0x0, 0x6, 0x0)
semop(r3, &(0x7f00000000c0)=[{0x0, 0x8000}, {0x2, 0xfffc}], 0x2)
semop(r3, &(0x7f0000000140)=[{0x0, 0x85fd, 0x1000}], 0x1)
semctl$GETZCNT(r3, 0x0, 0xf, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x40, 0x8800000)

14.730384788s ago: executing program 1 (id=3412):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0x31, 0x0, &(0x7f0000000040))
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000340), 0x4)
sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r3)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000a00764cf08dd521302c3e08a5b15ebd376bb4ac957feaae4fcb73859a3fd907f8e583196ddd1fa6", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

14.51162306s ago: executing program 1 (id=3416):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000029200)={0x0, 0x0, &(0x7f0000029240)={&(0x7f0000029280)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00"], 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000029340)={0x0, 0x0, &(0x7f0000029380)={&(0x7f00000293c0)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000029580)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0)

14.41225093s ago: executing program 1 (id=3418):
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000001580)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
shutdown(r0, 0x1)

14.270555915s ago: executing program 1 (id=3422):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000002240)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$vsock_stream(0x28, 0x1, 0x0)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', &(0x7f0000000240)={0x43c000, 0x196, 0x8}, 0x18)
r2 = openat(r1, &(0x7f0000000180)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x113)
capset(&(0x7f0000000280)={0x20080522}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f00000023c0)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000094000000030a01020000000000000000020000000900010073797a30000000007300030091abc12404cf378042c561bd"], 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x4000800)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000002280)=0x3)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0e}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x16}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084)
sendmsg$nl_route(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002640)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000340)=0x10)
getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000001140)=""/4102, &(0x7f0000002180)=0x1006)
write$cgroup_int(r2, &(0x7f00000001c0)=0x1000000000000008, 0x12)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

13.896210053s ago: executing program 1 (id=3427):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

13.34819454s ago: executing program 1 (id=3438):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0xa1bfe459c6c078b5)
ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000240))
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbd}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x82)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000000), 0x0)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e1f, 0xfffffffc, @remote, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x1, 0x1, 0x0, [@local]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x50}, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0xa1bfe459c6c078b5) (async)
ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000240)) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbd}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x82) (async)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000000), 0x0) (async)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e1f, 0xfffffffc, @remote, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x1, 0x1, 0x0, [@local]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x50}, 0x1) (async)

13.34795317s ago: executing program 33 (id=3438):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0xa1bfe459c6c078b5)
ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000240))
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbd}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x82)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000000), 0x0)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e1f, 0xfffffffc, @remote, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x1, 0x1, 0x0, [@local]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x50}, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0xa1bfe459c6c078b5) (async)
ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000240)) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbd}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x82) (async)
lsm_get_self_attr(0x69, 0x0, &(0x7f0000000000), 0x0) (async)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e1f, 0xfffffffc, @remote, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x1, 0x1, 0x0, [@local]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x50}, 0x1) (async)

7.828568556s ago: executing program 6 (id=3492):
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0xffffffffffffffff, 0x10001, 0xf6}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
ioperm(0x40, 0x9, 0x7f)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0xfffffffffffffffe, 0xc)
syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000ec0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x800001d, 0x300)
set_mempolicy(0x4005, &(0x7f0000000f40)=0x4, 0x7)
rt_sigqueueinfo(0x0, 0x8028, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0x1c}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
getrandom(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
syz_mount_image$ext4(&(0x7f0000001040)='ext4\x00', &(0x7f0000001140)='./bus\x00', 0x21081e, &(0x7f0000001180)={[{@init_itable}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f00000011c0)="$eJzs3c9vI1cdAPDvzK6T7G7abEsPgKBd2sKCVutsvO2q6gHKCSFUCdEjSNuQeKNV7DiKndKElUjPXJGoxAmO/AGce+LOBcGNSzkg8SMCNUgcBs14kvUmduL94TiKPx9p5Pfmjf19b73z3syz4xfAxLoWETsRMRUR70fEXLk/Kbd4p7vlx322+2Bpb/fBUhJZ9t4/k6I83xc9z8ldKV9zJiJ+8J2IHydH47a3tlcXG436Rpmf7zTX59tb2zfvNxdX6iv1tVrtzsKdW2/dfrP2GK2ZObb0leZUmfryp3/Y+cZP82rNlnt62/EsdZteOYiTuxgR3xtFsDG4ULZn6smefvwbxsilEfFiRLxanP9zcaF4NwGA8yzL5iKb680DAOddWsyBJWm1nAuYjTStVrtzeC/F5bTRandu3Gttri1358quRiW9d79Rv1XOFV6NSpLnF4r0w3ztUP52RLwQEb+YvlTkq0utxvI4L3wAYIJdOTT+/2e6O/4DAOecb2EAwOQx/gPA5DH+A8DkMf4DwOTpjv+XHvdpWZb9bBTVAQBOgft/AJg8xn8AmCjff/fdfMv2yt+/Xv5ga3O19cHN5Xp7tdrcXKoutTbWqyut1krxmz3Nk16v0WqtL7wRmx9e/eZ6uzPf3tq+22xtrnXuFr/rfbdeKY7aOYWWAQCDvPDKJ39O8hH57UvFFj1rOVTGWjNg1NJxVwAYmwvjrgAwNlb7gsn18B7/sb8EYHoAzok+S/Q+YqbfHwhlWZaNrkrAiF3/gvl/mFQ98/++BQwT5qT5/2JtYB8Swrlk/h8mV5Ylw675H8MeCACcbcfM8V89zesQYHwGfP7/Yvn42/LDgR8tHz7i41HWCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM62/fV/q+Uyv7ORptVqxHPFAkCV5N79Rv1WRDwfEX+arkzn+YUx1xkAeFrp35Jy/a/rc6/PPlL08pWD5FRE/ORX7/3yw8VOZ+OPEVPJv6b393c+LvfXTgw2M4oWAADH2x+ni8eeG/nPdh8s7W+nWZ+/f7t7VZDH3dudir2D+BfjYvE4E5WIuPzvpMx3JT1zF09j56OI+Hy/9icxW8yBdC9ZDsfPYz93qvHTR+Kn5QLNaflv8blnUBeYNJ/k/c87/c6/NK4Vj/3P/5mih3p6Zf+Xv9TSXtEHPoy/3/9dGND/XRs2xhu//243delo2UcRX7wYsR97r6f/2Y+fDIj/+pDx//Kll18dVJb9OuJ69I/fG2u+01yfb29t37zfXFypr9TXarU7C3duvXX7zdp8MUc9P3g0+MfbN54fVJa3//KA+DMntP+rQ7b/N/97/4dfOSb+11/rFz+Nl46Jn4+JXxsy/uLl3w28787jLx9tfzLM+39jyPif/nX7yLLhAMD4tLe2VxcbjfqGhMTZT+T/Zc9ANfomvnVasaaif9HPX+ue04eKsuyJYg3qMZ7FrBtwFhyc9BHx33FXBgAAAAAAAAAAAAAA6Os0/mJp3G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA//8TpdPg")
openat(0xffffffffffffff9c, 0x0, 0x40100, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000200)={0x7, 0xe})
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r2, r2, 0x2f, 0x0, @void}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095ea8b29a2e114701f8ce96083a8ab4f28835e78f61289597260809bc9fbd963bf774c1df7900406f1e12e42082a32a2b72e732814d117ed0b20696b44c4d514e1a5cf8bb694dc53f3a7106bf949596d23dac8bdb3fb4eaf19335f97bd2daaf8a7"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000dc0)={r4, r5, 0x0, r2}, 0xa)

6.392226794s ago: executing program 6 (id=3509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

6.364913366s ago: executing program 6 (id=3510):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (fail_nth: 1)

6.281269665s ago: executing program 6 (id=3512):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000500)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000002240)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$vsock_stream(0x28, 0x1, 0x0)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', &(0x7f0000000240)={0x43c000, 0x196, 0x8}, 0x18)
r2 = openat(r1, &(0x7f0000000180)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x113)
capset(&(0x7f0000000280)={0x20080522}, 0x0)
socket(0x2, 0x80805, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f00000023c0)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000094000000030a01020000000000000000020000000900010073797a30000000007300030091abc12404cf378042c561bd"], 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x4000800)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000002280)=0x3)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0e}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x16}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

6.078216806s ago: executing program 6 (id=3516):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0xc6, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000005c0)=0x6, 0x4)
pipe(&(0x7f0000000600))
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config\x00', 0x1ff)
rmdir(&(0x7f0000000740)='./config/usb_gadget/g1\x00')

5.890368785s ago: executing program 4 (id=3522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4008810)

5.889370015s ago: executing program 4 (id=3523):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40)
write(r2, &(0x7f0000000800)="4734c489d0358a0d3230303030303030303020302030985b77", 0x19)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800080007000000000016000000466f006500660000401190780a010102ac1414160703aa004e244e20004d9078420a000180000000db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf922063c76eeccfbc1aba373433c557df0229a8e3ee7b52c7a8fdec58ae79eca8976405945a14fccc1a1ca8eee4e5f04dd30382d1255f740f614ac6bebb27d5b9f48f8f7c4103f6ed30ae5c7717b8"], 0x73)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000006c0)={0x1, 0x5, 0x3})
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x364}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000004)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/6, 0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000d80)="b3471505000000d3abc89b6f7b1c", 0x0, 0x7261, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.792121385s ago: executing program 6 (id=3524):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x81010040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

5.791690975s ago: executing program 34 (id=3524):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x81010040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

5.701918815s ago: executing program 4 (id=3526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_VERSION(r1, 0xc0046209, &(0x7f0000000080))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4008810)

5.64808815s ago: executing program 4 (id=3527):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000002240)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$vsock_stream(0x28, 0x1, 0x0)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', &(0x7f0000000240)={0x43c000, 0x196, 0x8}, 0x18)
r2 = openat(r1, &(0x7f0000000180)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x113)
capset(&(0x7f0000000280)={0x20080522}, 0x0)
socket(0x2, 0x80805, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f00000023c0)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000094000000030a01020000000000000000020000000900010073797a30000000007300030091abc12404cf378042c561bd"], 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x4000800)
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000002280)=0x3)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0e}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x16}]}}]}, 0x44}}, 0x0)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

5.337096422s ago: executing program 4 (id=3530):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000029200)={0x0, 0x0, &(0x7f0000029240)={&(0x7f0000029280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000029340)={0x0, 0x0, &(0x7f0000029380)={&(0x7f00000293c0)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000029580)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0)

5.057435461s ago: executing program 4 (id=3532):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000008c0)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000900)="4e813cbfba79cae0486c4303d9d8aba8e59009", 0x13, 0x24000045, &(0x7f0000000940)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000980)='westwood', 0x8)
shutdown(r0, 0x1)

5.022253854s ago: executing program 35 (id=3532):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000008c0)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000900)="4e813cbfba79cae0486c4303d9d8aba8e59009", 0x13, 0x24000045, &(0x7f0000000940)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000980)='westwood', 0x8)
shutdown(r0, 0x1)

3.866649963s ago: executing program 5 (id=3542):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)

3.760171024s ago: executing program 5 (id=3543):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000040)={0x0, 0xcc17, 0x10, 0x6, 0x212}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x4000000)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noquota}, {@norecovery}, {@bh}, {@noload}, {@bsdgroups}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000400)="$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")
r2 = creat(&(0x7f00000008c0)='./bus\x00', 0x182)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x2002, 0xa)
fallocate(r2, 0x0, 0x0, 0x2000402)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000a40)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r4, &(0x7f0000000a80)={&(0x7f0000000b80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000c40)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000d00)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x2, 0x6}, 0xf)
mknod$loop(&(0x7f0000000d40)='./file0\x00', 0x6000, 0x0)
lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e80)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x8044010}, 0x41840)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.961473766s ago: executing program 5 (id=3546):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000140)='7', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)

2.849745517s ago: executing program 5 (id=3547):
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0xffffffffffffffff, 0x10001, 0xf6}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
ioperm(0x40, 0x9, 0x7f)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0xfffffffffffffffe, 0xc)
syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000ec0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x800001d, 0x300)
set_mempolicy(0x4005, &(0x7f0000000f40)=0x4, 0x7)
rt_sigqueueinfo(0x0, 0x8028, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0x1c}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
getrandom(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
syz_mount_image$ext4(&(0x7f0000001040)='ext4\x00', &(0x7f0000001140)='./bus\x00', 0x21081e, &(0x7f0000001180)={[{@init_itable}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f00000011c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40100, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000200)={0x7, 0xe})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r2, r2, 0x2f, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095ea8b29a2e114701f8ce96083a8ab4f28835e78f61289597260809bc9fbd963bf774c1df7900406f1e12e42082a32a2b72e732814d117ed0b20696b44c4d514e1a5cf8bb694dc53f3a7106bf949596d23dac8bdb3fb4eaf19335f97bd2daaf8a7"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept4$tipc(r1, &(0x7f0000000400)=@id, &(0x7f0000000440)=0x10, 0x80800)

2.576232665s ago: executing program 2 (id=3552):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000008, &(0x7f00000011c0), 0x1, 0x51e, &(0x7f0000002a40)="$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")
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x6, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x208483)
write$tun(r1, 0x0, 0xb2)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='net/dev_mcast\x00')
pread64(r4, &(0x7f0000002f80)=""/102400, 0x19000, 0x41e)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = gettid()
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000280)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0)
timer_gettime(r8, &(0x7f0000000300))
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setns(0xc9, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)

2.402178303s ago: executing program 0 (id=3553):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40)
write(r2, &(0x7f0000000800)="4734c489d0358a0d3230303030303030303020302030985b77", 0x19)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800080007000000000016000000466f006500660000401190780a010102ac1414160703aa004e244e20004d9078420a000180000000db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf922063c76eeccfbc1aba373433c557df0229a8e3ee7b52c7a8fdec58ae79eca8976405945a14fccc1a1ca8eee4e5f04dd30382d1255f740f614ac6bebb27d5b9f48f8f7c4103f6ed30ae5c7717b8"], 0x73)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000006c0)={0x1, 0x5, 0x3})
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x364}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000004)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/6, 0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pI4   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000d80)="b3471505000000d3abc89b6f7b1c", 0x0, 0x7261, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.121281792s ago: executing program 2 (id=3554):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2)
setns(0xc9, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, 0x0, 0x20048801)
fcntl$setpipe(r0, 0x407, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xfe88, &(0x7f00000000c0)=""/181}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x5, 0x8}, {0x6, 0xfa, 0x2, 0xb}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa1c0800450800280066000003019078e00008026401018b3bc503f2c7010e009078000700050000000e0000"], 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
socket(0x2, 0x6, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8, 0x200000, 0x300, 0xfc, 0x73a4, 0x3}, 0xfffffe1a)

2.003515864s ago: executing program 0 (id=3555):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x14552, &(0x7f00000004c0)=ANY=[], 0xfb, 0x121e, &(0x7f0000000a40)="$eJzs3E9rXFUYB+A3MSYxNX/UWG1BPOhGN5cmCze6CZKCdEBpm0IrCLfmRodcZ0LuEBgRY1du/RwiiOBOEHe6ycZvILjLxmUF8UpmatNIBp0ydkp5ns28zDm/4ZwzzIEzzJnDN774aHuryrbyTkxOTMTkTkS6nSLFZPzts3j19R9/euHK9RuX1hqN9cspXVy7uvJaSmnhxe/f/eSrl37onLn27cJ3M3Gw9N7hb6u/Hpw9OHf459UPm1VqVqnV7qQ83Wy3O/nNskibzWo7S+mdssirIjVbVbF7on2rbO/sdFPe2pyf29ktqirlrW7aLrqp006d3W7KP8ibrZRlWZqfC4Y3dbfa+PJ2XdcRdf14TEdd1/UTMRdn4smYj4VYjKV4Kp6OZ2I5no2z8Vw8H9/88nX3KAEAAAAAAAAAAAAAAAAAAACMzqD7/8sD7v+f6/Ua96gBAAAAAAAAAAAAAAAAAADg0XLl+o1La43G+uWUZiPKz/c29jb6j/32ta1oRhlFXIjF+CN6t//7+vXFtxrrF1LPUtwq9+/k9/c2HjuZX+n9ncCp+ZV+Pp3Mz8TcvfnVWIzl0/Orp+Zn45WX78lnsRg/vx/tKGMzjrLH+U9XUnrz7cY/8ud7/QAAAOBRkKW7Tj2/Z9mg9n5+iO8HTpyvj7Lnp8Y6dSKi6n68nZdlsat46IvpYVPTETG6Yfxe1/X4F+G/F1MjnHs5+JMyExH3/coTEXFU3Lq/+LU78dGs2GxEHD/zr1vH/gPZoPhfHb/74x4JAAAAAAAAAAAAw3gQv8Qc9xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mIHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8+J84O")
r0 = creat(&(0x7f0000001c80)='./bus\x00', 0x0)
r1 = open(&(0x7f0000001d00)='./file2\x00', 0xe6c42, 0x20)
dup3(r1, r0, 0x0)
syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = dup(r2)
getsockopt$inet_tcp_int(r3, 0x6, 0x2c, 0x0, &(0x7f0000000000))
io_setup(0x2, &(0x7f0000001d40)=<r4=>0x0)
io_submit(r4, 0x3f0a, &(0x7f0000001d80)=[&(0x7f0000001dc0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000001e00), 0x200a00}])
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0)

1.779600017s ago: executing program 2 (id=3557):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x0, 0x251, &(0x7f0000000900)="$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")
mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x0, 0x5, 0x0, 0x0, 0x1, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x400043, 0x4c7, 0x0, 0x2, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_setup(0x8, &(0x7f0000000600))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0xe290, 0x800000, 0x2, 0x2, 0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x2c2, &(0x7f0000000f00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800451702b40067000003119078ac1414137f0000014e204e2402a09078e100000121901cbc86126ebf46bee2fd3b02128ff8bedb1fc314f15ea96bad23d5ee60dab9a84a6a3aa01e8ea3210182491e8b8432753885efef27a78439a1dcbb38461b8307be329f82cf88eed4f643ab2dcf3db5900d9e7012c087cbb3e8cfb92a4be8278de0152ac64528b462104c9a3169b93e183129f4f62b7970c2c1d5d0577962be6ed1e0e88657692ba725f5c8fcf884f184d18c8764a5dbea3f184d3de721849300f614659aecee9556e79367cd36189d5b699dc59823355fbfd7f52dd381fae72a947300f4be4e6f2e94234cfa4785a5bcdf75ebc99f805bbd822768abaca0dbe93362e0c47d530769211ca4c53bd537ab3cac1e9e49813e4e2b6e82a93f9b71810b5d8f6c472b2e305670ca4c71a282f74762ae4ed74cd06940b11fa8d8e4c2d78402ca254f68785aa98c8e5472fc670105b127ca4569be2de0b69fa2ea681537df072363721ba66d406a6efb42dcf6af80105279b4bf247ebf12d3dc507be15fc271f13ecd17f3eb6dc42479a78a74693e4fd8c55c77c2e76c4ba4fe15654171613db1c71e4d38746c97859e03fe92bb9ed248cebea7f8ebdfadad9a6a4d64d63b587ffba739ce851e827a341c1afbf938ba2ddd81fba00b5f7e779b56ef74a3ed1054eb98e6d8cf35aad67ed519a2808569926b924ebfdc8d288c9a61de1e5454e410f3769918b214be9f4fcf564cb8d27548c11f1df721cbf010f1cdc06e2e8cfb7a48d2fda0ed1208c2455735d33731a51413cb81b532bcc01f341f44d2a83c987f2d12fb9737f4badd6f4316948f7a6a43f50a655ed58aadc776171c44a29e9ba664e0001b699a530222291fded174c7e47b86e09e1bcc30d8a6cb630c126c0623c139fb7e067cfa15e56b493abc7f8685e29d7682a10e42b285546133bed479eff6530099c469b6692f8348db79f7502a75c1e0ba7f24328cfb13de875e36e3d299c582ffac1d0435b1bc7a74c3083d16951851f0c8dfe9b0a5e0ec2b58b44747ea91c0c40e009de72027eed288cb02b3fe181f02f75c5fc95f38bcc7df15014c09b857ee769da17645e51460c951086955058e759bdf134ccc4d93f68930eee98dfc"], 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000f00)=ANY=[], 0x8)
open(0x0, 0x181042, 0x124)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0)
getpid()
truncate(&(0x7f0000000140)='./file1\x00', 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

1.703879215s ago: executing program 7 (id=3558):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000c40)='X', 0x14f8d, 0x0, &(0x7f0000000c80)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000cc0)={0x1, [<r1=>0x0]}, &(0x7f0000000d00)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000d40)={r1, 0xa9ac}, &(0x7f0000000d80)=0x8)

1.630930053s ago: executing program 7 (id=3559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a0101"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (fail_nth: 1)

1.525105744s ago: executing program 8 (id=3534):
timerfd_create(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001540)='./dev\x00', &(0x7f0000001580)='devtmpfs\x00', 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@raw=[@generic={0xb7, 0x1, 0x0, 0x0, 0x1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x98}, @generic={0x95}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex=r1, r2, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20)
syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @local, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x1, @remote, @loopback, {[], {0x4e20, 0x4e20, 0x8}}}}}}, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r3 = perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffff7fe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000fa0009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050011000000"], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0)
semtimedop(r4, &(0x7f0000001880)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="48000000410005010100000000000000031100000000001c0001000600060086dd000010000344714cdde1a0d9000184", @ANYRESHEX=r3], 0x48}, 0x1, 0x0, 0x0, 0x48095}, 0x48850)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@fallback, 0xffffffffffffffff, 0x22}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000010401000000000000000000020000200500010001000000"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0)
setns(0xc9, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x14, 0x0, 0x1700bf5a31dc3bd3, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24004040)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)={0x54, 0x0, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60002}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000022c0)={0x0, 0x1ff, 0x0, [0x8000000000000000, 0x0, 0x4, 0x0, 0xffffffffffffd2ff], [0x100, 0x8509, 0x100000000, 0x1, 0x5, 0x8, 0x1, 0x8000, 0x3, 0xe, 0x6, 0x7, 0x7, 0x9, 0x1, 0x0, 0x40, 0x7, 0x80000000, 0x0, 0x2, 0xfffffffffffffbff, 0x8bb8, 0x5, 0x14c, 0x0, 0x9, 0x2, 0x8, 0x1, 0x5, 0x0, 0x6, 0x4, 0x0, 0x8, 0x3c00000000000000, 0xb, 0x3, 0x345, 0x1fef, 0x0, 0xb06, 0x101, 0x0, 0xd, 0x1, 0x8, 0xd, 0x6, 0x4ec, 0x2, 0xffffffffffffffff, 0x3701, 0x100000, 0x81, 0x7fffffff, 0x100000001, 0xb22, 0x6, 0x3b, 0xc, 0x4, 0x8000000000000000, 0x100000001, 0xb, 0x800, 0x200, 0x0, 0x53c0000000000, 0x401, 0xfffffffffffff812, 0x1, 0x8, 0x0, 0xfffffffffffffff6, 0x70, 0x1, 0x0, 0x3, 0x3, 0x2, 0x7, 0x8001, 0x8000000000000001, 0xfffffffffffffff9, 0x6, 0x1, 0x2, 0x8, 0x1, 0x9, 0xffffffffffffc09b, 0xfffffffffffffc00, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x6, 0x200, 0x0, 0xe, 0x8b63, 0xb, 0x7f, 0x2, 0x1, 0x5, 0x8242, 0x4, 0x5, 0x7, 0x80000094c9, 0x326, 0x7, 0x5e, 0x9, 0x400000000000, 0xc17c, 0x4]})

1.508480655s ago: executing program 7 (id=3560):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x8002, &(0x7f0000000040)=0x400003, 0x7ff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r3=>0x0})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x1}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x56}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x10000000, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x34}}, 0x40)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xe, 0x8, 0xfffff6da, 0x24804, r0, 0x8, '\x00', r3, r5, 0x4, 0x4, 0x0, 0xb}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x5, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f00000002c0)=""/10, 0x2}, 0x20)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000080)={0x0, 0x0, 0x27f})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a0101"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

1.445992992s ago: executing program 5 (id=3561):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000880)="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", 0xffffffa0}, {&(0x7f00000009c0)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000a40)="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", 0x149}], 0x3)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x800718, &(0x7f00000002c0)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nodiscard}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0xc}}]}, 0x22, 0x4b4, &(0x7f00000003c0)="$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")

1.444585802s ago: executing program 0 (id=3562):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000080)=0x3)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0xc010)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="9f0b4a56f820"}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote})
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000180)=0xc)
setregid(r6, 0x0)
setresgid(0x0, r6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {<r8=>0xee01, 0xee00}}, './file0\x00'})
write$P9_RSTATu(r4, &(0x7f0000000300)={0x62, 0x7d, 0x2, {{0x0, 0x44, 0x9, 0x1, {0x2, 0x0, 0x1}, 0x8200000, 0x9, 0x4, 0x7fffffffffffffff, 0x0, '', 0x0, '', 0x9, 'SYNPROXY\x00', 0x8, 'nl80211\x00'}, 0x9, 'SYNPROXY\x00', 0xffffffffffffffff, r6, r8}}, 0x62)
syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c0000000004069078ac1414bbe000000110002000", @ANYRES32=0x1, @ANYRES32=0x41424344, @ANYBLOB="10e64d6849368ac5607cffff9078000805020402"], 0x0)

1.418674354s ago: executing program 2 (id=3563):
syz_open_procfs(0x0, &(0x7f0000000d00)='net/raw\x00')
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r5, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0xd81, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000098b3f4dc5913ecf4da0000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000ffb000007b9af0ff00000000c509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000200a8e2445d696543f000000000000000000000d0a000000000000000100000d000000000400000003000000000c"], &(0x7f0000000f40)=""/4082, 0x3a, 0xff2, 0x1}, 0x28)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000400)='./file2\x00', 0x2, &(0x7f0000000200)={[{@errors_continue}, {@nodelalloc}, {@noquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0xfe, 0x250, &(0x7f0000001f40)="$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")
r8 = gettid()
timer_create(0x0, &(0x7f00000021c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000002200))
timer_settime(0x0, 0x0, 0x0, 0x0)
kexec_load(0x3, 0x0, &(0x7f0000002280)=[{0x0, 0xfffffffffffffe85, 0x116093ffe, 0x41000000}], 0x0)
unshare(0x64020600)

1.055928541s ago: executing program 8 (id=3564):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x3a, 0x3, @mcast2}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)="6797f04cdb6f2c8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30048b88) (fail_nth: 1)

988.286719ms ago: executing program 7 (id=3565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c0005800800010066747000"], 0x90}}, 0x0)

987.473809ms ago: executing program 0 (id=3566):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fd", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000006c0)="77a47ab22899566ca67fb9d1f81c0b25994cd4b0d7dac876f176ff6fb1472dc59b97e3c149ad99095f707ca3609152345db33ee23d2fd6f1e3339595341e8be2128b48fe40b23d7560c27681ef97418965f868f17058b5d3a034decff66f3658fdd93f3fbe38bfe22c21a6e1ceb9b7676ab0fc3b865cfaad428816467b918a5363c59bdec1f6b9289c20983a50fcffe8", 0x90}, {&(0x7f0000000780)="7460629f0a7b9dbaab3552107e043287fabf1d4dc41dcfb0d43cb7d61d1e26f0f7a77fbc850de54ed7f1c3ca323e0a0f1f002003f4971d9532e8085a81389b4ccb9e38f9bb73e0df0f7ccd", 0x4b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="707951f902b9b75992a223694f8f696e0e226227dd7e6144cbaa29adc89e40244c5fac831954461fa40e17ba7aed291ae95be7d5de418df274be408d1c545a27c885036f71d620248640a6835d7dbd81b3863b25bd0c3c9266b1d298aa8ab5f62cb2ddf46527af2a22c167a2811c60e1054a0f129d16d9669507df592342023d847f12ca487c3f08e1d13cf35c275224afa5", 0x92}, {&(0x7f0000000c40)="1c7a34f0ffb7d96ee0386dc77757a4b76c67fcc2fde9481e0faaac324da5fbc44a0c124920", 0x25}, {&(0x7f0000000c80)="1a71b445af10c15ccf203f6f9a315f50e8463c710dc579c9215abc23ce33b0a4769e7226d2bfd2091b53b2c086607efa6fd790fd5b9b282c0005bac90d972380103b91b9e14e7e844ee9a9ec85406a1acb6baf7ee3f4bd9f9f9fec7f3fd4d34b0085ee1fb44936be165369164c648fc0f5d0189f066e0f33052602b0e4b9bfcc1cd2f0", 0x83}, {&(0x7f0000000d40)="528eb332bd3b33c7a76f9e34a94048450d52fc5a5786fbbb8f96a762e5731b347a8f5ffb6114db486c1aa5b52772894b597147d2e8c22fdb0e5a42eb03d5d2c139b4b7df", 0x44}], 0x4}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000f80)="a84d952383bd620520da8bca3550", 0xe}, {&(0x7f0000000fc0)="90d3b7cb22a31b96", 0x8}, {&(0x7f00000010c0)="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", 0x10c}, {&(0x7f0000001080)="7e1e89d3ffc6ba9ae5a34f16b65e2d6555e5f2549e15a0a2e5", 0x19}, {&(0x7f0000001700)="f14d2f9588ecd8f9a4816db9910586f4c9f73bfa7063d778472b1daca90692b69cb1033fd3d2066fa155a76d948e90eb3e77e752f90bfbc92d290840a6489629ffbb80e643fccd31b3cdc763801b9e4f9eaa3b07d87c86f152726c1c4019a60829dfe76594890fa95414c904a4c41d8f841e1db33da5a315cf87481c39109f83fabb9f208b528b580efb8f7ad01fedca2cd7941ea61e2d35076dd70365800511643a0688693e94779aed429703753eb9cc78b30121d82deffe89277fbd2461d503c3d0dc834c9f660a745c7c4330a17e374ff6111736aa95a687837ddedbf36379a9487903208cfe2df8f79914ae61f99908fd5e5da64ac740890558994c747581cf6b3156e45e0b71ba8479c71521d352f3fd144f47b8f5cc959eb782c1595ece37678d88239595b37af3c51b483b3bf6e5f71091cf2c5ef59c1036043cf0765f5aab62e259065dde0872755a4cfebd9b8907d9578acfb5f4e3a8d6bdc206a224706b75bc8f5c0e8de1bb91a9ada7456e52d952d6fb4a0b2c80a6191011f0cb2e5bd71fcd3596dac1e7dc6c03bcc6be8e7a9a650f6718e61b930a14f0c0dbc11ef4939670a671e7c8b6ceb93ca5318d541262289b4f95bff87f835c0960acb6dabc6c4c93ed87952820f92acfcccdaf6a26468e3e886c79f2d4aaadc619393151ee1b19b532cc6326fadb42252020eefa67e228bd92733dd0b836f30dac211d89ccf626e7d70561c8ed8757b053fc8585d7f239d74e16426a91628dee4547b6005773103ed3b2aebf6825fb2597515abac2fb1dffbbe5de0d689be487744157ba156eca0f588ac74499ec27ec626956cb444c0000f7f9a842506077632878ef0bcb1e8fc52f847437629d3adb44b6cf9a606adbd89307a33aaa8d64973c6343f67192", 0x283}], 0x5}}], 0x5, 0x40028d0)

825.254065ms ago: executing program 0 (id=3567):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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")
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0x58, 0x20}, 0xd)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)
r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x44000160)
r2 = dup(0xffffffffffffffff)
inotify_rm_watch(r2, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x10040)
syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x9, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}, {"fefd0a235282af40d37621c6ba88fbe5a2a29147c2b6ce5cb6757fb364b629876935134e46265f83cfeca4fbc38eb823c1a4cf345ccaffe6f8aa86b0630c4ce749a21fb9cb5e207061c7897e381241d7225c8197348b46996ce356cbd333c9fa2b02d5111c10a75e969726e45489be88a5d348edd17df0d416f478eb"}}}}}}, 0x0)
set_mempolicy(0x5, 0x0, 0xf)
write$usbip_server(0xffffffffffffffff, 0x0, 0x0)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ee9000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x100, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048841}, 0x0)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x881, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x84)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000440)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000480)={r5, 0x1, 0x6, @random="2bc490d48be2"}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000004c0)={r5, 0x1, 0x3, @multicast}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')

824.707756ms ago: executing program 7 (id=3568):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000780)=0x79, 0x4)
bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000880)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000008c0)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fd", 0x117}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4)
writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="289a89fd4d196cb1638cb8da27a6393fa0f16a18faca54c401b16814c6b7d920661633866671fc6a48201f2cbbade5303b84b3a2561a6b64c4844de41b8e5dd5ad2cb069879552b562fad3a2330926907ed8fb27bae150d3bdb6e491e10eb3f1b477861e8ae5927fbe7437423aef", 0x6e}], 0x1)
write(r0, &(0x7f0000002040)="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", 0x33a)

755.091142ms ago: executing program 8 (id=3569):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000c00)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0xa, 0x4e23, 0x100, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000cc0)={0x1, [<r1=>0x0]}, &(0x7f0000000d00)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000d40)={r1, 0xa9ac}, &(0x7f0000000d80)=0x8)

685.674579ms ago: executing program 7 (id=3570):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xe}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x5, 0x8000001, 0x2000402)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180)={[{@user_xattr}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@quota}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@data_err_ignore}, {@data_journal}]}, 0x80, 0x63c, &(0x7f0000000200)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/uprobe_events\x00', 0x601, 0xd)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)='\v', 0x1}, {&(0x7f00000009c0)='s', 0x1}], 0x2)
syz_emit_ethernet(0xfdef, &(0x7f0000000a00)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f00000010c0)='./tracing/uprobe_events\x00', 0x1000404, &(0x7f0000000ac0), 0x45, 0x582, &(0x7f0000000b00)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000001500)=""/46, 0x3b)
r1 = syz_clone3(&(0x7f0000001540)={0x85061200, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640), {0x17}, &(0x7f0000001680)=""/178, 0xb2, &(0x7f0000001740)=""/117, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001800)={0x2, r1})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000a80)={0x1, &(0x7f0000001100)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r3 = gettid()
ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000001200)={{0x8000, 0x6, 0x8, 0x9, 0x9}, &(0x7f0000001140)=[{}]})
tkill(r3, 0x15)
semget$private(0x0, 0x6, 0x0)

675.708001ms ago: executing program 5 (id=3571):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xe}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x5, 0x8000001, 0x2000402)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180)={[{@user_xattr}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@quota}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@data_err_ignore}, {@data_journal}]}, 0x80, 0x63c, &(0x7f0000000200)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/uprobe_events\x00', 0x601, 0xd)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)='\v', 0x1}, {&(0x7f00000009c0)='s', 0x1}], 0x2)
syz_emit_ethernet(0xfdef, &(0x7f0000000a00)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x1000404, &(0x7f0000000ac0)={[{@dmode={'dmode', 0x3d, 0x5}}, {@map_normal}, {}, {@check_relaxed}, {@unhide}, {@overriderock}]}, 0x45, 0x581, &(0x7f0000000f00)="$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")
getdents64(0xffffffffffffffff, &(0x7f0000001500)=""/46, 0x3b)
r1 = syz_clone3(&(0x7f0000001540)={0x41200, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640), {0x17}, &(0x7f0000001680)=""/178, 0xb2, &(0x7f0000001740)=""/128, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000001800)={0x2, r1})
semget$private(0x0, 0x6, 0x0)

580.84857ms ago: executing program 8 (id=3572):
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x1, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7fffffff, 0xffffffffffffffff, 0x10001, 0xf6}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
ioperm(0x40, 0x9, 0x7f)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0xfffffffffffffffe, 0xc)
syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000ec0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x800001d, 0x300)
set_mempolicy(0x4005, &(0x7f0000000f40)=0x4, 0x7)
rt_sigqueueinfo(0x0, 0x8028, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0x1c}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
getrandom(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
syz_mount_image$ext4(&(0x7f0000001040)='ext4\x00', &(0x7f0000001140)='./bus\x00', 0x21081e, &(0x7f0000001180)={[{@init_itable}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f00000011c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40100, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000200)={0x7, 0xe})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r2, r2, 0x2f, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095ea8b29a2e114701f8ce96083a8ab4f28835e78f61289597260809bc9fbd963bf774c1df7900406f1e12e42082a32a2b72e732814d117ed0b20696b44c4d514e1a5cf8bb694dc53f3a7106bf949596d23dac8bdb3fb4eaf19335f97bd2daaf8a7"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept4$tipc(r1, &(0x7f0000000400)=@id, &(0x7f0000000440)=0x10, 0x80800)

544.062514ms ago: executing program 2 (id=3573):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x645f, 0x3c, 0xff, 0x0, 0x85, 0x40, 0x2, 0x7f, 0x9, [0xa, 0x100, 0x884, 0x10000, 0x7fffffff, 0x7, 0x7, 0x4]}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000740)='./file2\x00', 0x8, &(0x7f0000000780), 0x4, 0x526, &(0x7f0000000d00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x10b442, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file2\x00', 0x42, 0xe)
pwrite64(r2, &(0x7f00000012c0)="95", 0xffaf, 0x10001)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x0, r3, 0x0, 0x3, 0x4, 0xffffffffffff})

331.300296ms ago: executing program 2 (id=3574):
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1000008, &(0x7f00000011c0), 0x1, 0x51e, &(0x7f0000002a40)="$eJzs3V9oHHkdAPDvbJOY6+11Kxyox6FBwTs8Tdom1/M4kDvwH/VynBdftIGStNskdJMNyUYvEbRikYIvPolQKdoHBVGMj31TEbRY9KFQ9KUUKaiFtlD1OTK7O72QbJptm+4k6ecDk/nNb9v9fWe+mc3Mb2d+E8ATqy8iXo+IPRHxUkSUmvWF5hSnG1P678YHlyfTKYmVlZE7SSQRcWRweTJ7r6Q5f7r5Bi9GxO+7kxg/s77d+cWlU2OVSnmuuTxQm54dmF9c+tTU9NhEeaI8M/jqK58+PPjy0OHBLVvX62NHp39ZHX7tZzff+s2HP/6JO0m8HsXma6vXY6v0RV9zm3THM6tfSCK+vtWN5ax3VTnpyjEQ2vbnV57/Yd4xAACdV2ge+3fVj/9LsScaB2+9V0bvluLGXzb6f0dGz/+7k3ECAAAAD29l5SPNOQAAALB7Jfc7958tpj97OxcNAAAAsPWy6wCODC5PZlOnrj24+YVOtcRGbr0REfsb+c/u72680tW8p7c3uiNi73+SWH1bb7Lmnt+HUftcRF9844+10z84mU7xmO7DZnta/kfeEZCnnqG8IyBPz3057wjI01/P5h0BebpyK+8IyNM7I3lHQJ7eOpx3BOTp3J28I+C3bzQGAFzf/1eoj/mX9fKs7f9Jy089Ytu3CxF90fur1XX6fzor6/8bX9f/V7jX/7dng/6/fW22cfFrVz/Uqv6LX03zPzKe9f99cvTH5bT9dP7IK0Zbbn0n4rmuVvlP7uU/2SD/pTbb+MPloZY9/b/bl+b/579I851N8t9ZKz+NeCFa5z+T3H981oGTU5XygcbPlm189O4//9eqfuZvaf4vfSbb/9MpbT/7LoDHL93/926Q/80+//e32caFqRste3pHimn+X/jW/fNfuNmTfKX+y9jTrHl3rFabOxjRk7y5vv7Qg26BJ0u2jbJtmOb/xY+1/vv/wfq89ed/+jvx/jbbfPNo4bVW9UO/TvP//c/b//OT5v/EJvv/Rn//n223javXx1rVT342zf87F+QfAAAAAAAAAB5NISKKkRT675ULhf7+xjO8n429hUp1vvbSyerCzImoPyt7f3QXsiu9So3lJF0+2LweKFs+tGZ5sHm9yNnSU/Xl/uPVyom8Vx4AAAB2uWLEtaPfvfiBp9ec//+r1Dj/BwAAAHa+9Pz/+Z+cP5eW/9vuQD4AAADAjpKe/9/93u1L4fwfAAAAdq1ir/N/AAAA2O2y7//fHh6Ot4eHV7Ln/s1UJ6ZOTc6+euhA//TC8f7j1bnZ/olqdaI+Yt/05u9bqVZnD74cC+8O1MrztYH5xaVj09WFmdqx+nNjj5W7O7BuwObO/P3iaN4xAAAAnVPcYPz/Z1aN3X8gIvZFxOVS9/uysf4BAACA7a8Yce1LP/rmn+YXl06NVSrlOYUHLax8O2IbhKGwrpBdZLJd4tmRhZw/oAAAgC333kF/3pEAAAAAAAAAAAAAAAAAAADAk6sTw4nlvY4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsHP8PAAD//7dI+vA=")
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x6, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x208483)
write$tun(r1, 0x0, 0xb2)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='net/dev_mcast\x00')
pread64(r4, &(0x7f0000002f80)=""/102400, 0x19000, 0x41e)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = gettid()
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000280)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}}, 0x0)
timer_gettime(r8, &(0x7f0000000300))
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setns(0xc9, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)

0s ago: executing program 0 (id=3575):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x81010040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x4, 0x9, 0x0, 0x5, {[@eol, @sack={0x5, 0x22, [0x7, 0x68, 0x75c42d7d, 0x5, 0xe, 0xd2, 0x2, 0x9]}, @timestamp={0x8, 0xa, 0x5, 0x3}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0xa, [0x3, 0xe]}, @fastopen={0x22, 0x5, "fa4639"}, @md5sig={0x13, 0x12, "f1194653deb375fab4e89a1b30e05565"}]}}}}}}}, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

mode: writeback.
[  440.812302][T14012] loop2: detected capacity change from 0 to 512
[  441.163952][T14007] loop5: detected capacity change from 0 to 512
[  441.193603][T14007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.194198][T14007] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  441.271314][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'.
[  441.512178][T14027] FAULT_INJECTION: forcing a failure.
[  441.512178][T14027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.512218][T14027] CPU: 1 UID: 0 PID: 14027 Comm: syz.0.3311 Not tainted syzkaller #0 PREEMPT(lazy) 
[  441.512371][T14027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  441.512395][T14027] Call Trace:
[  441.512403][T14027]  <TASK>
[  441.512413][T14027]  __dump_stack+0x1d/0x30
[  441.512446][T14027]  dump_stack_lvl+0x95/0xd0
[  441.512492][T14027]  dump_stack+0x15/0x1b
[  441.512520][T14027]  should_fail_ex+0x262/0x280
[  441.512550][T14027]  should_fail+0xb/0x20
[  441.512588][T14027]  should_fail_usercopy+0x1a/0x20
[  441.512624][T14027]  _copy_from_user+0x1c/0xb0
[  441.512708][T14027]  ___sys_sendmsg+0xc1/0x1e0
[  441.512753][T14027]  __sys_sendmmsg+0x1a0/0x310
[  441.512843][T14027]  __x64_sys_sendmmsg+0x57/0x70
[  441.512875][T14027]  x64_sys_call+0x1fb4/0x2550
[  441.512911][T14027]  do_syscall_64+0x112/0x360
[  441.512955][T14027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.512990][T14027] RIP: 0033:0x7f015febf559
[  441.513012][T14027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.513037][T14027] RSP: 002b:00007f015e90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  441.513061][T14027] RAX: ffffffffffffffda RBX: 00007f0160145fa0 RCX: 00007f015febf559
[  441.513076][T14027] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  441.513167][T14027] RBP: 00007f015e90f090 R08: 0000000000000000 R09: 0000000000000000
[  441.513182][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.513196][T14027] R13: 00007f0160146038 R14: 00007f0160145fa0 R15: 00007ffedec34518
[  441.513270][T14027]  </TASK>
[  441.765402][T14033] loop4: detected capacity change from 0 to 764
[  441.879174][T14039] syzkaller1: entered allmulticast mode
[  441.901361][T14033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3314'.
[  441.934318][T14033] netlink: 'syz.4.3314': attribute type 6 has an invalid length.
[  441.974537][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'.
[  442.112896][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.117861][T12109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.320174][T14063] FAULT_INJECTION: forcing a failure.
[  442.320174][T14063] name failslab, interval 1, probability 0, space 0, times 0
[  442.320212][T14063] CPU: 0 UID: 0 PID: 14063 Comm: syz.1.3323 Not tainted syzkaller #0 PREEMPT(lazy) 
[  442.320267][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  442.320285][T14063] Call Trace:
[  442.320294][T14063]  <TASK>
[  442.320304][T14063]  __dump_stack+0x1d/0x30
[  442.320338][T14063]  dump_stack_lvl+0x95/0xd0
[  442.320430][T14063]  dump_stack+0x15/0x1b
[  442.320459][T14063]  should_fail_ex+0x262/0x280
[  442.320495][T14063]  ? rand_initialize_disk+0x31/0x80
[  442.320563][T14063]  should_failslab+0x8c/0xb0
[  442.320594][T14063]  __kmalloc_cache_noprof+0x5d/0x3e0
[  442.320624][T14063]  ? blkcg_init_disk+0x1d9/0x220
[  442.320654][T14063]  ? rand_initialize_disk+0x31/0x80
[  442.320756][T14063]  rand_initialize_disk+0x31/0x80
[  442.320842][T14063]  __alloc_disk_node+0x20b/0x2f0
[  442.320876][T14063]  __blk_alloc_disk+0x68/0xd0
[  442.320975][T14063]  dm_create+0x36d/0x850
[  442.321047][T14063]  dev_create+0x141/0x290
[  442.321079][T14063]  dm_ctl_ioctl+0x80b/0xad0
[  442.321151][T14063]  ? __pfx_dev_create+0x10/0x10
[  442.321269][T14063]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  442.321299][T14063]  __se_sys_ioctl+0xce/0x140
[  442.321410][T14063]  __x64_sys_ioctl+0x43/0x50
[  442.321450][T14063]  x64_sys_call+0x239d/0x2550
[  442.321490][T14063]  do_syscall_64+0x112/0x360
[  442.321580][T14063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.321611][T14063] RIP: 0033:0x7ff3bbdef559
[  442.321633][T14063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.321715][T14063] RSP: 002b:00007ff3ba83f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  442.321744][T14063] RAX: ffffffffffffffda RBX: 00007ff3bc075fa0 RCX: 00007ff3bbdef559
[  442.321765][T14063] RDX: 0000200000000900 RSI: 00000000c138fd03 RDI: 0000000000000007
[  442.321784][T14063] RBP: 00007ff3bbe86b20 R08: 0000000000000000 R09: 0000000000000000
[  442.321852][T14063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.321866][T14063] R13: 00007ff3bc076038 R14: 00007ff3bc075fa0 R15: 00007ffe0ab38508
[  442.321914][T14063]  </TASK>
[  442.339316][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  442.339415][   T28] audit: type=1400 audit(1792840772.433:728): avc:  denied  { write } for  pid=14062 comm="syz.1.3323" name="usb_gadget" dev="configfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  442.339460][   T28] audit: type=1400 audit(1792840772.433:729): avc:  denied  { remove_name } for  pid=14062 comm="syz.1.3323" name="g1" dev="configfs" ino=26484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  442.339566][   T28] audit: type=1400 audit(1792840772.433:730): avc:  denied  { rmdir } for  pid=14062 comm="syz.1.3323" name="g1" dev="configfs" ino=26484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  442.479759][T14071] FAULT_INJECTION: forcing a failure.
[  442.479759][T14071] name failslab, interval 1, probability 0, space 0, times 0
[  442.481416][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.4.3324 Not tainted syzkaller #0 PREEMPT(lazy) 
[  442.481509][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  442.481588][T14071] Call Trace:
[  442.481609][T14071]  <TASK>
[  442.481632][T14071]  __dump_stack+0x1d/0x30
[  442.481761][T14071]  dump_stack_lvl+0x95/0xd0
[  442.481833][T14071]  dump_stack+0x15/0x1b
[  442.481896][T14071]  should_fail_ex+0x262/0x280
[  442.482058][T14071]  ? __alloc_skb+0x2e0/0x6f0
[  442.482118][T14071]  should_failslab+0x8c/0xb0
[  442.482214][T14071]  kmem_cache_alloc_node_noprof+0x60/0x3e0
[  442.482300][T14071]  ? __alloc_skb+0x2e0/0x6f0
[  442.482408][T14071]  ? tcp_current_mss+0x302/0x3e0
[  442.482534][T14071]  __alloc_skb+0x2e0/0x6f0
[  442.482611][T14071]  tcp_stream_alloc_skb+0x30/0x320
[  442.482703][T14071]  tcp_sendmsg_locked+0xb1f/0x2ac0
[  442.482840][T14071]  ? __pfx_tcp_sendmsg+0x10/0x10
[  442.482923][T14071]  ? __pfx_inet6_sendmsg+0x10/0x10
[  442.483032][T14071]  tcp_sendmsg+0x2f/0x50
[  442.483127][T14071]  inet6_sendmsg+0x76/0xd0
[  442.483278][T14071]  sock_write_iter+0x21c/0x300
[  442.483361][T14071]  ? __pfx_sock_write_iter+0x10/0x10
[  442.483481][T14071]  vfs_write+0x57a/0x990
[  442.483710][T14071]  ksys_write+0xdc/0x1a0
[  442.483948][T14071]  __x64_sys_write+0x40/0x50
[  442.484032][T14071]  x64_sys_call+0x154e/0x2550
[  442.484062][T14071]  do_syscall_64+0x112/0x360
[  442.484109][T14071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.484222][T14071] RIP: 0033:0x7f9c67cff559
[  442.484284][T14071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.484353][T14071] RSP: 002b:00007f9c66757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  442.484429][T14071] RAX: ffffffffffffffda RBX: 00007f9c67f85fa0 RCX: 00007f9c67cff559
[  442.484472][T14071] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 0000000000000005
[  442.484522][T14071] RBP: 00007f9c66757090 R08: 0000000000000000 R09: 0000000000000000
[  442.484564][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.484612][T14071] R13: 00007f9c67f86038 R14: 00007f9c67f85fa0 R15: 00007ffd397a5708
[  442.484715][T14071]  </TASK>
[  442.654132][T14073] loop2: detected capacity change from 0 to 512
[  442.709507][T14073] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.3325: bg 0: block 5: invalid block bitmap
[  442.709593][T14073] loop2: lost filesystem error report for type 5 error -117
[  442.714701][T14073] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  442.714852][T14073] loop2: lost filesystem error report for type 5 error -117
[  442.715441][T14073] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3325: invalid indirect mapped block 3 (level 2)
[  442.715606][    C1] EXT4-fs (loop2): error count since last fsck: 2
[  442.715676][    C1] EXT4-fs (loop2): initial error at time 1792840772: ext4_validate_block_bitmap:436
[  442.715763][    C1] EXT4-fs (loop2): last error at time 1792840772: ext4_mb_clear_bb:6680
[  442.715875][T14073] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  442.718967][T14073] EXT4-fs (loop2): 1 orphan inode deleted
[  442.719028][T14073] EXT4-fs (loop2): 1 truncate cleaned up
[  442.719982][T14073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.800061][   T28] audit: type=1400 audit(1792840772.903:731): avc:  denied  { map } for  pid=14072 comm="syz.2.3325" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  443.019067][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.160068][T14085] loop1: detected capacity change from 0 to 128
[  443.812371][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3330'.
[  443.907080][T14091] veth3: entered allmulticast mode
[  443.908892][   T28] audit: type=1400 audit(1792840774.003:732): avc:  denied  { connect } for  pid=14089 comm="syz.4.3331" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  443.909784][   T28] audit: type=1400 audit(1792840774.013:733): avc:  denied  { map } for  pid=14096 comm="syz.1.3333" path="socket:[61809]" dev="sockfs" ino=61809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  443.909846][   T28] audit: type=1400 audit(1792840774.013:734): avc:  denied  { read accept } for  pid=14096 comm="syz.1.3333" path="socket:[61809]" dev="sockfs" ino=61809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  444.092916][ T9503] bridge_slave_1: left allmulticast mode
[  444.092942][ T9503] bridge_slave_1: left promiscuous mode
[  444.093089][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.122333][ T9503] bridge_slave_0: left allmulticast mode
[  444.122355][ T9503] bridge_slave_0: left promiscuous mode
[  444.122494][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.214303][ T9503] bridge_slave_1: left allmulticast mode
[  444.214330][ T9503] bridge_slave_1: left promiscuous mode
[  444.214453][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.244107][ T9503] bridge_slave_0: left allmulticast mode
[  444.244134][ T9503] bridge_slave_0: left promiscuous mode
[  444.244276][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.369249][T14105] loop5: detected capacity change from 0 to 128
[  444.402704][T14105] bio_check_eod: 98 callbacks suppressed
[  444.402723][T14105] syz.5.3335: attempt to access beyond end of device
[  444.402723][T14105] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128
[  444.403137][T14105] syz.5.3335: attempt to access beyond end of device
[  444.403137][T14105] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128
[  444.403181][T14105] buffer_io_error: 62 callbacks suppressed
[  444.403193][T14105] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  444.403213][T14105] syz.5.3335: attempt to access beyond end of device
[  444.403213][T14105] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128
[  444.403262][T14105] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  444.403365][T14105] syz.5.3335: attempt to access beyond end of device
[  444.403365][T14105] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128
[  444.408832][T14105] syz.5.3335: attempt to access beyond end of device
[  444.408832][T14105] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128
[  444.408934][T14105] Buffer I/O error on dev loop5, logical block 83, lost async page write
[  444.409015][T14105] syz.5.3335: attempt to access beyond end of device
[  444.409015][T14105] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128
[  444.409188][T14105] Buffer I/O error on dev loop5, logical block 84, lost async page write
[  444.422000][T14105] syz.5.3335: attempt to access beyond end of device
[  444.422000][T14105] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128
[  444.422898][T14105] syz.5.3335: attempt to access beyond end of device
[  444.422898][T14105] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128
[  444.422933][T14105] Buffer I/O error on dev loop5, logical block 95, lost async page write
[  444.422955][T14105] syz.5.3335: attempt to access beyond end of device
[  444.422955][T14105] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128
[  444.422980][T14105] Buffer I/O error on dev loop5, logical block 96, lost async page write
[  444.434020][T14105] syz.5.3335: attempt to access beyond end of device
[  444.434020][T14105] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128
[  444.446624][T14105] Buffer I/O error on dev loop5, logical block 99, lost async page write
[  444.446694][T14105] Buffer I/O error on dev loop5, logical block 100, lost async page write
[  444.452588][T14105] Buffer I/O error on dev loop5, logical block 111, lost async page write
[  444.452663][T14105] Buffer I/O error on dev loop5, logical block 112, lost async page write
[  444.920488][ T9503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.962486][ T9503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.963471][ T9503] bond0 (unregistering): Released all slaves
[  444.973446][ T9503] bond1 (unregistering): Released all slaves
[  445.009125][ T9503] bond2 (unregistering): Released all slaves
[  445.036010][ T9503] bond3 (unregistering): Released all slaves
[  445.120733][   T28] audit: type=1400 audit(1792840775.223:735): avc:  denied  { setattr } for  pid=14125 comm="syz.5.3343" name="tty31" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  445.312677][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'.
[  445.379495][   T28] audit: type=1400 audit(1792840775.483:736): avc:  denied  { mounton } for  pid=14135 comm="syz.4.3345" path="/54/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  445.461769][T14138] unsupported nlmsg_type 40
[  445.477661][   T28] audit: type=1400 audit(1792840775.583:737): avc:  denied  { create } for  pid=14132 comm="syz.5.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  445.535152][T14133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14133 comm=syz.5.3344
[  445.610006][ T9503] hsr_slave_0: left promiscuous mode
[  445.615325][ T9503] hsr_slave_1: left promiscuous mode
[  445.627429][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.627455][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.628134][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.628154][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.654447][ T9503] hsr_slave_0: left promiscuous mode
[  445.661235][ T9503] hsr_slave_1: left promiscuous mode
[  445.662330][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.662385][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.674036][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.674093][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.778935][ T9503] veth1_macvtap: left promiscuous mode
[  445.778979][ T9503] veth0_macvtap: left promiscuous mode
[  445.779041][ T9503] veth1_vlan: left promiscuous mode
[  445.779088][ T9503] veth0_vlan: left promiscuous mode
[  445.811926][ T9503] veth1_macvtap: left promiscuous mode
[  445.811965][ T9503] veth0_macvtap: left promiscuous mode
[  445.812083][ T9503] veth1_vlan: left promiscuous mode
[  445.812128][ T9503] veth0_vlan: left promiscuous mode
[  445.840495][T14148] loop4: detected capacity change from 0 to 512
[  445.864824][T14148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.865079][T14148] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  446.096033][ T9503] team0 (unregistering): Port device team_slave_1 removed
[  446.116904][ T9503] team0 (unregistering): Port device team_slave_0 removed
[  446.212960][T14156] loop0: detected capacity change from 0 to 512
[  446.339357][ T9503] team0 (unregistering): Port device team_slave_1 removed
[  446.358422][ T9503] team0 (unregistering): Port device team_slave_0 removed
[  446.521323][T14161] loop2: detected capacity change from 0 to 512
[  446.521640][T14161] EXT4-fs: Ignoring removed bh option
[  446.573253][T13027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.616664][T14166] FAULT_INJECTION: forcing a failure.
[  446.616664][T14166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.616710][T14166] CPU: 1 UID: 0 PID: 14166 Comm: syz.1.3355 Not tainted syzkaller #0 PREEMPT(lazy) 
[  446.616744][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  446.616762][T14166] Call Trace:
[  446.616791][T14166]  <TASK>
[  446.616800][T14166]  __dump_stack+0x1d/0x30
[  446.616833][T14166]  dump_stack_lvl+0x95/0xd0
[  446.616928][T14166]  dump_stack+0x15/0x1b
[  446.616956][T14166]  should_fail_ex+0x262/0x280
[  446.616993][T14166]  should_fail+0xb/0x20
[  446.617105][T14166]  should_fail_usercopy+0x1a/0x20
[  446.617141][T14166]  _copy_from_user+0x1c/0xb0
[  446.617175][T14166]  ___sys_sendmsg+0xc1/0x1e0
[  446.617255][T14166]  __x64_sys_sendmsg+0xd4/0x160
[  446.617314][T14166]  x64_sys_call+0x22ab/0x2550
[  446.617346][T14166]  do_syscall_64+0x112/0x360
[  446.617387][T14166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.617488][T14166] RIP: 0033:0x7ff3bbdef559
[  446.617505][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.617526][T14166] RSP: 002b:00007ff3ba83f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.617550][T14166] RAX: ffffffffffffffda RBX: 00007ff3bc075fa0 RCX: 00007ff3bbdef559
[  446.617570][T14166] RDX: 0000000000004050 RSI: 0000200000001380 RDI: 0000000000000003
[  446.617604][T14166] RBP: 00007ff3ba83f090 R08: 0000000000000000 R09: 0000000000000000
[  446.617642][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.617657][T14166] R13: 00007ff3bc076038 R14: 00007ff3bc075fa0 R15: 00007ffe0ab38508
[  446.617679][T14166]  </TASK>
[  446.631688][T14161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.718871][T14161] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.871322][T14173] FAULT_INJECTION: forcing a failure.
[  446.871322][T14173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.871360][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.1.3357 Not tainted syzkaller #0 PREEMPT(lazy) 
[  446.871395][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  446.871456][T14173] Call Trace:
[  446.871464][T14173]  <TASK>
[  446.871473][T14173]  __dump_stack+0x1d/0x30
[  446.871499][T14173]  dump_stack_lvl+0x95/0xd0
[  446.871523][T14173]  dump_stack+0x15/0x1b
[  446.871550][T14173]  should_fail_ex+0x262/0x280
[  446.871609][T14173]  should_fail+0xb/0x20
[  446.871634][T14173]  should_fail_usercopy+0x1a/0x20
[  446.871670][T14173]  _copy_from_user+0x1c/0xb0
[  446.871731][T14173]  mctp_ioctl+0x100/0x840
[  446.871768][T14173]  ? ioctl_has_perm+0x26d/0x2c0
[  446.871799][T14173]  sock_do_ioctl+0x73/0x230
[  446.871832][T14173]  sock_ioctl+0x439/0x610
[  446.871903][T14173]  ? mutex_lock+0x52/0x90
[  446.871941][T14173]  ? __pfx_sock_ioctl+0x10/0x10
[  446.872045][T14173]  __se_sys_ioctl+0xce/0x140
[  446.872085][T14173]  __x64_sys_ioctl+0x43/0x50
[  446.872120][T14173]  x64_sys_call+0x239d/0x2550
[  446.872170][T14173]  do_syscall_64+0x112/0x360
[  446.872209][T14173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.872233][T14173] RIP: 0033:0x7ff3bbdef559
[  446.872311][T14173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.872332][T14173] RSP: 002b:00007ff3ba83f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.872354][T14173] RAX: ffffffffffffffda RBX: 00007ff3bc075fa0 RCX: 00007ff3bbdef559
[  446.872374][T14173] RDX: 0000200000000180 RSI: 00000000000089e3 RDI: 0000000000000003
[  446.872392][T14173] RBP: 00007ff3ba83f090 R08: 0000000000000000 R09: 0000000000000000
[  446.872410][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.872428][T14173] R13: 00007ff3bc076038 R14: 00007ff3bc075fa0 R15: 00007ffe0ab38508
[  446.872524][T14173]  </TASK>
[  446.887529][T14169] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=794 sclass=netlink_xfrm_socket pid=14169 comm=syz.4.3353
[  447.186244][T14181] netlink: 'syz.0.3358': attribute type 1 has an invalid length.
[  447.186264][T14181] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3358'.
[  447.374759][T14190] rxe_eth0 speed is unknown, defaulting to 1000
[  447.405361][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.502769][T14194] Cannot find add_set index 0 as target
[  447.513624][T14171] loop5: detected capacity change from 0 to 512
[  447.553498][T14171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.553957][T14171] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  447.592489][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3360'.
[  447.594451][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  447.594468][   T28] audit: type=1400 audit(1792840777.693:747): avc:  denied  { getattr } for  pid=14177 comm="syz.4.3360" path="/58/tracing/set_event" dev="tracefs" ino=2218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  447.749946][T14193] syz.2.3362 (14193) used greatest stack depth: 9216 bytes left
[  447.805052][T14206] loop0: detected capacity change from 0 to 512
[  447.847260][T14210] loop1: detected capacity change from 0 to 512
[  447.858402][T14206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.875551][   T28] audit: type=1400 audit(1792840777.983:748): avc:  denied  { write } for  pid=14205 comm="syz.0.3366" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  447.909104][T14210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.912751][   T28] audit: type=1400 audit(1792840778.023:749): avc:  denied  { write } for  pid=14209 comm="syz.1.3367" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  447.948923][T14210] FAULT_INJECTION: forcing a failure.
[  447.948923][T14210] name failslab, interval 1, probability 0, space 0, times 0
[  447.949023][T14210] CPU: 0 UID: 0 PID: 14210 Comm: syz.1.3367 Not tainted syzkaller #0 PREEMPT(lazy) 
[  447.949125][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  447.949167][T14210] Call Trace:
[  447.949187][T14210]  <TASK>
[  447.949216][T14210]  __dump_stack+0x1d/0x30
[  447.949297][T14210]  dump_stack_lvl+0x95/0xd0
[  447.949368][T14210]  dump_stack+0x15/0x1b
[  447.949493][T14210]  should_fail_ex+0x262/0x280
[  447.949592][T14210]  ? do_getname+0x2e/0x1c0
[  447.949666][T14210]  should_failslab+0x8c/0xb0
[  447.949720][T14210]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  447.949752][T14210]  ? __fget_files+0x184/0x1c0
[  447.949780][T14210]  ? do_getname+0x2e/0x1c0
[  447.949806][T14210]  do_getname+0x2e/0x1c0
[  447.949830][T14210]  __se_sys_mkdirat+0x21/0xf0
[  447.949916][T14210]  __x64_sys_mkdirat+0x43/0x50
[  447.950043][T14210]  x64_sys_call+0x368/0x2550
[  447.950126][T14210]  do_syscall_64+0x112/0x360
[  447.950344][T14210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.950414][T14210] RIP: 0033:0x7ff3bbdee3c7
[  447.950471][T14210] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.950602][T14210] RSP: 002b:00007ff3ba83ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  447.950672][T14210] RAX: ffffffffffffffda RBX: 00007ff3ba83eee0 RCX: 00007ff3bbdee3c7
[  447.950715][T14210] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c
[  447.950764][T14210] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000
[  447.950807][T14210] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000100
[  447.950849][T14210] R13: 00007ff3ba83eea0 R14: 0000000000000000 R15: 00002000000001c0
[  447.950986][T14210]  </TASK>
[  447.952864][T14206] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  447.992842][T14210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  448.119560][T13548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.142235][T12109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.240694][T14217] loop1: detected capacity change from 0 to 128
[  448.254799][T14221] FAULT_INJECTION: forcing a failure.
[  448.254799][T14221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.254890][T14221] CPU: 0 UID: 0 PID: 14221 Comm: syz.4.3370 Not tainted syzkaller #0 PREEMPT(lazy) 
[  448.254917][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  448.254938][T14221] Call Trace:
[  448.254947][T14221]  <TASK>
[  448.254957][T14221]  __dump_stack+0x1d/0x30
[  448.254990][T14221]  dump_stack_lvl+0x95/0xd0
[  448.255096][T14221]  dump_stack+0x15/0x1b
[  448.255123][T14221]  should_fail_ex+0x262/0x280
[  448.255191][T14221]  should_fail+0xb/0x20
[  448.255221][T14221]  should_fail_usercopy+0x1a/0x20
[  448.255250][T14221]  _copy_from_user+0x1c/0xb0
[  448.255284][T14221]  ___sys_sendmsg+0xc1/0x1e0
[  448.255374][T14221]  __x64_sys_sendmsg+0xd4/0x160
[  448.255470][T14221]  x64_sys_call+0x22ab/0x2550
[  448.255501][T14221]  do_syscall_64+0x112/0x360
[  448.255615][T14221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.255643][T14221] RIP: 0033:0x7f9c67cff559
[  448.255664][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.255690][T14221] RSP: 002b:00007f9c66757028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.255793][T14221] RAX: ffffffffffffffda RBX: 00007f9c67f85fa0 RCX: 00007f9c67cff559
[  448.255808][T14221] RDX: 0000000020008000 RSI: 0000200000000780 RDI: 0000000000000003
[  448.255904][T14221] RBP: 00007f9c66757090 R08: 0000000000000000 R09: 0000000000000000
[  448.255920][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.255938][T14221] R13: 00007f9c67f86038 R14: 00007f9c67f85fa0 R15: 00007ffd397a5708
[  448.256026][T14221]  </TASK>
[  448.282053][T14217] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  448.284639][T14217] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.305088][   T28] audit: type=1400 audit(1792840778.403:750): avc:  denied  { write } for  pid=14216 comm="syz.1.3369" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  448.356102][T14217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3369'.
[  448.433703][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.493808][   T28] audit: type=1400 audit(1792840778.593:751): avc:  denied  { bind } for  pid=14216 comm="syz.1.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  448.524437][   T28] audit: type=1400 audit(1792840778.623:752): avc:  denied  { write } for  pid=14216 comm="syz.1.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  448.558970][T14225] __vm_enough_memory: pid: 14225, comm: syz.0.3372, bytes: 4503599627366400 not enough memory for the allocation
[  448.654862][   T28] audit: type=1400 audit(1792840778.753:753): avc:  denied  { nlmsg_read } for  pid=14227 comm="syz.4.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  448.677986][T14228] loop5: detected capacity change from 0 to 1024
[  448.703102][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.703212][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.703359][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.703424][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.703559][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.703683][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.703749][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'.
[  448.713842][T14228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  448.713942][T14228] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  448.715489][T14228] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  448.716780][T14228] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  448.742384][   T28] audit: type=1400 audit(1792840778.843:754): avc:  denied  { bind } for  pid=14224 comm="syz.0.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  448.742421][   T28] audit: type=1400 audit(1792840778.843:755): avc:  denied  { name_bind } for  pid=14224 comm="syz.0.3372" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  448.742519][   T28] audit: type=1400 audit(1792840778.843:756): avc:  denied  { node_bind } for  pid=14224 comm="syz.0.3372" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  448.825098][T14228] loop5: detected capacity change from 0 to 736
[  448.825842][T14228] iso9660: Unknown parameter 'unó%ì'
[  449.079768][T12109] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  449.126906][T14246] loop4: detected capacity change from 0 to 164
[  449.138378][T14248] FAULT_INJECTION: forcing a failure.
[  449.138378][T14248] name failslab, interval 1, probability 0, space 0, times 0
[  449.138448][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.1.3380 Not tainted syzkaller #0 PREEMPT(lazy) 
[  449.138477][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  449.138495][T14248] Call Trace:
[  449.138505][T14248]  <TASK>
[  449.138515][T14248]  __dump_stack+0x1d/0x30
[  449.138547][T14248]  dump_stack_lvl+0x95/0xd0
[  449.138608][T14248]  dump_stack+0x15/0x1b
[  449.138635][T14248]  should_fail_ex+0x262/0x280
[  449.138668][T14248]  ? proc_thread_self_get_link+0xaf/0x130
[  449.138694][T14248]  should_failslab+0x8c/0xb0
[  449.138744][T14248]  __kmalloc_cache_noprof+0x5d/0x3e0
[  449.138782][T14248]  ? proc_thread_self_get_link+0xaf/0x130
[  449.138812][T14248]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[  449.138836][T14248]  proc_thread_self_get_link+0xaf/0x130
[  449.138913][T14248]  pick_link+0x514/0x8e0
[  449.139012][T14248]  step_into_slowpath+0x36a/0x4c0
[  449.139040][T14248]  ? inode_permission+0x1e3/0x3c0
[  449.139131][T14248]  link_path_walk+0x953/0xde0
[  449.139166][T14248]  path_openat+0x142/0x11c0
[  449.139215][T14248]  do_file_open+0x16c/0x290
[  449.139255][T14248]  do_sys_openat2+0xa1/0x140
[  449.139299][T14248]  __x64_sys_openat+0xf2/0x120
[  449.139329][T14248]  x64_sys_call+0x1f72/0x2550
[  449.139410][T14248]  do_syscall_64+0x112/0x360
[  449.139455][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.139483][T14248] RIP: 0033:0x7ff3bbdafd8e
[  449.139503][T14248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  449.139529][T14248] RSP: 002b:00007ff3ba83ef98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  449.139579][T14248] RAX: ffffffffffffffda RBX: 00007ff3ba83f6c0 RCX: 00007ff3bbdafd8e
[  449.139595][T14248] RDX: 0000000000000002 RSI: 00007ff3bbe8641a RDI: ffffffffffffff9c
[  449.139610][T14248] RBP: 00007ff3bbe86b20 R08: 0000000000000000 R09: 0000000000000000
[  449.139703][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.139782][T14248] R13: 00007ff3bc076038 R14: 00007ff3bc075fa0 R15: 00007ffe0ab38508
[  449.139809][T14248]  </TASK>
[  449.147960][T14248] FAULT_INJECTION: forcing a failure.
[  449.147960][T14248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.147988][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.1.3380 Not tainted syzkaller #0 PREEMPT(lazy) 
[  449.148086][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  449.148127][T14248] Call Trace:
[  449.148148][T14248]  <TASK>
[  449.148176][T14248]  __dump_stack+0x1d/0x30
[  449.148268][T14248]  dump_stack_lvl+0x95/0xd0
[  449.148347][T14248]  dump_stack+0x15/0x1b
[  449.148416][T14248]  should_fail_ex+0x262/0x280
[  449.148560][T14248]  should_fail+0xb/0x20
[  449.148654][T14248]  should_fail_usercopy+0x1a/0x20
[  449.148758][T14248]  _copy_from_user+0x1c/0xb0
[  449.148870][T14248]  __sys_bpf+0x1e2/0xc50
[  449.148933][T14248]  ? get_pid_task+0x92/0xc0
[  449.149109][T14248]  ? vfs_write+0x7c0/0x990
[  449.149222][T14248]  __x64_sys_bpf+0x69/0x80
[  449.149332][T14248]  x64_sys_call+0xf26/0x2550
[  449.149461][T14248]  do_syscall_64+0x112/0x360
[  449.149573][T14248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.149645][T14248] RIP: 0033:0x7ff3bbdef559
[  449.149693][T14248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.149758][T14248] RSP: 002b:00007ff3ba83f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  449.149867][T14248] RAX: ffffffffffffffda RBX: 00007ff3bc075fa0 RCX: 00007ff3bbdef559
[  449.149916][T14248] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000
[  449.149966][T14248] RBP: 00007ff3ba83f090 R08: 0000000000000000 R09: 0000000000000000
[  449.150016][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.150065][T14248] R13: 00007ff3bc076038 R14: 00007ff3bc075fa0 R15: 00007ffe0ab38508
[  449.150135][T14248]  </TASK>
[  449.218140][T14246] 9pnet_virtio: no channels available for device syz
[  449.243959][  T359] IPVS: starting estimator thread 0...
[  449.355689][T14254] IPVS: using max 1776 ests per chain, 88800 per kthread
[  449.372743][T14241]  loop5: p2 p3 p7
[  449.530223][T14258] FAULT_INJECTION: forcing a failure.
[  449.530223][T14258] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.530262][T14258] CPU: 1 UID: 0 PID: 14258 Comm: syz.1.3383 Not tainted syzkaller #0 PREEMPT(lazy) 
[  449.530359][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  449.530413][T14258] Call Trace:
[  449.530423][T14258]  <TASK>
[  449.530435][T14258]  __dump_stack+0x1d/0x30
[  449.530467][T14258]  dump_stack_lvl+0x95/0xd0
[  449.530490][T14258]  dump_stack+0x15/0x1b
[  449.530511][T14258]  should_fail_ex+0x262/0x280
[  449.530591][T14258]  should_fail+0xb/0x20
[  449.530615][T14258]  should_fail_usercopy+0x1a/0x20
[  449.530651][T14258]  _copy_from_user+0x1c/0xb0
[  449.530688][T14258]  get_timespec64+0x4c/0x100
[  449.530791][T14258]  __se_sys_ppoll+0x75/0x220
[  449.530835][T14258]  __x64_sys_ppoll+0x67/0x80
[  449.530890][T14258]  x64_sys_call+0x15a5/0x2550
[  449.530985][T14258]  do_syscall_64+0x112/0x360
[  449.531027][T14258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.531055][T14258] RIP: 0033:0x7ff3bbdef559
[  449.531078][T14258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.531104][T14258] RSP: 002b:00007ff3ba81e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  449.531171][T14258] RAX: ffffffffffffffda RBX: 00007ff3bc076090 RCX: 00007ff3bbdef559
[  449.531191][T14258] RDX: 00002000000007c0 RSI: 0000000000000001 RDI: 0000200000000780
[  449.531258][T14258] RBP: 00007ff3ba81e090 R08: 0000000000000000 R09: 0000000000000000
[  449.531277][T14258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.531340][T14258] R13: 00007ff3bc076128 R14: 00007ff3bc076090 R15: 00007ffe0ab38508
[  449.531361][T14258]  </TASK>
[  450.005386][T14270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  450.005406][T14270] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  450.026040][T14270] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  450.026075][T14270] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  450.064547][T14272] FAULT_INJECTION: forcing a failure.
[  450.064547][T14272] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.064584][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.0.3388 Not tainted syzkaller #0 PREEMPT(lazy) 
[  450.064616][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  450.064631][T14272] Call Trace:
[  450.064640][T14272]  <TASK>
[  450.064650][T14272]  __dump_stack+0x1d/0x30
[  450.064736][T14272]  dump_stack_lvl+0x95/0xd0
[  450.064765][T14272]  dump_stack+0x15/0x1b
[  450.064820][T14272]  should_fail_ex+0x262/0x280
[  450.064867][T14272]  should_fail+0xb/0x20
[  450.064898][T14272]  should_fail_usercopy+0x1a/0x20
[  450.064936][T14272]  _copy_from_user+0x1c/0xb0
[  450.064973][T14272]  ___sys_sendmsg+0xc1/0x1e0
[  450.065055][T14272]  __x64_sys_sendmsg+0xd4/0x160
[  450.065091][T14272]  x64_sys_call+0x22ab/0x2550
[  450.065126][T14272]  do_syscall_64+0x112/0x360
[  450.065171][T14272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.065231][T14272] RIP: 0033:0x7f015febf559
[  450.065328][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.065351][T14272] RSP: 002b:00007f015e90f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.065379][T14272] RAX: ffffffffffffffda RBX: 00007f0160145fa0 RCX: 00007f015febf559
[  450.065481][T14272] RDX: 0000000020050800 RSI: 0000200000000400 RDI: 0000000000000003
[  450.065499][T14272] RBP: 00007f015e90f090 R08: 0000000000000000 R09: 0000000000000000
[  450.065516][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.065573][T14272] R13: 00007f0160146038 R14: 00007f0160145fa0 R15: 00007ffedec34518
[  450.065600][T14272]  </TASK>
[  450.321406][T14278] FAULT_INJECTION: forcing a failure.
[  450.321406][T14278] name failslab, interval 1, probability 0, space 0, times 0
[  450.321456][T14278] CPU: 0 UID: 0 PID: 14278 Comm: syz.1.3390 Not tainted syzkaller #0 PREEMPT(lazy) 
[  450.321488][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  450.321502][T14278] Call Trace:
[  450.321509][T14278]  <TASK>
[  450.321518][T14278]  __dump_stack+0x1d/0x30
[  450.321574][T14278]  dump_stack_lvl+0x95/0xd0
[  450.321598][T14278]  dump_stack+0x15/0x1b
[  450.321682][T14278]  should_fail_ex+0x262/0x280
[  450.321718][T14278]  ? futex_lock_pi+0x731/0x7b0
[  450.321782][T14278]  should_failslab+0x8c/0xb0
[  450.321821][T14278]  __kmalloc_cache_noprof+0x5d/0x3e0
[  450.321852][T14278]  ? futex_lock_pi+0x731/0x7b0
[  450.321886][T14278]  futex_lock_pi+0x731/0x7b0
[  450.321978][T14278]  ? __pfx_futex_wake_mark+0x10/0x10
[  450.322084][T14278]  do_futex+0x2ea/0x460
[  450.322119][T14278]  __se_sys_futex+0x2f6/0x370
[  450.322146][T14278]  ? mutex_unlock+0x4e/0x90
[  450.322206][T14278]  __x64_sys_futex+0x78/0x90
[  450.322233][T14278]  x64_sys_call+0x22e2/0x2550
[  450.322260][T14278]  do_syscall_64+0x112/0x360
[  450.322380][T14278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.322411][T14278] RIP: 0033:0x7ff3bbdef559
[  450.322430][T14278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.322489][T14278] RSP: 002b:00007ff3ba83f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  450.322635][T14278] RAX: ffffffffffffffda RBX: 00007ff3bc075fa0 RCX: 00007ff3bbdef559
[  450.322651][T14278] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000200000000080
[  450.322665][T14278] RBP: 00007ff3ba83f090 R08: 0000000000000000 R09: 0000000000000001
[  450.322715][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.322730][T14278] R13: 00007ff3bc076038 R14: 00007ff3bc075fa0 R15: 00007ffe0ab38508
[  450.322751][T14278]  </TASK>
[  450.685948][T14297] 9p: Bad value for 'rfdno'
[  450.749802][T14293] netlink: 'syz.5.3395': attribute type 34 has an invalid length.
[  450.769694][T14297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.769810][T14297] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  450.950781][T14304] set_capacity_and_notify: 3 callbacks suppressed
[  450.950805][T14304] loop2: detected capacity change from 0 to 512
[  450.973377][T14304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.088992][T14307] FAULT_INJECTION: forcing a failure.
[  451.088992][T14307] name failslab, interval 1, probability 0, space 0, times 0
[  451.089030][T14307] CPU: 0 UID: 0 PID: 14307 Comm: syz.2.3398 Not tainted syzkaller #0 PREEMPT(lazy) 
[  451.089069][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  451.089114][T14307] Call Trace:
[  451.089124][T14307]  <TASK>
[  451.089136][T14307]  __dump_stack+0x1d/0x30
[  451.089172][T14307]  dump_stack_lvl+0x95/0xd0
[  451.089250][T14307]  dump_stack+0x15/0x1b
[  451.089276][T14307]  should_fail_ex+0x262/0x280
[  451.089317][T14307]  ? copy_fs_struct+0x31/0x110
[  451.089360][T14307]  should_failslab+0x8c/0xb0
[  451.089401][T14307]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  451.089517][T14307]  ? copy_fs_struct+0x31/0x110
[  451.089562][T14307]  copy_fs_struct+0x31/0x110
[  451.089602][T14307]  ksys_unshare+0x2fe/0x690
[  451.089654][T14307]  __x64_sys_unshare+0x1f/0x30
[  451.089729][T14307]  x64_sys_call+0x1e33/0x2550
[  451.089770][T14307]  do_syscall_64+0x112/0x360
[  451.089907][T14307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.089943][T14307] RIP: 0033:0x7f5f0c2ff559
[  451.090071][T14307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.090103][T14307] RSP: 002b:00007f5f0ad2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  451.090136][T14307] RAX: ffffffffffffffda RBX: 00007f5f0c586090 RCX: 00007f5f0c2ff559
[  451.090161][T14307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[  451.090184][T14307] RBP: 00007f5f0c396b20 R08: 0000000000000000 R09: 0000000000000000
[  451.090260][T14307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.090280][T14307] R13: 00007f5f0c586128 R14: 00007f5f0c586090 R15: 00007fff14f85628
[  451.090312][T14307]  </TASK>
[  451.303711][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.364988][T14310] loop2: detected capacity change from 0 to 512
[  451.392211][T14310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.421275][T13548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.463371][T14310] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  451.556196][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.633233][T14317] loop2: detected capacity change from 0 to 512
[  451.655336][T14317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.801106][T14317] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  451.841765][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.930424][T14328] FAULT_INJECTION: forcing a failure.
[  451.930424][T14328] name failslab, interval 1, probability 0, space 0, times 0
[  451.930511][T14328] CPU: 0 UID: 0 PID: 14328 Comm: syz.2.3404 Not tainted syzkaller #0 PREEMPT(lazy) 
[  451.930540][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  451.930554][T14328] Call Trace:
[  451.930561][T14328]  <TASK>
[  451.930596][T14328]  __dump_stack+0x1d/0x30
[  451.930629][T14328]  dump_stack_lvl+0x95/0xd0
[  451.930653][T14328]  dump_stack+0x15/0x1b
[  451.930700][T14328]  should_fail_ex+0x262/0x280
[  451.930739][T14328]  should_failslab+0x8c/0xb0
[  451.930845][T14328]  __kvmalloc_node_noprof+0x14f/0x5b0
[  451.930883][T14328]  ? listxattr+0x60/0x280
[  451.930989][T14328]  ? listxattr+0x60/0x280
[  451.931028][T14328]  listxattr+0x60/0x280
[  451.931132][T14328]  __x64_sys_flistxattr+0xc7/0x120
[  451.931167][T14328]  x64_sys_call+0x2206/0x2550
[  451.931204][T14328]  do_syscall_64+0x112/0x360
[  451.931264][T14328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.931296][T14328] RIP: 0033:0x7f5f0c2ff559
[  451.931323][T14328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.931350][T14328] RSP: 002b:00007f5f0ad4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4
[  451.931372][T14328] RAX: ffffffffffffffda RBX: 00007f5f0c585fa0 RCX: 00007f5f0c2ff559
[  451.931387][T14328] RDX: 000000000000001a RSI: 00002000000001c0 RDI: 0000000000000006
[  451.931405][T14328] RBP: 00007f5f0c396b20 R08: 0000000000000000 R09: 0000000000000000
[  451.931425][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.931442][T14328] R13: 00007f5f0c586038 R14: 00007f5f0c585fa0 R15: 00007fff14f85628
[  451.931552][T14328]  </TASK>
[  451.977706][T14325] loop5: detected capacity change from 0 to 512
[  452.183682][T14336] loop2: detected capacity change from 0 to 1024
[  452.219920][T14336] EXT4-fs: Ignoring removed orlov option
[  452.239431][T14336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.241544][T14336] FAULT_INJECTION: forcing a failure.
[  452.241544][T14336] name failslab, interval 1, probability 0, space 0, times 0
[  452.241626][T14336] CPU: 0 UID: 0 PID: 14336 Comm: syz.2.3408 Not tainted syzkaller #0 PREEMPT(lazy) 
[  452.241653][T14336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  452.241728][T14336] Call Trace:
[  452.241736][T14336]  <TASK>
[  452.241744][T14336]  __dump_stack+0x1d/0x30
[  452.241776][T14336]  dump_stack_lvl+0x95/0xd0
[  452.241806][T14336]  dump_stack+0x15/0x1b
[  452.241831][T14336]  should_fail_ex+0x262/0x280
[  452.241892][T14336]  ? alloc_pipe_info+0xad/0x340
[  452.241994][T14336]  should_failslab+0x8c/0xb0
[  452.242030][T14336]  __kmalloc_cache_noprof+0x5d/0x3e0
[  452.242127][T14336]  ? alloc_pipe_info+0xad/0x340
[  452.242162][T14336]  alloc_pipe_info+0xad/0x340
[  452.242253][T14336]  splice_direct_to_actor+0x58f/0x680
[  452.242328][T14336]  ? kstrtouint_from_user+0xa8/0xf0
[  452.242355][T14336]  ? __pfx_direct_splice_actor+0x10/0x10
[  452.242501][T14336]  ? __rcu_read_unlock+0x4e/0x70
[  452.242527][T14336]  ? get_pid_task+0x92/0xc0
[  452.242561][T14336]  ? avc_policy_seqno+0x15/0x30
[  452.242670][T14336]  do_splice_direct+0x119/0x1a0
[  452.242714][T14336]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  452.242740][T14336]  do_sendfile+0x37d/0x640
[  452.242764][T14336]  __x64_sys_sendfile64+0x105/0x150
[  452.242827][T14336]  x64_sys_call+0x1015/0x2550
[  452.242936][T14336]  do_syscall_64+0x112/0x360
[  452.243005][T14336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.243035][T14336] RIP: 0033:0x7f5f0c2ff559
[  452.243056][T14336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.243081][T14336] RSP: 002b:00007f5f0ad4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  452.243107][T14336] RAX: ffffffffffffffda RBX: 00007f5f0c585fa0 RCX: 00007f5f0c2ff559
[  452.243127][T14336] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  452.243142][T14336] RBP: 00007f5f0ad4f090 R08: 0000000000000000 R09: 0000000000000000
[  452.243224][T14336] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001
[  452.243301][T14336] R13: 00007f5f0c586038 R14: 00007f5f0c585fa0 R15: 00007fff14f85628
[  452.243327][T14336]  </TASK>
[  452.352699][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.529340][T14346] loop2: detected capacity change from 0 to 512
[  452.545787][T14346] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  452.728162][T14351] usbcore.quirks: string doesn't fit in 127 chars.
[  452.728446][T14351] netlink: 'syz.2.3414': attribute type 1 has an invalid length.
[  452.784078][T14352] bond1: (slave geneve2): making interface the new active one
[  452.784574][T14352] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  452.797887][T14351] __nla_validate_parse: 6 callbacks suppressed
[  452.797937][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3414'.
[  452.828559][   T54] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  452.828733][   T54] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  452.828777][   T54] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  452.828853][   T54] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  452.928908][T14369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  452.928931][T14369] block device autoloading is deprecated and will be removed.
[  453.002913][T14375] FAULT_INJECTION: forcing a failure.
[  453.002913][T14375] name failslab, interval 1, probability 0, space 0, times 0
[  453.002948][T14375] CPU: 0 UID: 0 PID: 14375 Comm: syz.4.3423 Not tainted syzkaller #0 PREEMPT(lazy) 
[  453.002997][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  453.003036][T14375] Call Trace:
[  453.003045][T14375]  <TASK>
[  453.003055][T14375]  __dump_stack+0x1d/0x30
[  453.003087][T14375]  dump_stack_lvl+0x95/0xd0
[  453.003154][T14375]  dump_stack+0x15/0x1b
[  453.003181][T14375]  should_fail_ex+0x262/0x280
[  453.003262][T14375]  ? __kernfs_new_node+0x70/0x440
[  453.003288][T14375]  should_failslab+0x8c/0xb0
[  453.003400][T14375]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  453.003436][T14375]  ? __kernfs_new_node+0x70/0x440
[  453.003464][T14375]  __kernfs_new_node+0x70/0x440
[  453.003557][T14375]  ? __rcu_read_unlock+0x4e/0x70
[  453.003588][T14375]  ? up_write+0x19/0x60
[  453.003621][T14375]  ? kernfs_link_sibling+0x2f5/0x320
[  453.003659][T14375]  kernfs_new_node+0x107/0x140
[  453.003756][T14375]  __kernfs_create_file+0x4b/0x180
[  453.003791][T14375]  cgroup_addrm_files+0x50e/0x660
[  453.003832][T14375]  css_populate_dir+0x1c5/0x230
[  453.003900][T14375]  cgroup_mkdir+0x10e6/0x11b0
[  453.003999][T14375]  ? __pfx_cgroup_mkdir+0x10/0x10
[  453.004041][T14375]  kernfs_iop_mkdir+0x11e/0x1c0
[  453.004072][T14375]  vfs_mkdir+0x29d/0x3e0
[  453.004254][T14375]  filename_mkdirat+0x138/0x300
[  453.004299][T14375]  __se_sys_mkdirat+0x32/0xf0
[  453.004336][T14375]  __x64_sys_mkdirat+0x43/0x50
[  453.004387][T14375]  x64_sys_call+0x368/0x2550
[  453.004422][T14375]  do_syscall_64+0x112/0x360
[  453.004538][T14375]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  453.004588][T14375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.004616][T14375] RIP: 0033:0x7f9c67cff559
[  453.004638][T14375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.004665][T14375] RSP: 002b:00007f9c66757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  453.004693][T14375] RAX: ffffffffffffffda RBX: 00007f9c67f85fa0 RCX: 00007f9c67cff559
[  453.004713][T14375] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c
[  453.004774][T14375] RBP: 00007f9c67d96b20 R08: 0000000000000000 R09: 0000000000000000
[  453.004792][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.004809][T14375] R13: 00007f9c67f86038 R14: 00007f9c67f85fa0 R15: 00007ffd397a5708
[  453.004851][T14375]  </TASK>
[  453.010445][T14375] cgroup: cgroup_addrm_files: failed to add cgroup.stat.local, err=-12
[  453.056938][T14373] loop1: detected capacity change from 0 to 4096
[  453.117449][T14373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.157989][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  453.158025][   T28] audit: type=1400 audit(1792840783.263:781): avc:  denied  { write } for  pid=14372 comm="syz.1.3422" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  453.333141][   T28] audit: type=1400 audit(1792840783.433:782): avc:  denied  { write } for  pid=12109 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  453.334068][T12109] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  453.334327][T12109] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  453.334955][   T28] audit: type=1400 audit(1792840783.433:783): avc:  denied  { write } for  pid=12109 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  453.368438][T14382] FAULT_INJECTION: forcing a failure.
[  453.368438][T14382] name failslab, interval 1, probability 0, space 0, times 0
[  453.368518][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.2.3426 Not tainted syzkaller #0 PREEMPT(lazy) 
[  453.368655][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  453.368697][T14382] Call Trace:
[  453.368777][T14382]  <TASK>
[  453.368806][T14382]  __dump_stack+0x1d/0x30
[  453.368890][T14382]  dump_stack_lvl+0x95/0xd0
[  453.368962][T14382]  dump_stack+0x15/0x1b
[  453.369076][T14382]  should_fail_ex+0x262/0x280
[  453.369238][T14382]  ? __alloc_skb+0x2e0/0x6f0
[  453.369299][T14382]  should_failslab+0x8c/0xb0
[  453.369380][T14382]  kmem_cache_alloc_node_noprof+0x60/0x3e0
[  453.369551][T14382]  ? __alloc_skb+0x2e0/0x6f0
[  453.369621][T14382]  __alloc_skb+0x2e0/0x6f0
[  453.369685][T14382]  ? __alloc_skb+0x209/0x6f0
[  453.369814][T14382]  alloc_skb_with_frags+0x7e/0x3d0
[  453.369893][T14382]  ? __rcu_read_unlock+0x4e/0x70
[  453.369926][T14382]  ? avc_has_perm_noaudit+0xac/0x160
[  453.370083][T14382]  sock_alloc_send_pskb+0x640/0x700
[  453.370211][T14382]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  453.370303][T14382]  hci_sock_sendmsg+0x129/0x960
[  453.370476][T14382]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  453.370588][T14382]  sock_write_iter+0x2d9/0x300
[  453.370690][T14382]  ? __pfx_sock_write_iter+0x10/0x10
[  453.370862][T14382]  vfs_write+0x57a/0x990
[  453.370971][T14382]  ksys_write+0xdc/0x1a0
[  453.371086][T14382]  __x64_sys_write+0x40/0x50
[  453.371228][T14382]  x64_sys_call+0x154e/0x2550
[  453.371311][T14382]  do_syscall_64+0x112/0x360
[  453.371510][T14382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.371598][T14382] RIP: 0033:0x7f5f0c2ff559
[  453.371651][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.371759][T14382] RSP: 002b:00007f5f0ad4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  453.371822][T14382] RAX: ffffffffffffffda RBX: 00007f5f0c585fa0 RCX: 00007f5f0c2ff559
[  453.371912][T14382] RDX: 000000000000000e RSI: 00002000000006c0 RDI: 0000000000000004
[  453.371954][T14382] RBP: 00007f5f0ad4f090 R08: 0000000000000000 R09: 0000000000000000
[  453.372034][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.372076][T14382] R13: 00007f5f0c586038 R14: 00007f5f0c585fa0 R15: 00007fff14f85628
[  453.372147][T14382]  </TASK>
[  453.710535][   T28] audit: type=1400 audit(1792840783.813:784): avc:  denied  { bind } for  pid=14398 comm="syz.4.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  453.714229][   T28] audit: type=1400 audit(1792840783.813:785): avc:  denied  { listen } for  pid=14398 comm="syz.4.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  453.715362][T14403] loop2: detected capacity change from 0 to 128
[  453.729590][T14402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3435'.
[  453.760622][T12869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.780055][   T28] audit: type=1326 audit(1792840783.883:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14398 comm="syz.4.3435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c67cff559 code=0x0
[  453.844767][T14367] loop0: detected capacity change from 0 to 512
[  453.875762][T14367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.877220][T14367] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  453.907359][T14403] netlink: 'syz.2.3436': attribute type 11 has an invalid length.
[  453.967342][T14413] loop4: detected capacity change from 0 to 512
[  453.986873][T14419] FAULT_INJECTION: forcing a failure.
[  453.986873][T14419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.986913][T14419] CPU: 1 UID: 0 PID: 14419 Comm: syz.5.3442 Not tainted syzkaller #0 PREEMPT(lazy) 
[  453.987018][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  453.987032][T14419] Call Trace:
[  453.987040][T14419]  <TASK>
[  453.987048][T14419]  __dump_stack+0x1d/0x30
[  453.987081][T14419]  dump_stack_lvl+0x95/0xd0
[  453.987105][T14419]  dump_stack+0x15/0x1b
[  453.987161][T14419]  should_fail_ex+0x262/0x280
[  453.987196][T14419]  should_fail+0xb/0x20
[  453.987230][T14419]  should_fail_usercopy+0x1a/0x20
[  453.987334][T14419]  _copy_from_user+0x1c/0xb0
[  453.987369][T14419]  do_sched_setscheduler+0x4e/0x1f0
[  453.987396][T14419]  ? switch_fpu_return+0xe7/0x1b0
[  453.987423][T14419]  __x64_sys_sched_setscheduler+0x17/0x30
[  453.987550][T14419]  x64_sys_call+0x24bb/0x2550
[  453.987582][T14419]  do_syscall_64+0x112/0x360
[  453.987649][T14419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.987681][T14419] RIP: 0033:0x7fa2f13ef559
[  453.987701][T14419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.987806][T14419] RSP: 002b:00007fa2efe47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000090
[  453.987832][T14419] RAX: ffffffffffffffda RBX: 00007fa2f1675fa0 RCX: 00007fa2f13ef559
[  453.987852][T14419] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000
[  453.987935][T14419] RBP: 00007fa2f1486b20 R08: 0000000000000000 R09: 0000000000000000
[  453.987955][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.987974][T14419] R13: 00007fa2f1676038 R14: 00007fa2f1675fa0 R15: 00007ffdbf2f5cf8
[  453.988001][T14419]  </TASK>
[  454.045899][T14413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.046210][T14413] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.127402][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'.
[  454.240319][T13027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.269839][T14415] rxe_eth0 speed is unknown, defaulting to 1000
[  454.342209][T14432] bridge_slave_0: left allmulticast mode
[  454.342276][T14432] bridge_slave_0: left promiscuous mode
[  454.342432][T14432] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.366989][T14432] bridge_slave_1: left allmulticast mode
[  454.367013][T14432] bridge_slave_1: left promiscuous mode
[  454.369787][T14432] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.393270][T14432] bond0: (slave bond_slave_0): Releasing backup interface
[  454.403813][T14432] bond0: (slave bond_slave_1): Releasing backup interface
[  454.425209][T14432] team0: Port device team_slave_0 removed
[  454.434446][T14432] team0: Port device team_slave_1 removed
[  454.435367][T14432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.435386][T14432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.461155][T14432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.461217][T14432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.464749][T14432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  454.501587][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3444'.
[  454.644562][T13548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.847937][T14436] team0: Mode changed to "activebackup"
[  454.897387][   T28] audit: type=1400 audit(1792840785.003:787): avc:  denied  { map } for  pid=14448 comm="syz.0.3449" path="socket:[62654]" dev="sockfs" ino=62654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  454.897435][   T28] audit: type=1400 audit(1792840785.003:788): avc:  denied  { read } for  pid=14448 comm="syz.0.3449" path="socket:[62654]" dev="sockfs" ino=62654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  454.898083][T14449] netlink: 'syz.0.3449': attribute type 1 has an invalid length.
[  454.977216][T14457] FAULT_INJECTION: forcing a failure.
[  454.977216][T14457] name failslab, interval 1, probability 0, space 0, times 0
[  454.977257][T14457] CPU: 1 UID: 0 PID: 14457 Comm: syz.4.3450 Not tainted syzkaller #0 PREEMPT(lazy) 
[  454.977294][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  454.977313][T14457] Call Trace:
[  454.977323][T14457]  <TASK>
[  454.977367][T14457]  __dump_stack+0x1d/0x30
[  454.977396][T14457]  dump_stack_lvl+0x95/0xd0
[  454.977421][T14457]  dump_stack+0x15/0x1b
[  454.977447][T14457]  should_fail_ex+0x262/0x280
[  454.977529][T14457]  ? __kernfs_new_node+0x70/0x440
[  454.977556][T14457]  should_failslab+0x8c/0xb0
[  454.977598][T14457]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  454.977693][T14457]  ? __kernfs_new_node+0x70/0x440
[  454.977812][T14457]  __kernfs_new_node+0x70/0x440
[  454.977836][T14457]  ? __rcu_read_unlock+0x4e/0x70
[  454.977867][T14457]  ? up_write+0x19/0x60
[  454.977899][T14457]  ? kernfs_link_sibling+0x2f5/0x320
[  454.977991][T14457]  ? __rcu_read_unlock+0x4e/0x70
[  454.978086][T14457]  kernfs_new_node+0x107/0x140
[  454.978116][T14457]  __kernfs_create_file+0x4b/0x180
[  454.978157][T14457]  ? __pfx_drv_attr_show+0x10/0x10
[  454.978229][T14457]  ? __pfx_drv_attr_store+0x10/0x10
[  454.978274][T14457]  sysfs_add_file_mode_ns+0x132/0x1b0
[  454.978364][T14457]  sysfs_create_file_ns+0xd9/0x120
[  454.978434][T14457]  driver_create_file+0x39/0x50
[  454.978470][T14457]  bus_add_driver+0x37b/0x480
[  454.978507][T14457]  driver_register+0x162/0x220
[  454.978566][T14457]  usb_gadget_register_driver_owner+0x92/0x1a0
[  454.978606][T14457]  raw_ioctl+0xc5b/0x1df0
[  454.978647][T14457]  ? ioctl_has_perm+0x26d/0x2c0
[  454.978734][T14457]  ? do_vfs_ioctl+0x848/0xe50
[  454.978856][T14457]  ? selinux_file_ioctl+0x333/0x3b0
[  454.978887][T14457]  ? __fget_files+0x184/0x1c0
[  454.978922][T14457]  ? __pfx_raw_ioctl+0x10/0x10
[  454.978959][T14457]  __se_sys_ioctl+0xce/0x140
[  454.979000][T14457]  __x64_sys_ioctl+0x43/0x50
[  454.979096][T14457]  x64_sys_call+0x239d/0x2550
[  454.979164][T14457]  do_syscall_64+0x112/0x360
[  454.979219][T14457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.979330][T14457] RIP: 0033:0x7f9c67cff1eb
[  454.979351][T14457] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  454.979380][T14457] RSP: 002b:00007f9c66754f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  454.979472][T14457] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9c67cff1eb
[  454.979532][T14457] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  454.979547][T14457] RBP: 00007f9c66755fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  454.979566][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.979580][T14457] R13: 00002000000003c0 R14: 0000000000000000 R15: 0000000000000000
[  454.979603][T14457]  </TASK>
[  454.984821][T14457] bus_add_driver: add_bind_files(raw-gadget.0) failed
[  454.984963][T14457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.985076][T14457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.351261][T14415] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.351291][T14415] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.351419][T14415] bridge_slave_0: entered allmulticast mode
[  455.351994][T14415] bridge_slave_0: entered promiscuous mode
[  455.353127][T14415] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.353156][T14415] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.353202][T14415] bridge_slave_1: entered allmulticast mode
[  455.353816][T14415] bridge_slave_1: entered promiscuous mode
[  455.480138][T14415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.483136][T14415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.527216][T14415] team0: Port device team_slave_0 added
[  455.529535][T14415] team0: Port device team_slave_1 added
[  455.566014][T14415] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.566061][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.566117][T14415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.567418][T14415] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.567430][T14415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.567458][T14415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.712384][T14415] hsr_slave_0: entered promiscuous mode
[  455.714963][T14415] hsr_slave_1: entered promiscuous mode
[  455.997915][T14415] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  456.002275][T14415] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  456.002931][T14415] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  456.005284][T14415] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  456.006197][T14415] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  456.009564][T14415] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  456.010206][T14415] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  456.012862][T14415] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  456.067254][T14415] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.067379][T14415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.067674][T14415] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.067821][T14415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.166868][T14415] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.172134][T14415] 8021q: adding VLAN 0 to HW filter on device team0
[  456.227564][T14485] FAULT_INJECTION: forcing a failure.
[  456.227564][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.227654][T14485] CPU: 1 UID: 0 PID: 14485 Comm: syz.4.3456 Not tainted syzkaller #0 PREEMPT(lazy) 
[  456.227692][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  456.227780][T14485] Call Trace:
[  456.227789][T14485]  <TASK>
[  456.227799][T14485]  __dump_stack+0x1d/0x30
[  456.227832][T14485]  dump_stack_lvl+0x95/0xd0
[  456.227861][T14485]  dump_stack+0x15/0x1b
[  456.227901][T14485]  should_fail_ex+0x262/0x280
[  456.227950][T14485]  should_fail+0xb/0x20
[  456.227980][T14485]  should_fail_usercopy+0x1a/0x20
[  456.228015][T14485]  _copy_from_user+0x1c/0xb0
[  456.228051][T14485]  ___sys_sendmsg+0xc1/0x1e0
[  456.228182][T14485]  __x64_sys_sendmsg+0xd4/0x160
[  456.228226][T14485]  x64_sys_call+0x22ab/0x2550
[  456.228258][T14485]  do_syscall_64+0x112/0x360
[  456.228303][T14485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.228412][T14485] RIP: 0033:0x7f9c67cff559
[  456.228433][T14485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.228514][T14485] RSP: 002b:00007f9c66757028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  456.228542][T14485] RAX: ffffffffffffffda RBX: 00007f9c67f85fa0 RCX: 00007f9c67cff559
[  456.228562][T14485] RDX: 0000000020000000 RSI: 0000200000004600 RDI: 0000000000000003
[  456.228579][T14485] RBP: 00007f9c66757090 R08: 0000000000000000 R09: 0000000000000000
[  456.228597][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  456.228614][T14485] R13: 00007f9c67f86038 R14: 00007f9c67f85fa0 R15: 00007ffd397a5708
[  456.228649][T14485]  </TASK>
[  456.237227][T14474] loop2: detected capacity change from 0 to 512
[  456.286745][T14474] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.3453: iget: bad i_size value: 38620345925642
[  456.286865][T14474] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  456.291619][T14474] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3453: couldn't read orphan inode 15 (err -117)
[  456.291659][T14474] loop2: lost filesystem error report for type 5 error -117
[  456.292306][T14474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.302207][   T28] audit: type=1400 audit(1792840786.403:789): avc:  denied  { write } for  pid=14469 comm="syz.2.3453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  456.306581][T14474] EXT4-fs (loop2): shut down requested (0)
[  456.311729][   T28] audit: type=1400 audit(1792840786.413:790): avc:  denied  { read } for  pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  456.355447][T14490] loop4: detected capacity change from 0 to 512
[  456.419558][T14474] 9p: Bad value for 'rfdno'
[  456.433061][T14490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.619491][T14497] loop0: detected capacity change from 0 to 512
[  456.681196][T14502] FAULT_INJECTION: forcing a failure.
[  456.681196][T14502] name failslab, interval 1, probability 0, space 0, times 0
[  456.681234][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.4.3458 Not tainted syzkaller #0 PREEMPT(lazy) 
[  456.681296][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  456.681315][T14502] Call Trace:
[  456.681324][T14502]  <TASK>
[  456.681334][T14502]  __dump_stack+0x1d/0x30
[  456.681386][T14502]  dump_stack_lvl+0x95/0xd0
[  456.681456][T14502]  dump_stack+0x15/0x1b
[  456.681484][T14502]  should_fail_ex+0x262/0x280
[  456.681529][T14502]  ? copy_fs_struct+0x31/0x110
[  456.681575][T14502]  should_failslab+0x8c/0xb0
[  456.681678][T14502]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  456.681715][T14502]  ? copy_fs_struct+0x31/0x110
[  456.681756][T14502]  copy_fs_struct+0x31/0x110
[  456.681831][T14502]  ksys_unshare+0x2fe/0x690
[  456.681870][T14502]  __x64_sys_unshare+0x1f/0x30
[  456.681910][T14502]  x64_sys_call+0x1e33/0x2550
[  456.681945][T14502]  do_syscall_64+0x112/0x360
[  456.682046][T14502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.682079][T14502] RIP: 0033:0x7f9c67cff559
[  456.682102][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.682130][T14502] RSP: 002b:00007f9c66736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  456.682230][T14502] RAX: ffffffffffffffda RBX: 00007f9c67f86090 RCX: 00007f9c67cff559
[  456.682251][T14502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[  456.682267][T14502] RBP: 00007f9c67d96b20 R08: 0000000000000000 R09: 0000000000000000
[  456.682281][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.682296][T14502] R13: 00007f9c67f86128 R14: 00007f9c67f86090 R15: 00007ffd397a5708
[  456.682318][T14502]  </TASK>
[  456.849180][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.920842][T14507] netlink: 'syz.2.3460': attribute type 34 has an invalid length.
[  456.937119][T13027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.007687][T14415] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.147690][T14534] loop5: detected capacity change from 0 to 512
[  457.167982][T14534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.208988][T14534] FAULT_INJECTION: forcing a failure.
[  457.208988][T14534] name failslab, interval 1, probability 0, space 0, times 0
[  457.209026][T14534] CPU: 0 UID: 0 PID: 14534 Comm: syz.5.3465 Not tainted syzkaller #0 PREEMPT(lazy) 
[  457.209113][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  457.209132][T14534] Call Trace:
[  457.209151][T14534]  <TASK>
[  457.209161][T14534]  __dump_stack+0x1d/0x30
[  457.209192][T14534]  dump_stack_lvl+0x95/0xd0
[  457.209220][T14534]  dump_stack+0x15/0x1b
[  457.209247][T14534]  should_fail_ex+0x262/0x280
[  457.209334][T14534]  ? dup_fd+0x3a/0x5f0
[  457.209380][T14534]  should_failslab+0x8c/0xb0
[  457.209447][T14534]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  457.209494][T14534]  ? dup_fd+0x3a/0x5f0
[  457.209543][T14534]  dup_fd+0x3a/0x5f0
[  457.209607][T14534]  ? copy_fs_struct+0x31/0x110
[  457.209670][T14534]  ? kmem_cache_alloc_noprof+0x1d7/0x3d0
[  457.209709][T14534]  ? lockref_get+0xd8/0x130
[  457.209746][T14534]  unshare_fd+0x7d/0xd0
[  457.209853][T14534]  ksys_unshare+0x318/0x690
[  457.209968][T14534]  __x64_sys_unshare+0x1f/0x30
[  457.210014][T14534]  x64_sys_call+0x1e33/0x2550
[  457.210063][T14534]  do_syscall_64+0x112/0x360
[  457.210116][T14534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.210152][T14534] RIP: 0033:0x7fa2f13ef559
[  457.210175][T14534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.210204][T14534] RSP: 002b:00007fa2efe47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  457.210236][T14534] RAX: ffffffffffffffda RBX: 00007fa2f1675fa0 RCX: 00007fa2f13ef559
[  457.210257][T14534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[  457.210302][T14534] RBP: 00007fa2f1486b20 R08: 0000000000000000 R09: 0000000000000000
[  457.210356][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.210376][T14534] R13: 00007fa2f1676038 R14: 00007fa2f1675fa0 R15: 00007ffdbf2f5cf8
[  457.210461][T14534]  </TASK>
[  457.316564][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.424409][T14415] veth0_vlan: entered promiscuous mode
[  457.436633][T14415] veth1_vlan: entered promiscuous mode
[  457.456868][T14415] veth0_macvtap: entered promiscuous mode
[  457.460570][T14415] veth1_macvtap: entered promiscuous mode
[  457.477482][T14415] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.479215][T14415] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.536786][  T589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.539306][ T9495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.539516][ T9495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.539581][ T9495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.605836][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3469'.
[  457.608827][T14554] dummy1: entered promiscuous mode
[  457.608849][T14554] dummy1: entered allmulticast mode
[  457.611485][T14554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14554 comm=syz.6.3469
[  457.654498][T14556] FAULT_INJECTION: forcing a failure.
[  457.654498][T14556] name failslab, interval 1, probability 0, space 0, times 0
[  457.654555][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.6.3470 Not tainted syzkaller #0 PREEMPT(lazy) 
[  457.654643][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  457.654662][T14556] Call Trace:
[  457.654672][T14556]  <TASK>
[  457.654682][T14556]  __dump_stack+0x1d/0x30
[  457.654770][T14556]  dump_stack_lvl+0x95/0xd0
[  457.654797][T14556]  dump_stack+0x15/0x1b
[  457.654872][T14556]  should_fail_ex+0x262/0x280
[  457.654908][T14556]  ? percpu_ref_init+0x9c/0x250
[  457.654937][T14556]  should_failslab+0x8c/0xb0
[  457.655024][T14556]  __kmalloc_cache_noprof+0x5d/0x3e0
[  457.655064][T14556]  ? percpu_ref_init+0x33/0x250
[  457.655130][T14556]  ? percpu_ref_init+0x9c/0x250
[  457.655160][T14556]  ? __pfx_blkg_release+0x10/0x10
[  457.655270][T14556]  percpu_ref_init+0x9c/0x250
[  457.655299][T14556]  blkg_alloc+0xad/0x600
[  457.655393][T14556]  ? __xa_cmpxchg_raw+0x29e/0x2f0
[  457.655425][T14556]  blkcg_init_disk+0xf8/0x220
[  457.655529][T14556]  __alloc_disk_node+0x168/0x2f0
[  457.655561][T14556]  __blk_alloc_disk+0x68/0xd0
[  457.655596][T14556]  dm_create+0x36d/0x850
[  457.655683][T14556]  dev_create+0x141/0x290
[  457.655715][T14556]  dm_ctl_ioctl+0x80b/0xad0
[  457.655744][T14556]  ? __pfx_dev_create+0x10/0x10
[  457.655786][T14556]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  457.655885][T14556]  __se_sys_ioctl+0xce/0x140
[  457.655924][T14556]  __x64_sys_ioctl+0x43/0x50
[  457.655962][T14556]  x64_sys_call+0x239d/0x2550
[  457.656005][T14556]  do_syscall_64+0x112/0x360
[  457.656053][T14556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.656080][T14556] RIP: 0033:0x7f4c86c8f559
[  457.656134][T14556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.656160][T14556] RSP: 002b:00007f4c856df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  457.656190][T14556] RAX: ffffffffffffffda RBX: 00007f4c86f15fa0 RCX: 00007f4c86c8f559
[  457.656288][T14556] RDX: 0000200000000900 RSI: 00000000c138fd03 RDI: 0000000000000007
[  457.656307][T14556] RBP: 00007f4c86d26b20 R08: 0000000000000000 R09: 0000000000000000
[  457.656331][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.656349][T14556] R13: 00007f4c86f16038 R14: 00007f4c86f15fa0 R15: 00007fffcd5bb1e8
[  457.656376][T14556]  </TASK>
[  457.683393][T14547] loop5: detected capacity change from 0 to 512
[  457.684299][T14547] EXT4-fs: Ignoring removed bh option
[  457.713728][T14547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.714003][T14547] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.974019][T14564] FAULT_INJECTION: forcing a failure.
[  457.974019][T14564] name fail_futex, interval 1, probability 0, space 0, times 0
[  457.974060][T14564] CPU: 0 UID: 0 PID: 14564 Comm: syz.4.3472 Not tainted syzkaller #0 PREEMPT(lazy) 
[  457.974123][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  457.974145][T14564] Call Trace:
[  457.974154][T14564]  <TASK>
[  457.974183][T14564]  __dump_stack+0x1d/0x30
[  457.974298][T14564]  dump_stack_lvl+0x95/0xd0
[  457.974329][T14564]  dump_stack+0x15/0x1b
[  457.974411][T14564]  should_fail_ex+0x262/0x280
[  457.974508][T14564]  should_fail+0xb/0x20
[  457.974546][T14564]  get_futex_key+0x12c/0xc40
[  457.974582][T14564]  futex_wake+0x89/0x400
[  457.974631][T14564]  do_futex+0x3f8/0x460
[  457.974686][T14564]  __se_sys_futex+0x2f6/0x370
[  457.974782][T14564]  __x64_sys_futex+0x78/0x90
[  457.974843][T14564]  x64_sys_call+0x22e2/0x2550
[  457.974936][T14564]  do_syscall_64+0x112/0x360
[  457.974993][T14564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.975116][T14564] RIP: 0033:0x7f9c67cff559
[  457.975139][T14564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.975170][T14564] RSP: 002b:00007f9c667570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  457.975205][T14564] RAX: ffffffffffffffda RBX: 00007f9c67f85fa8 RCX: 00007f9c67cff559
[  457.975229][T14564] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c67f85fac
[  457.975275][T14564] RBP: 00007f9c67f85fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  457.975299][T14564] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  457.975322][T14564] R13: 00007f9c67f86038 R14: 00007ffd397a5620 R15: 00007ffd397a5708
[  457.975404][T14564]  </TASK>
[  458.185822][T14571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14571 comm=syz.6.3474
[  458.207707][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.229696][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3477'.
[  458.303933][T14582] FAULT_INJECTION: forcing a failure.
[  458.303933][T14582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.303974][T14582] CPU: 0 UID: 0 PID: 14582 Comm: syz.0.3480 Not tainted syzkaller #0 PREEMPT(lazy) 
[  458.304006][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  458.304099][T14582] Call Trace:
[  458.304109][T14582]  <TASK>
[  458.304118][T14582]  __dump_stack+0x1d/0x30
[  458.304151][T14582]  dump_stack_lvl+0x95/0xd0
[  458.304184][T14582]  dump_stack+0x15/0x1b
[  458.304216][T14582]  should_fail_ex+0x262/0x280
[  458.304329][T14582]  should_fail+0xb/0x20
[  458.304361][T14582]  should_fail_usercopy+0x1a/0x20
[  458.304435][T14582]  _copy_to_user+0x20/0xa0
[  458.304488][T14582]  put_itimerspec64+0x72/0x130
[  458.304529][T14582]  __x64_sys_timer_gettime+0xad/0x120
[  458.304565][T14582]  x64_sys_call+0x24dc/0x2550
[  458.304693][T14582]  do_syscall_64+0x112/0x360
[  458.304853][T14582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.304962][T14582] RIP: 0033:0x7f015febf559
[  458.305033][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.305056][T14582] RSP: 002b:00007f015e90f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0
[  458.305080][T14582] RAX: ffffffffffffffda RBX: 00007f0160145fa0 RCX: 00007f015febf559
[  458.305117][T14582] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000000
[  458.305198][T14582] RBP: 00007f015e90f090 R08: 0000000000000000 R09: 0000000000000000
[  458.305219][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.305236][T14582] R13: 00007f0160146038 R14: 00007f0160145fa0 R15: 00007ffedec34518
[  458.305271][T14582]  </TASK>
[  458.354501][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  458.354554][   T28] audit: type=1400 audit(1792840788.463:823): avc:  denied  { create } for  pid=14579 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_selinux_socket permissive=1
[  458.377405][   T28] audit: type=1400 audit(1792840788.483:824): avc:  denied  { create } for  pid=14579 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1
[  458.378900][   T28] audit: type=1400 audit(1792840788.483:825): avc:  denied  { write } for  pid=14579 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1
[  458.384394][   T28] audit: type=1400 audit(1792840788.483:826): avc:  denied  { create } for  pid=14579 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1
[  458.400296][   T28] audit: type=1400 audit(1792840788.503:827): avc:  denied  { write } for  pid=14579 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1
[  458.403001][   T28] audit: type=1400 audit(1792840788.503:828): avc:  denied  { create } for  pid=14579 comm="syz.5.3479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1
[  458.435093][T14584] FAULT_INJECTION: forcing a failure.
[  458.435093][T14584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.435307][T14584] CPU: 0 UID: 0 PID: 14584 Comm: syz.0.3481 Not tainted syzkaller #0 PREEMPT(lazy) 
[  458.435394][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  458.435437][T14584] Call Trace:
[  458.435458][T14584]  <TASK>
[  458.435487][T14584]  __dump_stack+0x1d/0x30
[  458.435570][T14584]  dump_stack_lvl+0x95/0xd0
[  458.435607][T14584]  dump_stack+0x15/0x1b
[  458.435629][T14584]  should_fail_ex+0x262/0x280
[  458.435772][T14584]  should_fail+0xb/0x20
[  458.435848][T14584]  should_fail_usercopy+0x1a/0x20
[  458.435937][T14584]  _copy_from_user+0x1c/0xb0
[  458.436082][T14584]  ___sys_sendmsg+0xc1/0x1e0
[  458.436166][T14584]  __x64_sys_sendmsg+0xd4/0x160
[  458.436274][T14584]  x64_sys_call+0x22ab/0x2550
[  458.436384][T14584]  do_syscall_64+0x112/0x360
[  458.436530][T14584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.436623][T14584] RIP: 0033:0x7f015febf559
[  458.436676][T14584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.436746][T14584] RSP: 002b:00007f015e90f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  458.436818][T14584] RAX: ffffffffffffffda RBX: 00007f0160145fa0 RCX: 00007f015febf559
[  458.436865][T14584] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  458.436931][T14584] RBP: 00007f015e90f090 R08: 0000000000000000 R09: 0000000000000000
[  458.436975][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.437025][T14584] R13: 00007f0160146038 R14: 00007f0160145fa0 R15: 00007ffedec34518
[  458.437087][T14584]  </TASK>
[  458.621802][   T28] audit: type=1400 audit(1792840788.723:829): avc:  denied  { write } for  pid=14585 comm="syz.0.3482" name="usb_gadget" dev="configfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  458.806574][   T28] audit: type=1400 audit(1792840788.893:830): avc:  denied  { create } for  pid=14587 comm="syz.5.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  458.842941][T14593] loop2: detected capacity change from 0 to 512
[  458.864933][T14593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.865068][T14593] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.956282][   T28] audit: type=1326 audit(1792840789.063:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.5.3486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f13ef559 code=0x7ffc0000
[  458.956414][   T28] audit: type=1326 audit(1792840789.063:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.5.3486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f13ef559 code=0x7ffc0000
[  459.080391][T14604] loop4: detected capacity change from 0 to 512
[  459.084833][T14604] EXT4-fs: Ignoring removed nomblk_io_submit option
[  459.100560][T14604] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  459.100670][T14604] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.3488: corrupted in-inode xattr: e_value size too large
[  459.100706][T14604] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  459.100853][T14604] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3488: couldn't read orphan inode 15 (err -117)
[  459.100883][T14604] loop4: lost filesystem error report for type 5 error -117
[  459.101367][T14604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.138325][T14602] FAULT_INJECTION: forcing a failure.
[  459.138325][T14602] name failslab, interval 1, probability 0, space 0, times 0
[  459.138490][T14602] CPU: 1 UID: 0 PID: 14602 Comm: syz.5.3487 Not tainted syzkaller #0 PREEMPT(lazy) 
[  459.138574][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  459.138625][T14602] Call Trace:
[  459.138647][T14602]  <TASK>
[  459.138676][T14602]  __dump_stack+0x1d/0x30
[  459.138762][T14602]  dump_stack_lvl+0x95/0xd0
[  459.138823][T14602]  dump_stack+0x15/0x1b
[  459.138897][T14602]  should_fail_ex+0x262/0x280
[  459.138934][T14602]  should_failslab+0x8c/0xb0
[  459.139032][T14602]  __kvmalloc_node_noprof+0x14f/0x5b0
[  459.139164][T14602]  ? listxattr+0x60/0x280
[  459.139258][T14602]  ? listxattr+0x60/0x280
[  459.139295][T14602]  listxattr+0x60/0x280
[  459.139412][T14602]  __x64_sys_flistxattr+0xc7/0x120
[  459.139503][T14602]  x64_sys_call+0x2206/0x2550
[  459.139584][T14602]  do_syscall_64+0x112/0x360
[  459.139747][T14602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.139849][T14602] RIP: 0033:0x7fa2f13ef559
[  459.139909][T14602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.140048][T14602] RSP: 002b:00007fa2efe47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4
[  459.140120][T14602] RAX: ffffffffffffffda RBX: 00007fa2f1675fa0 RCX: 00007fa2f13ef559
[  459.140171][T14602] RDX: 000000000000001a RSI: 00002000000001c0 RDI: 0000000000000006
[  459.140220][T14602] RBP: 00007fa2f1486b20 R08: 0000000000000000 R09: 0000000000000000
[  459.140270][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.140362][T14602] R13: 00007fa2f1676038 R14: 00007fa2f1675fa0 R15: 00007ffdbf2f5cf8
[  459.140426][T14602]  </TASK>
[  459.179015][T14570] netlink: 'syz.2.3475': attribute type 8 has an invalid length.
[  459.251901][T13027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.535158][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.876660][T14635] loop0: detected capacity change from 0 to 128
[  460.024488][T14629] loop6: detected capacity change from 0 to 512
[  460.060055][T14629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.060281][T14629] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  460.136528][T14630] loop4: detected capacity change from 0 to 512
[  460.153056][T14630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.153240][T14630] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  460.337396][T14666] FAULT_INJECTION: forcing a failure.
[  460.337396][T14666] name failslab, interval 1, probability 0, space 0, times 0
[  460.337428][T14666] CPU: 0 UID: 0 PID: 14666 Comm: syz.2.3504 Not tainted syzkaller #0 PREEMPT(lazy) 
[  460.337459][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  460.337486][T14666] Call Trace:
[  460.337495][T14666]  <TASK>
[  460.337541][T14666]  __dump_stack+0x1d/0x30
[  460.337577][T14666]  dump_stack_lvl+0x95/0xd0
[  460.337609][T14666]  dump_stack+0x15/0x1b
[  460.337683][T14666]  should_fail_ex+0x262/0x280
[  460.337720][T14666]  should_failslab+0x8c/0xb0
[  460.337758][T14666]  __kvmalloc_node_noprof+0x14f/0x5b0
[  460.337865][T14666]  ? listxattr+0x60/0x280
[  460.337890][T14666]  ? listxattr+0x60/0x280
[  460.337925][T14666]  listxattr+0x60/0x280
[  460.338028][T14666]  __x64_sys_flistxattr+0xc7/0x120
[  460.338052][T14666]  x64_sys_call+0x2206/0x2550
[  460.338077][T14666]  do_syscall_64+0x112/0x360
[  460.338166][T14666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.338187][T14666] RIP: 0033:0x7f5f0c2ff559
[  460.338270][T14666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.338289][T14666] RSP: 002b:00007f5f0ad4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4
[  460.338309][T14666] RAX: ffffffffffffffda RBX: 00007f5f0c585fa0 RCX: 00007f5f0c2ff559
[  460.338323][T14666] RDX: 000000000000001a RSI: 00002000000001c0 RDI: 0000000000000006
[  460.338336][T14666] RBP: 00007f5f0c396b20 R08: 0000000000000000 R09: 0000000000000000
[  460.338348][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.338414][T14666] R13: 00007f5f0c586038 R14: 00007f5f0c585fa0 R15: 00007fff14f85628
[  460.338433][T14666]  </TASK>
[  460.455309][T14671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.535921][T14671] FAULT_INJECTION: forcing a failure.
[  460.535921][T14671] name failslab, interval 1, probability 0, space 0, times 0
[  460.536056][T14671] CPU: 1 UID: 0 PID: 14671 Comm: syz.2.3506 Not tainted syzkaller #0 PREEMPT(lazy) 
[  460.536144][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  460.536187][T14671] Call Trace:
[  460.536201][T14671]  <TASK>
[  460.536272][T14671]  __dump_stack+0x1d/0x30
[  460.536384][T14671]  dump_stack_lvl+0x95/0xd0
[  460.536457][T14671]  dump_stack+0x15/0x1b
[  460.536534][T14671]  should_fail_ex+0x262/0x280
[  460.536717][T14671]  ? dup_fd+0x3a/0x5f0
[  460.536829][T14671]  should_failslab+0x8c/0xb0
[  460.536922][T14671]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  460.537045][T14671]  ? dup_fd+0x3a/0x5f0
[  460.537163][T14671]  dup_fd+0x3a/0x5f0
[  460.537335][T14671]  ? copy_fs_struct+0x31/0x110
[  460.537436][T14671]  ? kmem_cache_alloc_noprof+0x1d7/0x3d0
[  460.537567][T14671]  ? lockref_get+0xd8/0x130
[  460.537663][T14671]  unshare_fd+0x7d/0xd0
[  460.537791][T14671]  ksys_unshare+0x318/0x690
[  460.537912][T14671]  __x64_sys_unshare+0x1f/0x30
[  460.538088][T14671]  x64_sys_call+0x1e33/0x2550
[  460.538178][T14671]  do_syscall_64+0x112/0x360
[  460.538351][T14671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.538423][T14671] RIP: 0033:0x7f5f0c2ff559
[  460.538489][T14671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.538551][T14671] RSP: 002b:00007f5f0ad4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  460.538608][T14671] RAX: ffffffffffffffda RBX: 00007f5f0c585fa0 RCX: 00007f5f0c2ff559
[  460.538646][T14671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[  460.538698][T14671] RBP: 00007f5f0c396b20 R08: 0000000000000000 R09: 0000000000000000
[  460.538759][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.538826][T14671] R13: 00007f5f0c586038 R14: 00007f5f0c585fa0 R15: 00007fff14f85628
[  460.538890][T14671]  </TASK>
[  460.613096][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.756317][T14678] EXT4-fs: Ignoring removed bh option
[  460.782051][T14678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.782392][T14678] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.835428][T14415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.872976][T14685] FAULT_INJECTION: forcing a failure.
[  460.872976][T14685] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  460.873053][T14685] CPU: 0 UID: 0 PID: 14685 Comm: syz.6.3510 Not tainted syzkaller #0 PREEMPT(lazy) 
[  460.873093][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  460.873112][T14685] Call Trace:
[  460.873129][T14685]  <TASK>
[  460.873137][T14685]  __dump_stack+0x1d/0x30
[  460.873201][T14685]  dump_stack_lvl+0x95/0xd0
[  460.873230][T14685]  dump_stack+0x15/0x1b
[  460.873257][T14685]  should_fail_ex+0x262/0x280
[  460.873293][T14685]  should_fail+0xb/0x20
[  460.873342][T14685]  should_fail_usercopy+0x1a/0x20
[  460.873380][T14685]  _copy_to_user+0x20/0xa0
[  460.873415][T14685]  simple_read_from_buffer+0xb5/0x130
[  460.873545][T14685]  proc_fail_nth_read+0x10e/0x150
[  460.873575][T14685]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  460.873603][T14685]  vfs_read+0x18e/0x7c0
[  460.873677][T14685]  ? __rcu_read_unlock+0x4e/0x70
[  460.873702][T14685]  ? __fget_files+0x184/0x1c0
[  460.873721][T14685]  ? mutex_lock+0x52/0x90
[  460.873748][T14685]  ksys_read+0xdc/0x1a0
[  460.873801][T14685]  __x64_sys_read+0x40/0x50
[  460.873826][T14685]  x64_sys_call+0x2135/0x2550
[  460.873882][T14685]  do_syscall_64+0x112/0x360
[  460.873952][T14685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.873982][T14685] RIP: 0033:0x7f4c86c4fd8e
[  460.873997][T14685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  460.874077][T14685] RSP: 002b:00007f4c856defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  460.874103][T14685] RAX: ffffffffffffffda RBX: 00007f4c856df6c0 RCX: 00007f4c86c4fd8e
[  460.874130][T14685] RDX: 000000000000000f RSI: 00007f4c856df0a0 RDI: 0000000000000004
[  460.874186][T14685] RBP: 00007f4c856df090 R08: 0000000000000000 R09: 0000000000000000
[  460.874199][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  460.874212][T14685] R13: 00007f4c86f16038 R14: 00007f4c86f15fa0 R15: 00007fffcd5bb1e8
[  460.874231][T14685]  </TASK>
[  460.875059][T13027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.038446][T14687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.152575][T14415] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  461.152866][T14415] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  461.222589][T14702] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3519'.
[  461.309266][T14706] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3519'.
[  461.350864][T14415] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.352713][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.403835][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.418026][T14711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14711 comm=syz.4.3523
[  461.439851][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.471015][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.608241][   T12] bridge_slave_1: left allmulticast mode
[  461.608271][   T12] bridge_slave_1: left promiscuous mode
[  461.608426][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.609201][   T12] bridge_slave_0: left allmulticast mode
[  461.609224][   T12] bridge_slave_0: left promiscuous mode
[  461.609427][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.675471][T14722] set_capacity_and_notify: 3 callbacks suppressed
[  461.682242][T14722] loop4: detected capacity change from 0 to 4096
[  461.708369][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.708999][T14722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.843679][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.858773][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.859853][   T12] bond0 (unregistering): Released all slaves
[  461.892919][T14712] loop0: detected capacity change from 0 to 512
[  461.893941][T13027] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  461.894491][T13027] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[  461.962044][T14712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.962349][T14712] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  462.009447][T14714] rxe_eth0 speed is unknown, defaulting to 1000
[  462.024197][   T12] hsr_slave_0: left promiscuous mode
[  462.025678][   T12] hsr_slave_1: left promiscuous mode
[  462.028903][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  462.028973][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  462.035983][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  462.036035][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  462.060889][   T12] veth1_macvtap: left promiscuous mode
[  462.060996][   T12] veth0_macvtap: left promiscuous mode
[  462.061147][   T12] veth1_vlan: left promiscuous mode
[  462.061451][   T12] veth0_vlan: left promiscuous mode
[  462.124368][T13027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.187749][T14753] random: crng reseeded on system resumption
[  462.203920][T14753] Restarting kernel threads ...
[  462.204608][T14753] Done restarting kernel threads.
[  462.255332][   T12] team0 (unregistering): Port device team_slave_1 removed
[  462.265905][   T12] team0 (unregistering): Port device team_slave_0 removed
[  462.316464][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5
[  462.420783][T14756] rxe_eth0 speed is unknown, defaulting to 1000
[  462.502975][T14714] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.503017][T14714] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.503099][T14714] bridge_slave_0: entered allmulticast mode
[  462.503611][T14714] bridge_slave_0: entered promiscuous mode
[  462.531787][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6
[  462.532152][T14714] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.532189][T14714] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.532336][T14714] bridge_slave_1: entered allmulticast mode
[  462.532926][T14714] bridge_slave_1: entered promiscuous mode
[  462.583344][T14714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.584891][T14714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.630075][T14714] team0: Port device team_slave_0 added
[  462.632741][T14714] team0: Port device team_slave_1 added
[  462.662101][T14714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.662121][T14714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.662202][T14714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.662985][T14714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.662999][T14714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.663097][T14714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.765899][T14714] hsr_slave_0: entered promiscuous mode
[  462.766284][T14714] hsr_slave_1: entered promiscuous mode
[  462.767727][T14797] netlink: 'syz.2.3535': attribute type 34 has an invalid length.
[  462.767820][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'.
[  462.887027][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7
[  462.888416][T14797] xt_TPROXY: Can be used only with -p tcp or -p udp
[  462.894468][T14756] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.894546][T14756] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.894619][T14756] bridge_slave_0: entered allmulticast mode
[  462.895332][T14756] bridge_slave_0: entered promiscuous mode
[  462.904858][T14756] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.904969][T14756] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.905150][T14756] bridge_slave_1: entered allmulticast mode
[  462.908401][T14756] bridge_slave_1: entered promiscuous mode
[  462.972546][T14756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.988426][T14756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.010595][T13548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.039300][T14756] team0: Port device team_slave_0 added
[  463.064434][T14756] team0: Port device team_slave_1 added
[  463.090257][T14816] device-mapper: table: 252:4: striped: Target length not divisible by chunk size (-EINVAL)
[  463.090336][T14816] device-mapper: ioctl: error adding target to table
[  463.105678][T14756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.105696][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.105823][T14756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.124406][T14756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.124451][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.124696][T14756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.139392][T14816] netlink: 'syz.0.3537': attribute type 3 has an invalid length.
[  463.139442][T14816] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3537'.
[  463.198646][T14816] loop0: detected capacity change from 0 to 128
[  463.226082][T14714] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  463.243456][T14714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.248989][T14816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  463.253293][T14816] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.295874][T14714] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  463.298250][T14714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.300964][T14756] hsr_slave_0: entered promiscuous mode
[  463.301331][T14756] hsr_slave_1: entered promiscuous mode
[  463.301603][T14756] debugfs: 'hsr0' already exists in 'hsr'
[  463.301618][T14756] Cannot create hsr debugfs directory
[  463.330180][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3537'.
[  463.360570][T14714] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  463.370522][T14714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.377467][T14714] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  463.405380][T14714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.431628][   T28] kauditd_printk_skb: 70 callbacks suppressed
[  463.431665][   T28] audit: type=1400 audit(1792840793.533:903): avc:  denied  { mount } for  pid=14815 comm="syz.0.3537" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  463.488025][   T28] audit: type=1400 audit(1792840793.593:904): avc:  denied  { write } for  pid=14827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  463.522265][   T28] audit: type=1400 audit(1792840793.633:905): avc:  denied  { open } for  pid=14824 comm="syz.2.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  463.533065][   T28] audit: type=1400 audit(1792840793.633:906): avc:  denied  { kernel } for  pid=14824 comm="syz.2.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  463.558229][   T28] audit: type=1400 audit(1792840793.653:907): avc:  denied  { tracepoint } for  pid=14824 comm="syz.2.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  463.600311][   T28] audit: type=1400 audit(1792840793.703:908): avc:  denied  { write } for  pid=14852 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  463.648383][T14851] loop5: detected capacity change from 0 to 512
[  463.654276][T14851] EXT4-fs: Ignoring removed bh option
[  463.691560][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8
[  463.801518][T14756] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  463.805974][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  463.810876][T14756] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  463.819465][T14851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.819756][T14851] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.852506][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  463.853153][T14756] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  463.857408][   T28] audit: type=1400 audit(1792840793.963:909): avc:  denied  { write } for  pid=14850 comm="syz.5.3543" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  463.859016][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  463.870104][T14756] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  463.893191][T14756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  463.911384][T14714] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.942313][T14714] 8021q: adding VLAN 0 to HW filter on device team0
[  463.960616][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.960668][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.971370][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.971474][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.982750][   T28] audit: type=1400 audit(1792840794.043:910): avc:  denied  { write } for  pid=14850 comm="syz.5.3543" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  464.100085][T14756] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.128350][T14756] 8021q: adding VLAN 0 to HW filter on device team0
[  464.147124][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.147158][ T9503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.152281][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.152323][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.203382][   T28] audit: type=1400 audit(1792840794.303:911): avc:  denied  { unmount } for  pid=13548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  464.229000][T14874] loop2: detected capacity change from 0 to 128
[  464.245122][T13548] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  464.264715][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.298660][T14874] netlink: 'syz.2.3544': attribute type 11 has an invalid length.
[  464.371094][T14884] loop0: detected capacity change from 0 to 128
[  464.383935][T14884] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  464.384160][T14884] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.433422][T14884] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  464.489133][T14714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.599724][T14909] ip_tables: iptables: counters copy to user failed while replacing table
[  464.625148][T14911] ip_tables: iptables: counters copy to user failed while replacing table
[  464.659954][  T589] bond0 (unregistering): Released all slaves
[  464.667135][  T589] bond1 (unregistering): Released all slaves
[  464.681393][T14756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.727202][T14917] loop2: detected capacity change from 0 to 512
[  464.729398][T14917] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  464.865308][  T589] hsr_slave_0: left promiscuous mode
[  464.867119][  T589] hsr_slave_1: left promiscuous mode
[  464.881163][  T589] veth1_macvtap: left promiscuous mode
[  464.881194][  T589] veth0_macvtap: left promiscuous mode
[  464.882752][  T589] veth1_vlan: left promiscuous mode
[  464.882876][  T589] veth0_vlan: left promiscuous mode
[  464.945933][T14912] loop5: detected capacity change from 0 to 512
[  464.963263][T14912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.963503][T14912] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  465.030102][T14936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14936 comm=syz.0.3553
[  465.160217][T14714] veth0_vlan: entered promiscuous mode
[  465.169707][T14714] veth1_vlan: entered promiscuous mode
[  465.190754][T14714] veth0_macvtap: entered promiscuous mode
[  465.193959][T14714] veth1_macvtap: entered promiscuous mode
[  465.212028][T14714] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.224079][T14714] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.276456][ T9503] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.277674][ T9503] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.278949][ T9503] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.279060][ T9503] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.343545][T14756] veth0_vlan: entered promiscuous mode
[  465.351836][T14756] veth1_vlan: entered promiscuous mode
[  465.383411][T14756] veth0_macvtap: entered promiscuous mode
[  465.386046][T14756] veth1_macvtap: entered promiscuous mode
[  465.401721][T14950] loop0: detected capacity change from 0 to 8192
[  465.408827][T14756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.419270][T14756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.448456][ T9487] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.449122][ T9487] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.449411][ T9487] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.504040][T14965] loop2: detected capacity change from 0 to 128
[  465.506860][ T9503] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.561111][T14970] FAULT_INJECTION: forcing a failure.
[  465.561111][T14970] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.561161][T14970] CPU: 1 UID: 0 PID: 14970 Comm: syz.7.3559 Not tainted syzkaller #0 PREEMPT(lazy) 
[  465.561199][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  465.561226][T14970] Call Trace:
[  465.561236][T14970]  <TASK>
[  465.561246][T14970]  __dump_stack+0x1d/0x30
[  465.561280][T14970]  dump_stack_lvl+0x95/0xd0
[  465.561311][T14970]  dump_stack+0x15/0x1b
[  465.561384][T14970]  should_fail_ex+0x262/0x280
[  465.561418][T14970]  should_fail+0xb/0x20
[  465.561489][T14970]  should_fail_usercopy+0x1a/0x20
[  465.561593][T14970]  _copy_from_user+0x1c/0xb0
[  465.561628][T14970]  ___sys_sendmsg+0xc1/0x1e0
[  465.561688][T14970]  __x64_sys_sendmsg+0xd4/0x160
[  465.561717][T14970]  x64_sys_call+0x22ab/0x2550
[  465.561746][T14970]  do_syscall_64+0x112/0x360
[  465.561793][T14970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.561901][T14970] RIP: 0033:0x7feb7b0cf559
[  465.561918][T14970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.561940][T14970] RSP: 002b:00007feb79b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.561962][T14970] RAX: ffffffffffffffda RBX: 00007feb7b355fa0 RCX: 00007feb7b0cf559
[  465.562083][T14970] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003
[  465.562102][T14970] RBP: 00007feb79b27090 R08: 0000000000000000 R09: 0000000000000000
[  465.562230][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.562249][T14970] R13: 00007feb7b356038 R14: 00007feb7b355fa0 R15: 00007ffcb89ad218
[  465.562277][T14970]  </TASK>
[  465.564585][T14950] bio_check_eod: 32 callbacks suppressed
[  465.564604][T14950] syz.0.3555: attempt to access beyond end of device
[  465.564604][T14950] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  465.783812][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.809693][T14975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14975 comm=syz.7.3560
[  465.858141][T14977] ip_tables: iptables: counters copy to user failed while replacing table
[  465.871986][T14975] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3560'.
[  465.880693][T14974] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3534'.
[  465.985851][T14982] EXT4-fs: quotafile must be on filesystem root
[  466.005877][   T28] audit: type=1400 audit(1792840796.103:912): avc:  denied  { write } for  pid=14972 comm="syz.8.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  466.048847][T14982] rxe_eth0 speed is unknown, defaulting to 1000
[  466.087724][T14983] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.3561: corrupted in-inode xattr: invalid size in ea xattr
[  466.087836][T14983] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  466.088170][T14983] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.3561: couldn't read orphan inode 15 (err -117)
[  466.088211][T14983] loop5: lost filesystem error report for type 5 error -117
[  466.203381][T14983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.294654][T14992] FAULT_INJECTION: forcing a failure.
[  466.294654][T14992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.294693][T14992] CPU: 1 UID: 0 PID: 14992 Comm: syz.8.3564 Not tainted syzkaller #0 PREEMPT(lazy) 
[  466.294725][T14992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  466.294741][T14992] Call Trace:
[  466.294750][T14992]  <TASK>
[  466.294761][T14992]  __dump_stack+0x1d/0x30
[  466.294790][T14992]  dump_stack_lvl+0x95/0xd0
[  466.294827][T14992]  dump_stack+0x15/0x1b
[  466.294855][T14992]  should_fail_ex+0x262/0x280
[  466.294929][T14992]  should_fail+0xb/0x20
[  466.294968][T14992]  should_fail_usercopy+0x1a/0x20
[  466.295077][T14992]  _copy_from_user+0x1c/0xb0
[  466.295153][T14992]  ___sys_sendmsg+0xc1/0x1e0
[  466.295219][T14992]  __x64_sys_sendmsg+0xd4/0x160
[  466.295255][T14992]  x64_sys_call+0x22ab/0x2550
[  466.295333][T14992]  do_syscall_64+0x112/0x360
[  466.295382][T14992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.295464][T14992] RIP: 0033:0x7fc1eb6ff559
[  466.295485][T14992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.295512][T14992] RSP: 002b:00007fc1ea136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.295536][T14992] RAX: ffffffffffffffda RBX: 00007fc1eb986090 RCX: 00007fc1eb6ff559
[  466.295555][T14992] RDX: 0000000030048b88 RSI: 0000200000000500 RDI: 0000000000000003
[  466.295631][T14992] RBP: 00007fc1ea136090 R08: 0000000000000000 R09: 0000000000000000
[  466.295650][T14992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.295668][T14992] R13: 00007fc1eb986128 R14: 00007fc1eb986090 R15: 00007ffee3e447c8
[  466.295695][T14992]  </TASK>
[  466.562049][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.706360][T15007] set_capacity_and_notify: 2 callbacks suppressed
[  466.706381][T15007] loop2: detected capacity change from 0 to 512
[  466.733653][T15007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.733779][T15007] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.900443][T15003] loop5: detected capacity change from 0 to 1024
[  466.943305][T13328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.971607][T15003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  466.973087][T15003] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  466.986964][T15003] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  466.987057][T15003] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  467.027305][T15001] loop7: detected capacity change from 0 to 1024
[  467.079855][T15016] loop2: detected capacity change from 0 to 512
[  467.082614][T15001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  467.093991][T15001] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  467.094253][T15001] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  467.094337][T15001] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal
[  467.110737][T15016] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  467.205892][ T2980] ==================================================================
[  467.205930][ T2980] BUG: KCSAN: data-race in d_delete / step_into_slowpath
[  467.205966][ T2980] 
[  467.205975][ T2980] read-write to 0xffff88814809e6c0 of 4 bytes by task 12172 on cpu 0:
[  467.205999][ T2980]  d_delete+0x15a/0x180
[  467.206032][ T2980]  d_delete_notify+0x32/0x100
[  467.206071][ T2980]  vfs_unlink+0x287/0x490
[  467.206109][ T2980]  filename_unlinkat+0x1dc/0x410
[  467.206142][ T2980]  __se_sys_unlink+0x2b/0xe0
[  467.206173][ T2980]  __x64_sys_unlink+0x1f/0x30
[  467.206207][ T2980]  x64_sys_call+0x18ee/0x2550
[  467.206245][ T2980]  do_syscall_64+0x112/0x360
[  467.206285][ T2980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.206314][ T2980] 
[  467.206322][ T2980] read to 0xffff88814809e6c0 of 4 bytes by task 2980 on cpu 1:
[  467.206345][ T2980]  step_into_slowpath+0xea/0x4c0
[  467.206373][ T2980]  path_lookupat+0x2eb/0x4c0
[  467.206398][ T2980]  filename_lookup+0x18f/0x390
[  467.206425][ T2980]  do_readlinkat+0x74/0x2f0
[  467.206454][ T2980]  __x64_sys_readlink+0x47/0x60
[  467.206482][ T2980]  x64_sys_call+0x1d41/0x2550
[  467.206516][ T2980]  do_syscall_64+0x112/0x360
[  467.206551][ T2980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.206577][ T2980] 
[  467.206582][ T2980] value changed: 0x00300180 -> 0x00004080
[  467.206596][ T2980] 
[  467.206601][ T2980] Reported by Kernel Concurrency Sanitizer on:
[  467.206623][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  467.206656][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  467.206672][ T2980] ==================================================================
[  467.276355][T15001] loop7: detected capacity change from 0 to 736
[  467.385398][T15019] FAULT_INJECTION: forcing a failure.
[  467.385398][T15019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  467.385433][T15019] CPU: 1 UID: 0 PID: 15019 Comm: syz.0.3575 Not tainted syzkaller #0 PREEMPT(lazy) 
[  467.385467][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  467.385540][T15019] Call Trace:
[  467.385549][T15019]  <TASK>
[  467.385559][T15019]  __dump_stack+0x1d/0x30
[  467.385669][T15019]  dump_stack_lvl+0x95/0xd0
[  467.385698][T15019]  dump_stack+0x15/0x1b
[  467.385724][T15019]  should_fail_ex+0x262/0x280
[  467.385793][T15019]  should_fail+0xb/0x20
[  467.385866][T15019]  should_fail_usercopy+0x1a/0x20
[  467.385899][T15019]  _copy_from_iter+0xcc/0xe70
[  467.385929][T15019]  ? avc_has_perm+0x101/0x190
[  467.386023][T15019]  copy_page_from_iter+0x15d/0x1f0
[  467.386056][T15019]  tun_get_user+0x639/0x2970
[  467.386094][T15019]  ? ref_tracker_alloc+0x236/0x340
[  467.386134][T15019]  tun_chr_write_iter+0x15a/0x210
[  467.386165][T15019]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  467.386194][T15019]  vfs_write+0x57a/0x990
[  467.386270][T15019]  ksys_write+0xdc/0x1a0
[  467.386410][T15019]  __x64_sys_write+0x40/0x50
[  467.386443][T15019]  x64_sys_call+0x154e/0x2550
[  467.386475][T15019]  do_syscall_64+0x112/0x360
[  467.386523][T15019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.386550][T15019] RIP: 0033:0x7f015fe7fd8e
[  467.386617][T15019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  467.386675][T15019] RSP: 002b:00007f015e90efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  467.386701][T15019] RAX: ffffffffffffffda RBX: 00007f015e90f6c0 RCX: 00007f015fe7fd8e
[  467.386719][T15019] RDX: 000000000000008a RSI: 0000200000000200 RDI: 00000000000000c8
[  467.386733][T15019] RBP: 00007f015e90f090 R08: 0000000000000000 R09: 0000000000000000
[  467.386747][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.386769][T15019] R13: 00007f0160146038 R14: 00007f0160145fa0 R15: 00007ffedec34518
[  467.386796][T15019]  </TASK>
[  467.486607][T15003] loop5: detected capacity change from 0 to 736
[  468.024381][T15017] loop8: detected capacity change from 0 to 512
[  468.040517][T15017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.040743][T15017] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  468.655958][T14756] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.459173][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  474.459194][   T28] audit: type=1400 audit(1792840804.563:941): avc:  denied  { write } for  pid=15027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  474.502841][   T28] audit: type=1400 audit(1792840804.603:942): avc:  denied  { write } for  pid=15038 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  474.824771][   T28] audit: type=1400 audit(1792840804.923:943): avc:  denied  { write } for  pid=15041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  474.857988][   T28] audit: type=1400 audit(1792840804.963:944): avc:  denied  { write } for  pid=15052 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  474.962240][   T28] audit: type=1400 audit(1792840805.063:945): avc:  denied  { write } for  pid=15055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  474.996857][   T28] audit: type=1400 audit(1792840805.103:946): avc:  denied  { write } for  pid=15066 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.091986][   T28] audit: type=1400 audit(1792840805.193:947): avc:  denied  { write } for  pid=15069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  475.128577][   T28] audit: type=1400 audit(1792840805.233:948): avc:  denied  { write } for  pid=15080 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1