last executing test programs:

1m47.883705736s ago: executing program 2 (id=29):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300000000000000002e"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1m47.788010459s ago: executing program 2 (id=31):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x38e38e3, 0x44}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, <r0=>0x0}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89b1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)

1m47.75364488s ago: executing program 2 (id=33):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000002000000000000000000000000ac1e010100000000000000000000000000000000000000000a0000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff000000000000000000000000000000000000000000000000000000000000000031060000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000000000c06b6e00000000000000000084000500fc020000000000000000000000000001000004d36c00000002000000fc0100000000000000000000000000010000000004"], 0x13c}}, 0x2c000010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r1, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m47.633668394s ago: executing program 2 (id=34):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000780)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x77b2}}, {@grpquota}]}, 0x1, 0x530, &(0x7f0000000d00)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x14, 0x4, 0x4, 0xfffffff8}, 0x50)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0x0, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9})
syz_clone(0x800000, &(0x7f0000000240)="649d1ce3b1bdbc48f42fb56084679cc21bdf3ea03f80dce1", 0x18, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000400)="a04d3348d4a3e6c94b090f5ea664e13ce18238c5e4")
r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000a72f3a8ed40000020000000000de1f000000010500010020660deb05a0b933b4c36dfc11c60f312af192fe0d688e45552adcdb88606a36b1fdf6dcf2668ecb2cb5a2cda928b060c4b0780a6f8ef845c0d3de1c85155a36330bc8eefe56fb956363c199433214d0e1fa17a28920abcd856382f3f0358e40c62b15515183581aaf3e83e43d35ce5f2df557a1f5b46af8d8bfc1d45b10a2d4b61d7d3c834967b657b40f8bf5d81d338826904a62a98a8e910adb4107097152d6717c7ca4867e0297e1ae1377036a0cb52388"], 0x0, 0x2a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x7, 0x86, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb41001800"], 0x0, 0x32, 0x0, 0x9}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001000), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
inotify_add_watch(r1, &(0x7f0000000080)='./bus\x00', 0x1000011)

1m45.760061545s ago: executing program 2 (id=37):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x1d}, 0x319, 0x1, 0x1, 0x2, 0x8001, 0x1b}, 0x20)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = socket$kcm(0x10, 0xe0ef3001cdc8b4da, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x735b, &(0x7f0000000040)={0x0, 0xb163, 0xc000, 0x8, 0xc1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4041)
io_uring_setup(0x779, &(0x7f0000000040)={0x0, 0xe8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x4899, &(0x7f0000000040)={0x0, 0x3b38, 0x2000, 0xa, 0xa0002f7})
mkdir(&(0x7f0000001540)='./file1\x00', 0x1df)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989c46, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x1150fe, 0xa0)
io_setup(0x42, &(0x7f0000001400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0xffffffffffffffff])
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
r2 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000014c0)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000001440)=""/100, 0x64}, {&(0x7f0000000240)=""/125, 0x7d}], 0x3, &(0x7f0000001ac0)=""/4088, 0xff8}, 0x140)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x5e, @loopback, 0x4e21, 0x3, 'fo\x00', 0x5, 0x10000004, 0x7}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x0, 0x4e7, &(0x7f0000000540)="$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")
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'sh\x00', 0x23, 0x2, 0x5}, {@empty, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0xffffff34}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x73, @private=0xa010101, 0x4e24, 0x6, 'nq\x00', 0x8, 0x323b, 0x4f}, {@multicast2, 0x4e1f, 0x10000, 0x0, 0x12d5c, 0x12d50}}, 0x44)
socket$inet_tcp(0x2, 0x1, 0x0)

1m45.045597678s ago: executing program 4 (id=39):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x40)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r3, 0x4000, r5}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0})
r7 = socket$inet6(0xa, 0x5, 0x7)
sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x9000000, &(0x7f00008b5000/0x1000)=nil)
r8 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil)
shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280000000000)
recvfrom$inet6(r6, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x1f}, 0x1c)

1m42.864286599s ago: executing program 2 (id=43):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xbe, 0x0, 0x24af, 0x7fff, 0xb2, "fe6fa820010000040000000000000000ab1400", 0x7f, 0x4})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r4)
fchown(r3, 0x0, 0xee01)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)

1m42.8388207s ago: executing program 32 (id=43):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xbe, 0x0, 0x24af, 0x7fff, 0xb2, "fe6fa820010000040000000000000000ab1400", 0x7f, 0x4})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r4)
fchown(r3, 0x0, 0xee01)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)

1m41.622468309s ago: executing program 4 (id=48):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x9}], 0x2, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)="9235fd3fe46754e8472f9e4c2706d2")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x48081}, 0x800)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sync_file_range(r5, 0x3, 0x74, 0xa371c77ea91149d1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
fchdir(0xffffffffffffffff)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)='\x00')
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000080)=0x10, 0x4)
sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r9, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc01000019000100fdffffffffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000080000000000000000000000000000000fcffffff000000000000000000000000440105b1ea000000000000000000000000000004000000003c0000000000000000000000000000000000000000000000023500000002000000e57feff499f7ef65fd540000000000000000000000fe8000000000000000000000000000bb"], 0x1fc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800)
inotify_init1(0x80000)

1m40.551244284s ago: executing program 4 (id=55):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xbe, 0x0, 0x24af, 0x7fff, 0xb2, "fe6fa820010000040000000000000000ab1400", 0x7f, 0x4})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
fchown(r1, 0x0, 0xee01)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)

1m40.447453838s ago: executing program 4 (id=56):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000780)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0x77b2}}, {@grpquota}]}, 0x1, 0x530, &(0x7f0000000d00)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x14, 0x4, 0x4, 0xfffffff8}, 0x50)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0x0, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9})
syz_clone(0x800000, &(0x7f0000000240)="649d1ce3b1bdbc48f42fb56084679cc21bdf3ea03f80dce1", 0x18, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000400)="a04d3348d4a3e6c94b090f5ea664e13ce18238c5e4")
r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000a72f3a8ed40000020000000000de1f000000010500010020660deb05a0b933b4c36dfc11c60f312af192fe0d688e45552adcdb88606a36b1fdf6dcf2668ecb2cb5a2cda928b060c4b0780a6f8ef845c0d3de1c85155a36330bc8eefe56fb956363c199433214d0e1fa17a28920abcd856382f3f0358e40c62b15515183581aaf3e83e43d35ce5f2df557a1f5b46af8d8bfc1d45b10a2d4b61d7d3c834967b657b40f8bf5d81d338826904a62a98a8e910adb4107097152d6717c7ca4867e0297e1ae1377036a0cb52388"], 0x0, 0x2a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x7, 0x86, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb41001800"], 0x0, 0x32, 0x0, 0x9}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001000), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
inotify_add_watch(r1, &(0x7f0000000080)='./bus\x00', 0x1000011)

1m40.185812876s ago: executing program 4 (id=58):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x1d}, 0x319, 0x1, 0x1, 0x2, 0x8001, 0x1b}, 0x20)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = socket$kcm(0x10, 0xe0ef3001cdc8b4da, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x735b, &(0x7f0000000040)={0x0, 0xb163, 0xc000, 0x8, 0xc1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4041)
io_uring_setup(0x779, &(0x7f0000000040)={0x0, 0xe8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x4899, &(0x7f0000000040)={0x0, 0x3b38, 0x2000, 0xa, 0xa0002f7})
mkdir(&(0x7f0000001540)='./file1\x00', 0x1df)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989c46, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x1150fe, 0xa0)
io_setup(0x42, &(0x7f0000001400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[0xffffffffffffffff])
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
r2 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000014c0)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000001440)=""/100, 0x64}, {&(0x7f0000000240)=""/125, 0x7d}], 0x3, &(0x7f0000001ac0)=""/4088, 0xff8}, 0x140)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x5e, @loopback, 0x4e21, 0x3, 'fo\x00', 0x5, 0x10000004, 0x7}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsold}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x0, 0x4e7, &(0x7f0000000540)="$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")
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'sh\x00', 0x23, 0x2, 0x5}, {@empty, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0xffffff34}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x73, @private=0xa010101, 0x4e24, 0x6, 'nq\x00', 0x8, 0x323b, 0x4f}, {@multicast2, 0x4e1f, 0x10000, 0x0, 0x12d5c, 0x12d50}}, 0x44)
socket$inet_tcp(0x2, 0x1, 0x0)

1m39.775881889s ago: executing program 4 (id=60):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32=r1, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x103301)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000004dc0)=0x1000)

1m39.632531464s ago: executing program 33 (id=60):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32=r1, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x103301)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000004dc0)=0x1000)

42.16962156s ago: executing program 1 (id=482):
epoll_create1(0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000ff170100000000000000000008000300000000000800", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x10)

42.082782403s ago: executing program 1 (id=484):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x20000000, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)

42.082168463s ago: executing program 1 (id=486):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000", 0x24}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b33", 0x2}], 0x3}, 0x0)

42.048224634s ago: executing program 1 (id=487):
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x420002, 0x118)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x8000000, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0)
ftruncate(r1, 0x4a8e)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setns(0xffffffffffffffff, 0x24020000)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) (fail_nth: 5)

41.787250443s ago: executing program 1 (id=488):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfff0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x40040)

41.439521584s ago: executing program 1 (id=498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x400, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0xf0ffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x48, &(0x7f0000000000), 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05411b04000000000000000000", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251b00000008009a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x48000)
perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x2}, 0x4}}, 0x18)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_hsr\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
close(r5)

41.377551906s ago: executing program 34 (id=498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x400, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0xf0ffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x48, &(0x7f0000000000), 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05411b04000000000000000000", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251b00000008009a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, 0x0, 0x48000)
perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x2}, 0x4}}, 0x18)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_hsr\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
close(r5)

3.471684696s ago: executing program 0 (id=838):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000000c0)="4c83", 0x2, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a0, r5, 0x1, 0x85, 0x6, @broadcast}, 0x14)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xfe33)
syz_emit_ethernet(0xaf, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70a22c61", @ANYRES16=0x0, @ANYBLOB="01052abd7000ffdbdf250c00000008000100000000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000000c000600030000000300000008000100000000000c000600000000000000000008000b0005000000"], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(r0, 0x5, 0x0)
poll(0x0, 0x0, 0xa)

2.356921633s ago: executing program 0 (id=853):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r0, 0x0)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ipvlan0\x00', 0x10)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
r2 = syz_open_procfs(0x0, 0x0)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000300)=""/202, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="16", 0xffe3}], 0x1}}], 0x1, 0x4000800)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.329953384s ago: executing program 5 (id=855):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = socket(0x400000000010, 0x3, 0x0)
getsockopt$netlink(r4, 0x10e, 0x5, 0x0, &(0x7f0000000080))
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r2, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x5a)
syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r8, 0x25, 0x0, @void}, 0x10)
r9 = socket(0x10, 0x803, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100c5dc2f"], 0xdd12}], 0x1}, 0x20040890)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r5)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a0104000000000000000001000000589e66467e49290208000a40000073797a32000000000900010073797a3000000000085e094f96e993bcffef05f7fa2c0005400000001f080003400000000714000000020a010200000000000000000000000914000000100001000000000000"], 0xa0}}, 0x40000)

2.306341515s ago: executing program 0 (id=856):
socket$kcm(0xa, 0x3, 0x87)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r2], 0xfdef)

2.091832822s ago: executing program 0 (id=859):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0xa, 0x1000, 0xff, 0x4}, {0x5, 0x1, 0x2, 0x1, 0x101}, 0xffff, 0x3, 0x11fb}}, @TCA_TBF_BURST={0x8, 0x6, 0xfffffffc}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r3, 0x420, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000000, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}}, 0x20000010)

1.736899293s ago: executing program 0 (id=863):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
r4 = syz_pidfd_open(r2, 0x0)
setns(r4, 0x24020000)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x1, 0xf7, 0x20000}, 0x20)

1.493160761s ago: executing program 0 (id=864):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000000c0)="4c83", 0x2, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a0, r5, 0x1, 0x85, 0x6, @broadcast}, 0x14)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xfe33)
syz_emit_ethernet(0xaf, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70a22c61", @ANYRES16=0x0, @ANYBLOB="01052abd7000ffdbdf250c00000008000100000000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000000c000600030000000300000008000100000000000c000600000000000000000008000b0005000000"], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(r0, 0x5, 0x0)
poll(0x0, 0x0, 0xa)

1.401430944s ago: executing program 7 (id=866):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000", 0x24}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b33", 0x2}], 0x3}, 0x0)

1.345290306s ago: executing program 3 (id=867):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, r0, 0x0)
unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00')
perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ipvlan0\x00', 0x10)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
r2 = syz_open_procfs(0x0, 0x0)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000300)=""/202, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4)
sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000040)="16", 0xffe3}], 0x1}}], 0x1, 0x4000800)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.344519216s ago: executing program 7 (id=868):
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite64(r3, &(0x7f0000000ac0), 0x0, 0x1a)
r4 = msgget$private(0x0, 0x0)
msgsnd(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="010000"], 0xfc, 0x800)
msgrcv(r4, 0x0, 0x0, 0x969edffe39095fd4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r7, 0x0, 0x20040040)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r8, &(0x7f0000004200)='t', 0x1)

1.324810366s ago: executing program 5 (id=869):
socket$kcm(0xa, 0x3, 0x87)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64], 0xfdef)

1.281331568s ago: executing program 3 (id=870):
ptrace(0x10, 0x0)
syz_io_uring_setup(0x3b04, &(0x7f0000000780)={0x0, 0x20000565, 0x20000, 0x2, 0x153}, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES16=r0], 0x248}}, 0x20040888)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0xc01070ce, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x358, 0xffffffff)
ptrace$pokeuser(0x6, 0x0, 0x680000000000, 0xfffffffffffffffc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x6, 0x89, 0x0, 0xffb, 0xa, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x7, 0x100000, 0x400009, 0x3, 0x5, 0x10, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x0, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0xc, 0x4, 0x7, 0x8, 0x0, 0x4, 0x100006, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffdfffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x5, 0x0, 0x8, 0x100, 0x8, 0x252, 0x8, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x100002a2, 0xfffffffd, 0x3, 0x2, 0x5, 0xe, 0x100, 0x4, 0x1, 0x10040, 0x80008, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x15, 0x5, 0x0)
recvfrom$inet(r2, 0x0, 0x0, 0x2061, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
r3 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x6)
mq_notify(r4, &(0x7f0000000640)={0x0, 0x2e, 0x1, @thr={&(0x7f00000000c0)="712f96a483fe6bdbba35a2204a20db554c2f5dd07600e03c2da6923d0231c273a0e757f8f1b9900597dd4c864abd075f4db7a5cdeb0fbc6fedfdc5f454a8b72d66a6717b52ea95e6f790665ed63455a61a5d8b7a16af", &(0x7f0000000540)="c824da667f8f9161a4e36c7916f9798cc13160b9f0b0f34df4e89e3d174f2df25ab6f088ea49451a71d880d3db250d65ad8a07917c9a7c6cf872abc171b7be1441e61797d7c0b1b37c0475d3135e11cd6c3a18bf1b0160bb8207b31e3866dcb8bae46d8592150307e68e6a01b5c96d26e996e98746d2ebb08ba427d357256bdd929bdf2045efcd6b5bdfa0ae2659c6c42954131519d7c252f480cfe203a1d85944844085e07915c6bbeebdb0852a4d220d3ad9c76e48f0c129d13e5367a535e59ff04c75732a4709930041951687850a5af905d19c67e81b34a683fb31a8c3f926523d84c5a2f9e32e71c063c16c"}})

1.236219029s ago: executing program 6 (id=871):
syz_emit_ethernet(0x7e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa020000000000000000000000000190780a010111ac1414aa0b009078032c000045000000000000000089000000000000ac1414aa862a00000002000d5e0002000002000000000000054eb8a600129606053d0006ff003a0800b61af93a93830f00ac1414267f0000017f00000144040000000000cbf31f72c32c7759e26b9cd2a83de870ecb3a1f1dc10f5e57d02708755245895782a0054215befb37dac18df5d9a450d441ff46400f9907dd1d2b2f2"], 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000300), 0x0)
munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x112})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@noblock_validity}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x46b, &(0x7f00000006c0)="$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")
chdir(&(0x7f0000000180)='./file0\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000002, 0x0, 0x6, 0x5})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x41)
getdents64(r5, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601030000000000000000070000000900020073797a31000000000500040000000000050005000a000000fcff00000700000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0xcc000)
sendmsg$IEEE802154_START_REQ(r2, 0x0, 0x8008000)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x42, 0xa5)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040)
execve(&(0x7f0000000300)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

1.20535815s ago: executing program 5 (id=872):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x9, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050002000300000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000200900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c0000800800034000000002"], 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x3, r3}, 0xc)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(r4, 0x891d, &(0x7f0000001600)={'veth0_to_bridge\x00', @ifru_flags=0x1})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000100), 0x120)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000, 0x1}, 0x80, 0x0}, 0x24044051)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000050000000800000043000f2670dc913e0200e4fd000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', r3, 0xc5cb859da6d5c2b8, 0x40, 0x8001, 0x8, {{0x21, 0x4, 0x0, 0x2c, 0x84, 0x65, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0xca, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x101}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@private=0xa010100, 0x4}, {@remote, 0x9}, {@multicast1, 0x3}, {@multicast1, 0x2}, {@broadcast, 0x200}]}, @ssrr={0x89, 0x7, 0x12, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0xb0, [@multicast2, @empty, @rand_addr=0x2, @local, @multicast2, @loopback]}, @generic={0x86, 0x7, 'kT\t$^'}]}}}}})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRES8=r1, @ANYRES32=r2, @ANYRES16=r0, @ANYRESOCT=r1], 0x20}}, 0x0)

1.091784694s ago: executing program 7 (id=873):
setpriority(0x0, 0x1, 0xa7a8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
unshare(0x22020600)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @rand_addr=' \x01\x00', 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1474e2b5a6fd8d57066f50230a2a04000000100001000000050e4c77035ca35ea98d0000000000000a00000a20000000000a050000e5000000000000070000000900010073797a300000000048000000090a010400a64fe5925f95dad24c2cf3f800000000000000070028710900010073797a30000000000c0009800800014060000002080005400000000408000a40000000010900020073797a31000000001400000010000100"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = dup2(r5, r5)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r8 = fcntl$dupfd(r7, 0x406, r7)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000480)={0x8, 0x2, {0x0, 0x0, 0xa, 0x3, 0xf}})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fab2a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e9900000c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r10 = fcntl$dupfd(r9, 0x0, r9)
write$tun(r10, &(0x7f0000001b40)=ANY=[@ANYBLOB="635a0b42004c060000000000000000000000000000000000ff0100000000000000000000000000010002040100507302ff0100000000000000000000000000013b000000000000000000000000000000240000000000000002000000010000000400000001"], 0x74)
write$sndseq(r8, &(0x7f0000000240)=[{0x8, 0x7, 0xc, 0xfb, @time={0x7fffffff, 0x6}, {0x4, 0x2}, {0x8, 0x1}, @ext={0x70, &(0x7f00000001c0)="1b4f65e1ed606686a1aa0a47e32abe7fcdef54f4344b7fd77a4343efde9fdc12d6d4bff889d5d86f602278c5fade88fe7fdce75d31906fcbac2a194e5429142c0f47002e7d7e4216140ad3489c95f06b491568f2d55aa83490f3b4cf9f0b6f820d41e37e179e41721693ea0a0c5128fe"}}], 0x1c)

843.629572ms ago: executing program 3 (id=874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x9}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8804)
clock_getres(0x7, &(0x7f0000000080))

800.144724ms ago: executing program 3 (id=875):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20040}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x2ee})
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0})
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x26, 0x0, @val=@netfilter={0x5, 0x1, 0xffff}}, 0x20)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)

711.823906ms ago: executing program 6 (id=876):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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")
open(&(0x7f00000004c0)='./file1\x00', 0x66b40, 0x29)

633.914519ms ago: executing program 6 (id=877):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

565.905461ms ago: executing program 3 (id=878):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000", 0x24}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b33", 0x2}], 0x3}, 0x0)

484.095704ms ago: executing program 3 (id=879):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0, <r1=>0xffffffffffffffff}, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1317}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11)
close(0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
r4 = syz_ublk_setup_io_uring(0x8000, &(0x7f0000003580)={0x0, 0xec2e, 0x100, 0x3, 0x1d4}, &(0x7f0000003600), &(0x7f0000003640), &(0x7f0000003680))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009, 0x10, r4, 0x8000000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(r4, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket(0x18, 0x800, 0x3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pause()
socket$nl_route(0x10, 0x3, 0x0)

454.306565ms ago: executing program 6 (id=880):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)

417.798136ms ago: executing program 6 (id=881):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000a2100000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000", 0x24}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b33", 0x2}], 0x3}, 0x0)

389.292097ms ago: executing program 6 (id=882):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendto$unix(r0, &(0x7f00000002c0)='\v:', 0xfffffcd3, 0x40000095, 0x0, 0xfffffe86)
open(&(0x7f0000000100)='./file1\x00', 0x76b42, 0x29)

275.730471ms ago: executing program 5 (id=883):
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'})

274.31242ms ago: executing program 7 (id=884):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8ec64838cf3a91c0, 0x24, &(0x7f0000000000)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40c}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @alu={0x4, 0x0, 0xd, 0x7, 0x7, 0x40, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x2, 0x7, 0x8, 0xd, 0xa}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xa2, &(0x7f0000000180)=""/162, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3, 0x4f, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0x5, 0x9}, {0x3, 0x2, 0x9, 0x6}, {0x5, 0x2, 0xd, 0xa}], 0x10, 0x5}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x2, &(0x7f0000000480)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000004c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x7fffffff, 0x2bd}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x3, 0x9, 0xb}, {0x4, 0x5, 0x10, 0xb}, {0x5, 0x1, 0xf, 0xe}, {0x2, 0x5, 0x2, 0x9}, {0x1, 0x5, 0x9, 0x7}, {0x0, 0x1, 0x5, 0x2}, {0x3, 0x3, 0xb, 0x6}, {0x2, 0x1, 0x7, 0xa}, {0x3, 0x2, 0x6, 0x8}], 0x10, 0xada}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup=r2, r0, 0x37, 0x8, r1, @void, @value=r3}, 0x20)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000740)={0x10, 0x0, "6c79026f58cac4d8a4770cad74729fb7"})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x80010, 0xffffffffffffffff, 0x78ddb000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8050}, 0x20044002)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000940)={'vxcan0\x00'})
r5 = openat$cgroup_ro(r2, &(0x7f0000000980)='cpuacct.usage_percpu\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000009c0)={'\x00', 0x401, 0x0, 0x3, 0x3, 0x19, <r6=>0x0})
ptrace$cont(0x7, r6, 0x8, 0x3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000ac0)=""/189, &(0x7f0000000b80)=0xbd)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000bc0)=[@sack_perm, @timestamp, @sack_perm], 0x3)
r8 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r8, &(0x7f0000000c00)={0xa, 0x4e24, 0x654fd8df, @local, 0xa}, 0x1c)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000c40)={0x1, 0x9, 0xd91, 0xa6, 0xf, "02d166ab2ca7490eb6f4e6eaad93363371025b"})
setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000c80)=0x4, 0x4)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000026c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002680)={&(0x7f0000000d00)={0x1980, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6a4, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x37c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x3e, 0x6, 0x1, 0x0, "bc7839a5074334e919e2f567ac08a9f0edd656e889de877043d565bdbdff59a824a676f3efade9adf12dceccf72a48678cd700d408c43e433df7"}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4b, 0x1, "3d284d83458880c83cf8335cd51c327d6058650051fc3ff9040327caf82896931c2c70bf768810d793eee03ab7052e37add8cdc00a4d953b5a75763587bd3cf4b3719a7c88fb56"}, @NFTA_DATA_VALUE={0x2e, 0x1, "72c1f62fdc7dcc1e322ed68f87e06c09055e6264f367a9644d44aa7d31088948f6982f4cb2397c4031ff"}, @NFTA_DATA_VALUE={0xf0, 0x1, "066a6c31486fcf0ea83f85d3c6fa8bc9d49777a813d18867f2cfcbe9c1a3855594851e15f1c1407ff104124620833c859fc27784f5e2183ce2db1697bce69abdd48ea242c3975d4b858baaebd2766713f5014dc77ad80be681479b0fcc80f85066a4ec27d197c4add160b68cd72da76d38a2ab53f50c45779449bea0426bfb18cece1ed3d258ce561b59ddcbfa045307809567331e4ef8d6a80a089fea1896c26201069b9cae01dbdc7ae0216f73a442535f8cf48a348e9d2cbd897c8209f643e16661572faa98fb921ea53de6333d5d2286f2a27f30ea566942d47b3d717f5f34540071e7ad74c70dd6a87d"}, @NFTA_DATA_VALUE={0x20, 0x1, "5eb64f7cc663a813d4d69d1eefb8fe85af08172f7eee02a973feee6f"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "9eea767f44d4762d23908b8bbc320edea62a1b1e3871a38f750ce3ba8300bb93bf13b98f0ea169bd2c3d4cb888fc92a779d5c3f9cf0d3b6282e2f08aff6f4bf3c187b03958ee247a36"}, @NFTA_DATA_VALUE={0xe3, 0x1, "6fcc4c66fad580e4381d3c8f5a8c5674ad515dd0b9663660f4e9dc3889477f054a957b916ac31bf0027573d7317eccae9a479b91b1b459d6e8fe700607dbaca4f5057695f4398a260ff24e7380a7c3b6d7d6f5e6353388d6d739cc843d03e97524f77175c63e3b48b3822c0b74201a81648573c269bc9e8be8903678589aebac338d0ddf483f4207c128753056177e29855d60bf627face472376f628a6240b7888374435cab0c5ac5cd150b1314daa738980e8be1855a359b80ebb40f20c565a99e326f94953596b6ad15949ed1ddb54b6345ed93a32e53bbcc57e8f95240"}]}]}, {0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "4d5107d8c4daebe7284a1f493759d621e8c4bfb5ac1e0cfdfc29ccac1bb85b488d62336fd2cbea297be91cb28219f76869be6b320aeb6edfef5d8c00c4b9c7c2dba34bffaf9e0c21d6c5f8fa32ed293efe8fbece24d089042cb49d193e5ce66f6b96db63613919d68851af6bc155ff0c0be2058b7acaacdf1c0436a8380a9b4eefa1cb39e602f618dbe7486d2b840dbe34adf8bea359aee2"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "a979b3928f084d9671b1f7242883f05b0236926c094eb66381837faf3a90f6f5bb6c96bdbe12e8eafd2e150ee006d944eccbcaa77d4f1c5ca6cb0ce3f68672cc3e4ae38dcb8507b9ec969e53aba1ccfcdcf23b78995471d6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "2134d3afc661e9534f7f31f9f693220c5d0181b6f499a0a05ac9729eb971a28d5ebd9eaa08b74b89c1ba7907d177aa6fe4cae09c5af2b467b5c19d4e3da5078e05bf0e51646cbe98fab69f8bc756d7ac285a1e8cbe4a350cb41525db820dc9bdfe6e358d611984e2a56c0527cf2bed"}, @NFTA_DATA_VALUE={0x44, 0x1, "494060a0cef7a944200c5cf4451dbacc83518e96f285b0a1772ef6ac8e7889736816e19c3d36d9fefa0e1ba1218121ab742ed985c73f0d219dee429bfe23c1ed"}]}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x42}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1274, 0x3, 0x0, 0x1, [{0x1258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x1048, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "7cea0206ca04b1430114244ce8b370b7f35d919246fc3a16712662a903dd8d872c0b9c0064f9cec8155c4ac047ff573e782e38a2710b8ac47e48049151b1eba8263a2906725ee0f8b6b7c667a7756f5ef53109af10c086df99ee782fa29ffe2c4c32161f0af223a44a5f0c9231527a044f57810cc22b0fd0168d3344c48d58dc77462e758a9d3aa2d31e4360db2b6d85ccae4d1d8184219d7184b17dd87d0ad70a545b711cdf3e5834f87d9e843d328c9ecde54447"}, @NFTA_DATA_VALUE={0x45, 0x1, "d354c3a137258b9ae648db205ad26999e6fc384428389c3c8d4c04d87cc32b2ff578b37d5393e7a76f07178fa79b362914b43d6a135930dd099a7aaa8b1d5505ed"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xa, 0x1, "fb598f9f52cc"}]}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "803b5aae5112be3b1c85c20c5b3d573962ef93a99b375ce2d3466e"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd0000000}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfcf9}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1980}, 0x1, 0x0, 0x0, 0x4040850}, 0x6400c000)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000002700)={0x9, "a0b8ec7a26ba8faf87573d9b3aef87c84929d9921bd98ab6995713d32b16236e03681b33f4ff7188da021a79365aee5ffc24bd4293e6d999c4fa5c4d9f8700e2e98cf1f9ce7c3d6519708de88190d6f4126f5a76f213bfc93efcaad1cc0b2dd5b8b42f4a8877940ddedc6f09ff1c13f9e2cc9d23b313e6ebf344083acb864a3791d418e1cf94d3ca64d6a636c1a30b8bef16a7437909d3e45d898d97a2e032ebe89e432b95acc625c2e9d7ac209a28d37b5fae94aca2dff21f2c7ceaf688e26a91399323ef61dd0b1b688a46f28ffa147dba69f23e32bf2f400da347ecfc19433225fbf84b412fba2dbe813acaf1b7467c28d48b6411b83eac4cf2217552a20b91e9c0bf143165bf9721095e2dc6a3c6cf223c0e17973e412c60d447734444e339660918ea4fd108541d944560cae408b24b155e9a43f5b25b2ec6bcb15ce5884644ffde9c6650727fc133a176d7233d703690c97691a86d5b92230a3b15787d631a86e91d8d49e8ddf23915e5263b0bde522ed9d6a6cd9afb5d73f3b909ae5b6b238c8829ae6d768b4511d20fe7f48da7ae19800f50cf2d78b5e96571de29ce984b53ff7ddcf9668ef8c0ea7a7627a0e8f4f45195f52216e16699f35fdd796fbdb2a85e40cdc79f669343864a2b13ec7ec1c426e29678cbfee1733af4ededcac0871d019fc1e545df4a28586d3ce5538d8ef292622743d19181a0a33464cba5"})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000002940)={0xf13, 0x2, 0x1})
ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000002980)=""/32)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000029c0)={@any, 0x1})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0x9c, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdef2}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0x2004004c)
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000002bc0))

273.733331ms ago: executing program 5 (id=885):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
prctl$PR_CAPBSET_DROP(0x18, 0x23)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$selinux_access(r3, &(0x7f0000000140)={'system_u:object_r:init_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x800}, 0x64)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0xfffffffffffffc78}, 0x80b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7000000}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
socket(0x2, 0x80805, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffeec}, 0x80, 0x0}, 0x4)
shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x9, 0x20002f7})
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/softnet_stat\x00')
read$eventfd(r6, &(0x7f0000000000), 0x8)
lseek(r6, 0xfffd, 0x0)
ptrace$pokeuser(0x6, r0, 0x7fff, 0x8)

223.336613ms ago: executing program 7 (id=886):
unshare(0x8000000)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES32, @ANYRES16=r1, @ANYRES64=r1], 0xc8}, 0x1, 0x0, 0x0, 0x200540c0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdf, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYRES8=r2], 0xbc}, 0x1, 0x0, 0x0, 0x4040850}, 0x24000840)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xd, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0)
mknod$loop(0x0, 0x100000000000600d, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000a40)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0x3, 0x4}, 0x1c)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xc5, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x87, 0x3a, 0x0, @mcast1, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x8, {0x0, 0x6, "8bb99d", 0x0, 0x11, 0x0, @local, @remote, [], "62cffaa3ef048558018cb01fcd5364fd0c1a76f1b93032ac7f41d0884acffda3d1f2650a74afdc04ea01785fb9dcf039e0fd03f4cd19944674ffbadbcf11867184e125312b4784491dfa83fe406abfbdd8054bad9d46c4"}}}}}}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={0x0, 0xffffffffffffffd1}, 0x1, 0x0, 0x0, 0x4045}, 0x7731c40f536f2b73)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b0013000000080003000300000008"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="010100000000000000000000000000b926a301cf9a12e7083d16ea4307ed5becda75f1eea9d004aa2c56c0f254798d7c2deb8da942d6394ee098dbe46b745810", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r9 = semget$private(0x0, 0x4000, 0x0)
r10 = semget$private(0x0, 0x2, 0x102)
semop(r10, &(0x7f0000000000)=[{0x3, 0x40, 0x1000}], 0x1)
semtimedop(r9, &(0x7f0000000040)=[{0x2, 0x42, 0x1000}], 0x1, 0x0)
unshare(0x8000000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)

110.830056ms ago: executing program 5 (id=887):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x3ffff)
sendfile(r4, r3, 0x0, 0x7ffff000)

0s ago: executing program 7 (id=888):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000600)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x315, &(0x7f00000000c0)="$eJzs3M9LG2kYwPEnMYkxopPDsssuLL7sXnYvg2bvy4ZFYdnAimtKf0DpaCZtyDSRTLCklKqnXnoo/SN6EI/ehNZ/wEtvPfXSm5dCD/VQOmV+JVGTamNiav1+QOYh7/vMvG9eE553ILN/9cndctHWi0ZdokklERGRA5G0RCUUCY5RL05Iu3X5ffzdq5//v3b932wuN7ug1Fx28Y+MUmpy6vm9B2NBt51R2Uvf3H+bebP3/d6P+x8X75RsVbJVpVpXhlqqvq4bS5apCiW7rCs1b5mGbapSxTZrbntUnDURy1RFq7qy0lBGpTCRWqmZtq2MSkOVzYaqV1W91lDGbaNUUbquq4mU4CT5zYUFI9tj8nKfB4MBqdWyxoiIjB1ryW8OZUAAAGCogvq/We1H3ZK+l/o/1rH+3/pltz5+ZXsyqP93Em79L9JW/99qnctUhWiz/k+KSFj/L1Wr/v6g3/X/8YroYnt8eHHEcZpholP/M9X/uCDc+j8VfH49Gze2pr2A+h8AAAAAAAAAAAAAAAAAAAAAgIvgwHE0x3E0/zgSvOpooyKS9H5B4rcPeZgYkMPr3/pj/S+H1oM7YpMi1qPV/GrePwYddkXEElOmRZMP3v9DwI0T68rrpFxpeWGtBflrq3n/uyRblJKXPyOapI/mO87cP7nZGeU7nB+XVHt+RjT5rnN+5mh+3D0m5Ldf2/J10eTlslTFkkLwy7gw/+GMUn//lzty/TGvHwAAAAAA3wJdNTX376Pt7frxdn9/7Lf7++uYdL4/4O+vpzvu72PyU2xYswYAAAAA4HKxG/fLhmWZtQEFGyIy4Et0CcIZnjYrfEBulz4RiXRr6kMQXry3dHdsfRtP/FTvWLSnoU4lvnBROgbhbaNufWS+lzM7mshZ38Mfnj57//k+/p0xkdOc8M/t5Akz7TVInDTT+Ll9AQEAAAA4N62iP3zlr+EOCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAS+g8HsU37DkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX4tPAQAA//8IYf9z")
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x42, 0x12)
fallocate(r1, 0x0, 0x1, 0x8ffff)

kernel console output (not intermixed with test programs):

000 R09: 0000000000000000
[   89.681624][ T5052] R10: 0000000004008080 R11: 0000000000000246 R12: 0000000000000001
[   89.681634][ T5052] R13: 00007f68c6d46038 R14: 00007f68c6d45fa0 R15: 00007fffd54110b8
[   89.681650][ T5052]  </TASK>
[   89.682287][ T5050] netlink: 'syz.5.355': attribute type 4 has an invalid length.
[   90.730340][ T5063] loop6: detected capacity change from 0 to 256
[   90.743679][ T5064] netlink: 100 bytes leftover after parsing attributes in process `syz.3.359'.
[   90.756052][ T5063] vfat: Unknown parameter 'check.relaxed'
[   90.768127][ T5046] can0 (unregistered): slcan off ttyS3.
[   90.791913][ T5050] netlink: 104 bytes leftover after parsing attributes in process `syz.5.355'.
[   90.989924][ T5069] syzkaller0: entered promiscuous mode
[   91.010479][ T5069] syzkaller0: entered allmulticast mode
[   91.040957][ T5071] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   91.139494][ T5076] sg_write: data in/out 3173450/65033 bytes for SCSI command 0x0-- guessing data in;
[   91.139494][ T5076]    program syz.6.362 not setting count and/or reply_len properly
[   91.174707][ T5078] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.364'.
[   91.261064][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.366'.
[   91.315899][   T28] audit: type=1400 audit(1781771161.476:734): avc:  denied  { read } for  pid=5081 comm="syz.5.366" name="usbmon3" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   91.507537][ T5093] can0: slcan on ttyS3.
[   91.601535][ T5093] can0 (unregistered): slcan off ttyS3.
[   91.607752][ T5086] loop6: detected capacity change from 0 to 32768
[   91.646737][   T28] audit: type=1400 audit(1781771161.806:735): avc:  denied  { write } for  pid=5097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.679626][ T5086]  loop6: p1 p3 < p5 p6 > p4 < p7 p8 p9 >
[   91.692686][ T5086] loop6: p1 start 146641443 is beyond EOD, truncated
[   91.698259][   T28] audit: type=1400 audit(1781771161.846:736): avc:  denied  { write } for  pid=5110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   91.726845][ T5086] loop6: p6 start 50334720 is beyond EOD, truncated
[   91.733837][ T5086] loop6: p7 start 146641443 is beyond EOD, truncated
[   91.742954][ T5086] loop6: p9 start 50334720 is beyond EOD, truncated
[   91.774762][ T5064] netlink: 10 bytes leftover after parsing attributes in process `syz.3.359'.
[   91.824689][   T28] audit: type=1326 audit(1781771161.986:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.3.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   91.894402][   T28] audit: type=1326 audit(1781771162.016:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.3.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   91.966943][ T5134] FAULT_INJECTION: forcing a failure.
[   91.966943][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.972100][   T28] audit: type=1326 audit(1781771162.016:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.3.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   91.997259][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.6.375 Not tainted syzkaller #0 PREEMPT(lazy) 
[   91.997282][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   91.997293][ T5134] Call Trace:
[   91.997333][ T5134]  <TASK>
[   91.997340][ T5134]  __dump_stack+0x1d/0x30
[   91.997363][ T5134]  dump_stack_lvl+0x95/0xd0
[   91.997381][ T5134]  dump_stack+0x15/0x1b
[   91.997399][ T5134]  should_fail_ex+0x25e/0x270
[   91.997419][ T5134]  should_fail+0xb/0x20
[   91.997507][ T5134]  should_fail_usercopy+0x1a/0x20
[   91.997528][ T5134]  _copy_to_user+0x20/0xa0
[   91.997566][ T5134]  simple_read_from_buffer+0xb5/0x130
[   91.997599][ T5134]  proc_fail_nth_read+0x10e/0x150
[   91.997627][ T5134]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   91.997668][ T5134]  vfs_read+0x18e/0x7c0
[   91.997709][ T5134]  ? __rcu_read_unlock+0x4e/0x70
[   91.997789][ T5134]  ? __fget_files+0x184/0x1c0
[   91.997808][ T5134]  ? mutex_lock+0x57/0x90
[   91.997836][ T5134]  ksys_read+0xdc/0x1a0
[   91.997904][ T5134]  __x64_sys_read+0x40/0x50
[   91.997929][ T5134]  x64_sys_call+0x2886/0x3020
[   91.997950][ T5134]  do_syscall_64+0x136/0x3c0
[   91.997996][ T5134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.998016][ T5134] RIP: 0033:0x7f5d54bfd68e
[   91.998031][ T5134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   91.998048][ T5134] RSP: 002b:00007f5d53696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.998068][ T5134] RAX: ffffffffffffffda RBX: 00007f5d536976c0 RCX: 00007f5d54bfd68e
[   91.998105][ T5134] RDX: 000000000000000f RSI: 00007f5d536970a0 RDI: 0000000000000005
[   91.998119][ T5134] RBP: 00007f5d53697090 R08: 0000000000000000 R09: 0000000000000000
[   91.998143][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.998156][ T5134] R13: 00007f5d54eb6038 R14: 00007f5d54eb5fa0 R15: 00007ffd56a27528
[   91.998175][ T5134]  </TASK>
[   92.074145][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[   92.083883][ T5138] syzkaller0: entered promiscuous mode
[   92.087498][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[   92.093235][ T5138] syzkaller0: entered allmulticast mode
[   92.098772][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[   92.105749][ T5138] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   92.112196][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop6p8, 10) failed: No such file or directory
[   92.124973][   T28] audit: type=1326 audit(1781771162.016:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.3.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   92.279820][   T28] audit: type=1326 audit(1781771162.016:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.3.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   92.308902][   T28] audit: type=1400 audit(1781771162.016:742): avc:  denied  { write } for  pid=5115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   92.345038][ T5146] netlink: 1348 bytes leftover after parsing attributes in process `syz.6.378'.
[   92.468818][ T5157] sg_write: data in/out 3173450/65033 bytes for SCSI command 0x0-- guessing data in;
[   92.468818][ T5157]    program syz.0.380 not setting count and/or reply_len properly
[   92.562306][ T5168] netlink: 100 bytes leftover after parsing attributes in process `syz.0.387'.
[   93.481736][ T5168] netlink: 10 bytes leftover after parsing attributes in process `syz.0.387'.
[   93.592799][ T5178] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   93.611510][ T5185] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.392'.
[   93.627944][ T5178] bond1 (unregistering): Released all slaves
[   94.343982][ T5216] netlink: 6 bytes leftover after parsing attributes in process `syz.6.403'.
[   94.371237][ T5216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.398901][ T5223] netlink: 1348 bytes leftover after parsing attributes in process `syz.3.405'.
[   94.507241][ T5230] netlink: 'syz.3.408': attribute type 4 has an invalid length.
[   94.594494][ T5236] ip6tnl0: Caught tx_queue_len zero misconfig
[   94.610370][ T5237] netlink: 104 bytes leftover after parsing attributes in process `syz.3.408'.
[   94.798488][   T40] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   96.499254][ T5254] loop1: detected capacity change from 0 to 512
[   96.555496][ T5254] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.608513][ T5254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   96.666660][ T5254] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #17: comm syz.1.414: corrupted in-inode xattr: e_name out of bounds
[   96.681808][ T5254] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[   96.686084][ T5254] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.414: couldn't read orphan inode 17 (err -117)
[   96.695594][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   96.695724][    C0] EXT4-fs (loop1): initial error at time 1781771166: ext4_iget_extra_inode:5128: inode 17
[   96.695883][    C0] EXT4-fs (loop1): last error at time 1781771166: ext4_iget_extra_inode:5128: inode 17
[   96.812293][ T5254] loop1: lost filesystem error report for type 5 error -117
[   96.817772][ T5254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.874980][ T5274] netlink: 1348 bytes leftover after parsing attributes in process `syz.6.418'.
[   96.930538][ T5276] loop3: detected capacity change from 0 to 256
[   96.939103][ T5254] EXT4-fs (loop1): shut down requested (0)
[   96.962099][   T28] kauditd_printk_skb: 38 callbacks suppressed
[   96.962131][   T28] audit: type=1400 audit(1781771167.116:781): avc:  denied  { read } for  pid=2959 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   96.993187][ T5255] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.1.414: path /79/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[   97.035178][   T28] audit: type=1400 audit(1781771167.116:782): avc:  denied  { search } for  pid=2959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.092066][   T28] audit: type=1400 audit(1781771167.116:783): avc:  denied  { write search } for  pid=2959 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.114954][   T28] audit: type=1400 audit(1781771167.116:784): avc:  denied  { add_name } for  pid=2959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   97.142952][   T28] audit: type=1400 audit(1781771167.116:785): avc:  denied  { create } for  pid=2959 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.165784][   T28] audit: type=1400 audit(1781771167.116:786): avc:  denied  { append open } for  pid=2959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.189537][   T28] audit: type=1400 audit(1781771167.116:787): avc:  denied  { getattr } for  pid=2959 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   97.214100][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.225167][   T28] audit: type=1326 audit(1781771167.236:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   97.254035][   T28] audit: type=1326 audit(1781771167.236:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   97.279815][   T28] audit: type=1326 audit(1781771167.236:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[   97.401499][ T5283] loop5: detected capacity change from 0 to 256
[   97.401583][ T5281] netlink: 128 bytes leftover after parsing attributes in process `syz.1.422'.
[   97.408208][ T5283] vfat: Unknown parameter 'check.relaxed'
[   97.442839][ T5281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.512583][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.518459][ T5281] netlink: 'syz.1.422': attribute type 10 has an invalid length.
[   97.547663][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.561115][ T5281] team0: Failed to send options change via netlink (err -105)
[   97.570305][ T5281] team0: Port device dummy0 added
[   97.585028][ T5281] netlink: 'syz.1.422': attribute type 10 has an invalid length.
[   97.600582][ T5281] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   97.611570][ T5281] team0: Failed to send options change via netlink (err -105)
[   97.619323][ T5281] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   97.628432][ T5281] team0: Port device dummy0 removed
[   97.649253][ T5281] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   97.699139][ T5302] syzkaller0: entered promiscuous mode
[   97.708270][ T5302] syzkaller0: entered allmulticast mode
[   97.716253][ T5302] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   97.949559][ T5310] loop6: detected capacity change from 0 to 2048
[   98.521467][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.695545][ T5320] netdevsim netdevsim0 �: renamed from netdevsim0 (while UP)
[   98.843440][ T5325] x_tables: ip6_tables: TRACE target: only valid in raw table, not ns
[   99.762272][ T5333] loop6: detected capacity change from 0 to 1764
[   99.769105][ T5333] iso9660: Unknown parameter 'euid'
[  100.067841][ T5337] usb usb8: usbfs: process 5337 (syz.5.441) did not claim interface 0 before use
[  100.206092][ T5337] loop5: detected capacity change from 0 to 512
[  100.234687][ T5337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.767854][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.783229][ T5333] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  100.792579][ T5333] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  100.840220][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[  100.871684][ T5341] syzkaller0: entered promiscuous mode
[  100.898366][ T5341] syzkaller0: entered allmulticast mode
[  100.924346][ T5341] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  100.965793][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.447'.
[  101.234149][ T5370] loop0: detected capacity change from 0 to 512
[  102.049220][ T5370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  102.118665][ T5370] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #17: comm syz.0.453: corrupted in-inode xattr: e_name out of bounds
[  102.173666][ T5370] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  102.177529][ T5370] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.453: couldn't read orphan inode 17 (err -117)
[  102.186889][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  102.186959][    C1] EXT4-fs (loop0): initial error at time 1781771172: ext4_iget_extra_inode:5128: inode 17
[  102.187049][    C1] EXT4-fs (loop0): last error at time 1781771172: ext4_iget_extra_inode:5128: inode 17
[  102.380568][ T5370] loop0: lost filesystem error report for type 5 error -117
[  102.399717][ T5370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.512290][ T5386] capability: warning: `syz.3.456' uses 32-bit capabilities (legacy support in use)
[  102.531580][ T5370] EXT4-fs (loop0): shut down requested (0)
[  102.558126][ T5370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.453'.
[  102.567944][ T5386] program syz.3.456 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.673495][   T28] kauditd_printk_skb: 42 callbacks suppressed
[  102.673508][   T28] audit: type=1400 audit(1781771172.836:833): avc:  denied  { read } for  pid=5379 comm="syz.6.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.793062][ T5398] loop3: detected capacity change from 0 to 512
[  102.800822][   T28] audit: type=1400 audit(1781771172.956:834): avc:  denied  { name_bind } for  pid=5395 comm="syz.1.459" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  102.824306][ T5398] EXT4-fs: test_dummy_encryption option not supported
[  102.930312][   T28] audit: type=1326 audit(1781771173.086:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.005488][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.005829][   T28] audit: type=1326 audit(1781771173.086:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.088382][ T5405] netlink: 128 bytes leftover after parsing attributes in process `syz.0.462'.
[  103.096276][   T28] audit: type=1326 audit(1781771173.086:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.125658][ T5405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.142786][ T5407] netlink: 'syz.0.462': attribute type 10 has an invalid length.
[  103.165760][ T5407] team0: Failed to send options change via netlink (err -105)
[  103.183837][   T28] audit: type=1326 audit(1781771173.086:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.214315][ T5407] team0: Port device dummy0 added
[  103.215846][ T5405] netlink: 'syz.0.462': attribute type 10 has an invalid length.
[  103.241041][   T28] audit: type=1326 audit(1781771173.116:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.249495][ T5405] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  103.294052][   T28] audit: type=1326 audit(1781771173.116:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.329322][ T5405] team0: Failed to send options change via netlink (err -105)
[  103.344094][   T28] audit: type=1326 audit(1781771173.116:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.361363][ T5405] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  103.397420][   T28] audit: type=1326 audit(1781771173.116:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5397 comm="syz.3.460" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c6acce59 code=0x7ffc0000
[  103.422860][ T5405] team0: Port device dummy0 removed
[  103.431447][ T5405] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  103.460220][ T5398] loop3: detected capacity change from 0 to 512
[  103.505368][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.533463][ T5398] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.567276][ T5414] loop0: detected capacity change from 0 to 128
[  103.581964][ T5414] /dev/loop0: Can't open blockdev
[  103.621238][ T5418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.464'.
[  103.656957][ T5418] loop1: detected capacity change from 0 to 512
[  103.699430][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.725589][ T5418] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.907644][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.963902][ T3847] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.029568][ T5439] loop6: detected capacity change from 0 to 1764
[  104.036702][ T5439] iso9660: Unknown parameter 'euid'
[  104.172909][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.213898][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.222822][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.293822][ T5443] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  104.308464][ T5443] bond1 (unregistering): Released all slaves
[  104.315712][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.326113][ T5447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'.
[  104.338162][ T5447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=5447 comm=syz.1.474
[  104.351864][ T5447] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  104.393907][ T5443] netlink: 'syz.1.474': attribute type 30 has an invalid length.
[  104.408641][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'.
[  104.435815][ T5455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.473'.
[  104.461257][ T5459] netlink: 1348 bytes leftover after parsing attributes in process `syz.5.477'.
[  104.587971][ T5469] program syz.3.483 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.639453][ T5478] loop1: detected capacity change from 0 to 256
[  104.662024][ T5479] coredump: 276(syz.1.487): Core dump to core aborted: cannot preserve file owner
[  104.672055][ T5478] FAULT_INJECTION: forcing a failure.
[  104.672055][ T5478] name failslab, interval 1, probability 0, space 0, times 0
[  104.689213][ T5478] CPU: 1 UID: 0 PID: 5478 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(lazy) 
[  104.689284][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  104.689294][ T5478] Call Trace:
[  104.689300][ T5478]  <TASK>
[  104.689307][ T5478]  __dump_stack+0x1d/0x30
[  104.689328][ T5478]  dump_stack_lvl+0x95/0xd0
[  104.689345][ T5478]  dump_stack+0x15/0x1b
[  104.689359][ T5478]  should_fail_ex+0x25e/0x270
[  104.689428][ T5478]  should_failslab+0x8c/0xb0
[  104.689453][ T5478]  __kmalloc_node_track_caller_noprof+0xc3/0x550
[  104.689578][ T5478]  ? kstrdup_const+0x3e/0x50
[  104.689603][ T5478]  kstrdup+0x3e/0xd0
[  104.689692][ T5478]  kstrdup_const+0x3e/0x50
[  104.689713][ T5478]  alloc_vfsmnt+0xe2/0x2f0
[  104.689744][ T5478]  clone_mnt+0x30/0x5d0
[  104.689822][ T5478]  lock_mount_exact+0xca/0x460
[  104.689852][ T5478]  open_new_namespace+0x179/0xa90
[  104.689917][ T5478]  vfs_open_tree+0x24d/0x2d0
[  104.689950][ T5478]  __x64_sys_open_tree+0x5e/0xd0
[  104.689977][ T5478]  x64_sys_call+0x2ad8/0x3020
[  104.690000][ T5478]  do_syscall_64+0x136/0x3c0
[  104.690031][ T5478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.690177][ T5478] RIP: 0033:0x7f4087e0ce59
[  104.690193][ T5478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.690211][ T5478] RSP: 002b:00007f408685f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  104.690232][ T5478] RAX: ffffffffffffffda RBX: 00007f4088085fa0 RCX: 00007f4087e0ce59
[  104.690248][ T5478] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c
[  104.690261][ T5478] RBP: 00007f408685f090 R08: 0000000000000000 R09: 0000000000000000
[  104.690272][ T5478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.690348][ T5478] R13: 00007f4088086038 R14: 00007f4088085fa0 R15: 00007ffd35add1f8
[  104.690368][ T5478]  </TASK>
[  104.956890][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.489'.
[  104.987350][ T5484] loop6: detected capacity change from 0 to 512
[  104.994008][ T5484] EXT4-fs: Ignoring removed orlov option
[  105.000405][ T5484] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  105.010078][ T5484] EXT4-fs (loop6): filesystem has both journal inode and journal device!
[  105.079642][ T5491] netlink: 1348 bytes leftover after parsing attributes in process `syz.3.492'.
[  105.129816][   T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.151524][   T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.215780][   T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.226421][   T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.305325][   T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.324504][   T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.350428][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.501'.
[  105.407460][   T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.425711][   T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.539985][   T30] bridge_slave_1: left allmulticast mode
[  105.545855][   T30] bridge_slave_1: left promiscuous mode
[  105.552013][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.563411][   T30] bridge_slave_0: left allmulticast mode
[  105.569157][   T30] bridge_slave_0: left promiscuous mode
[  105.575315][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.604625][ T5508] loop0: detected capacity change from 0 to 512
[  105.637053][ T5508] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  105.655107][ T5508] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #17: comm syz.0.500: corrupted in-inode xattr: e_name out of bounds
[  105.670761][ T5508] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  105.671309][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  105.687300][    C1] EXT4-fs (loop0): initial error at time 1781771175: ext4_iget_extra_inode:5128: inode 17
[  105.697630][    C1] EXT4-fs (loop0): last error at time 1781771175: ext4_iget_extra_inode:5128: inode 17
[  105.708281][ T5508] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.500: couldn't read orphan inode 17 (err -117)
[  105.709202][   T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.720443][ T5508] loop0: lost filesystem error report for type 5 error -117
[  105.733682][ T5508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.757249][   T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.767943][   T30] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  105.775329][ T5508] EXT4-fs (loop0): shut down requested (0)
[  105.783261][   T30] bond0 (unregistering): Released all slaves
[  105.794439][   T30] bond1 (unregistering): Released all slaves
[  105.857996][   T30] hsr_slave_0: left promiscuous mode
[  105.868684][   T30] hsr_slave_1: left promiscuous mode
[  105.874569][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.883415][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.895093][   T30] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.994632][   T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.057511][   T30] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.078981][   T30] veth1_macvtap: left promiscuous mode
[  106.235139][ T5542] usb usb8: usbfs: process 5542 (syz.0.503) did not claim interface 0 before use
[  106.322464][ T5545] loop0: detected capacity change from 0 to 512
[  106.341812][ T5545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.521364][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  107.036055][   T30] veth0_macvtap: left promiscuous mode
[  107.041637][   T30] veth1_vlan: left promiscuous mode
[  107.046867][   T30] veth0_vlan: left promiscuous mode
[  107.653894][   T30] team0 (unregistering): Port device team_slave_1 removed
[  107.668047][   T30] team0 (unregistering): Port device team_slave_0 removed
[  107.706059][ T5542] tc_dump_action: action bad kind
[  107.759428][ T3016] 8021q: adding VLAN 0 to HW filter on device eth10
[  107.770208][ T5562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.771173][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.787790][ T5562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.828033][ T5564] __nla_validate_parse: 1 callbacks suppressed
[  107.828085][ T5564] netlink: 100 bytes leftover after parsing attributes in process `syz.5.512'.
[  107.991216][ T5509] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.009333][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.020247][ T5559] tmpfs: Bad value for 'mpol'
[  108.024980][   T35] IPVS: starting estimator thread 0...
[  108.030456][   T28] kauditd_printk_skb: 168 callbacks suppressed
[  108.030476][   T28] audit: type=1400 audit(1781771178.186:1011): avc:  denied  { mounton } for  pid=5558 comm="syz.6.510" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  108.042466][ T5559] IPVS: lc: FWM 3 0x00000003 - no destination available
[  108.060762][   T28] audit: type=1400 audit(1781771178.196:1012): avc:  denied  { write } for  pid=5569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.067587][ T5509] bridge_slave_0: entered allmulticast mode
[  108.138375][ T5509] bridge_slave_0: entered promiscuous mode
[  108.142731][   T28] audit: type=1400 audit(1781771178.296:1013): avc:  denied  { write } for  pid=5589 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.156987][ T5509] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.173213][ T5585] IPVS: using max 2304 ests per chain, 115200 per kthread
[  108.197279][ T5559] loop6: detected capacity change from 0 to 8192
[  108.208198][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.218593][ T5509] bridge_slave_1: entered allmulticast mode
[  108.227093][ T5509] bridge_slave_1: entered promiscuous mode
[  108.241771][ T5559] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  108.270873][ T3016] 8021q: adding VLAN 0 to HW filter on device eth9
[  108.312593][ T5509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.343177][ T5509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.380454][ T5596] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.516'.
[  108.393728][ T5509] team0: Port device team_slave_0 added
[  108.434311][ T5509] team0: Port device team_slave_1 added
[  108.474874][ T5509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.510949][ T5509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.547882][ T5509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.594081][ T5509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.614407][   T28] audit: type=1400 audit(1781771178.776:1014): avc:  denied  { write } for  pid=5601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.619127][ T5509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.692378][   T28] audit: type=1400 audit(1781771178.846:1015): avc:  denied  { write } for  pid=5621 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  108.714624][ T5509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.731743][ T3016] 8021q: adding VLAN 0 to HW filter on device eth11
[  108.774464][ T5626] netlink: 10 bytes leftover after parsing attributes in process `syz.5.512'.
[  108.786611][ T5509] hsr_slave_0: entered promiscuous mode
[  108.792811][ T5509] hsr_slave_1: entered promiscuous mode
[  108.798726][ T5509] debugfs: 'hsr0' already exists in 'hsr'
[  108.805206][ T5509] Cannot create hsr debugfs directory
[  108.939253][   T30] IPVS: stop unused estimator thread 0...
[  108.967964][ T5630] syzkaller0: entered promiscuous mode
[  109.021597][ T5630] syzkaller0: entered allmulticast mode
[  109.123817][ T5639] loop3: detected capacity change from 0 to 1024
[  109.135925][ T5639] EXT4-fs: Ignoring removed i_version option
[  109.204969][ T5639] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  109.235821][ T5639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.539245][ T5635] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  109.773786][ T5643] loop6: detected capacity change from 0 to 512
[  109.905819][ T5643] ext4: Bad value for 'debug_want_extra_isize'
[  109.985251][ T5509] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  109.996573][ T5658] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.526'.
[  110.073527][   T28] audit: type=1400 audit(1781771180.236:1016): avc:  denied  { write } for  pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.120515][   T28] audit: type=1400 audit(1781771180.276:1017): avc:  denied  { write } for  pid=5667 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  110.164034][ T5509] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  110.208350][ T3016] 8021q: adding VLAN 0 to HW filter on device eth12
[  110.221171][ T5670] loop0: detected capacity change from 0 to 1764
[  110.235254][ T5509] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  110.244174][ T5670] iso9660: Unknown parameter 'euid'
[  110.280956][ T5678] loop6: detected capacity change from 0 to 256
[  110.298700][ T5509] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.332686][ T5678] vfat: Unknown parameter 'check.relaxed'
[  110.358480][ T5509] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  110.401997][ T5683] netlink: 100 bytes leftover after parsing attributes in process `syz.0.532'.
[  110.436544][ T5509] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.466503][ T5509] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  110.507193][ T5509] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.560334][ T5684] netlink: 10 bytes leftover after parsing attributes in process `syz.0.532'.
[  110.609773][   T28] audit: type=1400 audit(1781771180.766:1018): avc:  denied  { audit_write } for  pid=5692 comm="syz.6.533" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  110.640108][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.753272][ T5509] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.786310][ T5509] 8021q: adding VLAN 0 to HW filter on device team0
[  110.805221][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.812366][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.843158][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.850437][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.992332][ T5712] netlink: 1348 bytes leftover after parsing attributes in process `syz.6.538'.
[  111.087389][ T5509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.241548][ T5737] can0: slcan on ttyS3.
[  111.333064][ T5737] can0 (unregistered): slcan off ttyS3.
[  111.362362][ T5509] veth0_vlan: entered promiscuous mode
[  111.385210][ T5509] veth1_vlan: entered promiscuous mode
[  111.418966][ T5764] ip6gre0: Caught tx_queue_len zero misconfig
[  111.428316][   T28] audit: type=1400 audit(1781771181.586:1019): avc:  denied  { write } for  pid=5746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.476903][ T5509] veth0_macvtap: entered promiscuous mode
[  111.484316][   T28] audit: type=1400 audit(1781771181.636:1020): avc:  denied  { write } for  pid=5770 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  111.512674][ T5509] veth1_macvtap: entered promiscuous mode
[  111.522368][ T5769] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.548'.
[  111.538296][ T5737] bridge2: entered promiscuous mode
[  111.543644][ T5737] bridge2: entered allmulticast mode
[  111.570295][ T5509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.587603][ T5509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.627302][  T310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.643434][  T310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.660682][  T310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.666281][ T5794] netlink: 1348 bytes leftover after parsing attributes in process `syz.0.560'.
[  111.679916][   T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.702184][ T5799] FAULT_INJECTION: forcing a failure.
[  111.702184][ T5799] name failslab, interval 1, probability 0, space 0, times 0
[  111.727124][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.5.552 Not tainted syzkaller #0 PREEMPT(lazy) 
[  111.727150][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  111.727162][ T5799] Call Trace:
[  111.727169][ T5799]  <TASK>
[  111.727177][ T5799]  __dump_stack+0x1d/0x30
[  111.727202][ T5799]  dump_stack_lvl+0x95/0xd0
[  111.727255][ T5799]  dump_stack+0x15/0x1b
[  111.727273][ T5799]  should_fail_ex+0x25e/0x270
[  111.727294][ T5799]  should_failslab+0x8c/0xb0
[  111.727345][ T5799]  kmem_cache_alloc_noprof+0x66/0x3f0
[  111.727451][ T5799]  ? skb_clone+0x151/0x1f0
[  111.727477][ T5799]  skb_clone+0x151/0x1f0
[  111.727535][ T5799]  __netlink_deliver_tap+0x2be/0x510
[  111.727696][ T5799]  netlink_unicast+0x654/0x680
[  111.727840][ T5799]  netlink_sendmsg+0x5be/0x6f0
[  111.727864][ T5799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.727885][ T5799]  ____sys_sendmsg+0x532/0x580
[  111.727945][ T5799]  ___sys_sendmsg+0x195/0x1e0
[  111.727978][ T5799]  __x64_sys_sendmsg+0xd4/0x160
[  111.728062][ T5799]  x64_sys_call+0x194c/0x3020
[  111.728092][ T5799]  do_syscall_64+0x136/0x3c0
[  111.728200][ T5799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.728255][ T5799] RIP: 0033:0x7fb95093ce59
[  111.728269][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.728284][ T5799] RSP: 002b:00007fb94f38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.728303][ T5799] RAX: ffffffffffffffda RBX: 00007fb950bb5fa0 RCX: 00007fb95093ce59
[  111.728315][ T5799] RDX: 0000000004000804 RSI: 0000200000000200 RDI: 0000000000000004
[  111.728400][ T5799] RBP: 00007fb94f38f090 R08: 0000000000000000 R09: 0000000000000000
[  111.728412][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.728424][ T5799] R13: 00007fb950bb6038 R14: 00007fb950bb5fa0 R15: 00007fffc51ed4f8
[  111.728473][ T5799]  </TASK>
[  111.926234][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.552'.
[  111.979784][ T5810] loop6: detected capacity change from 0 to 512
[  111.989319][ T5810] ext4: Bad value for 'debug_want_extra_isize'
[  111.999721][ T5806] can0: slcan on ttyS3.
[  112.047420][ T5815] syzkaller0: entered promiscuous mode
[  112.059593][ T5815] syzkaller0: entered allmulticast mode
[  112.086210][ T5815] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  112.231612][ T5850] loop7: detected capacity change from 0 to 256
[  112.238207][ T5850] vfat: Unknown parameter 'check.relaxed'
[  112.499924][ T5862] loop7: detected capacity change from 0 to 512
[  112.507743][ T5862] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  112.518986][ T5862] EXT4-fs (loop7): orphan file too big: 67108874
[  112.525726][ T5862] EXT4-fs (loop7): mount failed
[  112.563649][ T5867] loop7: detected capacity change from 0 to 512
[  112.575083][ T5867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.587597][ T5867] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.708501][ T5509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.845401][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  112.854377][ T5884] netlink: 'syz.0.575': attribute type 5 has an invalid length.
[  112.862279][ T5884] netlink: 'syz.0.575': attribute type 3 has an invalid length.
[  112.869983][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'.
[  112.881607][ T5884] geneve2: entered promiscuous mode
[  112.886959][ T5884] geneve2: entered allmulticast mode
[  112.893712][   T12] netdevsim netdevsim0 �: set [1, 1] type 2 family 0 port 256 - 0
[  112.902574][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  112.911211][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  112.919901][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  112.942654][ T5886] netlink: 164 bytes leftover after parsing attributes in process `syz.0.576'.
[  112.959772][ T5889] FAULT_INJECTION: forcing a failure.
[  112.959772][ T5889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.985079][ T5886] loop0: detected capacity change from 0 to 2048
[  112.995143][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz.3.577 Not tainted syzkaller #0 PREEMPT(lazy) 
[  112.995172][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  112.995210][ T5889] Call Trace:
[  112.995215][ T5889]  <TASK>
[  112.995222][ T5889]  __dump_stack+0x1d/0x30
[  112.995308][ T5889]  dump_stack_lvl+0x95/0xd0
[  112.995329][ T5889]  dump_stack+0x15/0x1b
[  112.995348][ T5889]  should_fail_ex+0x25e/0x270
[  112.995365][ T5889]  should_fail+0xb/0x20
[  112.995380][ T5889]  should_fail_usercopy+0x1a/0x20
[  112.995437][ T5889]  _copy_from_iter+0x20c/0xe70
[  112.995461][ T5889]  ? __alloc_skb+0x560/0x6f0
[  112.995487][ T5889]  tipc_msg_build+0x2de/0x950
[  112.995557][ T5889]  ? avc_has_perm_noaudit+0xa3/0x120
[  112.995602][ T5889]  __tipc_sendstream+0x6c1/0xb70
[  112.995721][ T5889]  ? __pfx_woken_wake_function+0x10/0x10
[  112.995746][ T5889]  tipc_sendstream+0x3e/0x60
[  112.995776][ T5889]  ? __pfx_tipc_sendstream+0x10/0x10
[  112.995858][ T5889]  ____sys_sendmsg+0x532/0x580
[  112.995888][ T5889]  ___sys_sendmsg+0x195/0x1e0
[  112.995981][ T5889]  __x64_sys_sendmsg+0xd4/0x160
[  112.996012][ T5889]  x64_sys_call+0x194c/0x3020
[  112.996087][ T5889]  do_syscall_64+0x136/0x3c0
[  112.996186][ T5889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.996208][ T5889] RIP: 0033:0x7f68c6acce59
[  112.996241][ T5889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.996259][ T5889] RSP: 002b:00007f68c5527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.996279][ T5889] RAX: ffffffffffffffda RBX: 00007f68c6d45fa0 RCX: 00007f68c6acce59
[  112.996294][ T5889] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004
[  112.996307][ T5889] RBP: 00007f68c5527090 R08: 0000000000000000 R09: 0000000000000000
[  112.996320][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.996347][ T5889] R13: 00007f68c6d46038 R14: 00007f68c6d45fa0 R15: 00007fffd54110b8
[  112.996366][ T5889]  </TASK>
[  113.001501][ T5822] can0 (unregistered): slcan off ttyS3.
[  113.203171][ T5904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  113.212810][ T5904] System zones: 0-2, 18-18, 34-35
[  113.218715][ T5904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.231716][ T5904] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.274180][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.300441][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  113.300454][   T28] audit: type=1400 audit(1781771183.456:1036): avc:  denied  { accept } for  pid=5895 comm="syz.6.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  113.306582][ T5886] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.342485][ T5924] set_capacity_and_notify: 2 callbacks suppressed
[  113.342500][ T5924] loop5: detected capacity change from 0 to 512
[  113.344690][   T28] audit: type=1400 audit(1781771183.506:1037): avc:  denied  { write } for  pid=5885 comm="syz.0.576" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  113.388294][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.397763][   T28] audit: type=1400 audit(1781771183.546:1038): avc:  denied  { write } for  pid=5887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.423338][ T5924] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.446949][ T5924] EXT4-fs (loop5): inodes count not valid: 41 vs 32
[  113.490323][   T28] audit: type=1400 audit(1781771183.646:1039): avc:  denied  { write } for  pid=5932 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.558479][   T28] audit: type=1400 audit(1781771183.676:1040): avc:  denied  { sqpoll } for  pid=5885 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  113.562123][ T5943] can0: slcan on ttyS3.
[  113.590376][ T5946] netlink: 92 bytes leftover after parsing attributes in process `syz.3.585'.
[  113.657357][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.682524][ T5953] can0 (unregistered): slcan off ttyS3.
[  113.748923][ T5961] loop7: detected capacity change from 0 to 512
[  113.784455][ T5961] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  113.794719][ T5961] EXT4-fs (loop7): group descriptors corrupted!
[  113.860583][   T28] audit: type=1400 audit(1781771184.016:1041): avc:  denied  { write } for  pid=5941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  113.993293][ T5967] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  114.012778][ T5948] loop5: detected capacity change from 0 to 512
[  114.105643][ T5948] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  114.151554][   T28] audit: type=1326 audit(1781771184.156:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.6.584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d54c36bd7 code=0x7ffc0000
[  114.233841][ T5948] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #17: comm syz.5.586: corrupted in-inode xattr: e_name out of bounds
[  114.245171][   T40] Bluetooth: hci0: Frame reassembly failed (-84)
[  114.254716][   T28] audit: type=1326 audit(1781771184.156:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.6.584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d54bde1d9 code=0x7ffc0000
[  114.280566][   T28] audit: type=1326 audit(1781771184.156:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.6.584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d54c36bd7 code=0x7ffc0000
[  114.299068][ T5948] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  114.310477][   T28] audit: type=1326 audit(1781771184.166:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.6.584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d54bde1d9 code=0x7ffc0000
[  114.319535][ T5948] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.586: couldn't read orphan inode 17 (err -117)
[  114.345194][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  114.345274][    C0] EXT4-fs (loop5): initial error at time 1781771184: ext4_iget_extra_inode:5128: inode 17
[  114.345374][    C0] EXT4-fs (loop5): last error at time 1781771184: ext4_iget_extra_inode:5128: inode 17
[  114.348914][ T5982] netlink: 100 bytes leftover after parsing attributes in process `syz.6.592'.
[  114.360631][ T5948] loop5: lost filesystem error report for type 5 error -117
[  114.429325][ T5948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.452386][ T5984] netlink: 100 bytes leftover after parsing attributes in process `syz.3.593'.
[  114.541460][ T5948] EXT4-fs (loop5): shut down requested (0)
[  114.548790][ T5985] netlink: 10 bytes leftover after parsing attributes in process `syz.3.593'.
[  114.570005][ T5956] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.586: path /105/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  116.358158][ T5979] Bluetooth: hci0: command 0x1003 tx timeout
[  116.369953][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.379265][ T3673] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  116.540028][ T5982] netlink: 10 bytes leftover after parsing attributes in process `syz.6.592'.
[  116.887974][ T6012] loop7: detected capacity change from 0 to 256
[  118.071312][ T6022] slcan: can't register candev
[  119.831887][ T6041] syzkaller0: entered promiscuous mode
[  119.837447][ T6041] syzkaller0: entered allmulticast mode
[  119.911919][ T6044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  121.103452][ T6064] loop5: detected capacity change from 0 to 128
[  121.291680][ T6046] loop7: detected capacity change from 0 to 512
[  121.662121][ T6060] tc_dump_action: action bad kind
[  121.881548][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  122.313874][ T6060] loop3: detected capacity change from 0 to 512
[  122.344988][ T6046] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  123.065120][ T6046] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  123.065260][ T6046] EXT4-fs: failed to create workqueue
[  123.101076][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.118589][ T6046] EXT4-fs (loop7): mount failed
[  123.162668][ T6064] syzkaller0: entered promiscuous mode
[  123.168221][ T6064] syzkaller0: entered allmulticast mode
[  123.183518][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.202026][   T28] kauditd_printk_skb: 51 callbacks suppressed
[  123.202037][   T28] audit: type=1400 audit(1781771193.366:1097): avc:  denied  { write } for  pid=6063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.259100][   T28] audit: type=1400 audit(1781771193.416:1098): avc:  denied  { write } for  pid=6088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.397300][   T28] audit: type=1400 audit(1781771193.556:1099): avc:  denied  { write } for  pid=6097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.453305][   T28] audit: type=1400 audit(1781771193.596:1100): avc:  denied  { write } for  pid=6111 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.585862][   T28] audit: type=1400 audit(1781771193.746:1101): avc:  denied  { write } for  pid=6114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.634449][ T6126] netlink: 100 bytes leftover after parsing attributes in process `syz.5.617'.
[  123.648294][ T6129] syzkaller0: entered promiscuous mode
[  123.664854][ T6129] syzkaller0: entered allmulticast mode
[  123.670544][   T28] audit: type=1400 audit(1781771193.826:1102): avc:  denied  { write } for  pid=6130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  123.682962][ T6129] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  124.953441][ T6153] can0: slcan on ttyS3.
[  125.041615][ T6153] can0 (unregistered): slcan off ttyS3.
[  125.077236][ T6146] loop3: detected capacity change from 0 to 512
[  125.156164][ T6146] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  125.207499][ T6146] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.623: corrupted in-inode xattr: e_name out of bounds
[  125.251161][ T6146] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  125.252103][ T6146] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.623: couldn't read orphan inode 17 (err -117)
[  125.261582][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  125.261612][    C0] EXT4-fs (loop3): initial error at time 1781771195: ext4_iget_extra_inode:5128: inode 17
[  125.261835][    C0] EXT4-fs (loop3): last error at time 1781771195: ext4_iget_extra_inode:5128: inode 17
[  125.355350][ T6126] netlink: 10 bytes leftover after parsing attributes in process `syz.5.617'.
[  125.401779][   T28] audit: type=1326 audit(1781771195.556:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.5.617" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95093ce59 code=0x7ffc0000
[  125.486575][ T6110] syz.6.618 (6110) used greatest stack depth: 8976 bytes left
[  125.507856][ T6146] loop3: lost filesystem error report for type 5 error -117
[  125.521487][ T6146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.563939][   T28] audit: type=1326 audit(1781771195.556:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.5.617" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95093ce59 code=0x7ffc0000
[  125.680952][   T28] audit: type=1326 audit(1781771195.556:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.5.617" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95093ce59 code=0x7ffc0000
[  125.706636][   T28] audit: type=1326 audit(1781771195.556:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.5.617" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb95093ce59 code=0x7ffc0000
[  125.791670][ T6178] loop5: detected capacity change from 0 to 1024
[  125.800675][ T6184] netlink: 36 bytes leftover after parsing attributes in process `syz.0.630'.
[  125.803712][ T6146] EXT4-fs (loop3): shut down requested (0)
[  125.831213][ T6178] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  125.855737][ T6192] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.3.623: path /134/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  125.911284][ T6178] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.629: Invalid block bitmap block 0 in block_group 0
[  125.965538][ T6178] loop5: lost filesystem error report for type 5 error -117
[  125.966464][ T6178] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.629: Failed to acquire dquot type 0
[  125.973860][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  125.973898][    C1] EXT4-fs (loop5): initial error at time 1781771196: ext4_read_block_bitmap_nowait:483
[  125.973945][    C1] EXT4-fs (loop5): last error at time 1781771196: ext4_read_block_bitmap_nowait:483
[  126.011820][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.032025][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.134463][ T6178] loop5: lost filesystem error report for type 5 error -117
[  126.136365][ T6178] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.629: Freeing blocks not in datazone - block = 0, count = 4096
[  126.159887][ T6178] loop5: lost filesystem error report for type 5 error -117
[  126.160719][ T6178] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.629: Invalid inode bitmap blk 0 in block_group 0
[  126.181491][ T6178] loop5: lost filesystem error report for type 5 error -117
[  126.181594][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.195871][  T310] EXT4-fs error (device loop5): ext4_release_dquot:7068: comm kworker/u8:5: Failed to release dquot type 0
[  126.209271][ T6178] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  126.209451][  T310] loop5: lost filesystem error report for type 5 error -117
[  126.223936][ T6178] loop5: lost filesystem error report for type 5 error -117
[  126.236186][ T6178] EXT4-fs (loop5): 1 orphan inode deleted
[  126.252149][ T6178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.268870][ T6178] netlink: 72 bytes leftover after parsing attributes in process `syz.5.629'.
[  126.278200][ T6179] netlink: 72 bytes leftover after parsing attributes in process `syz.5.629'.
[  126.305238][ T6215] can0: slcan on ttyS3.
[  126.312073][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.381537][ T6215] can0 (unregistered): slcan off ttyS3.
[  126.393428][ T6224] syzkaller0: entered promiscuous mode
[  126.401496][ T6224] syzkaller0: entered allmulticast mode
[  126.415363][ T6224] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  126.485860][ T6230] loop3: detected capacity change from 0 to 512
[  126.499119][ T6232] loop5: detected capacity change from 0 to 512
[  126.508893][ T6230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.522367][ T6230] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.525552][ T6232] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  126.544779][ T6232] EXT4-fs (loop5): 1 truncate cleaned up
[  126.547014][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'.
[  126.550912][ T6232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.562642][ T6230] netlink: 'syz.3.636': attribute type 1 has an invalid length.
[  126.579417][ T6230] netlink: 224 bytes leftover after parsing attributes in process `syz.3.636'.
[  126.785378][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.824147][ T6243] netlink: 100 bytes leftover after parsing attributes in process `syz.3.640'.
[  127.603425][ T6246] netlink: 10 bytes leftover after parsing attributes in process `syz.3.640'.
[  127.709305][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.754622][ T6252] loop6: detected capacity change from 0 to 512
[  127.783262][ T6252] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  127.845334][ T6252] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #17: comm syz.6.641: corrupted in-inode xattr: e_name out of bounds
[  127.903386][ T6252] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  127.903604][ T6252] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.641: couldn't read orphan inode 17 (err -117)
[  127.912781][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  127.912816][    C1] EXT4-fs (loop6): initial error at time 1781771198: ext4_iget_extra_inode:5128: inode 17
[  127.912866][    C1] EXT4-fs (loop6): last error at time 1781771198: ext4_iget_extra_inode:5128: inode 17
[  127.991265][ T6252] loop6: lost filesystem error report for type 5 error -117
[  127.991929][ T6252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.056996][ T6270] loop7: detected capacity change from 0 to 512
[  128.080417][ T6248] EXT4-fs (loop6): shut down requested (0)
[  128.108391][ T6273] 9p: Bad value for 'rfdno'
[  128.113963][ T6270] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  128.131758][ T6252] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.6.641: path /112/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  128.189380][ T6270] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #17: comm syz.7.647: corrupted in-inode xattr: e_name out of bounds
[  128.190540][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.641'.
[  128.234132][ T6270] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  128.234307][ T6270] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.647: couldn't read orphan inode 17 (err -117)
[  128.243520][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  128.243541][    C1] EXT4-fs (loop7): initial error at time 1781771198: ext4_iget_extra_inode:5128: inode 17
[  128.243585][    C1] EXT4-fs (loop7): last error at time 1781771198: ext4_iget_extra_inode:5128: inode 17
[  128.284687][ T6270] loop7: lost filesystem error report for type 5 error -117
[  128.286921][ T6270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.310393][ T6265] EXT4-fs (loop7): shut down requested (0)
[  128.537118][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.648172][ T6284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=6284 comm=syz.5.653
[  128.666622][ T5509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.686412][ T6280] loop6: detected capacity change from 0 to 2048
[  128.718534][ T6280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.778896][ T6280] EXT4-fs error (device loop6): ext4_ext_precache:648: inode #2: comm syz.6.651: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  128.804658][ T6286] bridge0: port 3(team0) entered disabled state
[  128.811181][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.818504][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.835453][ T6280] EXT4-fs (loop6): Remounting filesystem read-only
[  128.880107][   T28] kauditd_printk_skb: 48 callbacks suppressed
[  128.880122][   T28] audit: type=1400 audit(1781771199.036:1152): avc:  denied  { create } for  pid=6279 comm="syz.6.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  128.911277][   T28] audit: type=1400 audit(1781771199.046:1153): avc:  denied  { write } for  pid=6279 comm="syz.6.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  128.966864][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.979622][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.987683][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.017811][ T6295] loop3: detected capacity change from 0 to 512
[  129.053844][ T6295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  129.064968][   T28] audit: type=1400 audit(1781771199.226:1154): avc:  denied  { ioctl } for  pid=6296 comm="syz.6.656" path="socket:[14201]" dev="sockfs" ino=14201 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.105352][ T6295] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.655: corrupted in-inode xattr: e_name out of bounds
[  129.110917][ T3847] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.119839][ T6299] FAULT_INJECTION: forcing a failure.
[  129.119839][ T6299] name failslab, interval 1, probability 0, space 0, times 0
[  129.128328][ T3847] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.145018][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.6.656 Not tainted syzkaller #0 PREEMPT(lazy) 
[  129.145045][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  129.145066][ T6299] Call Trace:
[  129.145072][ T6299]  <TASK>
[  129.145079][ T6299]  __dump_stack+0x1d/0x30
[  129.145103][ T6299]  dump_stack_lvl+0x95/0xd0
[  129.145122][ T6299]  dump_stack+0x15/0x1b
[  129.145184][ T6299]  should_fail_ex+0x25e/0x270
[  129.145204][ T6299]  should_failslab+0x8c/0xb0
[  129.145232][ T6299]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  129.145336][ T6299]  ? __alloc_skb+0x2db/0x6f0
[  129.145433][ T6299]  __alloc_skb+0x2db/0x6f0
[  129.145454][ T6299]  ? __alloc_skb+0x205/0x6f0
[  129.145477][ T6299]  netlink_ack+0xfd/0x530
[  129.145498][ T6299]  netlink_rcv_skb+0x18d/0x220
[  129.145517][ T6299]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  129.145589][ T6299]  nfnetlink_rcv+0x15f/0x1740
[  129.145682][ T6299]  ? __kfree_skb+0x109/0x150
[  129.145706][ T6299]  ? kmem_cache_free+0xca/0x380
[  129.145727][ T6299]  ? __kfree_skb+0x109/0x150
[  129.145812][ T6299]  ? nlmon_xmit+0x4f/0x60
[  129.145960][ T6299]  ? consume_skb+0x4b/0x130
[  129.145992][ T6299]  ? nlmon_xmit+0x4f/0x60
[  129.146016][ T6299]  ? dev_hard_start_xmit+0x34e/0x380
[  129.146048][ T6299]  ? __dev_queue_xmit+0x135e/0x1e60
[  129.146099][ T6299]  ? __dev_queue_xmit+0x151/0x1e60
[  129.146125][ T6299]  ? ref_tracker_free+0x380/0x3f0
[  129.146162][ T6299]  ? __netlink_deliver_tap+0x4e6/0x510
[  129.146207][ T6299]  netlink_unicast+0x5a7/0x680
[  129.146238][ T6299]  netlink_sendmsg+0x5be/0x6f0
[  129.146261][ T6299]  ? __pfx_netlink_sendmsg+0x10/0x10
[  129.146332][ T6299]  ____sys_sendmsg+0x532/0x580
[  129.146408][ T6299]  ___sys_sendmsg+0x195/0x1e0
[  129.146445][ T6299]  __x64_sys_sendmsg+0xd4/0x160
[  129.146549][ T6299]  x64_sys_call+0x194c/0x3020
[  129.146570][ T6299]  do_syscall_64+0x136/0x3c0
[  129.146600][ T6299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.146664][ T6299] RIP: 0033:0x7f5d54c3ce59
[  129.146722][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.146739][ T6299] RSP: 002b:00007f5d53676028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.146759][ T6299] RAX: ffffffffffffffda RBX: 00007f5d54eb6090 RCX: 00007f5d54c3ce59
[  129.146773][ T6299] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000005
[  129.146785][ T6299] RBP: 00007f5d53676090 R08: 0000000000000000 R09: 0000000000000000
[  129.146798][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.146937][ T6299] R13: 00007f5d54eb6128 R14: 00007f5d54eb6090 R15: 00007ffd56a27528
[  129.146973][ T6299]  </TASK>
[  129.147153][ T6295] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  129.149720][   T28] audit: type=1400 audit(1781771199.306:1155): avc:  denied  { connect } for  pid=6268 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  129.171311][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  129.174609][ T3847] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.175056][    C0] EXT4-fs (loop3): initial error at time 1781771199: ext4_iget_extra_inode:5128
[  129.179374][ T3847] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.183872][    C0] : inode 17
[  129.183894][    C0] EXT4-fs (loop3): last error at time 1781771199: ext4_iget_extra_inode:5128: inode 17
[  129.191508][   T28] audit: type=1400 audit(1781771199.356:1156): avc:  denied  { write } for  pid=6268 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  129.222173][ T6295] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.655: couldn't read orphan inode 17 (err -117)
[  129.276158][ T6274] loop0: detected capacity change from 0 to 512
[  129.286935][ T6303] loop6: detected capacity change from 0 to 512
[  129.300418][ T6295] loop3: lost filesystem error report for type 5 error -117
[  129.321220][ T6305] loop7: detected capacity change from 0 to 512
[  129.325734][ T6295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.343641][ T6303] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  129.421341][ T6274] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  129.449389][ T6291] EXT4-fs (loop3): shut down requested (0)
[  129.454918][ T6305] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  129.499446][ T6293] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.3.655: path /141/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  129.513742][ T6305] EXT4-fs (loop7): orphan cleanup on readonly fs
[  129.516980][ T6274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  129.531437][ T6305] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.659: bad orphan inode 17
[  129.546672][ T6309] FAULT_INJECTION: forcing a failure.
[  129.546672][ T6309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.556002][ T6295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.655'.
[  129.576261][ T6305] ext4_test_bit(bit=16, block=4) = 1
[  129.581777][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  129.581794][    C1] EXT4-fs (loop7): initial error at time 1781771199: ext4_orphan_get:1425
[  129.581818][    C1] EXT4-fs (loop7): last error at time 1781771199: ext4_orphan_get:1425
[  129.590063][ T6274] EXT4-fs (loop0): orphan cleanup on readonly fs
[  129.630588][ T6309] CPU: 1 UID: 0 PID: 6309 Comm: syz.5.660 Not tainted syzkaller #0 PREEMPT(lazy) 
[  129.630617][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  129.630630][ T6309] Call Trace:
[  129.630637][ T6309]  <TASK>
[  129.630646][ T6309]  __dump_stack+0x1d/0x30
[  129.630669][ T6309]  dump_stack_lvl+0x95/0xd0
[  129.630762][ T6309]  dump_stack+0x15/0x1b
[  129.630780][ T6309]  should_fail_ex+0x25e/0x270
[  129.630801][ T6309]  should_fail+0xb/0x20
[  129.630891][ T6309]  should_fail_usercopy+0x1a/0x20
[  129.630912][ T6309]  _copy_to_user+0x20/0xa0
[  129.630936][ T6309]  bpf_mprog_query+0x18f/0x560
[  129.630955][ T6309]  ? rtnl_is_locked+0x9/0x20
[  129.630987][ T6309]  tcx_prog_query+0xc4/0x110
[  129.631012][ T6309]  bpf_prog_query+0x14e/0x160
[  129.631039][ T6309]  __sys_bpf+0xb7f/0xc30
[  129.631074][ T6309]  __x64_sys_bpf+0x69/0x80
[  129.631098][ T6309]  x64_sys_call+0x10cb/0x3020
[  129.631264][ T6309]  do_syscall_64+0x136/0x3c0
[  129.631293][ T6309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.631313][ T6309] RIP: 0033:0x7fb95093ce59
[  129.631335][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.631353][ T6309] RSP: 002b:00007fb94f38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  129.631448][ T6309] RAX: ffffffffffffffda RBX: 00007fb950bb5fa0 RCX: 00007fb95093ce59
[  129.631463][ T6309] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000010
[  129.631475][ T6309] RBP: 00007fb94f38f090 R08: 0000000000000000 R09: 0000000000000000
[  129.631488][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.631500][ T6309] R13: 00007fb950bb6038 R14: 00007fb950bb5fa0 R15: 00007fffc51ed4f8
[  129.631594][ T6309]  </TASK>
[  129.644873][ T6305] is_bad_inode(inode)=0
[  129.663031][ T6274] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.649: Allocating blocks 41-42 which overlap fs metadata
[  129.673052][ T6305] NEXT_ORPHAN(inode)=0
[  129.712055][ T6274] EXT4-fs (loop0): Remounting filesystem read-only
[  129.718372][ T6305] max_ino=32
[  129.722399][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  129.727075][ T6305] i_nlink=1
[  129.731031][    C0] EXT4-fs (loop0): initial error at time 1781771199: ext4_mb_mark_diskspace_used:4222
[  129.736374][ T6305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  129.739861][    C0] 
[  129.739867][    C0] EXT4-fs (loop0): last error at time 1781771199: ext4_mb_mark_diskspace_used:4222
[  129.776390][ T6313] loop5: detected capacity change from 0 to 512
[  129.776617][    C0] 
[  129.810415][ T6313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.833234][ T5509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.852930][ T6274] Quota error (device loop0): write_blk: dquota write failed
[  129.979770][ T6274] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  129.982145][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.998859][ T6274] EXT4-fs (loop0): 1 truncate cleaned up
[  130.005172][ T6274] EXT4-fs (loop0): pa ffff88810819eee0: logic 1, phys. 41, len 23
[  130.013520][ T6274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  130.026936][ T6274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.049241][   T28] audit: type=1400 audit(1781771200.206:1157): avc:  denied  { setopt } for  pid=6315 comm="syz.7.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.086564][   T28] audit: type=1400 audit(1781771200.206:1158): avc:  denied  { bind } for  pid=6315 comm="syz.7.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.144295][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.220640][ T6323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.247982][ T6335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  130.273711][ T6323] EXT4-fs error (device loop6): ext4_ext_precache:648: inode #2: comm syz.6.666: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  130.293863][ T6335] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #17: comm syz.5.668: corrupted in-inode xattr: e_name out of bounds
[  130.321028][ T6335] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  130.321231][ T6335] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.668: couldn't read orphan inode 17 (err -117)
[  130.330499][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  130.330518][    C1] EXT4-fs (loop5): initial error at time 1781771200: ext4_iget_extra_inode:5128: inode 17
[  130.330546][    C1] EXT4-fs (loop5): last error at time 1781771200: ext4_iget_extra_inode:5128: inode 17
[  130.332428][ T6323] EXT4-fs (loop6): Remounting filesystem read-only
[  130.383262][ T6335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.402564][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.441532][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.453443][ T6328] EXT4-fs (loop5): shut down requested (0)
[  130.503504][ T6335] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.668: path /121/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  130.567862][ T6335] netlink: 32 bytes leftover after parsing attributes in process `syz.5.668'.
[  130.619650][ T6330] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  130.632455][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.635268][   T28] audit: type=1400 audit(1781771200.796:1159): avc:  denied  { ioctl } for  pid=6341 comm="syz.0.671" path="socket:[14934]" dev="sockfs" ino=14934 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  130.665999][ T6330] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.667: corrupted in-inode xattr: e_name out of bounds
[  130.693405][ T6330] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  130.694787][ T6330] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.667: couldn't read orphan inode 17 (err -117)
[  130.704538][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  130.704635][    C1] EXT4-fs (loop3): initial error at time 1781771200: ext4_iget_extra_inode:5128: inode 17
[  130.704815][    C1] EXT4-fs (loop3): last error at time 1781771200: ext4_iget_extra_inode:5128: inode 17
[  130.810111][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.905272][ T6330] fserror_report: 3 callbacks suppressed
[  130.905410][ T6330] loop3: lost filesystem error report for type 5 error -117
[  130.954883][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.034366][ T6356] can0: slcan on ttyS3.
[  131.079153][ T6330] EXT4-fs (loop3): shut down requested (0)
[  131.090084][ T6330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.667'.
[  131.100510][ T6356] can0 (unregistered): slcan off ttyS3.
[  131.305913][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.460929][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.460929][   T12] loop0: rw=1, sector=153, nr_sectors = 8 limit=128
[  131.474794][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.474794][   T12] loop0: rw=1, sector=169, nr_sectors = 8 limit=128
[  131.489002][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.489002][   T12] loop0: rw=1, sector=185, nr_sectors = 8 limit=128
[  131.502995][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.502995][   T12] loop0: rw=1, sector=201, nr_sectors = 8 limit=128
[  131.516827][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.516827][   T12] loop0: rw=1, sector=217, nr_sectors = 8 limit=128
[  131.530444][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.530444][   T12] loop0: rw=1, sector=233, nr_sectors = 8 limit=128
[  131.544204][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.544204][   T12] loop0: rw=1, sector=249, nr_sectors = 8 limit=128
[  131.557823][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.557823][   T12] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[  131.574360][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.574360][   T12] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[  131.587987][   T12] kworker/u8:0: attempt to access beyond end of device
[  131.587987][   T12] loop0: rw=1, sector=297, nr_sectors = 8 limit=128
[  131.782040][ T6364] set_capacity_and_notify: 5 callbacks suppressed
[  131.782054][ T6364] loop3: detected capacity change from 0 to 512
[  131.814117][ T6360] syzkaller0: entered promiscuous mode
[  131.819625][ T6360] syzkaller0: entered allmulticast mode
[  132.306066][ T6366] usb usb8: usbfs: process 6366 (syz.5.674) did not claim interface 0 before use
[  132.319537][ T6366] tc_dump_action: action bad kind
[  132.370804][ T6366] loop5: detected capacity change from 0 to 512
[  132.430406][  T310] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.506112][ T6364] EXT4-fs: Ignoring removed nobh option
[  132.542711][ T3847] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.583273][ T6366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.671513][ T6364] ext4: Unknown parameter 'dont_appraise'
[  132.744513][ T6371] loop6: detected capacity change from 0 to 512
[  132.790716][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.7.679'.
[  132.835754][ T6371] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  132.857721][ T6371] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #17: comm syz.6.680: corrupted in-inode xattr: e_name out of bounds
[  132.872202][ T6371] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  132.872845][ T6371] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.680: couldn't read orphan inode 17 (err -117)
[  132.882195][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  132.882247][    C1] EXT4-fs (loop6): initial error at time 1781771203: ext4_iget_extra_inode:5128: inode 17
[  132.882334][    C1] EXT4-fs (loop6): last error at time 1781771203: ext4_iget_extra_inode:5128: inode 17
[  132.973580][ T6371] loop6: lost filesystem error report for type 5 error -117
[  132.985676][ T6371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.985893][ T3847] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.040342][ T6371] EXT4-fs (loop6): shut down requested (0)
[  133.087896][ T6371] netlink: 32 bytes leftover after parsing attributes in process `syz.6.680'.
[  133.117363][ T3847] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.195177][ T6390] loop0: detected capacity change from 0 to 2048
[  133.264043][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.314304][ T6390] EXT4-fs error (device loop0): ext4_ext_precache:648: inode #2: comm syz.0.683: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  133.383167][ T6390] EXT4-fs (loop0): Remounting filesystem read-only
[  133.497627][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.539565][ T3016] veth0_vlan: left promiscuous mode
[  133.547331][ T3016] veth0_vlan: entered promiscuous mode
[  133.564439][ T6410] netlink: 100 bytes leftover after parsing attributes in process `syz.6.684'.
[  133.626839][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.733395][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.755817][ T6424] netlink: 164 bytes leftover after parsing attributes in process `syz.3.687'.
[  133.816721][ T6424] loop3: detected capacity change from 0 to 2048
[  133.848954][ T6442] xt_hashlimit: size too large, truncated to 1048576
[  133.855572][ T6444] tipc: Started in network mode
[  133.869235][ T6444] tipc: Node identity 567f5e84c57b, cluster identity 4711
[  133.877744][ T6444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.894795][ T6444] syzkaller0: entered promiscuous mode
[  133.901741][ T6424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.928702][ T6424] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.941100][ T6444] syzkaller0: entered allmulticast mode
[  133.967862][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.976802][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  133.976815][   T28] audit: type=1400 audit(1781771204.146:1165): avc:  denied  { write } for  pid=6422 comm="syz.3.687" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  134.059646][ T6448] bridge_slave_0 (unregistering): left allmulticast mode
[  134.098366][ T6448] bridge_slave_0 (unregistering): left promiscuous mode
[  134.114306][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.147048][ T6449] tipc: Resetting bearer <eth:syzkaller0>
[  134.163040][ T6410] netlink: 10 bytes leftover after parsing attributes in process `syz.6.684'.
[  134.193288][ T6454] netlink: 1348 bytes leftover after parsing attributes in process `syz.5.692'.
[  134.257547][ T6460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.355463][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.393828][ T3075] IPVS: starting estimator thread 0...
[  134.550402][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.697'.
[  134.574783][ T6477] usb usb8: usbfs: process 6477 (syz.5.695) did not claim interface 0 before use
[  134.587773][ T6477] tc_dump_action: action bad kind
[  134.636605][ T6477] loop5: detected capacity change from 0 to 512
[  134.674792][ T6469] IPVS: using max 2400 ests per chain, 120000 per kthread
[  135.098067][ T6482] loop0: detected capacity change from 0 to 512
[  135.108058][ T6482] EXT4-fs: inline encryption not supported
[  135.174728][ T6482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  135.183842][ T6482] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  135.203048][ T6477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.246101][   T28] audit: type=1400 audit(1781771205.396:1166): avc:  denied  { write } for  pid=6461 comm="syz.5.695" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  135.338155][ T6482] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  135.405360][ T3420] tipc: Node number set to 2466537092
[  135.429637][ T6482] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.700: bg 0: block 248: padding at end of block bitmap is not set
[  135.447487][ T6482] loop0: lost filesystem error report for type 5 error -117
[  135.452090][ T6482] Quota error (device loop0): write_blk: dquota write failed
[  135.467389][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  135.467430][    C0] EXT4-fs (loop0): last error at time 1781771205: ext4_validate_block_bitmap:441
[  135.483926][ T6482] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  135.494172][ T6482] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.700: Failed to acquire dquot type 1
[  135.505560][ T6482] loop0: lost filesystem error report for type 5 error -28
[  135.509256][ T6482] EXT4-fs (loop0): 1 truncate cleaned up
[  135.526921][ T6482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  135.638899][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.800650][ T6482] syz.0.700 (6482) used greatest stack depth: 7872 bytes left
[  135.862632][ T6495] tipc: Started in network mode
[  135.882557][ T6495] tipc: Node identity , cluster identity 4711
[  135.890787][ T6497] loop6: detected capacity change from 0 to 512
[  135.902197][ T6495] tipc: Failed to obtain node identity
[  135.914004][ T6497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  135.938886][ T6495] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  135.964115][ T6497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.001239][ T6497] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.042294][ T6497] netlink: 'syz.6.705': attribute type 1 has an invalid length.
[  136.066032][ T6497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.107046][ T6497] SELinux:  Context system_u:object_r:kvm_devi is not valid (left unmapped).
[  136.206779][   T28] audit: type=1400 audit(1781771206.266:1167): avc:  denied  { watch } for  pid=6496 comm="syz.6.705" path="/125/bus" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  136.249598][ T6505] netlink: 'syz.7.707': attribute type 10 has an invalid length.
[  136.277499][ T6505] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  136.310344][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.322455][   T28] audit: type=1400 audit(1781771206.266:1168): avc:  denied  { write } for  pid=6496 comm="syz.6.705" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  136.369490][   T28] audit: type=1400 audit(1781771206.266:1169): avc:  denied  { create } for  pid=6496 comm="syz.6.705" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  136.415417][   T28] audit: type=1400 audit(1781771206.266:1170): avc:  denied  { mac_admin } for  pid=6496 comm="syz.6.705" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  136.437936][ T6507] netlink: 1348 bytes leftover after parsing attributes in process `syz.7.709'.
[  136.481582][ T6509] loop5: detected capacity change from 0 to 512
[  136.542837][   T28] audit: type=1400 audit(1781771206.396:1171): avc:  denied  { relabelto } for  pid=6496 comm="syz.6.705" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_devi"
[  136.546161][ T6509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  136.593226][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  136.629805][ T6517] netlink: 100 bytes leftover after parsing attributes in process `syz.7.712'.
[  136.721764][ T6522] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  136.854201][ T6522] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  136.871182][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.6.708'.
[  136.926879][ T6526] syzkaller0: entered promiscuous mode
[  136.953995][ T6526] syzkaller0: entered allmulticast mode
[  137.350340][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.393673][   T28] audit: type=1400 audit(1781771207.556:1172): avc:  denied  { kexec_image_load } for  pid=6548 comm="syz.5.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  137.417432][ T6550] loop5: detected capacity change from 0 to 256
[  137.431756][ T6550] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.456973][ T6517] netlink: 10 bytes leftover after parsing attributes in process `syz.7.712'.
[  137.466626][ T6550] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.525653][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.725'.
[  137.612645][ T6542] loop0: detected capacity change from 0 to 512
[  137.615050][ T6560] loop5: detected capacity change from 0 to 2048
[  137.629631][ T6565] tipc: Started in network mode
[  137.641802][ T6542] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  137.651830][ T6565] tipc: Node identity fe5494f6d0b7, cluster identity 4711
[  137.651874][ T6565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.652254][ T6565] syzkaller0: entered promiscuous mode
[  137.652271][ T6565] syzkaller0: entered allmulticast mode
[  137.655500][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[  137.685864][ T6564] tipc: Resetting bearer <eth:syzkaller0>
[  137.696910][ T6542] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #17: comm syz.0.721: corrupted in-inode xattr: e_name out of bounds
[  137.711711][ T6564] tipc: Disabling bearer <eth:syzkaller0>
[  137.721206][ T6542] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  137.727318][ T6542] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.721: couldn't read orphan inode 17 (err -117)
[  137.736719][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  137.736888][    C0] EXT4-fs (loop0): initial error at time 1781771207: ext4_iget_extra_inode:5128: inode 17
[  137.737109][    C0] EXT4-fs (loop0): last error at time 1781771207: ext4_iget_extra_inode:5128: inode 17
[  137.742864][ T6560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.774549][ T6542] loop0: lost filesystem error report for type 5 error -117
[  137.785983][ T6560] EXT4-fs error (device loop5): ext4_ext_precache:648: inode #2: comm syz.5.727: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  137.812004][ T6542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.833129][ T6560] EXT4-fs (loop5): Remounting filesystem read-only
[  137.850958][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.851849][ T6542] EXT4-fs (loop0): shut down requested (0)
[  137.858484][ T6577] batadv_slave_0: entered promiscuous mode
[  137.906009][ T6542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.721'.
[  137.933253][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.147513][ T6591] netlink: 48 bytes leftover after parsing attributes in process `syz.7.735'.
[  138.150830][ T6597] netlink: 100 bytes leftover after parsing attributes in process `syz.5.740'.
[  138.171614][ T6599] tipc: Started in network mode
[  138.180408][ T6599] tipc: Node identity a2d94229d0bc, cluster identity 4711
[  138.187901][ T6599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.196606][ T6599] syzkaller0: entered promiscuous mode
[  138.202350][ T6599] syzkaller0: entered allmulticast mode
[  138.215007][ T6599] tipc: Resetting bearer <eth:syzkaller0>
[  138.221805][ T6598] tipc: Resetting bearer <eth:syzkaller0>
[  138.229428][ T6598] tipc: Disabling bearer <eth:syzkaller0>
[  138.293111][ T6597] netlink: 10 bytes leftover after parsing attributes in process `syz.5.740'.
[  138.303376][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.322084][ T6602] netlink: 100 bytes leftover after parsing attributes in process `syz.0.742'.
[  138.417908][ T6608] loop6: detected capacity change from 0 to 512
[  138.529247][ T6610] loop3: detected capacity change from 0 to 2048
[  138.590286][ T6610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.604866][ T6623] loop5: detected capacity change from 0 to 256
[  138.652568][ T6610] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.746: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  138.703126][ T6610] EXT4-fs (loop3): Remounting filesystem read-only
[  138.724409][ T6629] loop6: detected capacity change from 0 to 512
[  138.760341][ T6629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  138.817103][ T6629] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #17: comm syz.6.752: corrupted in-inode xattr: e_name out of bounds
[  138.871043][ T6638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.875093][ T6629] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  138.881313][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  138.896918][    C1] EXT4-fs (loop6): initial error at time 1781771209: ext4_iget_extra_inode:5128: inode 17
[  138.901269][ T6638] syzkaller0: entered promiscuous mode
[  138.906889][    C1] EXT4-fs (loop6): last error at time 1781771209: ext4_iget_extra_inode:5128: inode 17
[  138.912988][ T6629] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.752: couldn't read orphan inode 17 (err -117)
[  138.930089][ T6638] syzkaller0: entered allmulticast mode
[  138.934198][ T6629] loop6: lost filesystem error report for type 5 error -117
[  138.941638][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.947316][ T6638] tipc: Resetting bearer <eth:syzkaller0>
[  138.964321][ T6629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.989694][ T6637] tipc: Resetting bearer <eth:syzkaller0>
[  139.003536][ T6637] tipc: Disabling bearer <eth:syzkaller0>
[  139.029631][ T6628] EXT4-fs (loop6): shut down requested (0)
[  139.080415][ T6629] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.6.752: path /138/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  139.171187][ T6660] loop3: detected capacity change from 0 to 256
[  139.200706][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.273991][ T6671] loop6: detected capacity change from 0 to 512
[  139.309815][ T6671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.335410][ T6674] can0: slcan on ttyS3.
[  139.351937][ T6672] loop7: detected capacity change from 0 to 2048
[  139.360383][ T6671] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.391937][ T6671] ext4: Bad value for 'stripe'
[  139.392461][ T6672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.392517][   T28] kauditd_printk_skb: 38 callbacks suppressed
[  139.392529][   T28] audit: type=1400 audit(1781771209.556:1211): avc:  denied  { remount } for  pid=6670 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  139.442010][ T6674] can0 (unregistered): slcan off ttyS3.
[  139.441987][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.452825][ T6672] EXT4-fs error (device loop7): ext4_ext_precache:648: inode #2: comm syz.7.768: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  139.474024][ T6672] EXT4-fs (loop7): Remounting filesystem read-only
[  139.512230][   T28] audit: type=1326 audit(1781771209.676:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abac6ce59 code=0x7ffc0000
[  139.538476][   T28] audit: type=1326 audit(1781771209.706:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6673 comm="syz.0.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f7abac6ce59 code=0x7ffc0000
[  139.579560][ T5509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.626306][   T28] audit: type=1400 audit(1781771209.786:1214): avc:  denied  { bind } for  pid=6697 comm="syz.7.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  139.670203][   T28] audit: type=1400 audit(1781771209.816:1215): avc:  denied  { write } for  pid=6682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.688995][ T6703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.695659][   T28] audit: type=1400 audit(1781771209.826:1216): avc:  denied  { write } for  pid=6706 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.724262][ T6703] syzkaller0: entered promiscuous mode
[  139.729847][ T6703] syzkaller0: entered allmulticast mode
[  139.739381][ T6703] tipc: Resetting bearer <eth:syzkaller0>
[  139.754351][ T6701] tipc: Resetting bearer <eth:syzkaller0>
[  139.764144][ T6701] tipc: Disabling bearer <eth:syzkaller0>
[  139.844414][   T28] audit: type=1400 audit(1781771210.006:1217): avc:  denied  { write } for  pid=6708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.889486][   T28] audit: type=1400 audit(1781771210.046:1218): avc:  denied  { write } for  pid=6726 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  139.932394][ T6729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  139.969827][ T6729] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #17: comm syz.5.775: corrupted in-inode xattr: e_name out of bounds
[  139.984003][ T6729] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  139.985396][ T6729] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.775: couldn't read orphan inode 17 (err -117)
[  139.994637][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  139.994652][    C0] EXT4-fs (loop5): initial error at time 1781771210: ext4_iget_extra_inode:5128: inode 17
[  139.994687][    C0] EXT4-fs (loop5): last error at time 1781771210: ext4_iget_extra_inode:5128: inode 17
[  140.032453][ T6729] loop5: lost filesystem error report for type 5 error -117
[  140.034614][ T6729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.063656][ T6711] EXT4-fs (loop5): shut down requested (0)
[  140.247932][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.292921][ T6742] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.782: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  140.310267][ T6742] EXT4-fs (loop3): Remounting filesystem read-only
[  140.380477][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.391052][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.395098][ T6756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.408877][ T6756] syzkaller0: entered promiscuous mode
[  140.422893][ T6756] syzkaller0: entered allmulticast mode
[  140.480200][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[  140.488641][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[  140.508254][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[  140.646977][ T6776] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  140.662318][ T6765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.678442][ T6776] syzkaller0: entered promiscuous mode
[  140.684340][ T6765] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.696338][ T6776] syzkaller0: entered allmulticast mode
[  140.710118][   T28] audit: type=1400 audit(1781771210.866:1219): avc:  denied  { write } for  pid=6764 comm="syz.6.791" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.742661][ T6776] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  140.765067][   T28] audit: type=1400 audit(1781771210.926:1220): avc:  denied  { write } for  pid=6781 comm="syz.0.798" path="socket:[16691]" dev="sockfs" ino=16691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  140.971507][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.972706][ T6787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.012249][ T6787] EXT4-fs error (device loop5): ext4_ext_precache:648: inode #2: comm syz.5.799: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  141.040922][ T6787] EXT4-fs (loop5): Remounting filesystem read-only
[  141.123430][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.170521][ T6789] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  141.195884][ T6789] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.800: corrupted in-inode xattr: e_name out of bounds
[  141.214476][ T6803] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.237122][ T6789] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  141.237805][ T6789] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.800: couldn't read orphan inode 17 (err -117)
[  141.247636][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  141.247705][    C0] EXT4-fs (loop3): initial error at time 1781771211: ext4_iget_extra_inode:5128: inode 17
[  141.247856][    C0] EXT4-fs (loop3): last error at time 1781771211: ext4_iget_extra_inode:5128: inode 17
[  141.291448][ T6789] loop3: lost filesystem error report for type 5 error -117
[  141.297356][ T6789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.341033][ T6789] EXT4-fs (loop3): shut down requested (0)
[  141.562370][ T6825] __nla_validate_parse: 10 callbacks suppressed
[  141.562397][ T6825] netlink: 1348 bytes leftover after parsing attributes in process `syz.6.813'.
[  141.753976][ T6834] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  141.802091][ T6834] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #17: comm syz.6.815: corrupted in-inode xattr: e_name out of bounds
[  141.827577][ T6834] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  141.827784][ T6834] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.815: couldn't read orphan inode 17 (err -117)
[  141.836973][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  141.836994][    C1] EXT4-fs (loop6): initial error at time 1781771211: ext4_iget_extra_inode:5128: inode 17
[  141.837044][    C1] EXT4-fs (loop6): last error at time 1781771211: ext4_iget_extra_inode:5128: inode 17
[  141.875111][ T6834] loop6: lost filesystem error report for type 5 error -117
[  141.875739][ T6834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.896280][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.907586][ T6830] EXT4-fs (loop6): shut down requested (0)
[  141.974756][ T6842] tipc: Started in network mode
[  141.995070][ T6842] tipc: Node identity 9223e752c08c, cluster identity 4711
[  142.011394][ T6842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.031881][ T6842] syzkaller0: entered promiscuous mode
[  142.034356][ T6823] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  142.043382][ T6842] syzkaller0: entered allmulticast mode
[  142.084988][ T6823] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #17: comm syz.5.812: corrupted in-inode xattr: e_name out of bounds
[  142.103394][ T6842] tipc: Resetting bearer <eth:syzkaller0>
[  142.103679][ T6823] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  142.111318][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  142.126894][    C0] EXT4-fs (loop5): initial error at time 1781771212: ext4_iget_extra_inode:5128: inode 17
[  142.133146][ T6823] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.812: couldn't read orphan inode 17 (err -117)
[  142.136830][    C0] EXT4-fs (loop5): last error at time 1781771212: ext4_iget_extra_inode:5128: inode 17
[  142.159288][ T6841] tipc: Resetting bearer <eth:syzkaller0>
[  142.178826][ T6841] tipc: Disabling bearer <eth:syzkaller0>
[  142.209139][ T6823] loop5: lost filesystem error report for type 5 error -117
[  142.215628][ T6823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.304926][ T3834] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.349272][ T6860] netlink: 1348 bytes leftover after parsing attributes in process `syz.6.825'.
[  142.376692][ T6823] EXT4-fs (loop5): shut down requested (0)
[  142.425438][ T6826] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.5.812: path /147/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  142.579879][ T3685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.713149][ T6879] set_capacity_and_notify: 8 callbacks suppressed
[  142.713165][ T6879] loop7: detected capacity change from 0 to 512
[  142.728444][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'.
[  142.738103][ T6879] ext4: Bad value for 'debug_want_extra_isize'
[  142.748420][ T6880] ip6erspan0: entered promiscuous mode
[  142.757654][ T6867] netlink: 32 bytes leftover after parsing attributes in process `syz.7.828'.
[  142.885336][ T6874] loop5: detected capacity change from 0 to 32768
[  142.912851][ T6867] loop7: detected capacity change from 0 to 512
[  142.946455][ T6867] FAT-fs (loop7): Directory bread(block 199916) failed
[  142.956589][ T6874]  loop5: p1 p3 < >
[  142.978999][ T6887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.984275][ T6867] FAT-fs (loop7): Directory bread(block 199917) failed
[  142.994810][ T6887] syzkaller0: entered promiscuous mode
[  143.007435][ T6887] syzkaller0: entered allmulticast mode
[  143.020267][ T6867] FAT-fs (loop7): Directory bread(block 199918) failed
[  143.040503][ T6867] FAT-fs (loop7): Directory bread(block 199919) failed
[  143.044631][ T6887] tipc: Resetting bearer <eth:syzkaller0>
[  143.050915][ T6867] FAT-fs (loop7): Directory bread(block 199920) failed
[  143.073173][ T6867] FAT-fs (loop7): Directory bread(block 199921) failed
[  143.085323][ T6886] tipc: Resetting bearer <eth:syzkaller0>
[  143.091640][ T6867] FAT-fs (loop7): Directory bread(block 199922) failed
[  143.105526][ T6867] FAT-fs (loop7): Directory bread(block 199923) failed
[  143.113871][ T6886] tipc: Disabling bearer <eth:syzkaller0>
[  143.128521][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  143.146387][ T6891] loop5: detected capacity change from 0 to 512
[  143.158321][ T6893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.837'.
[  143.171378][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  143.191843][ T6891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.218373][ T6891] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.483118][ T6902] netlink: 48 bytes leftover after parsing attributes in process `syz.7.841'.
[  143.541053][ T6907] netlink: 48 bytes leftover after parsing attributes in process `syz.3.843'.
[  143.660847][ T6916] xt_hashlimit: size too large, truncated to 1048576
[  143.754158][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.770249][ T6923] FAULT_INJECTION: forcing a failure.
[  143.770249][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.794393][ T6921] bridge_slave_0 (unregistering): left allmulticast mode
[  143.810262][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.7.848 Not tainted syzkaller #0 PREEMPT(lazy) 
[  143.810360][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  143.810372][ T6923] Call Trace:
[  143.810379][ T6923]  <TASK>
[  143.810388][ T6923]  __dump_stack+0x1d/0x30
[  143.810409][ T6923]  dump_stack_lvl+0x95/0xd0
[  143.810426][ T6923]  dump_stack+0x15/0x1b
[  143.810540][ T6920] loop6: detected capacity change from 0 to 2048
[  143.810567][ T6923]  should_fail_ex+0x25e/0x270
[  143.810590][ T6923]  should_fail+0xb/0x20
[  143.810605][ T6923]  should_fail_usercopy+0x1a/0x20
[  143.810673][ T6923]  _copy_to_user+0x20/0xa0
[  143.810699][ T6923]  simple_read_from_buffer+0xb5/0x130
[  143.810766][ T6923]  proc_fail_nth_read+0x10e/0x150
[  143.810795][ T6923]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  143.810833][ T6923]  vfs_read+0x18e/0x7c0
[  143.810889][ T6923]  ? __rcu_read_unlock+0x4e/0x70
[  143.810967][ T6923]  ? __fget_files+0x184/0x1c0
[  143.811016][ T6923]  ? mutex_lock+0x57/0x90
[  143.811132][ T6923]  ksys_read+0xdc/0x1a0
[  143.811158][ T6923]  __x64_sys_read+0x40/0x50
[  143.811182][ T6923]  x64_sys_call+0x2886/0x3020
[  143.811283][ T6923]  do_syscall_64+0x136/0x3c0
[  143.811384][ T6923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.811464][ T6923] RIP: 0033:0x7fa557e4d68e
[  143.811480][ T6923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  143.811563][ T6923] RSP: 002b:00007fa5568defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  143.811584][ T6923] RAX: ffffffffffffffda RBX: 00007fa5568df6c0 RCX: 00007fa557e4d68e
[  143.811597][ T6923] RDX: 000000000000000f RSI: 00007fa5568df0a0 RDI: 0000000000000003
[  143.811610][ T6923] RBP: 00007fa5568df090 R08: 0000000000000000 R09: 0000000000000000
[  143.811694][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.811720][ T6923] R13: 00007fa558106038 R14: 00007fa558105fa0 R15: 00007ffdda76f308
[  143.811791][ T6923]  </TASK>
[  143.963915][ T6921] bridge_slave_0 (unregistering): left promiscuous mode
[  144.056695][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.093268][ T6920] EXT4-fs error (device loop6): ext4_ext_precache:648: inode #2: comm syz.6.847: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  144.171536][ T6920] EXT4-fs (loop6): Remounting filesystem read-only
[  144.241041][ T6939] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.289368][ T6941] netlink: 44 bytes leftover after parsing attributes in process `syz.5.851'.
[  144.423816][ T6957] loop7: detected capacity change from 0 to 512
[  144.442163][ T6957] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  144.454574][ T6957] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #17: comm syz.7.852: corrupted in-inode xattr: e_name out of bounds
[  144.468840][ T6957] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  144.469038][ T6957] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.852: couldn't read orphan inode 17 (err -117)
[  144.478339][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  144.478354][    C0] EXT4-fs (loop7): initial error at time 1781771214: ext4_iget_extra_inode:5128: inode 17
[  144.478385][    C0] EXT4-fs (loop7): last error at time 1781771214: ext4_iget_extra_inode:5128: inode 17
[  144.516521][ T6957] loop7: lost filesystem error report for type 5 error -117
[  144.526576][ T6945] EXT4-fs (loop7): shut down requested (0)
[  144.545008][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  144.545021][   T28] audit: type=1400 audit(1781771214.676:1224): avc:  denied  { mount } for  pid=6953 comm="syz.3.858" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  144.603622][ T6964] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  144.607971][   T28] audit: type=1400 audit(1781771214.676:1225): avc:  denied  { search } for  pid=6953 comm="syz.3.858" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.612966][ T6957] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.7.852: path /75/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  144.634791][   T28] audit: type=1400 audit(1781771214.676:1226): avc:  denied  { search } for  pid=6953 comm="syz.3.858" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.672389][ T6967] syzkaller0: entered promiscuous mode
[  144.695966][ T6949] netlink: 48 bytes leftover after parsing attributes in process `syz.5.855'.
[  144.708078][   T28] audit: type=1400 audit(1781771214.676:1227): avc:  denied  { search } for  pid=6953 comm="syz.3.858" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.730360][ T6967] syzkaller0: entered allmulticast mode
[  144.732774][   T28] audit: type=1400 audit(1781771214.676:1228): avc:  denied  { write search } for  pid=6953 comm="syz.3.858" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.738152][ T6964] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  144.758662][   T28] audit: type=1400 audit(1781771214.676:1229): avc:  denied  { add_name } for  pid=6953 comm="syz.3.858" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  144.766463][   T28] audit: type=1400 audit(1781771214.686:1230): avc:  denied  { create } for  pid=6953 comm="syz.3.858" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  144.945364][ T6978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.048136][ T6978] syzkaller0: entered promiscuous mode
[  145.055730][   T28] audit: type=1400 audit(1781771215.216:1231): avc:  denied  { create } for  pid=6980 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  145.088388][ T6978] syzkaller0: entered allmulticast mode
[  145.106317][   T28] audit: type=1400 audit(1781771215.236:1232): avc:  denied  { sys_admin } for  pid=6980 comm="syz.0.863" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  145.137636][ T6978] tipc: Resetting bearer <eth:syzkaller0>
[  145.166188][ T6977] tipc: Resetting bearer <eth:syzkaller0>
[  145.176532][ T6977] tipc: Disabling bearer <eth:syzkaller0>
[  145.200719][   T28] audit: type=1400 audit(1781771215.356:1233): avc:  denied  { ioctl } for  pid=6997 comm="syz.6.865" path="socket:[17410]" dev="sockfs" ino=17410 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  145.248191][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.865'.
[  145.609063][ T7044] loop7: detected capacity change from 0 to 256
[  145.643750][ T7029] loop6: detected capacity change from 0 to 512
[  145.667865][ T7044] sg_write: data in/out 412636/74 bytes for SCSI command 0x0-- guessing data in;
[  145.667865][ T7044]    program syz.7.873 not setting count and/or reply_len properly
[  145.685801][ T7029] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  145.706146][ T7029] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #17: comm syz.6.871: corrupted in-inode xattr: e_name out of bounds
[  145.720697][ T7029] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  145.721200][ T7029] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.871: couldn't read orphan inode 17 (err -117)
[  145.742421][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  145.742452][    C0] EXT4-fs (loop6): initial error at time 1781771215: ext4_iget_extra_inode:5128: inode 17
[  145.742522][    C0] EXT4-fs (loop6): last error at time 1781771215: ext4_iget_extra_inode:5128: inode 17
[  145.769629][ T7029] loop6: lost filesystem error report for type 5 error -117
[  145.781822][ T7029] EXT4-fs (loop6): shut down requested (0)
[  145.994643][ T7053] loop6: detected capacity change from 0 to 256
[  146.011713][ T7053] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.073360][ T7056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.081759][ T7056] syzkaller0: entered promiscuous mode
[  146.087424][ T7056] syzkaller0: entered allmulticast mode
[  146.110011][ T7056] tipc: Resetting bearer <eth:syzkaller0>
[  146.122784][ T7055] tipc: Resetting bearer <eth:syzkaller0>
[  146.133419][ T7055] tipc: Disabling bearer <eth:syzkaller0>
[  146.213379][ T7060] can0: slcan on ttyS3.
[  146.292471][ T7060] can0 (unregistered): slcan off ttyS3.
[  146.301748][ T7073] loop6: detected capacity change from 0 to 256
[  146.331278][ T7073] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.951405][ T7097] ==================================================================
[  146.959510][ T7097] BUG: KCSAN: data-race in touch_atime / touch_atime
[  146.966186][ T7097] 
[  146.968497][ T7097] write to 0xffff888113ccd6b0 of 4 bytes by task 7099 on cpu 0:
[  146.976119][ T7097]  touch_atime+0x1cb/0x300
[  146.980535][ T7097]  shmem_file_read_iter+0x3ed/0x4b0
[  146.985730][ T7097]  copy_splice_read+0x47a/0x6b0
[  146.990579][ T7097]  splice_direct_to_actor+0x27c/0x680
[  146.996046][ T7097]  do_splice_direct+0x119/0x1a0
[  147.000897][ T7097]  do_sendfile+0x37d/0x640
[  147.005308][ T7097]  __x64_sys_sendfile64+0x105/0x150
[  147.010495][ T7097]  x64_sys_call+0x2dc4/0x3020
[  147.015172][ T7097]  do_syscall_64+0x136/0x3c0
[  147.019772][ T7097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.025657][ T7097] 
[  147.027975][ T7097] read to 0xffff888113ccd6b0 of 4 bytes by task 7097 on cpu 1:
[  147.035510][ T7097]  touch_atime+0x162/0x300
[  147.039935][ T7097]  shmem_file_read_iter+0x3ed/0x4b0
[  147.045131][ T7097]  copy_splice_read+0x47a/0x6b0
[  147.049981][ T7097]  splice_direct_to_actor+0x27c/0x680
[  147.055357][ T7097]  do_splice_direct+0x119/0x1a0
[  147.060215][ T7097]  do_sendfile+0x37d/0x640
[  147.064630][ T7097]  __x64_sys_sendfile64+0x105/0x150
[  147.069825][ T7097]  x64_sys_call+0x2dc4/0x3020
[  147.074501][ T7097]  do_syscall_64+0x136/0x3c0
[  147.079088][ T7097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.084979][ T7097] 
[  147.087306][ T7097] value changed: 0x06584f4a -> 0x06f0e5ca
[  147.093010][ T7097] 
[  147.095330][ T7097] Reported by Kernel Concurrency Sanitizer on:
[  147.101472][ T7097] CPU: 1 UID: 0 PID: 7097 Comm: syz.5.887 Not tainted syzkaller #0 PREEMPT(lazy) 
[  147.110663][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  147.120714][ T7097] ==================================================================
[  147.423466][ T7103] vfat: Unknown parameter 'Q/NH�u�}�ݫ���v��l.7���\v�Rjr���cA��Q�K���y���ޏ��lU�U�ZW�Z���K��
[  147.423466][ T7103] %��+5o��m�R�6kn{T�5�TE����PF�0�Z�����JC�͆�WU��P�m�TQ������$�ͅ#�c�r��
�ղƈ��k�oe@'
[  149.961377][    T9] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec
[  151.321406][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!