last executing test programs:

1m21.124648255s ago: executing program 2 (id=461):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="231803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c000200", 0x10}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

1m21.078877847s ago: executing program 2 (id=462):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
pipe2$9p(&(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80800)
vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1)
r5 = mq_open(&(0x7f00000003c0)='ttl\x00', 0x40, 0x16, &(0x7f0000000400)={0x8, 0x3, 0x1, 0x7fff})
mq_timedreceive(r5, &(0x7f0000000540)=""/55, 0x37, 0x100, &(0x7f0000000bc0))
fcntl$setpipe(r3, 0x407, 0x176)
vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd)
vmsplice(r3, &(0x7f00000018c0)=[{&(0x7f0000000100)="91", 0x1}], 0x1, 0x5)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140))
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = syz_io_uring_setup(0x1230, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000200)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}})
io_uring_enter(r8, 0x3532, 0x32c9, 0x45, 0x0, 0x0)
listen(r7, 0xe)
syz_io_uring_complete(r9)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000063000000850000008a0000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m20.089737491s ago: executing program 2 (id=472):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="231803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c000200", 0x10}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

1m19.962801928s ago: executing program 2 (id=475):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008046, &(0x7f0000000100), 0x1, 0x560, &(0x7f0000000680)="$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")
openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
write(r1, &(0x7f00000001c0)="165651df2134789284", 0x9)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x234b, 0xa2, 0x0, 'queue1\x00'})
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
fallocate(r0, 0x8, 0x1000000, 0x10000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffff888237c17250)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

1m19.616440006s ago: executing program 2 (id=477):
syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f0000000140)=<r0=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x100480, 0x1, 0x10}, 0x18)
unshare(0x20000400)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x20000400)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814)

1m18.68446005s ago: executing program 2 (id=485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x19, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x2, 0xfffffffd, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x1, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, {[@ra={0x94, 0x4}]}}}}})
sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5fb, 0x3c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0)

1m18.638731192s ago: executing program 32 (id=485):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x19, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x2, 0xfffffffd, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x1, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, {[@ra={0x94, 0x4}]}}}}})
sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5fb, 0x3c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0)

7.703142261s ago: executing program 4 (id=1043):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffffffffcda}, 0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

7.645235101s ago: executing program 4 (id=1045):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x7, 0x2, {0x5, 'hsr0\x00'}}, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
io_uring_enter(0xffffffffffffffff, 0x56d7, 0xf70d, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')
read$eventfd(r2, &(0x7f0000000280), 0x8)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)
ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000040))
sendto$llc(r5, &(0x7f0000000900)="1076fd1cbfcb22c2331e7393836dacb917a3cc81f2c8065771bac4e90a31c93a29eace88d8bef1f70e0d63cc301b6b37432b3e6d8eabe66238257899bce904da24a92817c40b180457f57ed2e41e2392dd7c52fc72e16015f871fa022343aba38d80722c3f5834529ae05c6bccb106c49369962b485f3979d1928f", 0x7b, 0x8040, &(0x7f0000000080)={0x1a, 0x8, 0xfa, 0x1, 0x9, 0x3, @remote}, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10)
write(r5, 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x40003f02)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff)
fsetxattr$security_ima(r3, &(0x7f0000000340), &(0x7f0000000380)=@sha1={0x1, "4daddfbcb7469a4acbd40a4688d105fa0290db0d"}, 0x15, 0x1)
syz_emit_ethernet(0x72, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "dace98", 0x34, 0x6, 0xff, @local, @local, {[@hopopts={0x3a}], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb, 0x3048ecfc61d8ad6e, 0x2, 0x4, 0x0, 0x1, 0x9, 0x5, 0x1, 0x2, 0x1, 0x0, 0x4e23, 0x4e22}, 0x2}, 0x3, 0x3}, 0x2}}}}}}}}, &(0x7f00000000c0)={0x1, 0x3, [0xee3, 0x87, 0x4ea, 0x240]})
dup3(r3, r4, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x0, [0x5, 0x0, 0xfffffff5]}, &(0x7f0000000300)=0x44)

6.635334551s ago: executing program 5 (id=1059):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x5885, 0x0, 0xfffffffe}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.998343309s ago: executing program 4 (id=1066):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b52, 0x0)
r0 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000240)="08f059530b087b7a887e62102a4bf1f10f6688496da4000a90fdf32fe5627f1a9959d6728ea5a45aa16f0d84357d3aa0a1523f14656fdc26f77807060f1ef489d2faf241a0189a139a4b8fa35057f3787d7462e539797e9c92e6d3f489a39a58c69bc7bbe05e4f197cf777c7f75496c6c6ee977a90d021eb9da1b9adbd7d1995d9a2fc27be0ade2ea5ad9b2967273fba03f0c3739f", 0x95)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000003c0)=0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000f80))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48)

4.5491747s ago: executing program 5 (id=1071):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000020000100fcfffffffedbdf2500fc020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x4}}]}}}]}, 0x5c}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000019480))
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback, 0xb}, 0x1c)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @c}, 0x29, 0x0)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="757064baaa88ba8f8e6a92af48f7bb937a296174652064"], 0x17, r4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00')
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
sendto$inet(r6, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r6, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090240010000000000010100"], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)
ioctl$TIOCSCTTY(r5, 0x540e, 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)

3.036905151s ago: executing program 3 (id=1075):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xb, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000002100)=""/219, 0xdb}], 0x2}, 0x80000000}], 0x1, 0x40000000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.937312923s ago: executing program 4 (id=1076):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100"/28], 0x48)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>0x0, 0x29, 0x5, 0x6, 0xb, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0, 0x7, 0x0, 0x3, 0x8001}})
recvfrom(r1, &(0x7f0000001180)=""/203, 0xcb, 0x0, &(0x7f0000001280)=@ll={0x11, 0x18, r2, 0x1, 0x30, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000001c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f00000010c0)=@ethtool_rxfh_indir={0x39}})
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4)
stat(&(0x7f0000001300)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x1000)
fchown(r5, r6, r7)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.802001329s ago: executing program 4 (id=1077):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x80000000000006}, 0x0, 0x0, 0x10000, 0x4, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8dd1, 0xa88, 0x1, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1800f2a2cf8601ff", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250a00000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x20000080)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv")
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00')
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d0000000200000004000000ff3f000000000000", @ANYRES32, @ANYBLOB="1d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="11000000020000000000aa000400000006000000000008000000000000008000cbd9c908e34606b5665e64"], 0x50)
capset(&(0x7f0000000040)={0x19980330}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_open_dev$sg(0x0, 0x6f5e, 0x2d42)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r6, 0x0, 0x0, 0x20008000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getsockopt$inet_opts(r0, 0x0, 0x40000000000000d, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

2.366865601s ago: executing program 5 (id=1079):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000680)={[{@delalloc}, {@data_err_abort}, {@nombcache}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x55f, &(0x7f0000001dc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000a, 0x7}, 0x8781, 0x2000000, 0x5, 0x9, 0x0, 0x10, 0xfffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, 0x0, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/4096, 0x1000}}, 0x10)
fallocate(r6, 0x10, 0x6, 0x10001)
socket$packet(0x11, 0x2, 0x300)

2.208597323s ago: executing program 0 (id=1081):
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x200004ffc000)

2.157077694s ago: executing program 0 (id=1082):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a84821, &(0x7f0000000080)=ANY=[@ANYBLOB=','])

2.049409305s ago: executing program 3 (id=1083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r2=>0x0)
ptrace(0x10, r2)
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/mnt\x00')
setns(r3, 0x8000000)
close(r0)
pread64(r0, &(0x7f00000001c0)=""/203, 0xcb, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x5, 0x45, 0x9, 0x3}, {0xfffd, 0x81, 0x6, 0xfffffffb}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0xc00, 0x0)
r5 = syz_clone(0x40000, &(0x7f0000000440)="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", 0xff, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="63e80c2849fcb19e9e80fc09dbf64f1963e535c2170392bfacd81aef60da04d5a3c7d4a319267aa7247f0e248899cbd08282b54fdb14e25bb86eda0411feea9701d0bef0a2d2237088187766b2432b34d4220ea94be029afe7ad4e35e0acc31b6ef3848e15e14162dba8947f5dc9fcee98f151f846d5387be96fd18dce58f93cfe87a0d94e7933ec0d1a50a3ebcb885ce4136c1c39ef13dea88a44859b46dd6dbbef6127885711ba7c03799b5815eddede93881b75db")
ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000680)={r5, 0x0, 0xfffffffc})
r6 = fspick(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = syz_open_pts(0xffffffffffffffff, 0x800)
ioctl$VT_RELDISP(r7, 0x5605)
ioctl$TIOCSBRK(r7, 0x5427)
r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x2, 0x51, 0x7, 0x9}, {0x201, 0x4, 0x2, 0x9}]}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x40)
r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/attr/current\x00', 0x2, 0x0)
fremovexattr(r11, &(0x7f0000000980)=@random={'btrfs.', './binderfs/binder1\x00'})
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000009c0))
epoll_create1(0x80000)

2.008051067s ago: executing program 0 (id=1084):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0xcf, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x2, 0x78, 0x7, 0x9}, [{0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}, {0x70000000, 0x2, 0xc, 0x43fb, 0xfff, 0xe94, 0x0, 0x7ff}]}, 0xb0)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000240)=0x3)
close(r0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106000, 0x10004, 0x209a, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1.975337421s ago: executing program 3 (id=1085):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
msync(&(0x7f00008f1000/0x2000)=nil, 0x2000, 0x5) (async)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xff, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x3, 0x8, 0x20, 0xff, 0x0, 0x2}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x2, 0x4)

1.581435361s ago: executing program 3 (id=1086):
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x1, 0x1}, 0xc)
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="76a8cca8d385041a6f3cf769663e12bdb1ece68b41019e306974c244a80f5183c337a9e00ef08d8fb64bb48ea4edce0043b73755ad7c009effce6b88f861ec45d23099745e9e473ae2a35e3601b63e323e95ebe8ed4a4d20c85aaccfc7d56458f50d555877fb3221f168e52fc7c995ccd169efbeea60d7638bd07a8cae0ac4f1b819eff318b8a1e5d87f91df7d4b7ff3f94a3f5b322477b969491f93f643152600144b88d87c0d297f255c9b4e7b41ff98c61a21a86e8d81c4ef834c3be5367f"], 0x158}, 0x1, 0xba01}, 0x44)

1.46322489s ago: executing program 3 (id=1087):
perf_event_open(&(0x7f0000000040)={0x2, 0xa8, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x80000000000006}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x2, 0x56d, 0x2}, 0x50)
prctl$PR_SET_DUMPABLE(0x35, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

937.050717ms ago: executing program 0 (id=1088):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000280)={0xa, 0x4c22, 0x80, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfe59}, 0xdb30}], 0x3fffffffffffe38, 0x40002142, 0x0)
r1 = syz_io_uring_setup(0x4a2, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x8000, 0xfd}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x16, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)={0x200000, 0x0, 0x5}, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x18})
io_uring_enter(r1, 0x627, 0x400d143, 0x49, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0xa8, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x80000000000006}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x5, &(0x7f0000000000)={0x2, 0x2, 0x7fffffffffffffff, 0x8a9})
syz_emit_ethernet(0x138, &(0x7f0000000940)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x102, 0x3a, 0xff, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0xfff8, 0x7, "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"}}}}}}, 0x0)

882.882687ms ago: executing program 1 (id=1089):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xa8, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x80000000000006}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbee9, 0x110, 0xffffffffffffffff, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00')

781.519199ms ago: executing program 1 (id=1090):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000)
prlimit64(0xffffffffffffffff, 0x8, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca2d410}, 0x4008840)
socketpair(0x28, 0x4, 0x9, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r0], 0x9)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30)

780.232438ms ago: executing program 4 (id=1091):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000020000100fcfffffffedbdf2500fc020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x4}}]}}}]}, 0x5c}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pipe(&(0x7f0000019480))
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback, 0xb}, 0x1c)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @c}, 0x29, 0x0)
r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="757064baaa88ba8f8e6a92af48f7bb937a296174652064"], 0x17, r4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt6_stats\x00')
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
sendto$inet(r6, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r6, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090240010000000000010100"], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)
ioctl$TIOCSCTTY(r5, 0x540e, 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)

720.029968ms ago: executing program 1 (id=1092):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0x200004ffc000)

645.486535ms ago: executing program 0 (id=1093):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a000000f4f0902880029e58000000850000001500000095000000005e2768b2d1f0f64434454161315e6668607e16ddd813b628"], &(0x7f0000000000)='GPL\x00'}, 0x80)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r1, 0xee01, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8112, 0x0, 0x5e44, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000)

635.681613ms ago: executing program 1 (id=1094):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x80, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001400030500008000ffdbdf25020751ff", @ANYRES32=r6, @ANYBLOB="080002007f000001080004b8"], 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, 0x0, 0x0, 0x18}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}, @generic={0x45}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ffffffe}, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

477.650664ms ago: executing program 1 (id=1095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f85b4141691c148c61bcdf1e4220000000001008048244a48fb6cfbe939ca28f23457e792945f64009400050028925aaa000000c600480000000000feff2c707f8f00ff", 0x58}], 0x1)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)

412.803073ms ago: executing program 5 (id=1096):
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x22b0040, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001d00010000000000000000100a00100021"], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x713, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000faffffff8500000011000000faffffffffffffff"], 0x0, 0x2}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex:\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close(r8)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r9, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x1, 0x14, 0x8000054, 0x0})
socket$kcm(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94)

251.181664ms ago: executing program 0 (id=1097):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000188004000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x800)

169.4596ms ago: executing program 1 (id=1098):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)

168.98694ms ago: executing program 5 (id=1099):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0xcf, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x2, 0x78, 0x7, 0x9}, [{0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}, {0x70000000, 0x2, 0xc, 0x43fb, 0xfff, 0xe94, 0x0, 0x7ff}]}, 0xb0)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
close(r0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106000, 0x10004, 0x209a, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

165.137269ms ago: executing program 3 (id=1100):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xb081}, [@IFLA_LINKINFO={0xffffffffffffff59, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4040844)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x48, 0x3, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff8, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@local, 0x800, 0x1, 0xff, 0x9, 0x0, 0x8}, 0x20)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)

0s ago: executing program 5 (id=1101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000002140)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRESOCT], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
close(0x3)
r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000800000000000000000000000000020000", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x81, r7, 0x0, 0x0, 0x1}}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0xa8, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x80000000000006}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r9, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20600, 0xe)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="fff10000", @ANYRES16=r10, @ANYBLOB="01002dbc70000000000001f1ffff04000400020000267f0333ff1dfeb900"], 0x24}}, 0x0)
writev(r8, &(0x7f0000000180), 0x100000000000003c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  120.492404][ T6773] Call Trace:
[  120.492412][ T6773]  <TASK>
[  120.492420][ T6773]  __dump_stack+0x1d/0x30
[  120.492448][ T6773]  dump_stack_lvl+0x95/0xd0
[  120.492519][ T6773]  dump_stack+0x15/0x1b
[  120.492578][ T6773]  should_fail_ex+0x263/0x280
[  120.492602][ T6773]  should_fail+0xb/0x20
[  120.492634][ T6773]  should_fail_usercopy+0x1a/0x20
[  120.492669][ T6773]  _copy_from_user+0x1c/0xb0
[  120.492697][ T6773]  kstrtouint_from_user+0x69/0xf0
[  120.492720][ T6773]  proc_fail_nth_write+0x50/0x160
[  120.492793][ T6773]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  120.492830][ T6773]  vfs_write+0x269/0x9f0
[  120.492860][ T6773]  ? __rcu_read_unlock+0x4e/0x70
[  120.492882][ T6773]  ? __fget_files+0x184/0x1c0
[  120.492977][ T6773]  ? mutex_lock+0x57/0x90
[  120.493004][ T6773]  ksys_write+0xdc/0x1a0
[  120.493048][ T6773]  __x64_sys_write+0x40/0x50
[  120.493175][ T6773]  x64_sys_call+0x27e1/0x3020
[  120.493289][ T6773]  do_syscall_64+0x12c/0x370
[  120.493310][ T6773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.493332][ T6773] RIP: 0033:0x7fc58317cfce
[  120.493350][ T6773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  120.493406][ T6773] RSP: 002b:00007fc581c0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  120.493428][ T6773] RAX: ffffffffffffffda RBX: 00007fc581c0f6c0 RCX: 00007fc58317cfce
[  120.493470][ T6773] RDX: 0000000000000001 RSI: 00007fc581c0f0a0 RDI: 0000000000000004
[  120.493484][ T6773] RBP: 00007fc581c0f090 R08: 0000000000000000 R09: 0000000000000000
[  120.493497][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.493510][ T6773] R13: 00007fc583436038 R14: 00007fc583435fa0 R15: 00007ffdc5dbb188
[  120.493578][ T6773]  </TASK>
[  120.708403][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.709957][ T6778] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.609: couldn't read orphan inode 26 (err -116)
[  120.710022][ T6778] loop4: lost filesystem error report for type 5 error -116
[  120.710929][ T6778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.711001][ T6778] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.752563][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.761387][   T28] audit: type=1326 audit(1772571905.331:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcdac799 code=0x7ffc0000
[  120.761441][   T28] audit: type=1326 audit(1772571905.331:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22bcdac799 code=0x7ffc0000
[  120.761466][   T28] audit: type=1326 audit(1772571905.331:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcdac799 code=0x7ffc0000
[  120.761495][   T28] audit: type=1326 audit(1772571905.331:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6782 comm="syz.3.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22bcdac799 code=0x7ffc0000
[  120.802872][ T6828] netlink: 'syz.4.614': attribute type 10 has an invalid length.
[  121.141861][ T6856] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.619'.
[  121.344778][ T6860] loop4: detected capacity change from 0 to 1024
[  121.463727][ T6860] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  121.525190][ T6863] loop5: detected capacity change from 0 to 1024
[  121.596418][ T6867] loop3: detected capacity change from 0 to 256
[  121.625016][ T6863] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264)
[  121.637241][ T6860] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  121.684981][ T6863] EXT4-fs (loop5): group descriptors corrupted!
[  121.691738][ T6860] JBD2: no valid journal superblock found
[  121.708703][ T6860] EXT4-fs (loop4): Could not load journal inode
[  121.717213][ T6863] loop5: detected capacity change from 0 to 164
[  121.728058][ T6863] iso9660: Unknown parameter 'appraise'
[  121.999733][ T6917] program syz.3.628 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.003263][ T6923] netlink: 'syz.0.630': attribute type 14 has an invalid length.
[  122.066265][ T6945] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.632'.
[  122.137950][ T6970] netlink: 'syz.0.636': attribute type 10 has an invalid length.
[  122.150405][ T6927] loop4: detected capacity change from 0 to 512
[  122.173823][ T6927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.202957][ T3381] IPVS: starting estimator thread 0...
[  122.234736][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.269690][ T6982] loop0: detected capacity change from 0 to 1764
[  122.328023][ T6976] IPVS: using max 2640 ests per chain, 132000 per kthread
[  122.382707][ T6994] loop4: detected capacity change from 0 to 764
[  122.727595][ T7042] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.646'.
[  122.797362][ T7048] netlink: 'syz.0.647': attribute type 10 has an invalid length.
[  122.888247][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.645'.
[  122.937899][   T30] IPVS: stop unused estimator thread 0...
[  122.969954][ T1887] Bluetooth: hci0: Frame reassembly failed (-84)
[  123.013513][ T7100] loop5: detected capacity change from 0 to 512
[  123.064236][ T7100] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  123.167146][ T7100] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal
[  123.204137][ T7146] netlink: 'syz.0.656': attribute type 14 has an invalid length.
[  123.217986][ T7100] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  123.375481][ T7166] loop3: detected capacity change from 0 to 512
[  123.386383][ T7166] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  123.425985][ T7178] netlink: 'syz.4.659': attribute type 2 has an invalid length.
[  123.428238][ T7166] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  123.491646][ T7178] netlink: 'syz.4.659': attribute type 1 has an invalid length.
[  123.502624][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  123.502639][   T28] audit: type=1400 audit(1772571908.251:833): avc:  denied  { create } for  pid=7165 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  123.525636][ T7178] netlink: 152 bytes leftover after parsing attributes in process `syz.4.659'.
[  123.656267][ T7196] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  123.666550][   T28] audit: type=1400 audit(1772571908.311:834): avc:  denied  { bind } for  pid=7165 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  123.687689][   T28] audit: type=1400 audit(1772571908.361:835): avc:  denied  { accept } for  pid=7165 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  123.700544][ T7196] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  123.747740][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  123.754390][    C0] EXT4-fs (loop0): initial error at time 1772571908: ext4_mb_generate_buddy:1315
[  123.763853][    C0] EXT4-fs (loop0): last error at time 1772571908: ext4_mb_generate_buddy:1315
[  123.794535][ T7196] EXT4-fs (loop0): 1 truncate cleaned up
[  123.808612][ T7196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.846309][ T7207] netlink: 'syz.3.663': attribute type 10 has an invalid length.
[  123.882916][ T7196] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  123.892384][ T7196] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.0.662: path /130/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0
[  123.948428][ T7196] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  123.969742][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.013868][ T7217] netlink: 'syz.3.667': attribute type 14 has an invalid length.
[  124.077187][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'.
[  124.110476][ T7237] bridge_slave_1: left allmulticast mode
[  124.116340][ T7237] bridge_slave_1: left promiscuous mode
[  124.141714][   T28] audit: type=1400 audit(1772571908.891:836): avc:  denied  { getopt } for  pid=7232 comm="syz.3.668" lport=42552 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  124.155121][ T7235] msdos: Unknown parameter 'trans'
[  124.186337][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.219052][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.361857][   T28] audit: type=1400 audit(1772571909.111:837): avc:  denied  { getopt } for  pid=7262 comm="syz.4.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.366632][ T7286] netlink: get zone limit has 4 unknown bytes
[  124.403201][ T7288] Symlink component flag not implemented
[  124.409526][ T7288] Symlink component flag not implemented (116)
[  124.504303][ T7303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.514256][   T28] audit: type=1400 audit(1772571909.251:838): avc:  denied  { ioctl } for  pid=7262 comm="syz.4.670" path="socket:[13719]" dev="sockfs" ino=13719 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  124.542411][ T7303] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.687807][ T7317] Symlink component flag not implemented
[  124.693861][ T7317] Symlink component flag not implemented (116)
[  124.728719][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.816603][   T28] audit: type=1400 audit(1772571909.561:839): avc:  denied  { unmount } for  pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  124.849229][ T7345] geneve2: entered promiscuous mode
[  124.877842][ T7330] rock: directory entry would overflow storage
[  124.897816][ T7330] rock: sig=0x5252, size=5, remaining=3
[  125.017901][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  125.018320][ T7096] Bluetooth: hci0: command 0x1003 tx timeout
[  125.043535][   T28] audit: type=1400 audit(1772571909.781:840): avc:  denied  { execute_no_trans } for  pid=7342 comm="syz.0.683" path="/135/file0" dev="tmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  125.188974][ T7377] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.212265][ T7377] EXT4-fs: test_dummy_encryption option not supported
[  125.234319][ T7382] EXT4-fs: Ignoring removed nobh option
[  125.268421][ T7382] EXT4-fs (loop5): 1 orphan inode deleted
[  125.301064][ T7382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.343532][ T7394] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.355997][ T7394] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.462586][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.526612][ T7379] chnl_net:caif_netlink_parms(): no params data found
[  125.606554][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.613981][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.622060][ T7379] bridge_slave_0: entered allmulticast mode
[  125.631876][ T7379] bridge_slave_0: entered promiscuous mode
[  125.639889][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.647198][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.654613][ T7379] bridge_slave_1: entered allmulticast mode
[  125.661474][ T7379] bridge_slave_1: entered promiscuous mode
[  125.695076][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.704855][ T7520] validate_nla: 4 callbacks suppressed
[  125.704869][ T7520] netlink: 'syz.5.693': attribute type 10 has an invalid length.
[  125.706453][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.727619][ T7539] set_capacity_and_notify: 8 callbacks suppressed
[  125.727638][ T7539] loop0: detected capacity change from 0 to 512
[  125.754295][ T7379] team0: Port device team_slave_0 added
[  125.763510][ T7379] team0: Port device team_slave_1 added
[  125.785447][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.794349][ T7539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.795847][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.817911][ T7539] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.832915][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.854825][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.862156][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.884559][ T7539] EXT4-fs warning (device loop0): ext4_group_add:1715: Can't resize non-sparse filesystem further
[  125.888971][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.927749][ T7379] hsr_slave_0: entered promiscuous mode
[  125.933993][ T7379] hsr_slave_1: entered promiscuous mode
[  125.940184][ T7379] debugfs: 'hsr0' already exists in 'hsr'
[  125.945981][ T7379] Cannot create hsr debugfs directory
[  126.030257][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.048573][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.169635][ T7659] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.698'.
[  126.289046][ T7379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.380632][ T7379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.399421][   T28] audit: type=1400 audit(1772571911.141:841): avc:  denied  { write } for  pid=7695 comm="syz.0.701" path="socket:[13976]" dev="sockfs" ino=13976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  126.430767][ T7701] netlink: 'syz.1.702': attribute type 14 has an invalid length.
[  126.494534][ T7379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.788830][ T7722] netlink: 'syz.5.705': attribute type 10 has an invalid length.
[  128.401742][ T7717] loop0: detected capacity change from 0 to 512
[  128.444901][ T7717] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.547572][ T7718] loop1: detected capacity change from 0 to 512
[  128.592167][ T7718] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.619798][ T7379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.600289][   T28] audit: type=1400 audit(1772571915.341:842): avc:  denied  { firmware_load } for  pid=7729 comm="syz.5.706" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  130.693982][ T7731] loop5: detected capacity change from 0 to 512
[  130.705901][ T7731] EXT4-fs: Ignoring removed nobh option
[  130.713842][ T7731] EXT4-fs: Ignoring removed orlov option
[  130.757906][ T7731] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 1: comm syz.5.706: invalid block
[  130.782875][ T7379] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  130.803963][ T7765] pim6reg1: entered promiscuous mode
[  130.811154][ T7765] pim6reg1: entered allmulticast mode
[  130.816906][ T7774] loop0: detected capacity change from 0 to 764
[  130.817467][ T7731] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  130.823354][ T7379] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  130.834586][ T7731] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.706: couldn't read orphan inode 11 (err -117)
[  130.839408][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  130.839427][    C0] EXT4-fs (loop5): initial error at time 1772571915: __ext4_iget:5378: inode 11: block 1
[  130.839479][    C0] EXT4-fs (loop5): last error at time 1772571915: __ext4_iget:5378: inode 11: block 1
[  130.873397][ T7739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.707'.
[  130.887276][ T7731] loop5: lost filesystem error report for type 5 error -117
[  130.891317][ T7731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.892709][ T7739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=7739 comm=syz.4.707
[  130.899128][ T7379] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  130.951358][ T7379] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  130.958593][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.968234][ T7774] Symlink component flag not implemented
[  130.974092][ T7774] Symlink component flag not implemented (116)
[  131.049998][   T28] audit: type=1400 audit(1772571915.791:843): avc:  denied  { accept } for  pid=7807 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  131.099304][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.100770][   T28] audit: type=1400 audit(1772571915.791:844): avc:  denied  { getopt } for  pid=7807 comm="syz.0.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  131.143373][ T7379] 8021q: adding VLAN 0 to HW filter on device team0
[  131.156815][ T1663] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.164091][ T1663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.190387][ T1663] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.197788][ T1663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.201923][   T28] audit: type=1326 audit(1772571915.941:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.1.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5831bc799 code=0x0
[  131.250348][ T7379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.297612][ T7847] netlink: 'syz.0.717': attribute type 10 has an invalid length.
[  131.344237][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.376672][   T28] audit: type=1400 audit(1772571916.121:846): avc:  denied  { write } for  pid=7861 comm="syz.0.718" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  131.399901][ T7862] random: crng reseeded on system resumption
[  131.410139][ T7862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.718'.
[  131.463661][ T7871] wireguard0: entered promiscuous mode
[  131.476038][ T7871] wireguard0: entered allmulticast mode
[  131.524112][ T7379] veth0_vlan: entered promiscuous mode
[  131.534655][ T7379] veth1_vlan: entered promiscuous mode
[  131.554530][ T7379] veth0_macvtap: entered promiscuous mode
[  131.563573][ T7379] veth1_macvtap: entered promiscuous mode
[  131.576271][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.587661][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.604300][  T362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.616145][  T362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.632233][  T362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.659291][  T362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.745603][   T28] audit: type=1400 audit(1772571916.491:847): avc:  denied  { append } for  pid=7901 comm="syz.0.722" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  131.844001][ T7902] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[  131.872988][ T7902] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[  131.886064][ T7942] loop3: detected capacity change from 0 to 512
[  131.903886][   T28] audit: type=1400 audit(1772571916.651:848): avc:  denied  { append } for  pid=7944 comm="syz.5.724" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  131.904380][ T7946] 9p: Bad value for 'rfdno'
[  131.938937][ T7942] EXT4-fs: inline encryption not supported
[  131.949400][ T7942] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  131.976825][ T7942] EXT4-fs (loop3): 1 truncate cleaned up
[  131.993149][ T7942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.052937][   T28] audit: type=1400 audit(1772571916.801:849): avc:  denied  { write } for  pid=7941 comm="syz.3.723" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  132.076863][   T28] audit: type=1400 audit(1772571916.801:850): avc:  denied  { open } for  pid=7941 comm="syz.3.723" path="/1/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  132.102075][ T7942] netlink: 'syz.3.723': attribute type 2 has an invalid length.
[  132.143518][ T7976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.728'.
[  132.195997][   T28] audit: type=1400 audit(1772571916.941:851): avc:  denied  { read append } for  pid=7941 comm="syz.3.723" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  132.242790][  T362] Bluetooth: hci0: Frame reassembly failed (-84)
[  132.252007][ T7993] netlink: 830 bytes leftover after parsing attributes in process `syz.5.731'.
[  132.256742][ T7988] loop0: detected capacity change from 0 to 512
[  132.270925][ T7379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.280378][ T7988] EXT4-fs: Ignoring removed oldalloc option
[  132.292841][ T8005] netlink: 'syz.1.734': attribute type 10 has an invalid length.
[  132.324013][ T7988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.730: Parent and EA inode have the same ino 15
[  132.337060][ T7988] loop0: lost filesystem error report for type 5 error -117
[  132.337744][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  132.351647][    C1] EXT4-fs (loop0): initial error at time 1772571917: ext4_xattr_inode_iget:437
[  132.351679][    C1] EXT4-fs (loop0): last error at time 1772571917: ext4_xattr_inode_iget:437
[  132.354878][ T7988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.730: Parent and EA inode have the same ino 15
[  132.383586][ T7988] loop0: lost filesystem error report for type 5 error -117
[  132.393754][ T7988] EXT4-fs (loop0): 1 orphan inode deleted
[  132.418454][ T7988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.498088][ T8036] team0 (unregistering): Port device team_slave_0 removed
[  132.553870][ T8036] team0 (unregistering): Port device team_slave_1 removed
[  132.598884][ T8060] netlink: 180 bytes leftover after parsing attributes in process `syz.5.738'.
[  132.622975][ T8060] netlink: 48 bytes leftover after parsing attributes in process `syz.5.738'.
[  132.666490][ T8076] FAULT_INJECTION: forcing a failure.
[  132.666490][ T8076] name failslab, interval 1, probability 0, space 0, times 0
[  132.666542][ T8076] CPU: 0 UID: 0 PID: 8076 Comm: syz.4.741 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  132.666630][ T8076] Tainted: [W]=WARN
[  132.666638][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  132.666652][ T8076] Call Trace:
[  132.666660][ T8076]  <TASK>
[  132.666669][ T8076]  __dump_stack+0x1d/0x30
[  132.666702][ T8076]  dump_stack_lvl+0x95/0xd0
[  132.666724][ T8076]  dump_stack+0x15/0x1b
[  132.666780][ T8076]  should_fail_ex+0x263/0x280
[  132.666878][ T8076]  ? kobject_uevent_env+0x1c0/0x570
[  132.666903][ T8076]  should_failslab+0x8c/0xb0
[  132.666924][ T8076]  __kmalloc_cache_noprof+0x5f/0x410
[  132.667025][ T8076]  ? _raw_spin_lock_irq+0x53/0xb0
[  132.667055][ T8076]  kobject_uevent_env+0x1c0/0x570
[  132.667081][ T8076]  kobject_uevent+0x1d/0x30
[  132.667174][ T8076]  device_del+0x70f/0x790
[  132.667205][ T8076]  device_destroy+0x66/0xa0
[  132.667286][ T8076]  vcs_remove_sysfs+0x21/0x60
[  132.667311][ T8076]  vc_deallocate+0x106/0x250
[  132.667368][ T8076]  vt_disallocate_all+0x175/0x200
[  132.667410][ T8076]  vt_ioctl+0x15c7/0x18d0
[  132.667434][ T8076]  ? tty_jobctrl_ioctl+0x29c/0x810
[  132.667542][ T8076]  tty_ioctl+0x7d7/0xb80
[  132.667578][ T8076]  ? __pfx_tty_ioctl+0x10/0x10
[  132.667667][ T8076]  __se_sys_ioctl+0xce/0x140
[  132.667777][ T8076]  __x64_sys_ioctl+0x43/0x50
[  132.667892][ T8076]  x64_sys_call+0x1563/0x3020
[  132.667943][ T8076]  do_syscall_64+0x12c/0x370
[  132.667966][ T8076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.667989][ T8076] RIP: 0033:0x7f19f927c799
[  132.668049][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.668066][ T8076] RSP: 002b:00007f19f7cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  132.668086][ T8076] RAX: ffffffffffffffda RBX: 00007f19f94f5fa0 RCX: 00007f19f927c799
[  132.668100][ T8076] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  132.668112][ T8076] RBP: 00007f19f7cd7090 R08: 0000000000000000 R09: 0000000000000000
[  132.668128][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.668143][ T8076] R13: 00007f19f94f6038 R14: 00007f19f94f5fa0 R15: 00007ffc2c203d68
[  132.668165][ T8076]  </TASK>
[  132.782512][ T8093] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8093 comm=syz.5.745
[  133.056637][ T8110] loop4: detected capacity change from 0 to 128
[  133.065074][ T8110] /dev/loop4: Can't open blockdev
[  133.201083][ T8133] loop5: detected capacity change from 0 to 1024
[  133.216010][ T8137] loop4: detected capacity change from 0 to 512
[  133.225489][ T8133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.238909][ T8137] netlink: 48 bytes leftover after parsing attributes in process `syz.4.753'.
[  133.257688][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'.
[  133.282613][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.329495][ T8157] loop5: detected capacity change from 0 to 512
[  133.338529][ T8157] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.754: inode has both inline data and extents flags
[  133.352073][ T8157] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  133.352281][ T8157] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.754: couldn't read orphan inode 15 (err -117)
[  133.367730][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  133.373545][ T8157] loop5: lost filesystem error report for type 5 error -117
[  133.379813][    C0] EXT4-fs (loop5): initial error at time 1772571918: ext4_orphan_get:1391: inode 15
[  133.379848][    C0] EXT4-fs (loop5): last error at time 1772571918: ext4_orphan_get:1391
[  133.388676][ T8157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback.
[  133.396551][    C0] 
[  133.457556][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000070000.
[  133.501196][ T8180] FAULT_INJECTION: forcing a failure.
[  133.501196][ T8180] name failslab, interval 1, probability 0, space 0, times 0
[  133.501232][ T8180] CPU: 0 UID: 0 PID: 8180 Comm: syz.5.759 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  133.501261][ T8180] Tainted: [W]=WARN
[  133.501282][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.501294][ T8180] Call Trace:
[  133.501314][ T8180]  <TASK>
[  133.501323][ T8180]  __dump_stack+0x1d/0x30
[  133.501352][ T8180]  dump_stack_lvl+0x95/0xd0
[  133.501377][ T8180]  dump_stack+0x15/0x1b
[  133.501459][ T8180]  should_fail_ex+0x263/0x280
[  133.501483][ T8180]  should_failslab+0x8c/0xb0
[  133.501583][ T8180]  __kmalloc_noprof+0xb8/0x4e0
[  133.501677][ T8180]  ? kobject_get_path+0x92/0x1c0
[  133.501704][ T8180]  kobject_get_path+0x92/0x1c0
[  133.501731][ T8180]  kobject_uevent_env+0x1da/0x570
[  133.501829][ T8180]  kobject_uevent+0x1d/0x30
[  133.501859][ T8180]  device_del+0x70f/0x790
[  133.501892][ T8180]  device_destroy+0x66/0xa0
[  133.501995][ T8180]  vcs_remove_sysfs+0x21/0x60
[  133.502020][ T8180]  vc_deallocate+0x106/0x250
[  133.502046][ T8180]  vt_disallocate_all+0x175/0x200
[  133.502082][ T8180]  vt_ioctl+0x15c7/0x18d0
[  133.502131][ T8180]  ? tty_jobctrl_ioctl+0x29c/0x810
[  133.502166][ T8180]  tty_ioctl+0x7d7/0xb80
[  133.502189][ T8180]  ? __pfx_tty_ioctl+0x10/0x10
[  133.502213][ T8180]  __se_sys_ioctl+0xce/0x140
[  133.502344][ T8180]  __x64_sys_ioctl+0x43/0x50
[  133.502373][ T8180]  x64_sys_call+0x1563/0x3020
[  133.502426][ T8180]  do_syscall_64+0x12c/0x370
[  133.502447][ T8180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.502527][ T8180] RIP: 0033:0x7fa8b2fac799
[  133.502545][ T8180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.502603][ T8180] RSP: 002b:00007fa8b19ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.502627][ T8180] RAX: ffffffffffffffda RBX: 00007fa8b3225fa0 RCX: 00007fa8b2fac799
[  133.502641][ T8180] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  133.502653][ T8180] RBP: 00007fa8b19ff090 R08: 0000000000000000 R09: 0000000000000000
[  133.502666][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.502677][ T8180] R13: 00007fa8b3226038 R14: 00007fa8b3225fa0 R15: 00007ffe4a87eb28
[  133.502699][ T8180]  </TASK>
[  133.827831][ T8215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.764'.
[  133.845244][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  133.980109][ T8274] loop4: detected capacity change from 0 to 128
[  133.989725][ T8275] loop5: detected capacity change from 0 to 512
[  134.000501][ T8274] FAT-fs (loop4): bogus number of directory entries (65286)
[  134.008334][ T8274] FAT-fs (loop4): Can't find a valid FAT filesystem
[  134.018425][ T8275] EXT4-fs: Ignoring removed nobh option
[  134.056957][ T8275] EXT4-fs (loop5): 1 orphan inode deleted
[  134.075781][ T8275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.124590][ T8315] FAULT_INJECTION: forcing a failure.
[  134.124590][ T8315] name failslab, interval 1, probability 0, space 0, times 0
[  134.124705][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.1.774 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  134.124815][ T8315] Tainted: [W]=WARN
[  134.124822][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  134.124834][ T8315] Call Trace:
[  134.124842][ T8315]  <TASK>
[  134.124850][ T8315]  __dump_stack+0x1d/0x30
[  134.124881][ T8315]  dump_stack_lvl+0x95/0xd0
[  134.124908][ T8315]  dump_stack+0x15/0x1b
[  134.124967][ T8315]  should_fail_ex+0x263/0x280
[  134.125001][ T8315]  should_failslab+0x8c/0xb0
[  134.125023][ T8315]  kmem_cache_alloc_node_noprof+0x6d/0x460
[  134.125059][ T8315]  ? __alloc_skb+0x2d6/0x690
[  134.125168][ T8315]  __alloc_skb+0x2d6/0x690
[  134.125191][ T8315]  ? __alloc_skb+0x200/0x690
[  134.125253][ T8315]  alloc_uevent_skb+0x5c/0x120
[  134.125283][ T8315]  kobject_uevent_net_broadcast+0x23c/0x410
[  134.125374][ T8315]  kobject_uevent_env+0x43d/0x570
[  134.125408][ T8315]  kobject_uevent+0x1d/0x30
[  134.125436][ T8315]  device_del+0x70f/0x790
[  134.125536][ T8315]  device_destroy+0x66/0xa0
[  134.125558][ T8315]  vcs_remove_sysfs+0x21/0x60
[  134.125624][ T8315]  vc_deallocate+0x106/0x250
[  134.125727][ T8315]  vt_disallocate_all+0x175/0x200
[  134.125767][ T8315]  vt_ioctl+0x15c7/0x18d0
[  134.125791][ T8315]  ? tty_jobctrl_ioctl+0x29c/0x810
[  134.125825][ T8315]  tty_ioctl+0x7d7/0xb80
[  134.125886][ T8315]  ? __pfx_tty_ioctl+0x10/0x10
[  134.125908][ T8315]  __se_sys_ioctl+0xce/0x140
[  134.125944][ T8315]  __x64_sys_ioctl+0x43/0x50
[  134.126052][ T8315]  x64_sys_call+0x1563/0x3020
[  134.126137][ T8315]  do_syscall_64+0x12c/0x370
[  134.126162][ T8315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.126296][ T8315] RIP: 0033:0x7fc5831bc799
[  134.126388][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.126455][ T8315] RSP: 002b:00007fc581c0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.126476][ T8315] RAX: ffffffffffffffda RBX: 00007fc583435fa0 RCX: 00007fc5831bc799
[  134.126493][ T8315] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  134.126508][ T8315] RBP: 00007fc581c0f090 R08: 0000000000000000 R09: 0000000000000000
[  134.126522][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.126537][ T8315] R13: 00007fc583436038 R14: 00007fc583435fa0 R15: 00007ffdc5dbb188
[  134.126558][ T8315]  </TASK>
[  134.226263][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.277934][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  134.280912][ T7096] Bluetooth: hci0: command 0x1003 tx timeout
[  134.334045][ T8328] loop5: detected capacity change from 0 to 512
[  134.460835][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.518712][ T8328] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  134.574002][ T8328] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  134.633116][ T8328] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.775: bad orphan inode 4
[  134.777284][ T8328] loop5: lost filesystem error report for type 5 error -117
[  134.777770][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  134.791813][    C1] EXT4-fs (loop5): initial error at time 1772571919: ext4_orphan_get:1417
[  134.800380][    C1] EXT4-fs (loop5): last error at time 1772571919: ext4_orphan_get:1417
[  134.813089][ T8328] EXT4-fs (loop5): 1 orphan inode deleted
[  134.881048][ T8328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.738848][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.841760][ T8378] loop5: detected capacity change from 0 to 1024
[  135.906682][ T8378] EXT4-fs: Ignoring removed orlov option
[  136.061153][ T8378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.116592][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.195167][ T8439] loop1: detected capacity change from 0 to 1024
[  136.204439][ T8439] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  136.218533][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.5.790'.
[  136.228303][ T8439] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  136.240014][ T8439] JBD2: no valid journal superblock found
[  136.245807][ T8439] EXT4-fs (loop1): Could not load journal inode
[  136.290078][ T8439] netlink: 'syz.1.791': attribute type 1 has an invalid length.
[  136.361190][ T8460] loop4: detected capacity change from 0 to 164
[  136.370685][ T8458] loop5: detected capacity change from 0 to 512
[  136.374249][ T8460] iso9660: Unknown parameter '0x0000000000000003'
[  136.388193][ T8458] EXT4-fs (loop5): 1 truncate cleaned up
[  136.394587][ T8458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.417582][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  136.417600][   T28] audit: type=1400 audit(1772571921.161:857): avc:  denied  { ioctl } for  pid=8455 comm="syz.5.795" path="/54/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  136.479093][   T28] audit: type=1400 audit(1772571921.231:858): avc:  denied  { write } for  pid=8459 comm="syz.4.794" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  136.506372][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.549267][   T28] audit: type=1326 audit(1772571921.291:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19f927c799 code=0x0
[  136.603217][   T28] audit: type=1326 audit(1772571921.351:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.618315][ T8488] openvswitch: netlink: Missing key (keys=40, expected=80)
[  136.648099][ T8490] loop3: detected capacity change from 0 to 1024
[  136.662558][ T8488] ipip0: entered promiscuous mode
[  136.681106][ T8490] EXT4-fs: inline encryption not supported
[  136.687327][ T8490] EXT4-fs: Ignoring removed nobh option
[  136.695717][ T8490] EXT4-fs: Ignoring removed bh option
[  136.708886][   T28] audit: type=1326 audit(1772571921.351:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.735681][ T8490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.749256][ T8499] __nla_validate_parse: 1 callbacks suppressed
[  136.749273][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'.
[  136.751133][   T28] audit: type=1326 audit(1772571921.371:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.788895][   T28] audit: type=1326 audit(1772571921.371:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.812475][   T28] audit: type=1326 audit(1772571921.371:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.836926][   T28] audit: type=1326 audit(1772571921.371:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.860776][   T28] audit: type=1326 audit(1772571921.381:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.4.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f927c799 code=0x7ffc0000
[  136.940380][ T8510] FAULT_INJECTION: forcing a failure.
[  136.940380][ T8510] name failslab, interval 1, probability 0, space 0, times 0
[  136.940411][ T8510] CPU: 0 UID: 0 PID: 8510 Comm: syz.5.803 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  136.940504][ T8510] Tainted: [W]=WARN
[  136.940511][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  136.940523][ T8510] Call Trace:
[  136.940599][ T8510]  <TASK>
[  136.940607][ T8510]  __dump_stack+0x1d/0x30
[  136.940645][ T8510]  dump_stack_lvl+0x95/0xd0
[  136.940733][ T8510]  dump_stack+0x15/0x1b
[  136.940754][ T8510]  should_fail_ex+0x263/0x280
[  136.940775][ T8510]  ? call_usermodehelper_setup+0x72/0x190
[  136.940805][ T8510]  should_failslab+0x8c/0xb0
[  136.940897][ T8510]  ? __pfx_cleanup_uevent_env+0x10/0x10
[  136.940938][ T8510]  __kmalloc_cache_noprof+0x5f/0x410
[  136.940963][ T8510]  ? kobject_uevent_net_broadcast+0x34c/0x410
[  136.941137][ T8510]  ? __pfx_cleanup_uevent_env+0x10/0x10
[  136.941163][ T8510]  call_usermodehelper_setup+0x72/0x190
[  136.941194][ T8510]  kobject_uevent_env+0x537/0x570
[  136.941245][ T8510]  kobject_uevent+0x1d/0x30
[  136.941315][ T8510]  device_del+0x70f/0x790
[  136.941348][ T8510]  device_destroy+0x66/0xa0
[  136.941367][ T8510]  vcs_remove_sysfs+0x21/0x60
[  136.941455][ T8510]  vc_deallocate+0x106/0x250
[  136.941483][ T8510]  vt_disallocate_all+0x175/0x200
[  136.941516][ T8510]  vt_ioctl+0x15c7/0x18d0
[  136.941534][ T8510]  ? tty_jobctrl_ioctl+0x29c/0x810
[  136.941641][ T8510]  tty_ioctl+0x7d7/0xb80
[  136.941663][ T8510]  ? __pfx_tty_ioctl+0x10/0x10
[  136.941686][ T8510]  __se_sys_ioctl+0xce/0x140
[  136.941718][ T8510]  __x64_sys_ioctl+0x43/0x50
[  136.941767][ T8510]  x64_sys_call+0x1563/0x3020
[  136.941794][ T8510]  do_syscall_64+0x12c/0x370
[  136.941815][ T8510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.941838][ T8510] RIP: 0033:0x7fa8b2fac799
[  136.941854][ T8510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.941945][ T8510] RSP: 002b:00007fa8b19ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  136.941966][ T8510] RAX: ffffffffffffffda RBX: 00007fa8b3225fa0 RCX: 00007fa8b2fac799
[  136.941981][ T8510] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000004
[  136.941994][ T8510] RBP: 00007fa8b19ff090 R08: 0000000000000000 R09: 0000000000000000
[  136.942039][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.942053][ T8510] R13: 00007fa8b3226038 R14: 00007fa8b3225fa0 R15: 00007ffe4a87eb28
[  136.942072][ T8510]  </TASK>
[  138.930113][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  138.999477][ T7379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.051733][ T8543] mmap: syz.4.808 (8543): VmData 112951296 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data.
[  139.286418][ T8554] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.809'.
[  139.324331][ T8567] loop1: detected capacity change from 0 to 128
[  139.364448][ T8578] loop4: detected capacity change from 0 to 1024
[  139.365100][ T8578] EXT4-fs: inline encryption not supported
[  139.365191][ T8578] EXT4-fs: Ignoring removed nobh option
[  139.365259][ T8578] EXT4-fs: Ignoring removed bh option
[  139.402052][ T8578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.413462][ T8587] loop5: detected capacity change from 0 to 1024
[  139.413863][ T8587] EXT4-fs: Ignoring removed i_version option
[  139.413900][ T8587] EXT4-fs: Ignoring removed bh option
[  139.413965][ T8587] EXT4-fs: inline encryption not supported
[  139.511672][ T8587] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  139.523897][ T8587] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.817: lblock 2 mapped to illegal pblock 2 (length 1)
[  139.524024][ T8587] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  139.524346][ T8587] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.817: lblock 0 mapped to illegal pblock 48 (length 1)
[  139.524467][ T8587] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  139.524805][ T8587] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.817: Failed to acquire dquot type 0
[  139.524835][ T8587] loop5: lost filesystem error report for type 5 error -117
[  139.525130][ T8587] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  139.525152][ T8587] loop5: lost filesystem error report for type 5 error -117
[  139.525678][ T8587] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.817: mark_inode_dirty error
[  139.525843][ T8587] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  139.525998][ T8587] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  139.526040][ T8587] EXT4-fs (loop5): 1 orphan inode deleted
[  139.526407][ T8587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.516567][ T1663] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  140.555547][ T1663] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0
[  140.608439][ T8631] netlink: 68 bytes leftover after parsing attributes in process `syz.0.820'.
[  140.632814][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.643319][ T5630] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  140.699828][ T5630] loop5: lost filesystem error report for type 5 error -117
[  140.700011][ T5630] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  140.752113][ T5630] loop5: lost filesystem error report for type 5 error -117
[  140.752218][ T5630] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  140.785122][   T23] IPVS: starting estimator thread 0...
[  140.812332][ T8648] program syz.0.825 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.845044][ T5630] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  140.887869][ T8645] IPVS: using max 2448 ests per chain, 122400 per kthread
[  140.959084][ T1887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.042956][ T1887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.106191][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.149797][ T1887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.165856][ T8680] loop4: detected capacity change from 0 to 512
[  141.185802][ T8680] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.244894][ T8680] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  141.261162][ T1887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.283122][ T8680] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.828: bg 0: block 248: padding at end of block bitmap is not set
[  141.307568][ T8680] loop4: lost filesystem error report for type 5 error -117
[  141.307751][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  141.321686][    C0] EXT4-fs (loop4): last error at time 1772571926: ext4_validate_block_bitmap:441
[  141.338669][ T8680] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.828: Failed to acquire dquot type 1
[  141.350032][ T8680] loop4: lost filesystem error report for type 5 error -117
[  141.350665][ T8680] EXT4-fs (loop4): 1 truncate cleaned up
[  141.359343][ T8666] chnl_net:caif_netlink_parms(): no params data found
[  141.369834][ T8680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  141.472384][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.495458][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.503417][ T8666] bridge_slave_0: entered allmulticast mode
[  141.510481][ T8666] bridge_slave_0: entered promiscuous mode
[  141.517528][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.525015][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.532513][ T8666] bridge_slave_1: entered allmulticast mode
[  141.539489][ T8666] bridge_slave_1: entered promiscuous mode
[  141.558388][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.569420][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.603124][ T8666] team0: Port device team_slave_0 added
[  141.610097][ T8666] team0: Port device team_slave_1 added
[  141.669515][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.683169][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.709744][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.847482][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.855079][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  142.005251][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.054819][ T1887] bridge_slave_1: left allmulticast mode
[  142.061354][ T1887] bridge_slave_1: left promiscuous mode
[  142.072724][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.105839][ T1887] bridge_slave_0: left allmulticast mode
[  142.135743][ T1887] bridge_slave_0: left promiscuous mode
[  142.143207][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  142.157084][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.157940][   T36] __quota_error: 24 callbacks suppressed
[  142.157955][   T36] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  142.180742][   T36] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1
[  142.192544][   T36] loop4: lost filesystem error report for type 5 error -117
[  142.321761][ T1887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.395231][ T1887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.476075][ T1887] bond0 (unregistering): Released all slaves
[  142.690551][ T1887] hsr_slave_0: left promiscuous mode
[  142.733906][   T28] audit: type=1400 audit(1772571927.411:886): avc:  denied  { getopt } for  pid=8917 comm="syz.5.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  142.783524][ T1887] hsr_slave_1: left promiscuous mode
[  142.833304][ T1887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.860634][ T8923] loop5: detected capacity change from 0 to 1024
[  142.924030][ T1887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.927574][ T8923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  142.943864][ T8923] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.955149][ T1887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.967965][ T1887] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.984461][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.836'.
[  142.997402][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'.
[  143.006566][ T1887] veth1_macvtap: left promiscuous mode
[  143.012546][ T1887] veth0_macvtap: left promiscuous mode
[  143.018319][ T1887] veth1_vlan: left promiscuous mode
[  143.024233][ T1887] veth0_vlan: left promiscuous mode
[  143.048119][ T8929] netlink: 48 bytes leftover after parsing attributes in process `syz.0.837'.
[  143.098892][ T8932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=8932 comm=syz.0.837
[  143.230507][   T28] audit: type=1400 audit(1772571927.981:887): avc:  denied  { ioctl } for  pid=8934 comm="syz.4.838" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15107 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  143.316782][ T8666] hsr_slave_0: entered promiscuous mode
[  143.329712][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  143.339109][   T28] audit: type=1400 audit(1772571928.081:888): avc:  denied  { write } for  pid=8972 comm="syz.4.841" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  143.363265][ T8975] netlink: 'syz.1.840': attribute type 10 has an invalid length.
[  143.364029][ T8666] hsr_slave_1: entered promiscuous mode
[  143.378066][ T8666] debugfs: 'hsr0' already exists in 'hsr'
[  143.384408][ T8666] Cannot create hsr debugfs directory
[  143.546119][ T9041] loop5: detected capacity change from 0 to 512
[  143.588254][ T9041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.601474][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.623370][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.646280][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.652585][ T9041] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.672126][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.689369][ T9095] loop1: detected capacity change from 0 to 512
[  143.697032][ T9095] EXT4-fs: Ignoring removed nobh option
[  143.708839][   T28] audit: type=1400 audit(1772571928.461:889): avc:  denied  { create } for  pid=9032 comm="syz.5.846" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1
[  143.729566][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.765351][ T9041] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.846: corrupted inode contents
[  143.780866][ T9095] EXT4-fs (loop1): 1 orphan inode deleted
[  143.788473][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.794394][ T9095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.801531][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.826680][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.830653][ T9041] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.846: mark_inode_dirty error
[  143.840032][ T9015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9015 comm=syz.4.841
[  143.895995][ T9041] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.846: corrupted inode contents
[  143.910269][ T9041] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.846: mark_inode_dirty error
[  143.931777][ T9111] FAULT_INJECTION: forcing a failure.
[  143.931777][ T9111] name failslab, interval 1, probability 0, space 0, times 0
[  143.946059][ T9111] CPU: 1 UID: 0 PID: 9111 Comm: syz.0.848 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  143.946093][ T9111] Tainted: [W]=WARN
[  143.946100][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  143.946113][ T9111] Call Trace:
[  143.946121][ T9111]  <TASK>
[  143.946130][ T9111]  __dump_stack+0x1d/0x30
[  143.946159][ T9111]  dump_stack_lvl+0x95/0xd0
[  143.946186][ T9111]  dump_stack+0x15/0x1b
[  143.946221][ T9111]  should_fail_ex+0x263/0x280
[  143.946248][ T9111]  should_failslab+0x8c/0xb0
[  143.946272][ T9111]  kmem_cache_alloc_noprof+0x66/0x400
[  143.946297][ T9111]  ? vm_area_dup+0x33/0x2c0
[  143.946325][ T9111]  vm_area_dup+0x33/0x2c0
[  143.946350][ T9111]  __split_vma+0xe9/0x640
[  143.946373][ T9111]  ? mas_find+0x5d5/0x700
[  143.946396][ T9111]  vms_gather_munmap_vmas+0x2bc/0x850
[  143.946434][ T9111]  mmap_region+0x718/0x2050
[  143.946459][ T9111]  ? selinux_file_open+0x2e6/0x330
[  143.946503][ T9111]  do_mmap+0x9b2/0xbd0
[  143.946534][ T9111]  vm_mmap_pgoff+0x183/0x2d0
[  143.946561][ T9111]  ksys_mmap_pgoff+0xc1/0x310
[  143.946587][ T9111]  ? __x64_sys_mmap+0x49/0x70
[  143.946620][ T9111]  x64_sys_call+0x14df/0x3020
[  143.946646][ T9111]  do_syscall_64+0x12c/0x370
[  143.946664][ T9111]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  143.946691][ T9111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.946713][ T9111] RIP: 0033:0x7faee391c799
[  143.946733][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.946753][ T9111] RSP: 002b:00007faee236f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  143.946776][ T9111] RAX: ffffffffffffffda RBX: 00007faee3b95fa0 RCX: 00007faee391c799
[  143.946791][ T9111] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  143.946805][ T9111] RBP: 00007faee236f090 R08: ffffffffffffffff R09: 0000000000000000
[  143.946820][ T9111] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  143.946835][ T9111] R13: 00007faee3b96038 R14: 00007faee3b95fa0 R15: 00007ffca3341808
[  143.946855][ T9111]  </TASK>
[  143.955093][ T9101] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.846: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  143.955093][ T9101] 
[  144.209888][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.245291][   T28] audit: type=1400 audit(1772571928.991:890): avc:  denied  { add_name } for  pid=9032 comm="syz.5.846" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  144.273526][   T28] audit: type=1400 audit(1772571928.991:891): avc:  denied  { rename } for  pid=9032 comm="syz.5.846" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  144.325152][   T28] audit: type=1400 audit(1772571928.991:892): avc:  denied  { rmdir } for  pid=9032 comm="syz.5.846" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  144.435587][ T8666] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  144.472214][ T8666] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  144.487280][ T9170] loop0: detected capacity change from 0 to 164
[  144.488779][ T8666] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.494266][    C1] vcan0: j1939_tp_rxtimer: 0xffff888105e6a000: rx timeout, send abort
[  144.509788][   T28] audit: type=1400 audit(1772571929.261:893): avc:  denied  { read } for  pid=2986 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  144.533116][ T8666] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.696918][ T9187] loop4: detected capacity change from 0 to 512
[  144.717947][ T9187] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.994321][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5c4a00: rx timeout, send abort
[  145.008876][    C1] vcan0: j1939_tp_rxtimer: 0xffff888105e6a000: abort rx timeout. Force session deactivation
[  145.151959][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'.
[  145.477406][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.493970][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b79b000: rx timeout, send abort
[  145.502797][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5c4a00: abort rx timeout. Force session deactivation
[  145.510109][ T9211] netlink: 'syz.0.855': attribute type 10 has an invalid length.
[  145.515512][   T28] audit: type=1400 audit(1772571929.261:894): avc:  denied  { search } for  pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  145.542060][ T8666] 8021q: adding VLAN 0 to HW filter on device team0
[  145.586388][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.593709][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.638554][ T9219] netlink: 'syz.1.857': attribute type 10 has an invalid length.
[  145.664117][ T8666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.703054][ T8666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.726531][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.733735][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.808406][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.858'.
[  145.939507][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.990011][ T9266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.859'.
[  146.002731][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b79b000: abort rx timeout. Force session deactivation
[  146.147621][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.172931][ T8666] veth0_vlan: entered promiscuous mode
[  146.193354][ T8666] veth1_vlan: entered promiscuous mode
[  146.230562][ T8666] veth0_macvtap: entered promiscuous mode
[  146.245249][ T8666] veth1_macvtap: entered promiscuous mode
[  146.269387][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.292195][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.306551][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.340130][ T9295] FAULT_INJECTION: forcing a failure.
[  146.340130][ T9295] name failslab, interval 1, probability 0, space 0, times 0
[  146.358512][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.372389][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.385869][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.386546][ T9295] CPU: 0 UID: 0 PID: 9295 Comm: syz.4.861 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  146.386577][ T9295] Tainted: [W]=WARN
[  146.386584][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  146.386596][ T9295] Call Trace:
[  146.386602][ T9295]  <TASK>
[  146.386610][ T9295]  __dump_stack+0x1d/0x30
[  146.386637][ T9295]  dump_stack_lvl+0x95/0xd0
[  146.386659][ T9295]  dump_stack+0x15/0x1b
[  146.386680][ T9295]  should_fail_ex+0x263/0x280
[  146.386703][ T9295]  should_failslab+0x8c/0xb0
[  146.386724][ T9295]  kmem_cache_alloc_noprof+0x66/0x400
[  146.386745][ T9295]  ? mas_alloc_nodes+0x1a2/0x210
[  146.386777][ T9295]  mas_alloc_nodes+0x1a2/0x210
[  146.386807][ T9295]  mas_preallocate+0x2ca/0x510
[  146.386841][ T9295]  __split_vma+0x240/0x640
[  146.386861][ T9295]  ? mas_find+0x5d5/0x700
[  146.386880][ T9295]  vms_gather_munmap_vmas+0x2bc/0x850
[  146.386915][ T9295]  mmap_region+0x718/0x2050
[  146.386938][ T9295]  ? selinux_file_open+0x2e6/0x330
[  146.386979][ T9295]  do_mmap+0x9b2/0xbd0
[  146.387006][ T9295]  vm_mmap_pgoff+0x183/0x2d0
[  146.387030][ T9295]  ksys_mmap_pgoff+0xc1/0x310
[  146.387054][ T9295]  ? __x64_sys_mmap+0x49/0x70
[  146.387087][ T9295]  x64_sys_call+0x14df/0x3020
[  146.387112][ T9295]  do_syscall_64+0x12c/0x370
[  146.387132][ T9295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.387154][ T9295] RIP: 0033:0x7f19f927c799
[  146.387178][ T9295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.387196][ T9295] RSP: 002b:00007f19f7cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  146.387217][ T9295] RAX: ffffffffffffffda RBX: 00007f19f94f5fa0 RCX: 00007f19f927c799
[  146.387231][ T9295] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  146.387244][ T9295] RBP: 00007f19f7cd7090 R08: ffffffffffffffff R09: 0000000000000000
[  146.387258][ T9295] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  146.387270][ T9295] R13: 00007f19f94f6038 R14: 00007f19f94f5fa0 R15: 00007ffc2c203d68
[  146.387289][ T9295]  </TASK>
[  146.604918][ T9308] netlink: 68 bytes leftover after parsing attributes in process `syz.5.863'.
[  146.723803][ T9316] syzkaller0: entered promiscuous mode
[  146.730029][ T9316] syzkaller0: entered allmulticast mode
[  146.759572][ T9313] netlink: 'syz.5.863': attribute type 21 has an invalid length.
[  146.767486][ T9313] netlink: 'syz.5.863': attribute type 4 has an invalid length.
[  146.778248][    T9] IPVS: starting estimator thread 0...
[  146.891724][ T9321] IPVS: using max 2592 ests per chain, 129600 per kthread
[  147.203310][ T9335] loop0: detected capacity change from 0 to 128
[  147.298833][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.4.868'.
[  147.564355][ T9361] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0
[  147.565012][ T9354] netlink: 'syz.4.871': attribute type 4 has an invalid length.
[  147.607516][ T9325] syz.0.865: attempt to access beyond end of device
[  147.607516][ T9325] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  147.635356][ T9355] netlink: 'syz.4.871': attribute type 4 has an invalid length.
[  147.659998][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  147.660013][   T28] audit: type=1400 audit(1772571932.411:901): avc:  denied  { open } for  pid=9367 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  147.680255][ T9354] syzkaller0: entered promiscuous mode
[  147.685721][   T28] audit: type=1400 audit(1772571932.411:902): avc:  denied  { kernel } for  pid=9365 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  147.711823][ T9354] syzkaller0: entered allmulticast mode
[  147.717059][ T9373] loop5: detected capacity change from 0 to 512
[  147.729780][ T9379] FAULT_INJECTION: forcing a failure.
[  147.729780][ T9379] name failslab, interval 1, probability 0, space 0, times 0
[  147.729815][ T9379] CPU: 1 UID: 0 PID: 9379 Comm: syz.3.875 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  147.729846][ T9379] Tainted: [W]=WARN
[  147.729854][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  147.729866][ T9379] Call Trace:
[  147.729874][ T9379]  <TASK>
[  147.729882][ T9379]  __dump_stack+0x1d/0x30
[  147.729911][ T9379]  dump_stack_lvl+0x95/0xd0
[  147.729934][ T9379]  dump_stack+0x15/0x1b
[  147.729957][ T9379]  should_fail_ex+0x263/0x280
[  147.729992][ T9379]  should_failslab+0x8c/0xb0
[  147.730014][ T9379]  kmem_cache_alloc_noprof+0x66/0x400
[  147.730037][ T9379]  ? anon_vma_clone+0xc8/0x430
[  147.730066][ T9379]  anon_vma_clone+0xc8/0x430
[  147.730095][ T9379]  __split_vma+0x2c0/0x640
[  147.730117][ T9379]  ? mas_find+0x5d5/0x700
[  147.730138][ T9379]  vms_gather_munmap_vmas+0x2bc/0x850
[  147.730172][ T9379]  mmap_region+0x718/0x2050
[  147.730196][ T9379]  ? selinux_file_open+0x2e6/0x330
[  147.730236][ T9379]  do_mmap+0x9b2/0xbd0
[  147.730265][ T9379]  vm_mmap_pgoff+0x183/0x2d0
[  147.730290][ T9379]  ksys_mmap_pgoff+0xc1/0x310
[  147.730317][ T9379]  ? __x64_sys_mmap+0x49/0x70
[  147.730358][ T9379]  x64_sys_call+0x14df/0x3020
[  147.730386][ T9379]  do_syscall_64+0x12c/0x370
[  147.730408][ T9379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.730430][ T9379] RIP: 0033:0x7fe48461c799
[  147.730448][ T9379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.730468][ T9379] RSP: 002b:00007fe483056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  147.730490][ T9379] RAX: ffffffffffffffda RBX: 00007fe484896090 RCX: 00007fe48461c799
[  147.730505][ T9379] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  147.730520][ T9379] RBP: 00007fe483056090 R08: ffffffffffffffff R09: 0000000000000000
[  147.730534][ T9379] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  147.730548][ T9379] R13: 00007fe484896128 R14: 00007fe484896090 R15: 00007ffc4f43ebb8
[  147.730567][ T9379]  </TASK>
[  147.757665][ T9373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.757848][ T9373] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.810737][   T28] audit: type=1326 audit(1772571932.561:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.810770][   T28] audit: type=1326 audit(1772571932.561:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.821807][   T28] audit: type=1326 audit(1772571932.561:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.821841][   T28] audit: type=1326 audit(1772571932.561:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.821865][   T28] audit: type=1326 audit(1772571932.561:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.821950][   T28] audit: type=1326 audit(1772571932.561:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.821976][   T28] audit: type=1326 audit(1772571932.561:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  147.821999][   T28] audit: type=1326 audit(1772571932.561:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48461c799 code=0x7ffc0000
[  148.732384][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.309837][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'.
[  150.680234][ T9463] loop1: detected capacity change from 0 to 128
[  150.691755][ T9463] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  150.716636][ T9463] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.541539][ T9484] loop0: detected capacity change from 0 to 1024
[  151.548609][ T9484] EXT4-fs: Ignoring removed bh option
[  151.557842][ T9484] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  151.566776][ T9488] netlink: 'syz.4.891': attribute type 14 has an invalid length.
[  151.680490][ T9511] 9p: Invalid gid '0x00000000ffffffff'
[  151.756417][ T9511] loop3: detected capacity change from 0 to 1764
[  151.784743][ T9511] ISOFS: Unable to identify CD-ROM format.
[  151.806171][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'.
[  151.853762][ T9567] Invalid argument reading file caps for ./file0
[  151.863328][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'.
[  152.783818][ T9612] netlink: 'syz.5.904': attribute type 1 has an invalid length.
[  152.794442][ T9609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.899'.
[  152.815346][ T9612] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.873585][ T9650] selinux_netlink_send: 1 callbacks suppressed
[  152.873614][ T9650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=9650 comm=syz.5.904
[  152.892592][   T28] kauditd_printk_skb: 52 callbacks suppressed
[  152.892610][   T28] audit: type=1326 audit(1772571937.631:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9588 comm="syz.0.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  152.957759][   T28] audit: type=1326 audit(1772571937.631:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9588 comm="syz.0.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  153.058784][ T9651] bond1: (slave veth3): Enslaving as an active interface with a down link
[  153.077174][ T9688] netlink: 'syz.0.906': attribute type 10 has an invalid length.
[  153.085513][ T9661] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.907'.
[  153.127458][ T9650] bond1 (unregistering): (slave veth3): Releasing active interface
[  153.166326][ T9650] bond1 (unregistering): Released all slaves
[  153.269552][ T9768] FAULT_INJECTION: forcing a failure.
[  153.269552][ T9768] name failslab, interval 1, probability 0, space 0, times 0
[  153.298993][ T9771] loop0: detected capacity change from 0 to 1024
[  153.306173][ T9768] CPU: 0 UID: 0 PID: 9768 Comm: syz.3.910 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  153.306210][ T9768] Tainted: [W]=WARN
[  153.306218][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  153.306230][ T9768] Call Trace:
[  153.306236][ T9768]  <TASK>
[  153.306244][ T9768]  __dump_stack+0x1d/0x30
[  153.306274][ T9768]  dump_stack_lvl+0x95/0xd0
[  153.306300][ T9768]  dump_stack+0x15/0x1b
[  153.306323][ T9768]  should_fail_ex+0x263/0x280
[  153.306347][ T9768]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  153.306377][ T9768]  should_failslab+0x8c/0xb0
[  153.306395][ T9768]  kmem_cache_alloc_lru_noprof+0x6c/0x410
[  153.306416][ T9768]  ? shmem_alloc_inode+0x34/0x50
[  153.306443][ T9768]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  153.306475][ T9768]  shmem_alloc_inode+0x34/0x50
[  153.306499][ T9768]  alloc_inode+0x40/0x170
[  153.306519][ T9768]  new_inode+0x1d/0xe0
[  153.306542][ T9768]  shmem_get_inode+0x246/0x750
[  153.306573][ T9768]  __shmem_file_setup+0x157/0x210
[  153.306602][ T9768]  shmem_zero_setup+0x66/0xe0
[  153.306629][ T9768]  mmap_region+0x178b/0x2050
[  153.306669][ T9768]  do_mmap+0x9b2/0xbd0
[  153.306694][ T9768]  vm_mmap_pgoff+0x183/0x2d0
[  153.306718][ T9768]  ksys_mmap_pgoff+0xc1/0x310
[  153.306744][ T9768]  ? __x64_sys_mmap+0x49/0x70
[  153.306778][ T9768]  x64_sys_call+0x14df/0x3020
[  153.306805][ T9768]  do_syscall_64+0x12c/0x370
[  153.306829][ T9768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.306852][ T9768] RIP: 0033:0x7fe48461c799
[  153.306880][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.306900][ T9768] RSP: 002b:00007fe483077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  153.306924][ T9768] RAX: ffffffffffffffda RBX: 00007fe484895fa0 RCX: 00007fe48461c799
[  153.306939][ T9768] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  153.306954][ T9768] RBP: 00007fe483077090 R08: ffffffffffffffff R09: 0000000000000000
[  153.306969][ T9768] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  153.306982][ T9768] R13: 00007fe484896038 R14: 00007fe484895fa0 R15: 00007ffc4f43ebb8
[  153.306999][ T9768]  </TASK>
[  153.307388][ T9771] EXT4-fs: Ignoring removed mblk_io_submit option
[  153.533852][ T9771] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  153.551975][ T9771] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  153.563700][ T9771] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.912: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  153.582474][ T9771] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  153.582705][ T9771] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.912: couldn't read orphan inode 11 (err -117)
[  153.592056][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  153.592079][    C0] EXT4-fs (loop0): initial error at time 1772571938: ext4_ext_check_inode:521: inode 11
[  153.592134][    C0] EXT4-fs (loop0): last error at time 1772571938: ext4_ext_check_inode:521: inode 11
[  153.601826][ T9785] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.915'.
[  153.604381][ T9771] loop0: lost filesystem error report for type 5 error -117
[  153.642754][ T9771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.672662][   T28] audit: type=1400 audit(1772571938.421:965): avc:  denied  { create } for  pid=9770 comm="syz.0.912" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  153.710981][ T9771] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.912: Invalid block bitmap block 0 in block_group 0
[  153.735036][ T9771] Quota error (device loop0): write_blk: dquota write failed
[  153.741432][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.916'.
[  153.742665][ T9771] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  153.766516][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.916'.
[  153.827781][ T9771] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.912: Failed to acquire dquot type 0
[  153.912009][ T9816] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz.0.912: Invalid inode table block 8589934593 in block_group 0
[  154.009130][ T9832] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  154.058557][ T1663] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm kworker/u8:7: Invalid inode table block 8589934593 in block_group 0
[  154.094672][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'.
[  154.270827][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.280646][ T9856] FAULT_INJECTION: forcing a failure.
[  154.280646][ T9856] name failslab, interval 1, probability 0, space 0, times 0
[  154.294332][ T9856] CPU: 1 UID: 0 PID: 9856 Comm: syz.1.924 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  154.294364][ T9856] Tainted: [W]=WARN
[  154.294371][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  154.294382][ T9856] Call Trace:
[  154.294389][ T9856]  <TASK>
[  154.294396][ T9856]  __dump_stack+0x1d/0x30
[  154.294421][ T9856]  dump_stack_lvl+0x95/0xd0
[  154.294448][ T9856]  dump_stack+0x15/0x1b
[  154.294470][ T9856]  should_fail_ex+0x263/0x280
[  154.294490][ T9856]  should_failslab+0x8c/0xb0
[  154.294509][ T9856]  kmem_cache_alloc_noprof+0x66/0x400
[  154.294532][ T9856]  ? security_inode_alloc+0x37/0x100
[  154.294563][ T9856]  security_inode_alloc+0x37/0x100
[  154.294592][ T9856]  inode_init_always_gfp+0x4b7/0x500
[  154.294619][ T9856]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  154.294644][ T9856]  alloc_inode+0x58/0x170
[  154.294663][ T9856]  new_inode+0x1d/0xe0
[  154.294691][ T9856]  shmem_get_inode+0x246/0x750
[  154.294723][ T9856]  __shmem_file_setup+0x157/0x210
[  154.294751][ T9856]  shmem_zero_setup+0x66/0xe0
[  154.294779][ T9856]  mmap_region+0x178b/0x2050
[  154.294823][ T9856]  do_mmap+0x9b2/0xbd0
[  154.294855][ T9856]  vm_mmap_pgoff+0x183/0x2d0
[  154.294882][ T9856]  ksys_mmap_pgoff+0xc1/0x310
[  154.294911][ T9856]  ? __x64_sys_mmap+0x49/0x70
[  154.294945][ T9856]  x64_sys_call+0x14df/0x3020
[  154.294972][ T9856]  do_syscall_64+0x12c/0x370
[  154.294992][ T9856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.295012][ T9856] RIP: 0033:0x7fc5831bc799
[  154.295030][ T9856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.295050][ T9856] RSP: 002b:00007fc581c0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  154.295075][ T9856] RAX: ffffffffffffffda RBX: 00007fc583435fa0 RCX: 00007fc5831bc799
[  154.295089][ T9856] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  154.295101][ T9856] RBP: 00007fc581c0f090 R08: ffffffffffffffff R09: 0000000000000000
[  154.295114][ T9856] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  154.295126][ T9856] R13: 00007fc583436038 R14: 00007fc583435fa0 R15: 00007ffdc5dbb188
[  154.295143][ T9856]  </TASK>
[  154.691231][   T28] audit: type=1400 audit(1772571939.441:966): avc:  denied  { sys_module } for  pid=9866 comm="syz.1.925" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  154.790023][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'.
[  155.613522][ T9902] __nla_validate_parse: 2 callbacks suppressed
[  155.613570][ T9902] netlink: 68 bytes leftover after parsing attributes in process `syz.1.930'.
[  155.637654][   T28] audit: type=1400 audit(1772571940.381:967): avc:  denied  { read } for  pid=9904 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  155.713944][ T9905] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  155.718954][ T9905] loop0: detected capacity change from 0 to 736
[  155.739697][ T9905] iso9660: Unknown parameter 'ÿÿÿÿÿÿ'
[  155.828663][   T28] audit: type=1400 audit(1772571940.581:968): avc:  denied  { ioctl } for  pid=9904 comm="syz.0.931" path="socket:[16920]" dev="sockfs" ino=16920 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  155.880294][   T28] audit: type=1326 audit(1772571940.631:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.5.934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8b2fac799 code=0x0
[  155.964204][   T28] audit: type=1326 audit(1772571940.711:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9948 comm="syz.0.935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x0
[  156.599270][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'.
[  156.996273][T10001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.151814][T10003] netlink: 36 bytes leftover after parsing attributes in process `syz.5.939'.
[  157.168724][T10003] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  157.198883][T10003] loop5: detected capacity change from 0 to 1024
[  157.207022][T10003] EXT4-fs: inline encryption not supported
[  157.525386][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.941'.
[  157.737677][T10009] netlink: 'syz.3.942': attribute type 1 has an invalid length.
[  158.065055][T10003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.171335][T10020] FAULT_INJECTION: forcing a failure.
[  158.171335][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.185946][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.4.943 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  158.186053][T10020] Tainted: [W]=WARN
[  158.186060][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  158.186074][T10020] Call Trace:
[  158.186083][T10020]  <TASK>
[  158.186092][T10020]  __dump_stack+0x1d/0x30
[  158.186137][T10020]  dump_stack_lvl+0x95/0xd0
[  158.186163][T10020]  dump_stack+0x15/0x1b
[  158.186225][T10020]  should_fail_ex+0x263/0x280
[  158.186247][T10020]  should_fail+0xb/0x20
[  158.186265][T10020]  should_fail_usercopy+0x1a/0x20
[  158.186352][T10020]  _copy_from_user+0x1c/0xb0
[  158.186432][T10020]  __sys_sendto+0x1ca/0x4d0
[  158.186467][T10020]  __x64_sys_sendto+0x76/0x90
[  158.186494][T10020]  x64_sys_call+0x2d35/0x3020
[  158.186520][T10020]  do_syscall_64+0x12c/0x370
[  158.186613][T10020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.186637][T10020] RIP: 0033:0x7f19f923cfce
[  158.186656][T10020] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.186677][T10020] RSP: 002b:00007f19f7cd5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  158.186702][T10020] RAX: ffffffffffffffda RBX: 00007f19f7cd76c0 RCX: 00007f19f923cfce
[  158.186719][T10020] RDX: 0000000000000020 RSI: 00007f19f7cd6000 RDI: 0000000000000005
[  158.186810][T10020] RBP: 0000000000000000 R08: 00007f19f7cd5f04 R09: 000000000000000c
[  158.186822][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  158.186834][T10020] R13: 00007f19f7cd5f58 R14: 00007f19f7cd6000 R15: 0000000000000000
[  158.186871][T10020]  </TASK>
[  158.697021][T10024] Invalid argument reading file caps for ./file0
[  158.966591][T10032] netlink: 68 bytes leftover after parsing attributes in process `syz.1.946'.
[  159.079676][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.100884][   T28] audit: type=1400 audit(1772571943.851:971): avc:  denied  { shutdown } for  pid=10034 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  159.129782][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'.
[  159.183156][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  159.222310][ T1887] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.243771][ T1887] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.252728][ T1887] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.266989][ T1887] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.400752][   T28] audit: type=1400 audit(1772571944.141:972): avc:  denied  { read } for  pid=10040 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  159.703323][   T28] audit: type=1400 audit(1772571944.451:973): avc:  denied  { create } for  pid=10067 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_dnrt_socket permissive=1
[  159.724630][   T28] audit: type=1400 audit(1772571944.451:974): avc:  denied  { create } for  pid=10067 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1
[  159.739123][T10069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.746401][   T28] audit: type=1400 audit(1772571944.451:975): avc:  denied  { write } for  pid=10067 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1
[  159.782562][   T28] audit: type=1400 audit(1772571944.471:976): avc:  denied  { create } for  pid=10067 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  159.800009][T10068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.806993][   T28] audit: type=1400 audit(1772571944.471:977): avc:  denied  { write } for  pid=10067 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  159.840231][   T28] audit: type=1400 audit(1772571944.471:978): avc:  denied  { nlmsg_write } for  pid=10067 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1
[  160.011209][   T28] audit: type=1400 audit(1772571944.751:979): avc:  denied  { bind } for  pid=10080 comm="syz.5.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  160.042920][T10077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.954'.
[  160.075194][T10084] 9p: Bad value for 'wfdno'
[  160.482858][T10094] loop5: detected capacity change from 0 to 512
[  160.527327][T10096] loop1: detected capacity change from 0 to 1024
[  160.628614][T10096] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  160.632075][T10094] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  160.653016][T10096] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  160.686979][T10096] EXT4-fs (loop1): orphan cleanup on readonly fs
[  160.697545][T10096] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14
[  160.729516][T10096] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.958: Failed to acquire dquot type 0
[  160.743141][T10094] EXT4-fs (loop5): 1 truncate cleaned up
[  160.750900][T10096] loop1: lost filesystem error report for type 5 error -117
[  160.751074][T10096] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.958: Failed to acquire dquot type 0
[  160.758486][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  160.758508][    C0] EXT4-fs (loop1): initial error at time 1772571945: ext4_acquire_dquot:7001
[  160.758531][    C0] EXT4-fs (loop1): last error at time 1772571945: ext4_acquire_dquot:7001
[  160.788259][T10094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.793597][T10096] loop1: lost filesystem error report for type 5 error -117
[  160.805942][T10096] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.958: Freeing blocks not in datazone - block = 0, count = 4096
[  160.826989][T10096] loop1: lost filesystem error report for type 5 error -117
[  160.827887][T10096] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.958: Failed to acquire dquot type 0
[  160.887952][T10096] loop1: lost filesystem error report for type 5 error -117
[  160.888104][T10096] EXT4-fs (loop1): 1 orphan inode deleted
[  160.942816][T10096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.125523][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.412666][T10096] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  161.434474][T10112] loop0: detected capacity change from 0 to 2048
[  161.463179][T10096] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  161.510007][T10112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.551526][T10134] loop5: detected capacity change from 0 to 512
[  161.569803][T10134] vfat: Unknown parameter '
[  161.569803][T10134] '
[  161.591623][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.617332][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.722709][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.733201][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.810213][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.829294][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.888121][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.925390][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.936068][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.138807][T10168] loop5: detected capacity change from 0 to 512
[  162.162533][T10168] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  162.901078][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.923788][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.967'.
[  164.538039][   T36] bridge_slave_1: left allmulticast mode
[  164.757137][   T36] bridge_slave_1: left promiscuous mode
[  164.774513][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.834108][   T36] bridge_slave_0: left allmulticast mode
[  164.849531][   T36] bridge_slave_0: left promiscuous mode
[  164.867927][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.030086][T10247] loop0: detected capacity change from 0 to 512
[  166.067520][T10247] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.972: inode has both inline data and extents flags
[  166.114587][T10244] loop1: detected capacity change from 0 to 512
[  166.131608][T10244] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  166.250804][T10247] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  166.257383][T10247] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.972: couldn't read orphan inode 15 (err -117)
[  166.267146][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  166.267167][    C0] EXT4-fs (loop0): initial error at time 1772571951: ext4_orphan_get:1391: inode 15
[  166.267200][    C0] EXT4-fs (loop0): last error at time 1772571951: ext4_orphan_get:1391: inode 15
[  167.072666][T10247] loop0: lost filesystem error report for type 5 error -117
[  167.073454][T10247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.203462][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  167.244843][T10247] netlink: 176 bytes leftover after parsing attributes in process `syz.0.972'.
[  167.282154][T10247] EXT4-fs error (device loop0): ext4_check_dx_root:2201: inode #2: comm syz.0.972: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  167.308279][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.438140][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.452254][   T36] bond0 (unregistering): Released all slaves
[  167.452329][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.599745][T10276] loop5: detected capacity change from 0 to 1024
[  167.606910][T10276] EXT4-fs: Ignoring removed orlov option
[  167.617007][T10276] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  167.710612][T10276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.121913][T10309] loop0: detected capacity change from 0 to 512
[  168.140706][T10309] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.358721][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'.
[  168.391801][   T36] hsr_slave_0: left promiscuous mode
[  168.399607][T10312] ALSA: seq fatal error: cannot create timer (-19)
[  168.465663][   T36] hsr_slave_1: left promiscuous mode
[  168.471667][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.479066][T10321] loop1: detected capacity change from 0 to 1024
[  168.480097][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.491079][T10321] EXT4-fs: dax option not supported
[  168.494857][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.509703][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.537889][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.578377][   T36] veth1_macvtap: left promiscuous mode
[  168.583993][   T36] veth0_macvtap: left promiscuous mode
[  168.592258][   T36] veth1_vlan: left promiscuous mode
[  168.597931][   T36] veth0_vlan: left promiscuous mode
[  168.682772][   T36] team0 (unregistering): Port device team_slave_1 removed
[  168.692994][   T36] team0 (unregistering): Port device team_slave_0 removed
[  168.731261][T10268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.739790][T10266] tipc: Disabling bearer <eth:syzkaller0>
[  168.756516][T10139] chnl_net:caif_netlink_parms(): no params data found
[  168.863429][T10139] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.925874][T10139] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.986718][T10139] bridge_slave_0: entered allmulticast mode
[  169.061305][T10139] bridge_slave_0: entered promiscuous mode
[  169.096012][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'.
[  169.129439][T10139] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.183820][T10139] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.275634][T10139] bridge_slave_1: entered allmulticast mode
[  169.345947][T10139] bridge_slave_1: entered promiscuous mode
[  169.407205][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.421455][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.469750][T10139] team0: Port device team_slave_0 added
[  169.488319][T10139] team0: Port device team_slave_1 added
[  169.489922][T10468] netlink: 'syz.1.986': attribute type 14 has an invalid length.
[  169.516465][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.533878][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.565454][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.577085][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.586915][T10490] loop4: detected capacity change from 0 to 512
[  169.593669][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  169.593684][   T28] audit: type=1400 audit(1772571954.321:983): avc:  denied  { write } for  pid=10487 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  169.620348][T10490] EXT4-fs: Ignoring removed nobh option
[  169.626544][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.656863][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.658100][T10490] EXT4-fs (loop4): 1 orphan inode deleted
[  169.688280][T10490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.729437][   T28] audit: type=1400 audit(1772571954.481:984): avc:  denied  { accept } for  pid=10499 comm="syz.5.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  169.781716][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  169.791164][   T28] audit: type=1400 audit(1772571954.541:985): avc:  denied  { checkpoint_restore } for  pid=10423 comm="syz.0.984" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  169.840205][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.847205][   T28] audit: type=1400 audit(1772571954.541:986): avc:  denied  { setattr } for  pid=10423 comm="syz.0.984" name="TIPC" dev="sockfs" ino=18523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  169.901870][T10535] 9p: Bad value for 'rfdno'
[  169.980367][T10489] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.023146][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.989'.
[  170.023821][T10569] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  170.052233][T10139] hsr_slave_0: entered promiscuous mode
[  170.065232][T10139] hsr_slave_1: entered promiscuous mode
[  170.072025][T10139] debugfs: 'hsr0' already exists in 'hsr'
[  170.078213][T10139] Cannot create hsr debugfs directory
[  170.173902][T10623] loop4: detected capacity change from 0 to 164
[  170.202904][T10623] rock: directory entry would overflow storage
[  170.218320][T10623] rock: sig=0x5252, size=5, remaining=3
[  170.438042][T10698] tmpfs: Bad value for 'size'
[  170.448080][T10698] netlink: 'syz.1.992': attribute type 7 has an invalid length.
[  170.455756][T10698] netlink: 'syz.1.992': attribute type 8 has an invalid length.
[  170.514468][T10139] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  170.526074][T10139] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  170.545691][T10139] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  170.560159][T10139] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  170.600961][T10718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.670093][T10718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.695773][T10139] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.721058][T10139] 8021q: adding VLAN 0 to HW filter on device team0
[  170.740879][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.748036][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.771168][T10718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.794347][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.801569][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.009123][T10718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.080844][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.092208][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.123479][   T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.142319][   T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.190318][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.322656][T10786] loop1: detected capacity change from 0 to 1024
[  171.331472][T10139] veth0_vlan: entered promiscuous mode
[  171.350088][T10139] veth1_vlan: entered promiscuous mode
[  171.375128][T10786] EXT4-fs: inline encryption not supported
[  171.388689][T10139] veth0_macvtap: entered promiscuous mode
[  171.405445][T10139] veth1_macvtap: entered promiscuous mode
[  171.411420][T10786] EXT4-fs: Ignoring removed nobh option
[  171.427947][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.435483][T10786] EXT4-fs: Ignoring removed bh option
[  171.449680][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.467395][T10786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.631044][ T1663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.642568][ T1663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.653711][ T1663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.659153][T10800] netlink: 'syz.4.997': attribute type 14 has an invalid length.
[  171.664531][ T1663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.928400][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  173.433107][T10809] loop4: detected capacity change from 0 to 512
[  173.449470][T10809] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  174.754916][T10817] loop0: detected capacity change from 0 to 512
[  174.766235][T10817] EXT4-fs: Ignoring removed nobh option
[  174.844422][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.274711][T10817] EXT4-fs (loop0): 1 orphan inode deleted
[  175.286550][T10817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.396646][   T28] audit: type=1400 audit(1772571960.141:987): avc:  denied  { create } for  pid=10824 comm="syz.5.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  175.438533][T10842] loop1: detected capacity change from 0 to 512
[  175.455958][T10847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.965'.
[  175.532219][T10849] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.579239][T10862] loop1: detected capacity change from 0 to 512
[  175.593383][T10862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.612830][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.616347][T10862] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.634248][    T9] IPVS: starting estimator thread 0...
[  175.681551][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.727878][T10870] IPVS: using max 2304 ests per chain, 115200 per kthread
[  175.764184][T10882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'.
[  175.826320][T10880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1007'.
[  175.841240][T10880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=10880 comm=syz.1.1007
[  176.004104][T10911] xt_CT: You must specify a L4 protocol and not use inversions on it
[  176.155864][T10915] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[  176.159842][   T28] audit: type=1400 audit(1772571960.901:988): avc:  denied  { mac_admin } for  pid=10914 comm="syz.5.1010" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  176.190658][   T28] audit: type=1400 audit(1772571960.921:989): avc:  denied  { relabelto } for  pid=10914 comm="syz.5.1010" name="103" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  176.218705][   T28] audit: type=1400 audit(1772571960.921:990): avc:  denied  { associate } for  pid=10914 comm="syz.5.1010" name="103" dev="tmpfs" ino=565 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  176.251236][   T28] audit: type=1400 audit(1772571960.921:991): avc:  denied  { remove_name } for  pid=5630 comm="syz-executor" name="binderfs" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  176.279557][   T28] audit: type=1400 audit(1772571960.921:992): avc:  denied  { rmdir } for  pid=5630 comm="syz-executor" name="103" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0"
[  176.307991][   T28] audit: type=1400 audit(1772571961.001:993): avc:  denied  { connect } for  pid=10918 comm="syz.5.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  177.095751][T10937] netlink: 'syz.0.1014': attribute type 5 has an invalid length.
[  177.145101][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'.
[  177.304118][T10951] loop3: detected capacity change from 0 to 512
[  177.320908][T10937] tipc: Started in network mode
[  177.320998][T10951] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  177.335987][T10937] tipc: Node identity 6e07f322caff, cluster identity 4711
[  177.345720][T10951] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  177.357788][T10937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.392101][T10937] syzkaller0: entered promiscuous mode
[  177.397658][T10937] syzkaller0: entered allmulticast mode
[  177.404413][T10937] tipc: Resetting bearer <eth:syzkaller0>
[  177.440348][T10936] tipc: Resetting bearer <eth:syzkaller0>
[  177.447382][T10951] FAT-fs (loop3): FAT read failed (blocknr 128)
[  177.471016][T10936] tipc: Disabling bearer <eth:syzkaller0>
[  177.490502][T10961] loop4: detected capacity change from 0 to 2048
[  177.528664][T10961] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.1018: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2053(2053)
[  177.546765][T10961] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  177.546881][T10961] EXT4-fs (loop4): Remounting filesystem read-only
[  177.555978][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  177.556001][    C0] EXT4-fs (loop4): initial error at time 1772571962: ext4_ext_check_inode:521: inode 2
[  177.556048][    C0] EXT4-fs (loop4): last error at time 1772571962: ext4_ext_check_inode:521: inode 2
[  177.590808][T10961] EXT4-fs (loop4): get root inode failed
[  177.596556][T10961] EXT4-fs (loop4): mount failed
[  177.751025][T10960] syzkaller0: entered promiscuous mode
[  177.757210][T10960] syzkaller0: entered allmulticast mode
[  178.099787][T11016] FAULT_INJECTION: forcing a failure.
[  178.099787][T11016] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  178.116922][T11019] netlink: 'syz.5.1026': attribute type 1 has an invalid length.
[  178.147829][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.3.1024 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  178.147867][T11016] Tainted: [W]=WARN
[  178.147875][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  178.147886][T11016] Call Trace:
[  178.147892][T11016]  <TASK>
[  178.147949][T11016]  __dump_stack+0x1d/0x30
[  178.147983][T11016]  dump_stack_lvl+0x95/0xd0
[  178.148008][T11016]  dump_stack+0x15/0x1b
[  178.148034][T11016]  should_fail_ex+0x263/0x280
[  178.148058][T11016]  should_fail_alloc_page+0xf2/0x100
[  178.148151][T11016]  __alloc_frozen_pages_noprof+0x108/0x360
[  178.148178][T11016]  alloc_pages_mpol+0xb3/0x260
[  178.148209][T11016]  folio_alloc_mpol_noprof+0x39/0x80
[  178.148285][T11016]  shmem_get_folio_gfp+0x3da/0xd60
[  178.148314][T11016]  shmem_fault+0xf6/0x250
[  178.148339][T11016]  __do_fault+0xbc/0x200
[  178.148360][T11016]  handle_mm_fault+0x11d7/0x3020
[  178.148444][T11016]  ? _raw_spin_lock+0x52/0xa0
[  178.148466][T11016]  ? pte_offset_map_lock+0x1d9/0x240
[  178.148526][T11016]  __get_user_pages+0x1023/0x1ea0
[  178.148577][T11016]  __mm_populate+0x242/0x390
[  178.148612][T11016]  vm_mmap_pgoff+0x23b/0x2d0
[  178.148666][T11016]  ksys_mmap_pgoff+0xc1/0x310
[  178.148689][T11016]  ? __x64_sys_mmap+0x49/0x70
[  178.148743][T11016]  x64_sys_call+0x14df/0x3020
[  178.148816][T11016]  do_syscall_64+0x12c/0x370
[  178.148891][T11016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.148915][T11016] RIP: 0033:0x7f578780c799
[  178.148955][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.148971][T11016] RSP: 002b:00007f5786267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  178.148995][T11016] RAX: ffffffffffffffda RBX: 00007f5787a85fa0 RCX: 00007f578780c799
[  178.149011][T11016] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  178.149026][T11016] RBP: 00007f5786267090 R08: ffffffffffffffff R09: 0000000000000000
[  178.149042][T11016] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002
[  178.149117][T11016] R13: 00007f5787a86038 R14: 00007f5787a85fa0 R15: 00007ffc5b6d2238
[  178.149136][T11016]  </TASK>
[  178.375351][T11030] loop4: detected capacity change from 0 to 128
[  178.589720][T11051] 9p: Bad value for 'rfdno'
[  178.935677][T11104] SET target dimension over the limit!
[  179.028946][T11119] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1047'.
[  179.100029][   T36] Bluetooth: hci0: Frame reassembly failed (-84)
[  179.121515][T11124] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0
[  179.410471][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'.
[  179.432208][T11157] chnl_net:caif_netlink_parms(): no params data found
[  179.445126][T11160] netlink: 'syz.1.1055': attribute type 2 has an invalid length.
[  179.456597][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  179.521274][T11163] 9pnet_virtio: no channels available for device .
[  179.533286][T11195] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1057'.
[  179.546739][T11198] FAULT_INJECTION: forcing a failure.
[  179.546739][T11198] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  179.582824][T11198] CPU: 0 UID: 0 PID: 11198 Comm: syz.3.1058 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  179.582914][T11198] Tainted: [W]=WARN
[  179.582954][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  179.582966][T11198] Call Trace:
[  179.582973][T11198]  <TASK>
[  179.582981][T11198]  __dump_stack+0x1d/0x30
[  179.583081][T11198]  dump_stack_lvl+0x95/0xd0
[  179.583103][T11198]  dump_stack+0x15/0x1b
[  179.583124][T11198]  should_fail_ex+0x263/0x280
[  179.583149][T11198]  should_fail_alloc_page+0xf2/0x100
[  179.583253][T11198]  __alloc_frozen_pages_noprof+0x108/0x360
[  179.583288][T11198]  alloc_pages_mpol+0xb3/0x260
[  179.583321][T11198]  folio_alloc_mpol_noprof+0x39/0x80
[  179.583348][T11198]  shmem_get_folio_gfp+0x3da/0xd60
[  179.583422][T11198]  shmem_fault+0xf6/0x250
[  179.583447][T11198]  __do_fault+0xbc/0x200
[  179.583466][T11198]  handle_mm_fault+0xfa1/0x3020
[  179.583511][T11198]  do_user_addr_fault+0x3fd/0x1050
[  179.583588][T11198]  exc_page_fault+0x62/0xa0
[  179.583631][T11198]  asm_exc_page_fault+0x26/0x30
[  179.583655][T11198] RIP: 0010:rep_stos_alternative+0x47/0x80
[  179.583698][T11198] Code: cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 07 48 89 47 08 <48> 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89
[  179.583715][T11198] RSP: 0018:ffffc9000398fd80 EFLAGS: 00050202
[  179.583733][T11198] RAX: 0000000000000000 RBX: ffffc9000398fde4 RCX: 000000000000f494
[  179.583750][T11198] RDX: 0000000000000000 RSI: 00002000000004b0 RDI: 0000200000000ff0
[  179.583766][T11198] RBP: 0000000000000030 R08: 0001c9000398fde7 R09: 0000000000000000
[  179.583781][T11198] R10: 0000000000000002 R11: 0000000000000000 R12: 0000200000010484
[  179.583797][T11198] R13: 00007ffffffff001 R14: 000000000000ffd4 R15: 00002000000004b0
[  179.583853][T11198]  io_query+0x1e7/0x620
[  179.583897][T11198]  __se_sys_io_uring_register+0x298/0x12d0
[  179.583925][T11198]  ? mutex_unlock+0x4e/0x90
[  179.583952][T11198]  ? fput+0x8f/0xc0
[  179.583975][T11198]  ? ksys_write+0x194/0x1a0
[  179.584048][T11198]  __x64_sys_io_uring_register+0x55/0x70
[  179.584076][T11198]  x64_sys_call+0x2be0/0x3020
[  179.584168][T11198]  do_syscall_64+0x12c/0x370
[  179.584187][T11198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.584212][T11198] RIP: 0033:0x7f578780c799
[  179.584230][T11198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.584301][T11198] RSP: 002b:00007f5786267028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  179.584320][T11198] RAX: ffffffffffffffda RBX: 00007f5787a85fa0 RCX: 00007f578780c799
[  179.584333][T11198] RDX: 0000200000000000 RSI: 0000000000000023 RDI: ffffffffffffffff
[  179.584346][T11198] RBP: 00007f5786267090 R08: 0000000000000000 R09: 0000000000000000
[  179.584361][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.584376][T11198] R13: 00007f5787a86038 R14: 00007f5787a85fa0 R15: 00007ffc5b6d2238
[  179.584455][T11198]  </TASK>
[  180.163172][T11163] loop0: detected capacity change from 0 to 512
[  180.197901][   T28] audit: type=1400 audit(1772571964.831:994): avc:  denied  { accept } for  pid=11208 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  180.208054][T11163] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.248796][T11163] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  180.311482][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1063'.
[  180.350809][   T28] audit: type=1326 audit(1772571965.101:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  180.378541][T11229] loop0: detected capacity change from 0 to 128
[  180.392559][   T28] audit: type=1326 audit(1772571965.101:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  180.518474][   T28] audit: type=1326 audit(1772571965.121:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faee38dcfce code=0x7ffc0000
[  180.563045][   T28] audit: type=1326 audit(1772571965.121:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7faee391da97 code=0x7ffc0000
[  181.149367][ T3579] Bluetooth: hci0: command 0x1003 tx timeout
[  181.155506][ T7096] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  181.394921][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'.
[  181.558666][   T28] audit: type=1326 audit(1772571965.121:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  181.582314][   T28] audit: type=1326 audit(1772571965.121:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7faee391da97 code=0x7ffc0000
[  181.605897][   T28] audit: type=1326 audit(1772571965.121:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faee38dcfce code=0x7ffc0000
[  182.183916][   T28] audit: type=1326 audit(1772571965.121:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  182.208512][   T28] audit: type=1326 audit(1772571965.121:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  182.526706][T11279] loop1: detected capacity change from 0 to 512
[  182.542060][T11279] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  182.651334][   T28] audit: type=1326 audit(1772571965.121:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  182.675856][   T28] audit: type=1326 audit(1772571965.121:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  182.700402][   T28] audit: type=1326 audit(1772571965.121:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faee391c799 code=0x7ffc0000
[  182.732193][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1071'.
[  183.436499][T11294] Invalid argument reading file caps for ./file0
[  183.735802][T11298] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.078498][T11311] loop4: detected capacity change from 0 to 8192
[  184.176518][T11311]  loop4: p1 < > p2 p4 < p5 >
[  184.235434][T11311] loop4: partition table partially beyond EOD, truncated
[  184.259055][T11320] loop5: detected capacity change from 0 to 1024
[  184.286563][T11311] loop4: p1 start 134217728 is beyond EOD, truncated
[  184.297864][T11320] EXT4-fs: inline encryption not supported
[  184.321560][T11320] EXT4-fs: Ignoring removed nobh option
[  184.333737][T11311] loop4: p2 size 591360 extends beyond EOD, truncated
[  184.342723][T11320] EXT4-fs: Ignoring removed bh option
[  184.369578][T11320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.392867][T11311] loop4: p5 size 591360 extends beyond EOD, truncated
[  184.458449][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'.
[  184.812218][T11349] Invalid argument reading file caps for ./file0
[  185.225822][T11363] xt_CT: You must specify a L4 protocol and not use inversions on it
[  186.009071][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'.
[  186.153556][ T5630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.244197][   T28] kauditd_printk_skb: 33 callbacks suppressed
[  186.244213][   T28] audit: type=1400 audit(1772571970.991:1040): avc:  denied  { setopt } for  pid=11418 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  186.406452][T11441] Invalid argument reading file caps for ./file0
[  186.632564][T11450] loop5: detected capacity change from 0 to 128
[  186.689928][T11450] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  186.767012][T11450] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  186.855769][T11451] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1100'.
[  186.969716][T11455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=11455 comm=syz.3.1100
[  187.107540][ T1790] ==================================================================
[  187.115677][ T1790] BUG: KCSAN: data-race in copy_process / free_pid
[  187.122631][ T1790] 
[  187.124980][ T1790] read-write to 0xffffffff86c61f68 of 4 bytes by task 11484 on cpu 0:
[  187.133127][ T1790]  free_pid+0xbc/0x1e0
[  187.137210][ T1790]  free_pids+0x7a/0xb0
[  187.141898][ T1790]  release_task+0x9a7/0xb60
[  187.146408][ T1790]  do_exit+0xd5c/0x15a0
[  187.150573][ T1790]  call_usermodehelper_exec_async+0x246/0x250
[  187.156652][ T1790]  ret_from_fork+0x150/0x360
[  187.161256][ T1790]  ret_from_fork_asm+0x1a/0x30
[  187.166036][ T1790] 
[  187.168361][ T1790] read to 0xffffffff86c61f68 of 4 bytes by task 1790 on cpu 1:
[  187.176163][ T1790]  copy_process+0x1895/0x20d0
[  187.180847][ T1790]  kernel_clone+0x16b/0x5d0
[  187.185353][ T1790]  user_mode_thread+0x9c/0xd0
[  187.190035][ T1790]  call_usermodehelper_exec_work+0x41/0x160
[  187.196026][ T1790]  process_scheduled_works+0x4de/0x9e0
[  187.201493][ T1790]  worker_thread+0x581/0x770
[  187.206624][ T1790]  kthread+0x22a/0x280
[  187.210717][ T1790]  ret_from_fork+0x150/0x360
[  187.215331][ T1790]  ret_from_fork_asm+0x1a/0x30
[  187.220112][ T1790] 
[  187.222434][ T1790] value changed: 0x80000124 -> 0x80000123
[  187.228150][ T1790] 
[  187.230480][ T1790] Reported by Kernel Concurrency Sanitizer on:
[  187.236634][ T1790] CPU: 1 UID: 0 PID: 1790 Comm: kworker/u8:8 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  187.247659][ T1790] Tainted: [W]=WARN
[  187.251475][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.261537][ T1790] Workqueue: events_unbound call_usermodehelper_exec_work
[  187.268664][ T1790] ==================================================================
[  187.629212][  T274] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)