last executing test programs:

2.498456854s ago: executing program 0 (id=1103):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x81, 0x482, &(0x7f0000001040)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
name_to_handle_at(r0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, 0x0, 0x200)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2.23529497s ago: executing program 1 (id=1107):
ioprio_set$pid(0x2, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x80000000, 0x3}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB='u'], 0x0, 0x0)

2.148138252s ago: executing program 3 (id=1109):
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
timer_create(0xfffffffc, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff11000000000000", 0x1e5)

1.360458459s ago: executing program 1 (id=1112):
r0 = socket$l2tp(0x2, 0x2, 0x73)
socket$inet6(0xa, 0x3, 0xff)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = syz_clone(0x4180, 0x0, 0xe8, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000001780)={&(0x7f0000000780)=""/4096, 0x1000})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4007fe, 0x0, 0xff, 0x1, 0x48}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4620, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000036000000a12f"], 0x18}, 0x1400c0c0)
r6 = getpgid(r2)
sched_rr_get_interval(r6, &(0x7f00000003c0))
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x14d, 0x10, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x4, 0x9, 0x8000, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xfffffffffffffffe, 0x1f, 0x7}, {0x2, 0xfffffffc, 0x3}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@srcaddr={0x0, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4004080)
getsockopt(r7, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff)
syz_io_uring_setup(0x7d44, &(0x7f00000001c0)={0x0, 0x35b7, 0x200, 0x2, 0x17}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340))
ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000080)=0x5561)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r8, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1f, 0x4, @loopback={0xff00000000000000}}, 0x1c)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

1.31982904s ago: executing program 2 (id=1113):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x14000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xffff}}, './file0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x406, r2)
write$tun(r4, &(0x7f0000000740)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x1a, 0x6, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x1, 0x0, 0x3, 0x5, 0x3, 0x0, 0xb, 0x2, 0x1, 0x4e20, 0x4e21}}, [0x0, 0x0]}}}}}, 0x42)
mkdirat(r1, 0x0, 0xd8)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0xd0f840, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)="e9", 0x1)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}], 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
io_submit(0x0, 0x0, 0x0)

1.225689333s ago: executing program 3 (id=1114):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

1.225207923s ago: executing program 2 (id=1115):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6(0xa, 0x803, 0x2c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x9, 0x80000800, 0x9141, 0x40, 0x0, 0xf42, 0xc6cb, 0x1}, {0x2, 0x3, 0xffffffffffffffff, 0x8}, 0x2, 0x0, 0x1, 0x1, 0x4, 0x1}, {{@in=@multicast2, 0x4, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40350b, 0x5, 0x0, 0x4, 0x0, 0x0, 0xffffffff}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
unshare(0x26020480)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xf, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb", 0x0, 0xf3, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
getpid()
socket$kcm(0x23, 0x2, 0x0)
r4 = open(0x0, 0x403fe, 0x4242dfd7907e8bce)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7fff}, 0x1a662, 0x2, 0xfffffffe, 0x6, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, r4, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})

1.062033326s ago: executing program 1 (id=1116):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000022c0)={0x14, 0x26, 0x1, 0x70bd2b, 0xfffffffe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24008010}, 0x844)

1.061823746s ago: executing program 2 (id=1117):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

1.054333706s ago: executing program 1 (id=1119):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/34], 0xfdef)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x4, 0x1, 0x81, 0x6}, {0x46b9, 0x4, 0x5, 0xc}, {0xce31, 0x2, 0x1, 0x4}, {0x8001, 0x6, 0x3}, {0x5, 0x40, 0x1, 0x2}, {0x1ff, 0x1, 0x2, 0x7}, {0x3, 0x1, 0x81, 0xfffffffa}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={r3, 0x2, r0, 0x9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.040878397s ago: executing program 3 (id=1120):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x1ca78000)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x14a741)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000100)={0x0, &(0x7f0000000080)="f81224849d89b3ad49781773f65ce0b3344d0188d3d5d385a5957b70f4f24de295dc69ca2fb30471b59a1ece3490c20e37e0bcfe8586f6cd123bdc7a2f775ee884a5a94980293255c3a6bba887e39282283d19dec1977099d4643f8bea0258777ce537b08a640612422f"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r2, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000)
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000200))

1.040078287s ago: executing program 0 (id=1121):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x2, 0x209, 0x8e42, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc)
getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', <r6=>0x0, 0x7800, 0x700, 0x7, 0x3df, {{0xe, 0x4, 0x0, 0x36, 0x38, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x24, 0xa, 0x0, 0x7, [0x8041, 0x3f8, 0x2, 0x9, 0xb, 0x7, 0x9, 0x8]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', r6, 0x29, 0x10, 0xff, 0x9, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x20, 0x8, 0x1, 0x4}})
r7 = syz_ublk_setup_io_uring(0x5445, &(0x7f00000004c0)={0x0, 0xd570, 0x1000, 0x2, 0x362}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000000780)={0x3, 0x1, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/28, 0x1c}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/23, 0x17}], &(0x7f0000001080)=[0x7, 0x7, 0x3f6, 0x5, 0x3, 0x8000, 0x9, 0x2, 0x7, 0x8]}, 0x20)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4)
unlink(&(0x7f00000000c0)='./file0\x00')
r8 = dup2(r3, r0)
ioctl$TCGETS(r8, 0x5401, &(0x7f0000000080))

1.007390728s ago: executing program 3 (id=1122):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000040)=0xf29, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f00000000c0))
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
pread64(r4, 0x0, 0x0, 0x4)
getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
fchown(r1, 0xee01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000000000000000000000ffffaa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44)

909.86356ms ago: executing program 2 (id=1123):
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)

792.125332ms ago: executing program 1 (id=1124):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3e3}, 0x44de, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x80003}, 0x1c)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a03000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

791.389643ms ago: executing program 0 (id=1125):
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x14000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xffff}}, './file0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x406, r2)
write$tun(r4, &(0x7f0000000740)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x1a, 0x6, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x1, 0x0, 0x3, 0x5, 0x3, 0x0, 0xb, 0x2, 0x1, 0x4e20, 0x4e21}}, [0x0, 0x0]}}}}}, 0x42)
mkdirat(r1, 0x0, 0xd8)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0xd0f840, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)="e9", 0x1)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}], 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
io_submit(0x0, 0x0, 0x0)

692.277015ms ago: executing program 2 (id=1126):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4)

666.554275ms ago: executing program 1 (id=1127):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002"], 0x90}}, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x24}})
r1 = socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x100, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4c891}, 0x4014)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000500)="ebde281b6e4b3ff3b25dbc47b89a34e3c168363ac4359e619df4714c216327aee4391b34e0e389dff6201175ea3803d60b7de89dbc5aa2a4968fcc422581d135518f5bc439f8bc0f9c67518f09b5508a7382aac77d47ce3f55671aae2b3e5af4f2f4da5a9ad78a8d239772c646fbc6fb4305715a877a6fc121c1d3720fb69f144e5b775dd1cc0dbe77c64fe939d9060bfc55d2ac591799de7ecbb1d8a1a506f9afe6113de58f176832326c93ce4accfb52bb1309017edb544d2adb31b12338139ca7d6bf2f040bd3007ef2fdb1c354995f2d156e5b1e8db12279698cd966f14be8552cdece1e0e8e05a674d245ba60beb9685e8a4bcfd70cdcd6e76086d320a000fa009056edadaa95c37c478ad001c2fe32013278f2ec7ef98478988f68eaaa316d92db9edf8267208d3ae2bbee28f08e49274c374c03fba6217ea75ff5d072e1cedcd712892ed7c42e291bbf4bb98b30125020e46e4e6de47da7fcde8afe1a8b0a293881250fe9827e9e067bbc11308d34da3179b09a1a5d708b0f6c8778f322d70490e44e8f6db3cf9bffaf5c0afa56aace96dca00c85156a76c3d154a330d2e794d606e4093c702a357db4af77bec221fa69ae0fa6cb4306020540dfc585439576f23f0b4b8989d9ac83549018f491975a7d76e7489c4f81874fd1ecf24514fd2761b232f3aebbf0f4dad7d1524d04ada62bea64ec06fa", 0x1f9}, {&(0x7f0000000280)="e556e66ff649b1aa407e74eee9a51674f08a327619c3fe29f707dbd7f71f881dee0090ed63c0f3e5f151f2344800373ea8db1ed20dfecf242d227c72bf9b781dd7c20dff35ad557743b8fbabcf41cdfc984ec9dc100e0fc804633914b5dc", 0x5e}, {&(0x7f0000000300)="951e78554b16411fbe4bd69ff8f1974050", 0x11}, {&(0x7f0000000380)="fc4d3377a7bdfcf9882a6d289b3085e6ed22ab32218e5fe98c7cc1c4203556b0d4e15f", 0xa9}, {&(0x7f00000003c0)="48c90096a68eb9a7c81b432937ebcc91d2d69941e6561e15c290cf4cf39ca6407c2c2694ff1e89c614fef1aed92b3d4d535a425b721f7fcf3f7857f2af73e71bc92ac7eb3e04598af2a292ab69cbdb0dd2b7c9721457712916b3dbd4d099ad117ab84742bbdf3509cdad358b82a783db631b7d7b4cbad82a786a14471d5c83d58b", 0x81}], 0x5)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)

630.905546ms ago: executing program 2 (id=1128):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0})
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000130a450000000000000000000a0000042a0008005acda027a52993bc8563c854ba921ce098810787b201efd8eb9e81ebc504000000cb0a5ed88e00000c00064000000000000000010900010073797a31000000000c000640000000000000000231000800a2d38c9e3cc90893ca80ffcc09000000000000009cbd102b376899916f2c49bafcc0813e51b55de4d5e818dd0e0000000900010073797a30000000000900010073797a3100000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0xc084)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x5, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x20008800)
sendto$llc(r2, &(0x7f0000000140)="53fb091537a8d59bf3b15700c059e82c1d14fbd07138eedba3af10ad60c0552861ed55d8c88c6a2b527c5518bab7c08250e2d96984f272791ff2efdd92b9996d2d5afba33e6e7bc599126dd5152706b8784e5eb1987e97904c10e1b67f94a4ccc2fbd0fc48c35dcc8baa7744740cb54d825d1c1d68246070ca3ef53e3903423f607c245efe812c00a61a6a4564c8c2dfca6532a2d11c85d5bea92699b7a36452d1895054505e543a02151432ebfebf40320e3e8d0b0ad679c4215786771bf9c8ca17be06c684ed59965cefdbaee9f4b7506623bb88be8765e2fd4293d3c339f77fa9", 0xe2, 0x20040401, &(0x7f00000002c0)={0x1a, 0x207, 0xf, 0xc1, 0xde, 0x8, @remote}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

630.767936ms ago: executing program 4 (id=1129):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x24000000000}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000022c0)={0x14, 0x26, 0x1, 0x70bd2b, 0xfffffffe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24008010}, 0x844)

601.496677ms ago: executing program 0 (id=1130):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000009000000000000000000000a00000004000380180003800600034000e9ffff0b000280050001000000000004000180"], 0x34}}, 0x20000000)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)
r2 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<Mv\x19^\xae\x84\x8c_\x99V\x921 \xc6\xe0\xc3\\|\t\x93\xe7I\xfd\x97\xcf-@\xba\xed\x14\xf1\xd2\xebr\x15g\x19\xd8\x9a\xdaF', 0x5)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1dc)
pwrite64(r2, 0x0, 0x0, 0x100004)
r5 = socket(0x10, 0x3, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x13, 0xa, 0x3})
ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1c8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0x0, 0x0, 0xff], [0x0, 0xff, 0xffffff00, 0xff000000], 'pim6reg\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x2, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2, 0x6}, {0xffffffffffffffff, 0x2, 0x4}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
sendfile(r7, r8, 0x0, 0x20000023892)
write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3})
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0x15)
fsetxattr(r1, &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f00000004c0)='\n\x00\x906\xe8\xe9\xfe', 0x7, 0x3)

573.641068ms ago: executing program 4 (id=1131):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x5, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa08004500001c0000000000119078ffffffffe000000100004e2000089078b60c7105513b3bfef960b734fa1bf8f7482ccee328206d930cae0d6a3700c6de337e64547dbc63be5ca66c5fa3ac88e6b8d757aef7fdc37a136f70e266815d86ac3b32055fe052196367684a15abea17713938f2dbabfa6c673860f54da698ee571a000000006f6bcc73d23bf661544cca2c250cd29f9ef8f4f844318d1011553eea9c38e7139a613fd3adb83c8c61fdcdbe03f1ce3e7894d685c5bdad268bbf1a0cf97a5811e2001019ece16e815c99605b6554f92db45044708687286c1af011f4f1f00943"], 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000022327d3d84b88c88a149fcf694b907d928a339737cc57f1e387c7af9221de3fa4e264bcc674b83a81b342363140f076ab10733c3090449e89ba15123c9537e609313363a0074412cada6305d766f6949b86dfc0601645cdd74193a74b4774ee05fbf3aee05aaa46a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x4}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x161d0e52, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, r2, r3, 0x0, 0x0, 0x0, 0x10, 0x9bc}, 0x94)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}], 0x18}, 0xc084)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

496.775849ms ago: executing program 4 (id=1132):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
pipe(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r2=>0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$poke(0x4, r3, &(0x7f00000000c0), 0x1fb)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, r2, 0x0, r2, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x96, 0xffff, 0x0, r3})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0xc08f, 0x40, 0x4, 0x318})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, 0x0, 0x1)
writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000680)="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", 0x135}, {&(0x7f0000000100)="b8328d8d2a6764e79355b46e54dd9a335d271ba4115c5f2936e261765fcfe4b65f63a8a3e4a859130d680a52c23e21f3d41070e89deedc65", 0x38}, {&(0x7f0000000140)="4ee2", 0x2}, {&(0x7f0000000080)="15eda0f0ca0b6fa33f486fbac0d221d0519b2dcb0ab4a69e2779c83efbb4941b633283d0ca0da8ba9fbc349d37046a60fb546d46b44dae3e60f3314cfb2d13ee9c30883111d48205ebf0b828934f1cf753f9e7c677a6259f1533855eef62", 0x5e}, {&(0x7f0000000200)="3f6557e1ae7cc54d3cfaad01296579f26cdfbe488091afc8d41d5859fbd912e0ad033a044eccf821d07b1089fe50c4f3619ed67bd91c0a51d04c0210f83437f7625f5e44c0988bb2087f8e7f19e3cb2b8d891e980022e98b1a27d0b3249a64f437", 0x61}, {&(0x7f00000004c0)="fed7e0d2dad8c75b7b1a084e7bfaa69648b3be7ccd7bf66a70c6b0262c9ad80ab9042519fb644c1a548f19f84f0b54bbeafc88fef1e933e3c2df5e63cd8fe0b7414cb26e5345fbbf3100c9125aaf907c8ab4e8933d78379b07edbd357acfa32860c85d13bfd1a91ac804c985c00e1dc50780f2b05c5d5647dbce3dbdd475a7935ee63c6030d9a40dffddf419bac42cf3fc15503a66e171147aa33dcbe5a17275f21332e7468041fb28f85b3e24bcb75a0a24dbb2edf45fc8a6b7b4fe5f3d51134543c8a7c4c0cf51a470f8f3eb11e845787084f5644a0cb44432", 0xda}, {&(0x7f0000000340)="34341f864e230762b3664bcfdbfeae20a3ee865a68e71b9445f2e3069c38aa59127c76653944b27d969b911cd98e1d847b8de87a957919d527a8ac8de6cd64e0ef3bf6a42de507", 0x47}, {&(0x7f00000003c0)="ca55b1d0c18847b987a1c4f9c4d0b85aac192fd2499a183b2d62dd8593bccdebede10e26ce6cead574c6b10c83d6c8491099aa5c0e1ec29ebe1c", 0x3a}, {&(0x7f00000008c0)="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", 0x104}, {&(0x7f00000007c0)="b2cbaa475cbf5edd430900e2e1107a2e7958033134ce494a153bf83cb89fd57a26e5a247a10b345c21fed7454eaeb8cc31a7e4e0db4f4bb46095a3dca3d011076068d7e707e285f46d045fbf4c24e89c19660b840509ea7923049596454f1cff0d0dc5cea26df3cdffdff7ff39f26b1aabf44a4d6e6eb0afdee26d0d24d7e37da214e2fab1cf22eed4159cbf3a0943f804bc4de645b66a1796c169df9dff6f85fdf741051b06296bfaf79ca0b4f231470fd929645868d6d928bea33d0c95abb30bb963fd698dc0c32ee3bbfea01fd770c0792c58f68224963d1ea9f4ff2004ecea44ad142de533811b", 0xe9}], 0xa)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x40000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000340)=0xfffffffffffffff9, 0x2)
write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006d090890e0878f0e1ac6e7f89b334d959b639a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bad36f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0x1006)

369.379732ms ago: executing program 4 (id=1133):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x40f00, 0xb281f8ca2f9d498e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sync()
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500101d0002000000119078000000000000000000004e200f8290780400000007740000fdffffffffffffff9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00da84248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c1602000000781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"], 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0xb, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0))

288.197214ms ago: executing program 0 (id=1134):
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

229.705055ms ago: executing program 4 (id=1135):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x111, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff7, 0x73}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4804)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

188.642026ms ago: executing program 0 (id=1136):
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)

88.337518ms ago: executing program 4 (id=1137):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x1, 0x2}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, 0x0}, 0x108)
socket$nl_xfrm(0x10, 0x3, 0x6)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x3000000)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20044014}, 0x4000884)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x1b0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x180, 0x1, [@m_xt={0xc4, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x9a, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x84, 0xe, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0x40, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x34, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xffc3}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
r10 = openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x6}, {r7, 0x1000}, {r4, 0x440}, {r0, 0x102}, {r10, 0x8540}], 0x5, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)={[0x2]}, 0x8)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

87.898848ms ago: executing program 3 (id=1138):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4)

0s ago: executing program 3 (id=1139):
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x40041, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ftruncate(r4, 0x200004)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
readlinkat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r3, 0x0, 0xfd, 0x7d, &(0x7f0000000280)="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", &(0x7f0000000380)=""/125, 0x8, 0x0, 0x2e, 0x1000, &(0x7f0000000400)="52d44998a76eb709ab59e3ecaf1e138b85f117c01778dba61ad2a93975077d1f9533d85dc1a207b4052b073269da", &(0x7f00000005c0)="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", 0x4, 0x0, 0x7}, 0x50)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) (async)
inotify_init1(0x800) (async)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x40041, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
ftruncate(r4, 0x200004) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') (async)
readlinkat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r3, 0x0, 0xfd, 0x7d, &(0x7f0000000280)="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", &(0x7f0000000380)=""/125, 0x8, 0x0, 0x2e, 0x1000, &(0x7f0000000400)="52d44998a76eb709ab59e3ecaf1e138b85f117c01778dba61ad2a93975077d1f9533d85dc1a207b4052b073269da", &(0x7f00000005c0)="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", 0x4, 0x0, 0x7}, 0x50) (async)

kernel console output (not intermixed with test programs):

writeback.
[   91.353595][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'.
[   91.361213][ T5040] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.422979][ T5047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'.
[   91.452329][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.460326][ T5051] loop4: detected capacity change from 0 to 512
[   91.461016][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.488330][ T5047] bridge0: entered allmulticast mode
[   91.520970][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.539654][ T5051] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.553131][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.610349][ T5064] netlink: 228 bytes leftover after parsing attributes in process `syz.1.512'.
[   91.647690][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.984334][ T5080] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[   91.984334][ T5080]    program syz.3.517 not setting count and/or reply_len properly
[   92.204805][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[   92.209842][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[   92.221233][ T5085] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.230990][ T5085] bond0: (slave bond1): Enslaving as an active interface with an up link
[   92.380478][ T5094] loop3: detected capacity change from 0 to 4096
[   92.418557][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.626123][ T5106] loop0: detected capacity change from 0 to 2048
[   92.643098][ T5106] Cannot find map_set index 17 as target
[   92.658002][ T5111] 9p: Bad value for 'wfdno'
[   92.685106][ T5111] loop4: detected capacity change from 0 to 128
[   92.928700][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.943403][ T5130] loop4: detected capacity change from 0 to 128
[   92.962040][ T5130] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[   92.980153][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop4
[   93.006417][ T3286] udevd[3286]: incorrect ext4 checksum on /dev/loop4
[   93.091785][ T5142] loop4: detected capacity change from 0 to 1024
[   93.100326][ T5142] ext4: Unknown parameter 'fsname'
[   93.130478][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   93.130491][   T28] audit: type=1400 audit(1783640888.137:1305): avc:  denied  { getopt } for  pid=5129 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   93.359851][ T5148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.370231][ T5148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.521259][ T5148] loop0: detected capacity change from 0 to 1024
[   93.556509][ T5148] EXT4-fs: inline encryption not supported
[   93.576021][ T5148] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.623980][ T5148] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.544: Freeing blocks not in datazone - block = 0, count = 4096
[   93.647965][ T5148] loop0: lost filesystem error report for type 5 error -117
[   93.649870][ T5148] EXT4-fs (loop0): Remounting filesystem read-only
[   93.657993][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   93.658059][    C1] EXT4-fs (loop0): initial error at time 1783640888: ext4_free_blocks:6718
[   93.658117][    C1] EXT4-fs (loop0): last error at time 1783640888: ext4_free_blocks:6718
[   93.704174][ T5148] EXT4-fs (loop0): 1 orphan inode deleted
[   93.721893][ T5148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.734887][   T30] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started
[   93.746581][   T30] Quota error (device loop0): write_blk: dquota write failed
[   93.754019][   T30] Quota error (device loop0): remove_free_dqentry: Can't write block (2) with free entries
[   93.783847][   T30] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started
[   93.907455][   T30] Quota error (device loop0): write_blk: dquota write failed
[   93.915028][   T30] Quota error (device loop0): free_dqentry: Can't move quota data block (2) to free list
[   93.926548][   T30] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   93.928154][   T28] audit: type=1400 audit(1783640888.937:1306): avc:  denied  { setopt } for  pid=5153 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   93.938429][   T30] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   93.989535][ T5155] syzkaller0: entered promiscuous mode
[   94.005109][ T5155] syzkaller0: entered allmulticast mode
[   95.290814][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.693215][ T5181] loop0: detected capacity change from 0 to 512
[   96.872066][ T5152] loop4: detected capacity change from 0 to 1024
[   97.194699][ T5152] EXT4-fs: Ignoring removed oldalloc option
[   97.235695][ T5152] EXT4-fs: Ignoring removed oldalloc option
[   97.654885][ T5152] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled
[   97.691125][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.691193][ T5181] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.702822][   T28] audit: type=1400 audit(1783640892.707:1307): avc:  denied  { write } for  pid=5179 comm="syz.0.555" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   98.200870][ T5152] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4.
[   98.394949][ T5196] netlink: 'syz.1.558': attribute type 10 has an invalid length.
[   98.425430][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.465126][ T5196] team0: Device wg2 is of different type
[   98.653995][ T5202] syz_tun: entered allmulticast mode
[   98.662485][ T5201] syz_tun: left allmulticast mode
[   98.694452][ T5204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5204 comm=syz.2.561
[   98.715483][ T5205] loop2: detected capacity change from 0 to 512
[   98.725286][ T5205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.745361][ T5205] EXT4-fs (loop2): 1 truncate cleaned up
[   98.753202][ T5205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.779190][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.362108][   T28] audit: type=1400 audit(1783640894.367:1308): avc:  denied  { map } for  pid=5217 comm="syz.2.566" path="socket:[10933]" dev="sockfs" ino=10933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   99.393462][ T5218] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[   99.396122][ T5224] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[   99.396122][ T5224]    program syz.1.567 not setting count and/or reply_len properly
[   99.468304][   T28] audit: type=1400 audit(1783640894.367:1309): avc:  denied  { read } for  pid=5217 comm="syz.2.566" path="socket:[10933]" dev="sockfs" ino=10933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   99.557764][ T5218] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.641535][ T5230] bond2: (slave geneve2): making interface the new active one
[   99.684008][ T5230] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   99.689607][ T5247] loop1: detected capacity change from 0 to 512
[   99.698595][ T5234] __nla_validate_parse: 4 callbacks suppressed
[   99.698648][ T5234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'.
[   99.700486][ T5247] ext4: Unknown parameter 'smackfstransmute'
[   99.726866][   T28] audit: type=1326 audit(1783640894.727:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.778530][   T28] audit: type=1326 audit(1783640894.727:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.808484][   T28] audit: type=1326 audit(1783640894.727:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.849829][ T5247] loop1: detected capacity change from 0 to 256
[   99.874608][   T28] audit: type=1326 audit(1783640894.727:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.901315][   T28] audit: type=1326 audit(1783640894.727:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.941363][   T28] audit: type=1326 audit(1783640894.727:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.968171][   T28] audit: type=1326 audit(1783640894.727:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[   99.997409][   T28] audit: type=1326 audit(1783640894.727:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.3.573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  100.030480][ T5253] loop3: detected capacity change from 0 to 1024
[  100.058627][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.061848][ T5253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.091943][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.140621][   T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.150989][   T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.222536][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.234204][   T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.243983][   T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.282558][   T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.334372][ T5272] netlink: 'syz.4.579': attribute type 1 has an invalid length.
[  100.435435][   T30] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.523947][   T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.533936][ T5274] loop3: detected capacity change from 0 to 512
[  100.581214][   T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.632144][ T5274] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.580: inode has both inline data and extents flags
[  100.684789][ T5274] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  100.685296][ T5274] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.580: couldn't read orphan inode 15 (err -117)
[  100.708925][ T5274] loop3: lost filesystem error report for type 5 error -117
[  100.713294][ T5274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.741205][ T5283] netlink: 'syz.2.583': attribute type 10 has an invalid length.
[  100.753342][ T5283] team0: Device wg2 is of different type
[  101.247901][ T5294] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  101.247901][ T5294]    program syz.1.586 not setting count and/or reply_len properly
[  101.270990][ T5292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.584'.
[  101.330715][ T5297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.343303][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.367203][ T5297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.485148][ T5303] loop1: detected capacity change from 0 to 1024
[  101.503507][ T5307] loop0: detected capacity change from 0 to 512
[  101.529370][ T5303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.573305][ T5307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.678331][ T5307] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.703723][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.715077][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.168179][ T5316] netlink: 144 bytes leftover after parsing attributes in process `syz.4.595'.
[  102.551893][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'.
[  102.646823][ T5326] netlink: 'syz.4.598': attribute type 10 has an invalid length.
[  102.721829][ T5326] team0: Device wg2 is of different type
[  103.270141][ T5333] syzkaller0: entered promiscuous mode
[  103.297995][ T5333] syzkaller0: entered allmulticast mode
[  103.325075][ T5338] netlink: 'syz.0.594': attribute type 3 has an invalid length.
[  103.339329][ T5340] loop4: detected capacity change from 0 to 1024
[  103.375795][ T5340] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  103.420529][ T5340] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.602: lblock 1 mapped to illegal pblock 1 (length 1)
[  103.467142][ T5340] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  103.470253][ T5340] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.602: Failed to acquire dquot type 0
[  103.479857][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  103.479898][    C1] EXT4-fs (loop4): initial error at time 1783640898: ext4_map_blocks:833: inode 3: block 1
[  103.479939][    C1] EXT4-fs (loop4): last error at time 1783640898: ext4_map_blocks:833: inode 3: block 1
[  103.555939][ T5350] loop0: detected capacity change from 0 to 512
[  103.560208][ T5340] loop4: lost filesystem error report for type 5 error -117
[  103.565334][ T5340] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.602: Freeing blocks not in datazone - block = 0, count = 4096
[  103.632683][ T5350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.635293][ T5340] loop4: lost filesystem error report for type 5 error -117
[  103.647509][ T5340] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.602: Invalid inode bitmap blk 0 in block_group 0
[  103.661783][ T5350] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.671688][   T30] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  103.728416][   T30] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  103.728541][   T30] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0
[  103.788654][ T5342] loop2: detected capacity change from 0 to 4096
[  103.795414][ T5340] loop4: lost filesystem error report for type 5 error -117
[  103.795525][ T5340] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem
[  103.799545][ T5342] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  103.804549][ T5340] loop4: lost filesystem error report for type 5 error -117
[  103.838334][   T30] loop4: lost filesystem error report for type 5 error -117
[  103.854227][ T5346] Illegal XDP return value 731621483 on prog  (id 92) dev syz_tun, expect packet loss!
[  103.860526][ T5340] EXT4-fs (loop4): 1 orphan inode deleted
[  103.906385][ T5340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.947971][ T5362] tipc: Started in network mode
[  103.952945][ T5362] tipc: Node identity 4, cluster identity 4711
[  103.959194][ T5362] tipc: Node number set to 4
[  103.988058][ T5340] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  104.008083][ T5340] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (18333!=0)
[  104.027565][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.075082][ T5373] netlink: 380 bytes leftover after parsing attributes in process `syz.4.613'.
[  104.122476][ T5373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.613'.
[  104.147454][ T5373] netlink: 43 bytes leftover after parsing attributes in process `syz.4.613'.
[  104.151717][ T5371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.614'.
[  104.190151][ T5373] netlink: 'syz.4.613': attribute type 6 has an invalid length.
[  104.200800][ T5373] netlink: 'syz.4.613': attribute type 5 has an invalid length.
[  104.224781][ T5373] netlink: 43 bytes leftover after parsing attributes in process `syz.4.613'.
[  104.301062][ T5382] loop4: detected capacity change from 0 to 764
[  104.355460][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'.
[  104.374028][   T28] kauditd_printk_skb: 480 callbacks suppressed
[  104.374040][   T28] audit: type=1400 audit(1783640899.377:1795): avc:  denied  { mount } for  pid=5372 comm="syz.4.613" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  104.507433][ T5386] loop2: detected capacity change from 0 to 128
[  104.521430][ T5386] EXT4-fs: Ignoring removed i_version option
[  104.534152][ T5386] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  104.631293][ T5386] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  104.678528][ T5391] loop3: detected capacity change from 0 to 512
[  104.713586][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.754396][ T5391] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.845710][   T28] audit: type=1400 audit(1783640899.757:1796): avc:  denied  { write } for  pid=5385 comm="syz.2.618" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  104.937775][   T28] audit: type=1400 audit(1783640899.757:1797): avc:  denied  { write } for  pid=5385 comm="syz.2.618" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  104.990702][   T28] audit: type=1400 audit(1783640899.797:1798): avc:  denied  { create } for  pid=5389 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  105.071421][   T28] audit: type=1400 audit(1783640899.807:1799): avc:  denied  { write } for  pid=5389 comm="syz.3.619" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  105.409214][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.419506][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.434015][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.497010][   T28] audit: type=1400 audit(1783640900.497:1800): avc:  denied  { unmount } for  pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  105.527540][ T5397] loop3: detected capacity change from 0 to 512
[  105.580521][ T5406] FAULT_INJECTION: forcing a failure.
[  105.580521][ T5406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.601901][ T5397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.672178][ T5406] CPU: 1 UID: 0 PID: 5406 Comm: syz.4.623 Not tainted syzkaller #0 PREEMPT(lazy) 
[  105.672206][ T5406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  105.672257][ T5406] Call Trace:
[  105.672284][ T5406]  <TASK>
[  105.672292][ T5406]  __dump_stack+0x1d/0x30
[  105.672313][ T5406]  dump_stack_lvl+0x95/0xd0
[  105.672331][ T5406]  dump_stack+0x15/0x1b
[  105.672400][ T5406]  should_fail_ex+0x25e/0x270
[  105.672428][ T5406]  should_fail+0xb/0x20
[  105.672494][ T5406]  should_fail_usercopy+0x1a/0x20
[  105.672518][ T5406]  strncpy_from_user+0x27/0x250
[  105.672660][ T5406]  keyctl_keyring_search+0x5b/0x2f0
[  105.672679][ T5406]  ? __se_sys_keyctl+0x4b/0xb70
[  105.672700][ T5406]  __se_sys_keyctl+0x30f/0xb70
[  105.672717][ T5406]  ? irqentry_exit+0x58f/0x610
[  105.672812][ T5406]  ? clockevents_program_event+0x109/0x340
[  105.672835][ T5406]  ? sysvec_apic_timer_interrupt+0x44/0x80
[  105.672923][ T5406]  __x64_sys_keyctl+0x67/0x80
[  105.672947][ T5406]  x64_sys_call+0x1d12/0x3020
[  105.673036][ T5406]  do_syscall_64+0x136/0x3c0
[  105.673070][ T5406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.673094][ T5406] RIP: 0033:0x7f9eda62de59
[  105.673111][ T5406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.673131][ T5406] RSP: 002b:00007f9ed9087028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  105.673245][ T5406] RAX: ffffffffffffffda RBX: 00007f9eda8b5fa0 RCX: 00007f9eda62de59
[  105.673261][ T5406] RDX: 00002000000000c0 RSI: 000000003cc31465 RDI: 000000000000000a
[  105.673277][ T5406] RBP: 00007f9ed9087090 R08: ffffffffffffffff R09: 0000000000000000
[  105.673289][ T5406] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  105.673301][ T5406] R13: 00007f9eda8b6038 R14: 00007f9eda8b5fa0 R15: 00007ffda4454cf8
[  105.673318][ T5406]  </TASK>
[  105.673426][ T5397] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.902021][   T28] audit: type=1400 audit(1783640900.907:1801): avc:  denied  { write } for  pid=5396 comm="syz.3.620" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  105.948287][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[  105.963380][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.973745][   T28] audit: type=1400 audit(1783640900.977:1802): avc:  denied  { setopt } for  pid=5421 comm="syz.2.628" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.066186][   T28] audit: type=1400 audit(1783640901.077:1803): avc:  denied  { block_suspend } for  pid=5432 comm="syz.3.629" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  106.123926][ T5433] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  106.137152][   T28] audit: type=1400 audit(1783640901.147:1804): avc:  denied  { bind } for  pid=5435 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  106.138873][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[  106.207261][ T5445] loop3: detected capacity change from 0 to 512
[  106.221414][ T5445] EXT4-fs: inline encryption not supported
[  106.251686][ T5433] xt_hashlimit: overflow, try lower: 17592186044416/2047
[  106.300830][ T5440] SELinux:  policydb string SE Linuý does not match my string SE Linux
[  106.308800][ T5445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.309108][ T5440] SELinux: failed to load policy
[  106.334816][ T5445] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  106.349256][ T5445] EXT4-fs (loop3): 1 truncate cleaned up
[  106.355342][ T5445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.430437][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  106.630955][ T5466] loop1: detected capacity change from 0 to 1024
[  106.645256][ T5466] EXT4-fs: Ignoring removed orlov option
[  106.727085][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.872935][ T5471] SELinux:  Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped).
[  107.463800][ T5481] bridge_slave_1: left allmulticast mode
[  107.482054][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.504682][ T5481] bridge_slave_1: left promiscuous mode
[  107.510389][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.614801][ T5481] bridge_slave_0: left allmulticast mode
[  107.621122][ T5481] bridge_slave_0: left promiscuous mode
[  107.627643][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.702128][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.328420][ T5491] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002
[  108.540848][ T5493] loop4: detected capacity change from 0 to 4096
[  108.641825][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.658594][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.689318][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.707614][ T5493] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.650: corrupted inode contents
[  108.749587][ T5493] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.650: mark_inode_dirty error
[  108.804432][ T5493] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.650: corrupted inode contents
[  108.856055][ T5493] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.650: mark_inode_dirty error
[  108.867523][ T5493] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.650: corrupted inode contents
[  108.872222][ T5510] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  108.872222][ T5510]    program syz.3.657 not setting count and/or reply_len properly
[  108.879706][ T5493] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.650: mark_inode_dirty error
[  108.879898][ T5493] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.650: corrupted inode contents
[  108.880028][ T5493] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.650: mark_inode_dirty error
[  108.880146][ T5493] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem
[  108.989044][ T5512] team0: No ports can be present during mode change
[  109.148427][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.175251][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'.
[  109.233432][ T5521] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.661'.
[  109.357639][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'.
[  109.385814][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'.
[  109.480172][ T5540] netlink: 'syz.3.668': attribute type 21 has an invalid length.
[  109.490306][ T5540] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.498998][ T5540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.506368][ T5540] IPv6: NLM_F_CREATE should be set when creating new route
[  109.513659][ T5540] IPv6: NLM_F_CREATE should be set when creating new route
[  109.520977][ T5540] IPv6: NLM_F_CREATE should be set when creating new route
[  109.530915][ T5540] netlink: 'syz.3.668': attribute type 21 has an invalid length.
[  109.542300][ T5540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.623142][ T5540] vlan0: entered promiscuous mode
[  109.631763][ T5540] bridge0: entered promiscuous mode
[  109.715461][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'.
[  109.816630][ T5557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.826669][ T5557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.013533][ T5554] loop1: detected capacity change from 0 to 512
[  110.034644][ T5554] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  110.112074][ T5554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  110.117740][ T5559] loop2: detected capacity change from 0 to 512
[  110.133006][ T5554] block device autoloading is deprecated and will be removed.
[  110.149942][ T5559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.164725][ T5554] EXT4-fs (loop1): couldn't read superblock of external journal
[  110.170549][ T5559] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.188771][   T28] kauditd_printk_skb: 511 callbacks suppressed
[  110.188786][   T28] audit: type=1400 audit(1783640905.197:2316): avc:  denied  { write } for  pid=5558 comm="syz.2.676" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.297687][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.378206][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  110.407564][ T3356] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  110.445523][ T5571] loop0: detected capacity change from 0 to 512
[  110.473752][   T28] audit: type=1400 audit(1783640905.477:2317): avc:  denied  { bind } for  pid=5573 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.493864][ T5571] ext4: Bad value for 'mb_optimize_scan'
[  110.529035][   T28] audit: type=1400 audit(1783640905.497:2318): avc:  denied  { connect } for  pid=5573 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.540521][ T5577] loop3: detected capacity change from 0 to 512
[  110.607103][   T28] audit: type=1400 audit(1783640905.497:2319): avc:  denied  { write } for  pid=5573 comm="syz.4.681" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.636556][ T5582] netlink: 'syz.0.685': attribute type 10 has an invalid length.
[  110.650125][ T5577] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.683: bad orphan inode 11862016
[  110.662475][ T5577] loop3: lost filesystem error report for type 5 error -117
[  110.663217][ T5577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  110.684885][ T5577] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.713052][ T5582] team0: Device wg2 is of different type
[  110.817062][   T28] audit: type=1400 audit(1783640905.827:2320): avc:  denied  { write } for  pid=5576 comm="syz.3.683" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.900133][ T5600] netlink: 380 bytes leftover after parsing attributes in process `syz.2.688'.
[  111.021878][ T5600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.688'.
[  111.048747][ T5600] netlink: 43 bytes leftover after parsing attributes in process `syz.2.688'.
[  111.083911][ T5600] netlink: 'syz.2.688': attribute type 6 has an invalid length.
[  111.096918][ T5600] netlink: 'syz.2.688': attribute type 5 has an invalid length.
[  111.104620][ T5600] netlink: 43 bytes leftover after parsing attributes in process `syz.2.688'.
[  111.150004][ T5606] syzkaller0: entered promiscuous mode
[  111.155514][ T5606] syzkaller0: entered allmulticast mode
[  111.166527][ T5610] loop2: detected capacity change from 0 to 512
[  111.174435][ T5606] tipc: Started in network mode
[  111.179335][ T5606] tipc: Node identity 0e18fcb30819, cluster identity 4711
[  111.186517][ T5606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.197599][ T5610] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 8: comm syz.2.692: lblock 0 mapped to illegal pblock 8 (length 1)
[  111.214781][ T5606] loop0: detected capacity change from 0 to 512
[  111.221172][ T5610] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  111.221358][ T5610] EXT4-fs (loop2): Remounting filesystem read-only
[  111.230441][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  111.230464][    C1] EXT4-fs (loop2): initial error at time 1783640906: ext4_map_blocks:791: inode 2: block 8
[  111.230511][    C1] EXT4-fs (loop2): last error at time 1783640906: ext4_map_blocks:791: inode 2: block 8
[  111.270955][ T5610] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.692: error -EUCLEAN reading directory block
[  111.284594][ T5610] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  111.293948][ T5610] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.692: error -EUCLEAN reading directory block
[  111.307961][ T5606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.321521][ T5606] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.331749][ T5610] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  111.350642][ T5610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.397309][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  111.435526][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.453439][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.691714][ T5634] netlink: 'syz.4.698': attribute type 21 has an invalid length.
[  111.718422][ T5634] netlink: 156 bytes leftover after parsing attributes in process `syz.4.698'.
[  111.759518][ T5635] FAULT_INJECTION: forcing a failure.
[  111.759518][ T5635] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.803471][ T5635] CPU: 0 UID: 0 PID: 5635 Comm: syz.3.700 Not tainted syzkaller #0 PREEMPT(lazy) 
[  111.803538][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  111.803551][ T5635] Call Trace:
[  111.803558][ T5635]  <TASK>
[  111.803567][ T5635]  __dump_stack+0x1d/0x30
[  111.803609][ T5635]  dump_stack_lvl+0x95/0xd0
[  111.803710][ T5635]  dump_stack+0x15/0x1b
[  111.803729][ T5635]  should_fail_ex+0x25e/0x270
[  111.803818][ T5635]  should_fail+0xb/0x20
[  111.803843][ T5635]  should_fail_usercopy+0x1a/0x20
[  111.803871][ T5635]  _copy_from_user+0x1c/0xb0
[  111.803888][ T5635]  __sys_bpf+0x1e2/0xc30
[  111.803958][ T5635]  ? __hrtimer_rearm_deferred+0x571/0x650
[  111.804001][ T5635]  __x64_sys_bpf+0x69/0x80
[  111.804024][ T5635]  x64_sys_call+0x10cb/0x3020
[  111.804044][ T5635]  do_syscall_64+0x136/0x3c0
[  111.804170][ T5635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.804194][ T5635] RIP: 0033:0x7fad75cade59
[  111.804208][ T5635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.804224][ T5635] RSP: 002b:00007fad74707028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  111.804242][ T5635] RAX: ffffffffffffffda RBX: 00007fad75f35fa0 RCX: 00007fad75cade59
[  111.804312][ T5635] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  111.804325][ T5635] RBP: 00007fad74707090 R08: 0000000000000000 R09: 0000000000000000
[  111.804337][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.804348][ T5635] R13: 00007fad75f36038 R14: 00007fad75f35fa0 R15: 00007fffa8e461d8
[  111.804365][ T5635]  </TASK>
[  112.024278][   T28] audit: type=1326 audit(1783640907.027:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.3.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  112.061663][   T28] audit: type=1326 audit(1783640907.057:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.3.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  112.102861][   T28] audit: type=1326 audit(1783640907.057:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.3.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  112.225977][ T3574] tipc: Node number set to 100793523
[  112.232199][   T28] audit: type=1326 audit(1783640907.057:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.3.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  112.271024][   T28] audit: type=1326 audit(1783640907.057:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5641 comm="syz.3.701" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  112.412693][ T5650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'.
[  112.470650][ T5653] netlink: 'syz.3.701': attribute type 1 has an invalid length.
[  112.585905][ T5653] hsr0: left promiscuous mode
[  113.670860][ T5662] loop0: detected capacity change from 0 to 512
[  113.961824][ T5662] ext4: Unknown parameter 'hash'
[  114.781217][ T5676] netlink: 44 bytes leftover after parsing attributes in process `syz.2.714'.
[  114.794752][ T5676] netlink: 43 bytes leftover after parsing attributes in process `syz.2.714'.
[  114.805997][ T5676] netlink: 'syz.2.714': attribute type 6 has an invalid length.
[  114.813881][ T5676] netlink: 'syz.2.714': attribute type 5 has an invalid length.
[  114.821782][ T5678] netlink: 104 bytes leftover after parsing attributes in process `syz.4.715'.
[  114.831774][ T5676] netlink: 43 bytes leftover after parsing attributes in process `syz.2.714'.
[  114.872502][ T5682] loop0: detected capacity change from 0 to 512
[  114.910347][ T5682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.933209][ T5685] loop4: detected capacity change from 0 to 256
[  114.998517][ T5682] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.019755][   T11] hsr0: entered promiscuous mode
[  115.269827][ T5707] loop3: detected capacity change from 0 to 512
[  115.290616][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.318428][ T5707] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  115.331047][ T5707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.724: bg 0: block 4: invalid block bitmap
[  115.345110][ T5707] loop3: lost filesystem error report for type 5 error -117
[  115.345232][ T5707] EXT4-fs (loop3): Remounting filesystem read-only
[  115.352624][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  115.352648][    C0] EXT4-fs (loop3): initial error at time 1783640910: ext4_validate_block_bitmap:432
[  115.352676][    C0] EXT4-fs (loop3): last error at time 1783640910: ext4_validate_block_bitmap:432
[  115.391382][ T5707] EXT4-fs (loop3): 1 truncate cleaned up
[  115.407409][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.484170][ T5711] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  115.484170][ T5711]    program syz.0.725 not setting count and/or reply_len properly
[  115.504786][ T5707] tipc: Can't bind to reserved service type 0
[  115.513739][ T5715] sctp: [Deprecated]: syz.1.727 (pid 5715) Use of int in maxseg socket option.
[  115.513739][ T5715] Use struct sctp_assoc_value instead
[  115.558929][ T5715] loop1: detected capacity change from 0 to 512
[  115.565880][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.640216][ T5720] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002
[  115.661417][ T5715] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.727: corrupted inode contents
[  115.673908][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.675245][ T5715] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.727: mark_inode_dirty error
[  115.675795][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  115.675944][    C1] EXT4-fs (loop1): initial error at time 1783640910: ext4_do_update_inode:5742: inode 16
[  115.676344][    C1] EXT4-fs (loop1): last error at time 1783640910: ext4_do_update_inode:5742: inode 16
[  115.736852][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.746326][ T5715] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.727: corrupted inode contents
[  115.804087][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.804733][ T5715] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.727: mark_inode_dirty error
[  115.836042][ T5727] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  115.836042][ T5727]    program syz.2.731 not setting count and/or reply_len properly
[  115.857658][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.858256][ T5715] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.727: corrupted inode contents
[  115.907918][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.909929][ T5715] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  115.938507][ T5715] loop1: lost filesystem error report for type 5 error -117
[  115.940886][ T5715] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.727: corrupted inode contents
[  115.965876][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.967574][ T5715] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.727: mark_inode_dirty error
[  115.990630][ T5715] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  115.991130][ T5715] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  115.991181][ T5715] loop1: lost filesystem error report for type 5 error -117
[  115.993520][ T5715] EXT4-fs (loop1): 1 truncate cleaned up
[  116.035996][   T40] __quota_error: 216 callbacks suppressed
[  116.036012][   T40] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  116.055730][   T40] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1
[  116.068195][   T40] loop1: lost filesystem error report for type 5 error -117
[  116.075217][ T5715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.103221][ T5715] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.140286][   T28] audit: type=1400 audit(1783640911.147:2542): avc:  denied  { validate_trans } for  pid=5736 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  116.185216][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.198367][   T28] audit: type=1400 audit(1783640911.207:2543): avc:  denied  { create } for  pid=5712 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  116.230263][ T5744] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  116.230263][ T5744]    program syz.3.738 not setting count and/or reply_len properly
[  116.301497][   T28] audit: type=1400 audit(1783640911.307:2544): avc:  denied  { getopt } for  pid=5712 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  116.347973][ T5713] batadv1: entered promiscuous mode
[  116.354316][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv1
[  116.461582][ T5756] netlink: 'syz.3.741': attribute type 10 has an invalid length.
[  116.467965][ T5752] loop0: detected capacity change from 0 to 4096
[  116.478883][ T5756] team0: Device wg2 is of different type
[  116.514880][ T5752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.567281][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.611698][   T28] audit: type=1400 audit(1783640911.617:2545): avc:  denied  { create } for  pid=5712 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  116.691872][   T28] audit: type=1400 audit(1783640911.697:2546): avc:  denied  { getopt } for  pid=5712 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  116.925233][ T5772] netlink: 'syz.3.745': attribute type 10 has an invalid length.
[  116.989790][ T5772] team0: Device wg2 is of different type
[  117.204326][   T28] audit: type=1400 audit(1783640912.207:2547): avc:  denied  { getopt } for  pid=5788 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  117.251095][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'.
[  117.297955][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'.
[  117.313843][   T28] audit: type=1400 audit(1783640912.327:2548): avc:  denied  { read } for  pid=5790 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  117.372454][ T5799] netlink: 'syz.4.753': attribute type 10 has an invalid length.
[  117.419618][ T5799] team0: Device wg2 is of different type
[  117.489673][   T28] audit: type=1326 audit(1783640912.487:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  117.489762][   T28] audit: type=1326 audit(1783640912.487:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5805 comm="syz.3.756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  117.915531][ T5813] loop4: detected capacity change from 0 to 2048
[  118.018871][ T5813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.142786][ T5813] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  118.412642][ T5821] 9p: Bad value for 'wfdno'
[  118.600586][ T5811] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  118.659118][ T5811] hsr0: left promiscuous mode
[  119.378241][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.390915][ T5831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'.
[  120.750106][ T5832] loop4: detected capacity change from 0 to 256
[  121.079633][ T5824] netlink: 104 bytes leftover after parsing attributes in process `syz.0.758'.
[  121.210434][ T5832] loop4: detected capacity change from 0 to 512
[  121.266017][ T5832] EXT4-fs (loop4): Invalid log block size: 16777215
[  122.193775][ T5830] loop4: detected capacity change from 0 to 512
[  122.217050][ T5836] random: crng reseeded on system resumption
[  122.223126][   T28] kauditd_printk_skb: 171 callbacks suppressed
[  122.223138][   T28] audit: type=1400 audit(1783640917.227:2719): avc:  denied  { write } for  pid=5835 comm="syz.2.765" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  122.265190][ T5838] loop3: detected capacity change from 0 to 512
[  122.273026][ T5830] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  122.347765][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.369850][ T5838] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.370211][ T5839] loop2: detected capacity change from 0 to 4096
[  122.387172][   T28] audit: type=1400 audit(1783640917.227:2720): avc:  denied  { open } for  pid=5835 comm="syz.2.765" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  122.411529][   T28] audit: type=1326 audit(1783640917.267:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  122.437204][   T28] audit: type=1326 audit(1783640917.267:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  122.473622][   T28] audit: type=1326 audit(1783640917.267:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  122.526774][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  122.529320][   T28] audit: type=1326 audit(1783640917.267:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad75cadbc2 code=0x7ffc0000
[  122.541189][ T5839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.564374][   T28] audit: type=1326 audit(1783640917.267:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  122.602779][   T28] audit: type=1326 audit(1783640917.267:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fad75cadc87 code=0x7ffc0000
[  122.629550][   T28] audit: type=1326 audit(1783640917.267:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  122.684136][ T5836] EXT4-fs (loop2): shut down requested (0)
[  122.690246][   T28] audit: type=1326 audit(1783640917.267:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad75cadaeb code=0x7ffc0000
[  122.806295][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.413136][ T5839] SELinux:  Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped).
[  123.447680][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.738547][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.774875][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.840379][ T5867] FAULT_INJECTION: forcing a failure.
[  123.840379][ T5867] name failslab, interval 1, probability 0, space 0, times 0
[  123.858698][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz.2.775 Not tainted syzkaller #0 PREEMPT(lazy) 
[  123.858729][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  123.858787][ T5867] Call Trace:
[  123.858795][ T5867]  <TASK>
[  123.858805][ T5867]  __dump_stack+0x1d/0x30
[  123.858828][ T5867]  dump_stack_lvl+0x95/0xd0
[  123.858986][ T5867]  dump_stack+0x15/0x1b
[  123.859002][ T5867]  should_fail_ex+0x25e/0x270
[  123.859030][ T5867]  ? __get_vm_area_node+0x106/0x1d0
[  123.859055][ T5867]  should_failslab+0x8c/0xb0
[  123.859116][ T5867]  __kmalloc_cache_node_noprof+0x81/0x3e0
[  123.859249][ T5867]  ? __get_vm_area_node+0x106/0x1d0
[  123.859329][ T5867]  __get_vm_area_node+0x106/0x1d0
[  123.859351][ T5867]  __vmalloc_node_range_noprof+0x266/0x11e0
[  123.859379][ T5867]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  123.859453][ T5867]  ? _raw_spin_unlock+0x9/0x30
[  123.859475][ T5867]  ? __hrtimer_rearm_deferred+0x571/0x650
[  123.859510][ T5867]  ? irqentry_exit+0x58f/0x610
[  123.859611][ T5867]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  123.859695][ T5867]  __vmalloc_noprof+0xa4/0xf0
[  123.859715][ T5867]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  123.859739][ T5867]  bpf_prog_alloc_no_stats+0x47/0x390
[  123.859842][ T5867]  ? bpf_prog_alloc+0x2a/0x150
[  123.859869][ T5867]  bpf_prog_alloc+0x3c/0x150
[  123.859945][ T5867]  bpf_prog_load+0x54b/0x1100
[  123.859970][ T5867]  ? avc_has_perm_noaudit+0xa3/0x120
[  123.859997][ T5867]  ? vfs_write+0x7d0/0x990
[  123.860018][ T5867]  __sys_bpf+0xbae/0xc30
[  123.860105][ T5867]  ? vfs_write+0x7d0/0x990
[  123.860121][ T5867]  ? vfs_write+0x7d0/0x990
[  123.860178][ T5867]  __x64_sys_bpf+0x69/0x80
[  123.860207][ T5867]  x64_sys_call+0x10cb/0x3020
[  123.860232][ T5867]  do_syscall_64+0x136/0x3c0
[  123.860264][ T5867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.860291][ T5867] RIP: 0033:0x7f8c3732de59
[  123.860354][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.860371][ T5867] RSP: 002b:00007f8c35d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  123.860389][ T5867] RAX: ffffffffffffffda RBX: 00007f8c375b5fa0 RCX: 00007f8c3732de59
[  123.860402][ T5867] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  123.860414][ T5867] RBP: 00007f8c35d87090 R08: 0000000000000000 R09: 0000000000000000
[  123.860428][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.860442][ T5867] R13: 00007f8c375b6038 R14: 00007f8c375b5fa0 R15: 00007ffced763b38
[  123.860463][ T5867]  </TASK>
[  123.861380][ T5867] syz.2.775: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[  124.167963][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz.2.775 Not tainted syzkaller #0 PREEMPT(lazy) 
[  124.167994][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  124.168008][ T5867] Call Trace:
[  124.168016][ T5867]  <TASK>
[  124.168057][ T5867]  __dump_stack+0x1d/0x30
[  124.168079][ T5867]  dump_stack_lvl+0x95/0xd0
[  124.168101][ T5867]  dump_stack+0x15/0x1b
[  124.168120][ T5867]  warn_alloc+0x145/0x1c0
[  124.168155][ T5867]  ? __vmalloc_node_range_noprof+0x26a/0x11e0
[  124.168262][ T5867]  __vmalloc_node_range_noprof+0x28b/0x11e0
[  124.168333][ T5867]  ? _raw_spin_unlock+0x9/0x30
[  124.168351][ T5867]  ? __hrtimer_rearm_deferred+0x571/0x650
[  124.168390][ T5867]  ? irqentry_exit+0x58f/0x610
[  124.168416][ T5867]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  124.168440][ T5867]  __vmalloc_noprof+0xa4/0xf0
[  124.168474][ T5867]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  124.168498][ T5867]  bpf_prog_alloc_no_stats+0x47/0x390
[  124.168527][ T5867]  ? bpf_prog_alloc+0x2a/0x150
[  124.168590][ T5867]  bpf_prog_alloc+0x3c/0x150
[  124.168614][ T5867]  bpf_prog_load+0x54b/0x1100
[  124.168662][ T5867]  ? avc_has_perm_noaudit+0xa3/0x120
[  124.168774][ T5867]  ? vfs_write+0x7d0/0x990
[  124.168794][ T5867]  __sys_bpf+0xbae/0xc30
[  124.168821][ T5867]  ? vfs_write+0x7d0/0x990
[  124.168837][ T5867]  ? vfs_write+0x7d0/0x990
[  124.168919][ T5867]  __x64_sys_bpf+0x69/0x80
[  124.168943][ T5867]  x64_sys_call+0x10cb/0x3020
[  124.168969][ T5867]  do_syscall_64+0x136/0x3c0
[  124.169000][ T5867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.169047][ T5867] RIP: 0033:0x7f8c3732de59
[  124.169064][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.169162][ T5867] RSP: 002b:00007f8c35d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.169183][ T5867] RAX: ffffffffffffffda RBX: 00007f8c375b5fa0 RCX: 00007f8c3732de59
[  124.169199][ T5867] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  124.169253][ T5867] RBP: 00007f8c35d87090 R08: 0000000000000000 R09: 0000000000000000
[  124.169269][ T5867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.169283][ T5867] R13: 00007f8c375b6038 R14: 00007f8c375b5fa0 R15: 00007ffced763b38
[  124.169304][ T5867]  </TASK>
[  124.172540][ T5867] Mem-Info:
[  124.277887][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'.
[  124.419282][ T5867] active_anon:11426 inactive_anon:5 isolated_anon:0
[  124.419282][ T5867]  active_file:87 inactive_file:24157 isolated_file:0
[  124.419282][ T5867]  unevictable:0 dirty:119 writeback:0
[  124.419282][ T5867]  slab_reclaimable:3258 slab_unreclaimable:16352
[  124.419282][ T5867]  mapped:32700 shmem:3075 pagetables:5243
[  124.419282][ T5867]  sec_pagetables:0 bounce:0
[  124.419282][ T5867]  kernel_misc_reclaimable:0
[  124.419282][ T5867]  free:1872666 free_pcp:6894 free_cma:0
[  124.465774][ T5867] Node 0 active_anon:46168kB inactive_anon:20kB active_file:348kB inactive_file:96628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130800kB dirty:476kB writeback:0kB shmem:12300kB kernel_stack:3392kB pagetables:20972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  124.554878][ T5876] netlink: 'syz.0.778': attribute type 10 has an invalid length.
[  124.564620][ T5877] netlink: 'syz.1.777': attribute type 10 has an invalid length.
[  124.580905][ T5876] team0: Device wg2 is of different type
[  124.584784][ T5867] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.641620][ T5881] netlink: 380 bytes leftover after parsing attributes in process `syz.4.779'.
[  124.658669][ T5867] lowmem_reserve[]: 0 2878 7857 7857
[  124.664584][ T5867] Node 0 DMA32 free:2944064kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947692kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB
[  124.696412][ T5867] lowmem_reserve[]: 0 0 4978 4978
[  124.698966][ T5877] team0: Device wg2 is of different type
[  124.701613][ T5867] Node 0 Normal free:4546312kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30276kB inactive_anon:20kB active_file:348kB inactive_file:96568kB unevictable:0kB writepending:188kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:24108kB local_pcp:19976kB free_cma:0kB
[  124.765408][ T5867] lowmem_reserve[]: 0 0 0 0
[  124.781932][ T5867] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.811523][ T5887] netlink: 'syz.3.780': attribute type 8 has an invalid length.
[  124.812536][ T5867] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944064kB
[  124.822316][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'.
[  124.839851][ T5881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.779'.
[  124.855032][ T5881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.779'.
[  124.863958][ T5881] netlink: 'syz.4.779': attribute type 6 has an invalid length.
[  124.871588][ T5881] netlink: 'syz.4.779': attribute type 5 has an invalid length.
[  124.876895][ T5867] Node 0 
[  124.879266][ T5881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.779'.
[  124.896267][ T5867] Normal: 553*4kB (UME) 788*8kB (UME) 446*16kB (UME) 274*32kB (UME) 114*64kB (UM) 98*128kB (UM) 60*256kB (UME) 17*512kB (UME) 11*1024kB (UM) 5*2048kB (ME) 1088*4096kB (UM) = 4546276kB
[  124.914832][ T5867] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  124.914999][ T5889] loop1: detected capacity change from 0 to 512
[  124.924228][ T5867] 24466 total pagecache pages
[  124.924249][ T5867] 3 pages in swap cache
[  124.924256][ T5867] Free swap  = 124984kB
[  124.924263][ T5867] Total swap = 124996kB
[  124.924272][ T5867] 2097051 pages RAM
[  124.924278][ T5867] 0 pages HighMem/MovableOnly
[  124.924284][ T5867] 81729 pages reserved
[  124.932352][ T5887] veth1_to_team: entered promiscuous mode
[  124.973739][ T5887] veth1_to_team: left promiscuous mode
[  125.108772][ T5905] syzkaller0: entered promiscuous mode
[  125.124698][ T5905] syzkaller0: entered allmulticast mode
[  125.175059][ T5911] FAULT_INJECTION: forcing a failure.
[  125.175059][ T5911] name failslab, interval 1, probability 0, space 0, times 0
[  125.299349][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.4.788 Not tainted syzkaller #0 PREEMPT(lazy) 
[  125.299383][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  125.299397][ T5911] Call Trace:
[  125.299405][ T5911]  <TASK>
[  125.299414][ T5911]  __dump_stack+0x1d/0x30
[  125.299439][ T5911]  dump_stack_lvl+0x95/0xd0
[  125.299468][ T5911]  dump_stack+0x15/0x1b
[  125.299484][ T5911]  should_fail_ex+0x25e/0x270
[  125.299508][ T5911]  ? alloc_fs_context+0x41/0x570
[  125.299535][ T5911]  should_failslab+0x8c/0xb0
[  125.299560][ T5911]  __kmalloc_cache_noprof+0x7b/0x3d0
[  125.299592][ T5911]  ? alloc_fs_context+0x41/0x570
[  125.299617][ T5911]  alloc_fs_context+0x41/0x570
[  125.299641][ T5911]  ? fs_context_for_mount+0x11/0x30
[  125.299667][ T5911]  fs_context_for_mount+0x22/0x30
[  125.299717][ T5911]  do_new_mount+0xe7/0x8d0
[  125.299737][ T5911]  ? security_capable+0x7b/0x90
[  125.299793][ T5911]  path_mount+0x4ad/0xb90
[  125.299813][ T5911]  __se_sys_mount+0x28c/0x2e0
[  125.299834][ T5911]  __x64_sys_mount+0x67/0x80
[  125.299980][ T5911]  x64_sys_call+0x2d61/0x3020
[  125.300005][ T5911]  do_syscall_64+0x136/0x3c0
[  125.300039][ T5911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.300082][ T5911] RIP: 0033:0x7f9eda62de59
[  125.300097][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.300116][ T5911] RSP: 002b:00007f9ed9087028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  125.300138][ T5911] RAX: ffffffffffffffda RBX: 00007f9eda8b5fa0 RCX: 00007f9eda62de59
[  125.300154][ T5911] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 0000000000000000
[  125.300169][ T5911] RBP: 00007f9ed9087090 R08: 0000200000000080 R09: 0000000000000000
[  125.300227][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.300241][ T5911] R13: 00007f9eda8b6038 R14: 00007f9eda8b5fa0 R15: 00007ffda4454cf8
[  125.300258][ T5911]  </TASK>
[  125.531112][ T5920] tipc: Trying to set illegal importance in message
[  126.063475][ T5920] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.150934][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.791'.
[  126.389635][ T5932] loop4: detected capacity change from 0 to 1764
[  126.409810][ T5932] iso9660: Unknown parameter ''
[  126.533278][ T5933] loop2: detected capacity change from 0 to 512
[  126.680722][ T5933] EXT4-fs: Ignoring removed orlov option
[  126.749797][ T5933] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.790828][ T5933] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.792: corrupted in-inode xattr: e_value size too large
[  126.842970][ T5933] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  126.843159][ T5933] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.792: couldn't read orphan inode 15 (err -117)
[  126.852395][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  126.852432][    C0] EXT4-fs (loop2): initial error at time 1783640921: ext4_iget_extra_inode:5180: inode 15
[  126.852456][    C0] EXT4-fs (loop2): last error at time 1783640921: ext4_iget_extra_inode:5180: inode 15
[  126.941149][ T5938] netlink: 380 bytes leftover after parsing attributes in process `syz.3.793'.
[  127.058357][ T5933] loop2: lost filesystem error report for type 5 error -117
[  127.059000][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.201539][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.255485][ T5938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.793'.
[  127.302595][ T5938] netlink: 'syz.3.793': attribute type 6 has an invalid length.
[  127.333600][ T5938] netlink: 'syz.3.793': attribute type 5 has an invalid length.
[  127.427156][   T28] kauditd_printk_skb: 74 callbacks suppressed
[  127.427171][   T28] audit: type=1326 audit(1783640922.437:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.643861][   T28] audit: type=1326 audit(1783640922.437:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.670828][   T28] audit: type=1326 audit(1783640922.437:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.698195][   T28] audit: type=1326 audit(1783640922.437:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.703539][ T5946] __nla_validate_parse: 2 callbacks suppressed
[  127.703561][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.797'.
[  127.725408][   T28] audit: type=1326 audit(1783640922.477:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.725484][   T28] audit: type=1326 audit(1783640922.477:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.725510][   T28] audit: type=1326 audit(1783640922.477:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.725537][   T28] audit: type=1326 audit(1783640922.477:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.851133][   T28] audit: type=1326 audit(1783640922.477:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  127.878113][   T28] audit: type=1326 audit(1783640922.477:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5943 comm="syz.3.795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fad75cade59 code=0x7ffc0000
[  128.451764][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.799'.
[  129.662007][ T5970] netlink: 380 bytes leftover after parsing attributes in process `syz.2.805'.
[  129.723841][ T5970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.805'.
[  129.740621][ T5970] netlink: 43 bytes leftover after parsing attributes in process `syz.2.805'.
[  129.749525][ T5970] netlink: 'syz.2.805': attribute type 6 has an invalid length.
[  129.757289][ T5970] netlink: 'syz.2.805': attribute type 5 has an invalid length.
[  129.765002][ T5970] netlink: 43 bytes leftover after parsing attributes in process `syz.2.805'.
[  129.883257][ T5982] netlink: 'syz.3.810': attribute type 21 has an invalid length.
[  129.887107][ T5979] loop1: detected capacity change from 0 to 4096
[  129.891767][ T5982] netlink: 156 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.944293][ T5982] loop3: detected capacity change from 0 to 128
[  129.963743][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.808'.
[  129.974321][ T5979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.076498][ T5990] loop2: detected capacity change from 0 to 512
[  130.166925][ T5982] bridge0: port 3(gretap0) entered disabled state
[  130.229467][ T5990] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  130.285217][ T3979] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  130.395169][ T5997] loop4: detected capacity change from 0 to 1024
[  130.406059][ T5997] EXT4-fs: Ignoring removed bh option
[  130.414092][ T5997] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  130.457511][ T5997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.558644][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.566783][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.814545][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.828550][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.863487][ T5982] vti0: left promiscuous mode
[  130.869598][ T5982] vti0: left allmulticast mode
[  130.874999][ T5982] vlan0: left promiscuous mode
[  130.881622][ T5982] bridge0: left promiscuous mode
[  130.907209][   T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.925161][   T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.945132][   T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.957935][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.007036][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.067633][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.241556][ T6015] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002
[  131.261137][ T6016] netlink: 380 bytes leftover after parsing attributes in process `syz.1.819'.
[  131.393821][ T6018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.819'.
[  131.404096][ T6018] netlink: 'syz.1.819': attribute type 6 has an invalid length.
[  131.434651][ T6018] netlink: 'syz.1.819': attribute type 5 has an invalid length.
[  132.092584][ T6039] netlink: 'syz.3.826': attribute type 1 has an invalid length.
[  132.437171][   T28] kauditd_printk_skb: 573 callbacks suppressed
[  132.437238][   T28] audit: type=1326 audit(1783640927.447:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  132.494047][ T6044] loop2: detected capacity change from 0 to 256
[  132.588592][ T6044] FAT-fs (loop2): Directory bread(block 1285) failed
[  132.657007][ T6044] FAT-fs (loop2): Directory bread(block 1286) failed
[  132.748064][ T6044] FAT-fs (loop2): Directory bread(block 1287) failed
[  132.774519][   T28] audit: type=1326 audit(1783640927.487:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  132.867716][ T6044] FAT-fs (loop2): Directory bread(block 1288) failed
[  132.944989][ T6044] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  133.073743][   T28] audit: type=1326 audit(1783640927.487:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.309421][   T28] audit: type=1326 audit(1783640927.487:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.383178][ T6041] loop4: detected capacity change from 0 to 1024
[  133.530308][   T28] audit: type=1326 audit(1783640927.487:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.738167][ T6041] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  133.742980][   T28] audit: type=1326 audit(1783640927.487:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.773630][   T28] audit: type=1326 audit(1783640927.487:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.799289][   T28] audit: type=1326 audit(1783640927.487:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.835066][   T28] audit: type=1326 audit(1783640927.487:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.868302][ T6041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  133.888735][   T28] audit: type=1326 audit(1783640927.487:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6031 comm="syz.3.826" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad75c6e68e code=0x7ffc0000
[  133.909323][ T6041] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102
[  133.933809][ T6041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.994567][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.152427][ T6055] __nla_validate_parse: 2 callbacks suppressed
[  134.152500][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'.
[  134.282600][ T6065] loop3: detected capacity change from 0 to 1024
[  134.396745][ T6065] EXT4-fs (loop3): orphan cleanup on readonly fs
[  134.411066][ T6065] EXT4-fs error (device loop3): ext4_quota_enable:7232: inode #4: comm syz.3.835: iget: bad extended attribute block 196608
[  134.437137][ T6065] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  134.438286][ T6065] EXT4-fs error (device loop3): ext4_quota_enable:7235: comm syz.3.835: Bad quota inode: 4, type: 1
[  134.447757][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  134.447807][    C1] EXT4-fs (loop3): initial error at time 1783640929: ext4_quota_enable:7232: inode 4
[  134.447960][    C1] EXT4-fs (loop3): last error at time 1783640929: ext4_quota_enable:7232: inode 4
[  134.485417][ T6065] loop3: lost filesystem error report for type 5 error -117
[  134.488679][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[  134.488998][ T6055] loop4: detected capacity change from 0 to 1024
[  134.517690][ T6065] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  134.534370][ T6074] team0: No ports can be present during mode change
[  134.563301][ T6065] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  134.604473][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.687928][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.688686][ T6084] loop0: detected capacity change from 0 to 1024
[  134.710062][ T6084] EXT4-fs: Ignoring removed bh option
[  134.729689][ T6087] loop1: detected capacity change from 0 to 128
[  134.740298][ T6084] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  134.833287][ T6081] loop1: detected capacity change from 0 to 512
[  134.865440][ T6081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  134.880016][ T6091] xt_TPROXY: Can be used only with -p tcp or -p udp
[  134.888048][ T6081] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.842: invalid indirect mapped block 83886080 (level 1)
[  134.902648][ T6084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.919627][ T6081] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  134.920040][ T6081] EXT4-fs (loop1): Remounting filesystem read-only
[  134.929892][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.936257][ T6081] EXT4-fs (loop1): 1 orphan inode deleted
[  134.936275][ T6081] EXT4-fs (loop1): 1 truncate cleaned up
[  134.936774][ T6081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.989229][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.093760][ T6112] bridge1: entered promiscuous mode
[  135.100386][ T6112] bridge1: entered allmulticast mode
[  135.108413][ T6112] team0: Port device bridge1 added
[  135.118390][ T6112] bridge0: port 3(team0) entered blocking state
[  135.124814][ T6112] bridge0: port 3(team0) entered disabled state
[  135.132927][ T6112] team0: entered allmulticast mode
[  135.139606][ T6112] team_slave_0: entered allmulticast mode
[  135.151788][ T6112] team_slave_1: entered allmulticast mode
[  135.161372][ T6112] team0: entered promiscuous mode
[  135.167944][ T6112] team_slave_0: entered promiscuous mode
[  135.174011][ T6112] team_slave_1: entered promiscuous mode
[  135.205224][ T6120] team0: No ports can be present during mode change
[  135.251075][ T6118] loop3: detected capacity change from 0 to 1024
[  135.261381][ T6118] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  135.295410][ T6118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.309637][ T6118] netlink: 17 bytes leftover after parsing attributes in process `syz.3.855'.
[  135.333397][ T6129] loop2: detected capacity change from 0 to 512
[  135.344290][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'.
[  135.363430][ T6129] gretap2: entered promiscuous mode
[  135.390008][ T6132] FAULT_INJECTION: forcing a failure.
[  135.390008][ T6132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.403875][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.0.860 Not tainted syzkaller #0 PREEMPT(lazy) 
[  135.403971][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  135.404024][ T6132] Call Trace:
[  135.404028][ T6132]  <TASK>
[  135.404033][ T6132]  __dump_stack+0x1d/0x30
[  135.404048][ T6132]  dump_stack_lvl+0x95/0xd0
[  135.404070][ T6132]  dump_stack+0x15/0x1b
[  135.404081][ T6132]  should_fail_ex+0x25e/0x270
[  135.404173][ T6132]  should_fail+0xb/0x20
[  135.404271][ T6132]  should_fail_usercopy+0x1a/0x20
[  135.404370][ T6132]  _copy_to_user+0x20/0xa0
[  135.404410][ T6132]  simple_read_from_buffer+0xb5/0x130
[  135.404426][ T6132]  proc_fail_nth_read+0x10e/0x150
[  135.404505][ T6132]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.404518][ T6132]  vfs_read+0x18e/0x7c0
[  135.404528][ T6132]  ? __rcu_read_unlock+0x4e/0x70
[  135.404616][ T6132]  ? __fget_files+0x184/0x1c0
[  135.404630][ T6132]  ? mutex_lock+0x57/0x90
[  135.404646][ T6132]  ksys_read+0xdc/0x1a0
[  135.404657][ T6132]  __x64_sys_read+0x40/0x50
[  135.404667][ T6132]  x64_sys_call+0x2886/0x3020
[  135.404728][ T6132]  do_syscall_64+0x136/0x3c0
[  135.404767][ T6132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.404780][ T6132] RIP: 0033:0x7f61dff8e68e
[  135.404790][ T6132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  135.404828][ T6132] RSP: 002b:00007f61dea26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  135.404858][ T6132] RAX: ffffffffffffffda RBX: 00007f61dea276c0 RCX: 00007f61dff8e68e
[  135.404866][ T6132] RDX: 000000000000000f RSI: 00007f61dea270a0 RDI: 0000000000000004
[  135.404873][ T6132] RBP: 00007f61dea27090 R08: 0000000000000000 R09: 0000000000000000
[  135.404881][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.404888][ T6132] R13: 00007f61e0256038 R14: 00007f61e0255fa0 R15: 00007ffc31fd29f8
[  135.404899][ T6132]  </TASK>
[  135.683926][ T6144] loop0: detected capacity change from 0 to 1024
[  135.701388][ T6144] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.708027][ T6144] EXT4-fs: inline encryption not supported
[  135.713946][ T6144] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.739106][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.753547][ T6144] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.765039][ T6152] msdos: Unknown parameter '0xffffffffffffffff0x000000000000ee00'
[  135.767640][ T6144] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  135.797031][ T6144] EXT4-fs (loop0): Remounting filesystem read-only
[  135.991436][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.934706][ T6171] netlink: 'syz.1.874': attribute type 27 has an invalid length.
[  138.509345][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  138.763042][ T6200] syzkaller1: entered promiscuous mode
[  138.768615][ T6200] syzkaller1: entered allmulticast mode
[  138.788614][ T6192] set_capacity_and_notify: 1 callbacks suppressed
[  138.788632][ T6192] loop0: detected capacity change from 0 to 512
[  138.806773][ T6192] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  138.821387][ T6192] EXT4-fs (loop0): Remounting filesystem read-only
[  138.830699][ T6192] EXT4-fs (loop0): 1 truncate cleaned up
[  138.839389][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.902863][ T6204] loop4: detected capacity change from 0 to 4096
[  138.915077][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.939412][ T6204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.009041][ T6211] netlink: 380 bytes leftover after parsing attributes in process `syz.1.887'.
[  139.026039][ T6211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.887'.
[  139.034921][ T6211] netlink: 43 bytes leftover after parsing attributes in process `syz.1.887'.
[  139.043770][ T6211] netlink: 'syz.1.887': attribute type 6 has an invalid length.
[  139.051401][ T6211] netlink: 'syz.1.887': attribute type 5 has an invalid length.
[  139.059043][ T6211] netlink: 43 bytes leftover after parsing attributes in process `syz.1.887'.
[  139.077153][   T28] kauditd_printk_skb: 76 callbacks suppressed
[  139.077194][   T28] audit: type=1400 audit(1783640934.077:3469): avc:  denied  { bind } for  pid=6212 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  139.102745][   T28] audit: type=1400 audit(1783640934.077:3470): avc:  denied  { connect } for  pid=6212 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  139.165004][ T6214] pim6reg: entered allmulticast mode
[  139.184135][ T6214] pim6reg: left allmulticast mode
[  139.224835][ T6221] netlink: 'syz.1.891': attribute type 10 has an invalid length.
[  139.228993][   T28] audit: type=1326 audit(1783640934.227:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda62de59 code=0x7ffc0000
[  139.259544][ T6217] loop3: detected capacity change from 0 to 512
[  139.265062][   T28] audit: type=1326 audit(1783640934.227:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda62de59 code=0x7ffc0000
[  139.268122][ T6217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  139.297259][   T28] audit: type=1326 audit(1783640934.257:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda62de59 code=0x7ffc0000
[  139.327324][   T28] audit: type=1326 audit(1783640934.257:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda62de59 code=0x7ffc0000
[  139.429550][   T28] audit: type=1326 audit(1783640934.267:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9eda62de59 code=0x7ffc0000
[  139.480566][ T6217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.493158][   T28] audit: type=1326 audit(1783640934.317:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eda62de59 code=0x7ffc0000
[  139.493192][   T28] audit: type=1326 audit(1783640934.317:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9eda62dbc2 code=0x7ffc0000
[  139.493218][   T28] audit: type=1326 audit(1783640934.317:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.4.892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9eda62dc57 code=0x7ffc0000
[  139.589236][ T6221] team0: Device wg2 is of different type
[  139.605895][ T6217] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.617692][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.734711][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.849526][ T6235] netlink: 'syz.4.892': attribute type 1 has an invalid length.
[  140.643578][ T6250] netlink: 'syz.0.893': attribute type 10 has an invalid length.
[  140.667779][ T6250] wg2: entered promiscuous mode
[  140.673389][ T6250] wg2: entered allmulticast mode
[  141.054159][ T6250] team0: Device wg2 is of different type
[  141.299300][ T6256] team0: No ports can be present during mode change
[  141.302862][ T6255] netlink: 104 bytes leftover after parsing attributes in process `syz.3.896'.
[  141.431777][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'.
[  141.479707][ T6273] loop2: detected capacity change from 0 to 256
[  141.518162][ T6273] FAT-fs (loop2): bogus number of FAT sectors
[  141.529641][ T6273] FAT-fs (loop2): Can't find a valid FAT filesystem
[  141.550398][ T6273] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  141.577181][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.908'.
[  141.586780][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  141.842670][ T6288] netlink: 'syz.0.912': attribute type 10 has an invalid length.
[  141.881134][ T6288] team0: Device wg2 is of different type
[  142.580766][ T6305] loop1: detected capacity change from 0 to 512
[  142.590571][ T6305] msdos: Unknown parameter 'checkEÑtrict'
[  142.688621][ T6308] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  142.688621][ T6308]    program syz.0.919 not setting count and/or reply_len properly
[  142.804908][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'.
[  142.835089][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'.
[  142.924054][ T6315] loop0: detected capacity change from 0 to 512
[  142.961516][ T6315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.997671][ T6315] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.033033][ T6320] team0: No ports can be present during mode change
[  143.086821][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.255545][ T6339] loop2: detected capacity change from 0 to 164
[  143.263219][ T6339] iso9660: Bad value for 'check'
[  143.286439][ T6339] usb usb8: usbfs: process 6339 (syz.2.931) did not claim interface 0 before use
[  143.340678][ T6345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'.
[  143.351542][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'.
[  143.377302][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'.
[  143.403066][ T6349] loop2: detected capacity change from 0 to 128
[  143.410235][ T6349] FAT-fs (loop2): bogus logical sector size 0
[  143.424216][ T6349] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  143.445124][ T6349] FAT-fs (loop2): Can't find a valid FAT filesystem
[  143.533363][ T6351] netlink: 'syz.0.929': attribute type 1 has an invalid length.
[  144.132677][ T6365] loop4: detected capacity change from 0 to 128
[  144.210883][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'.
[  144.227881][ T6365] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.254499][ T6368] loop1: detected capacity change from 0 to 512
[  144.262478][ T6365] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.292280][ T6368] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  144.337627][ T6368] EXT4-fs (loop1): 1 truncate cleaned up
[  144.344253][ T6365] ieee802154 phy0 wpan0: encryption failed: -22
[  144.374586][ T6368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.393114][ T6365] ieee802154 phy0 wpan0: encryption failed: -22
[  144.431356][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.498894][   T28] kauditd_printk_skb: 708 callbacks suppressed
[  144.498911][   T28] audit: type=1400 audit(1783640939.507:4184): avc:  denied  { create } for  pid=6376 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  144.614347][   T28] audit: type=1400 audit(1783640939.557:4185): avc:  denied  { sys_admin } for  pid=6376 comm="syz.1.943" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  144.641795][ T3294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.705162][ T6374] loop3: detected capacity change from 0 to 512
[  144.910475][ T6386] team0: No ports can be present during mode change
[  145.080892][   T28] audit: type=1400 audit(1783640940.087:4186): avc:  denied  { read } for  pid=6382 comm="syz.2.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  145.104270][ T6395] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in;
[  145.104270][ T6395]    program syz.4.945 not setting count and/or reply_len properly
[  145.123834][   T28] audit: type=1400 audit(1783640940.117:4187): avc:  denied  { search } for  pid=6391 comm="syz.4.945" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  145.180480][   T28] audit: type=1400 audit(1783640940.117:4188): avc:  denied  { search } for  pid=6391 comm="syz.4.945" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  145.250775][ T6408] loop4: detected capacity change from 0 to 512
[  145.273022][ T6408] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.953: corrupted inode contents
[  145.297335][ T6408] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  145.298915][ T6408] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  145.308306][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  145.308329][    C1] EXT4-fs (loop4): initial error at time 1783640940: ext4_do_update_inode:5742: inode 15
[  145.308368][    C1] EXT4-fs (loop4): last error at time 1783640940: ext4_do_update_inode:5742: inode 15
[  145.379512][ T6408] loop4: lost filesystem error report for type 5 error -117
[  145.392266][ T6408] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.953: corrupted inode contents
[  145.427008][ T6408] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  145.427240][ T6408] EXT4-fs error (device loop4): ext4_evict_inode:315: inode #15: comm syz.4.953: mark_inode_dirty error
[  145.461910][ T6408] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  145.463368][ T6408] EXT4-fs (loop4): 1 orphan inode deleted
[  145.479305][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.492261][ T6420] netlink: 'syz.3.958': attribute type 10 has an invalid length.
[  145.544137][ T6420] team0: Device wg2 is of different type
[  145.778226][ T6430] loop3: detected capacity change from 0 to 128
[  145.798472][ T6430] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.860563][ T6430] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.893923][ T6437] SELinux:  Context system_u:object_r:cpu_device_t:s0 is not valid (left unmapped).
[  145.905070][   T28] audit: type=1400 audit(1783640940.897:4189): avc:  denied  { relabelfrom } for  pid=6436 comm="syz.2.964" name="" dev="pipefs" ino=14959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  146.141534][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.193071][   T28] audit: type=1400 audit(1783640940.947:4190): avc:  denied  { relabelto } for  pid=6436 comm="syz.2.964" name="" dev="pipefs" ino=14959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:cpu_device_t:s0"
[  146.244646][   T28] audit: type=1400 audit(1783640941.027:4191): avc:  denied  { setattr } for  pid=6429 comm="syz.3.962" name="SCTPv6" dev="sockfs" ino=14963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  146.363144][ T6446] loop0: detected capacity change from 0 to 512
[  146.419587][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.437669][ T6446] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.968: dx entry: limit 1024 != root limit 124
[  146.458386][ T6446] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.968: Corrupt directory, running e2fsck is recommended
[  146.481020][ T6446] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  146.490940][ T6446] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.968: corrupted in-inode xattr: invalid ea_ino
[  146.541351][ T6455] syzkaller0: entered promiscuous mode
[  146.548522][ T6446] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  146.548712][ T6446] EXT4-fs (loop0): Remounting filesystem read-only
[  146.557672][ T6454] __nla_validate_parse: 9 callbacks suppressed
[  146.557698][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.970'.
[  146.557872][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  146.557890][    C0] EXT4-fs (loop0): initial error at time 1783640941: ext4_iget_extra_inode:5180: inode 15
[  146.557923][    C0] EXT4-fs (loop0): last error at time 1783640941: ext4_iget_extra_inode:5180: inode 15
[  146.559808][ T6455] syzkaller0: entered allmulticast mode
[  146.589564][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.648935][ T6446] vhci_hcd vhci_hcd.0: default hub control req: 0231 v0103 i0000 l0
[  146.659210][ T6446] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.968: dx entry: limit 1024 != root limit 124
[  146.676337][ T6446] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.968: Corrupt directory, running e2fsck is recommended
[  146.757856][ T6458] team0: No ports can be present during mode change
[  146.770457][ T6455] tipc: Started in network mode
[  146.784905][ T6455] tipc: Node identity e6e862e60bd4, cluster identity 4711
[  146.800220][ T6455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.830797][ T6452] tipc: Resetting bearer <eth:syzkaller0>
[  146.877856][ T6452] tipc: Disabling bearer <eth:syzkaller0>
[  146.908228][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.193230][   T28] audit: type=1400 audit(1783640942.197:4192): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  147.258515][ T6470] veth3: entered promiscuous mode
[  147.265127][ T6470] veth3: entered allmulticast mode
[  147.272585][ T6470] team0: Device veth3 is up. Set it down before adding it as a team port
[  147.306626][ T6474] loop1: detected capacity change from 0 to 256
[  147.367102][ T6477] loop2: detected capacity change from 0 to 1024
[  147.375131][ T6477] EXT4-fs: Ignoring removed bh option
[  147.382157][ T6477] EXT4-fs: quotafile must be on filesystem root
[  147.532952][   T28] audit: type=1400 audit(1783640942.537:4193): avc:  denied  { watch } for  pid=6476 comm="syz.2.976" path="/" dev="ramfs" ino=16274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  147.712084][ T6497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.982'.
[  147.723974][ T6497] netlink: 43 bytes leftover after parsing attributes in process `syz.0.982'.
[  147.741158][ T6497] netlink: 'syz.0.982': attribute type 6 has an invalid length.
[  147.749695][ T6497] netlink: 'syz.0.982': attribute type 5 has an invalid length.
[  147.757516][ T6497] netlink: 43 bytes leftover after parsing attributes in process `syz.0.982'.
[  147.805247][ T6501] loop2: detected capacity change from 0 to 1024
[  147.842976][ T6501] EXT4-fs: Ignoring removed bh option
[  147.854915][ T6501] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  147.900542][ T6501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.915934][ T6501] dns_resolver: Unsupported server list version (0)
[  147.932851][ T6513] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  147.932851][ T6513]    program syz.3.987 not setting count and/or reply_len properly
[  148.551463][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.591708][ T6539] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  148.591708][ T6539]    program syz.2.995 not setting count and/or reply_len properly
[  148.741489][ T6544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.997'.
[  148.769490][ T6548] netlink: 48 bytes leftover after parsing attributes in process `syz.1.999'.
[  148.789200][ T6550] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1000'.
[  148.809218][ T6550] loop2: detected capacity change from 0 to 1024
[  148.827910][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  148.841159][ T6550] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.858957][ T6550] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1000: lblock 3 mapped to illegal pblock 3 (length 3)
[  148.875949][ T6550] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  148.888665][ T6550] EXT4-fs (loop2): This should not happen!! Data will be lost
[  148.888665][ T6550] 
[  148.927684][   T12] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  148.943652][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  148.956364][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  148.956364][   T12] 
[  148.967270][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  148.979028][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  149.236723][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1009'.
[  149.359669][ T6579] loop3: detected capacity change from 0 to 1764
[  149.368772][ T6579] iso9660: Unknown parameter 'euid'
[  149.488292][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1011'.
[  149.662859][ T6590] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1014'.
[  149.732921][ T6596] loop2: detected capacity change from 0 to 512
[  149.750832][ T6596] EXT4-fs: Ignoring removed orlov option
[  149.763319][ T6596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  149.775411][ T6596] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #16: comm syz.2.1018: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  149.793941][ T6596] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  149.794136][ T6596] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1018: couldn't read orphan inode 16 (err -117)
[  149.803628][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  149.803653][    C0] EXT4-fs (loop2): initial error at time 1783640944: ext4_ext_check_inode:521: inode 16
[  149.803687][    C0] EXT4-fs (loop2): last error at time 1783640944: ext4_ext_check_inode:521: inode 16
[  149.855211][ T6596] loop2: lost filesystem error report for type 5 error -117
[  149.855403][ T6603] loop0: detected capacity change from 0 to 1024
[  149.865677][ T6596] EXT4-fs (loop2): 1 orphan inode deleted
[  149.877339][ T6603] EXT4-fs: Ignoring removed bh option
[  149.884848][ T6596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.901374][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.991122][ T6596] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.1018: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0
[  149.998810][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  149.998825][   T28] audit: type=1400 audit(1783640944.997:4198): avc:  denied  { write } for  pid=6595 comm="syz.2.1018" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.047038][ T6610] FAULT_INJECTION: forcing a failure.
[  150.047038][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.060233][   T28] audit: type=1400 audit(1783640945.057:4199): avc:  denied  { read } for  pid=6601 comm="syz.0.1020" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  150.083298][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.3.1022 Not tainted syzkaller #0 PREEMPT(lazy) 
[  150.083328][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  150.083342][ T6610] Call Trace:
[  150.083350][ T6610]  <TASK>
[  150.083406][ T6610]  __dump_stack+0x1d/0x30
[  150.083432][ T6610]  dump_stack_lvl+0x95/0xd0
[  150.083454][ T6610]  dump_stack+0x15/0x1b
[  150.083474][ T6610]  should_fail_ex+0x25e/0x270
[  150.083556][ T6610]  should_fail+0xb/0x20
[  150.083582][ T6610]  should_fail_usercopy+0x1a/0x20
[  150.083614][ T6610]  _copy_to_user+0x20/0xa0
[  150.083634][ T6610]  simple_read_from_buffer+0xb5/0x130
[  150.083727][ T6610]  proc_fail_nth_read+0x10e/0x150
[  150.083816][ T6610]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.083839][ T6610]  vfs_read+0x18e/0x7c0
[  150.083857][ T6610]  ? __rcu_read_unlock+0x4e/0x70
[  150.083884][ T6610]  ? __fget_files+0x184/0x1c0
[  150.083989][ T6610]  ? mutex_lock+0x57/0x90
[  150.084017][ T6610]  ksys_read+0xdc/0x1a0
[  150.084111][ T6610]  __x64_sys_read+0x40/0x50
[  150.084180][ T6610]  x64_sys_call+0x2886/0x3020
[  150.084207][ T6610]  do_syscall_64+0x136/0x3c0
[  150.084241][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.084318][ T6610] RIP: 0033:0x7fad75c6e68e
[  150.084336][ T6610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  150.084376][ T6610] RSP: 002b:00007fad74706fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  150.084406][ T6610] RAX: ffffffffffffffda RBX: 00007fad747076c0 RCX: 00007fad75c6e68e
[  150.084422][ T6610] RDX: 000000000000000f RSI: 00007fad747070a0 RDI: 0000000000000004
[  150.084436][ T6610] RBP: 00007fad74707090 R08: 0000000000000000 R09: 0000000000000000
[  150.084502][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.084516][ T6610] R13: 00007fad75f36038 R14: 00007fad75f35fa0 R15: 00007fffa8e461d8
[  150.084601][ T6610]  </TASK>
[  150.084936][   T28] audit: type=1400 audit(1783640945.057:4200): avc:  denied  { open } for  pid=6601 comm="syz.0.1020" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  150.097429][ T6596] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.1018: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  150.104986][   T28] audit: type=1400 audit(1783640945.107:4201): avc:  denied  { write } for  pid=6595 comm="syz.2.1018" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.129867][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  150.325827][ T6596] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.1018: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0
[  150.374310][   T28] audit: type=1400 audit(1783640945.137:4202): avc:  denied  { ioctl } for  pid=6601 comm="syz.0.1020" path="socket:[16490]" dev="sockfs" ino=16490 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  150.778715][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.974246][   T28] audit: type=1400 audit(1783640945.337:4203): avc:  denied  { write } for  pid=6595 comm="syz.2.1018" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.152190][   T28] audit: type=1400 audit(1783640946.157:4204): avc:  denied  { write } for  pid=6641 comm="syz.1.1030" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  151.182114][   T28] audit: type=1400 audit(1783640946.187:4205): avc:  denied  { write } for  pid=6645 comm="syz.3.1033" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  151.186522][ T6646] loop3: detected capacity change from 0 to 1024
[  151.213443][ T6646] EXT4-fs: Ignoring removed nobh option
[  151.219339][ T6646] EXT4-fs: Ignoring removed orlov option
[  151.225184][ T6646] EXT4-fs: Ignoring removed nobh option
[  151.253022][ T6646] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  151.302961][ T6649] nfs: Unknown parameter ''
[  151.315779][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.347402][   T28] audit: type=1400 audit(1783640946.347:4206): avc:  denied  { write } for  pid=6645 comm="syz.3.1033" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.371660][ T6652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=6652 comm=syz.4.1034
[  151.825365][ T6656] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1036'.
[  152.040307][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.178297][ T6667] syz.3.1035(6667): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  152.191579][ T6612] Bluetooth: hci0: command 0x1003 tx timeout
[  152.199499][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  152.299197][ T6669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1035'.
[  152.764649][ T6611] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  152.794238][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.084446][ T6686] netlink: 'syz.1.1045': attribute type 21 has an invalid length.
[  153.176560][   T28] audit: type=1400 audit(1783640948.177:4207): avc:  denied  { bind } for  pid=6683 comm="syz.4.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  153.310205][ T6687] loop2: detected capacity change from 0 to 8192
[  153.320804][ T6687] FAT-fs (loop2): bogus sectors per cluster 254
[  153.383367][ T6687] FAT-fs (loop2): Can't find a valid FAT filesystem
[  153.461547][ T6695] loop1: detected capacity change from 0 to 256
[  153.511583][ T6695] FAT-fs (loop1): Directory bread(block 1285) failed
[  153.518361][ T6695] FAT-fs (loop1): Directory bread(block 1286) failed
[  153.529885][ T6693] pimreg: entered allmulticast mode
[  153.538883][ T6695] FAT-fs (loop1): Directory bread(block 1287) failed
[  153.568633][ T6695] FAT-fs (loop1): Directory bread(block 1288) failed
[  153.580584][ T6693] pimreg: left allmulticast mode
[  153.589562][ T6695] FAT-fs (loop1): FAT read failed (blocknr 1281)
[  153.638303][ T6698] loop1: detected capacity change from 0 to 512
[  153.669175][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.683830][ T6698] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.758631][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.782527][ T6704] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1051'.
[  153.838700][ T6706] netlink: 'syz.2.1053': attribute type 10 has an invalid length.
[  153.861232][ T6710] usb usb8: usbfs: process 6710 (syz.1.1055) did not claim interface 8 before use
[  153.931669][ T6706] team0: Device wg2 is of different type
[  154.002524][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'.
[  154.220598][ T6735] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1065'.
[  154.257451][ T6743] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[  154.257717][ T6741] usb usb8: usbfs: process 6741 (syz.4.1066) did not claim interface 2 before use
[  154.267734][ T6743] SELinux: failed to load policy
[  154.272398][ T6743] loop2: detected capacity change from 0 to 512
[  154.281503][ T6741] FAULT_INJECTION: forcing a failure.
[  154.281503][ T6741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.315198][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.4.1066 Not tainted syzkaller #0 PREEMPT(lazy) 
[  154.315226][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  154.315239][ T6741] Call Trace:
[  154.315246][ T6741]  <TASK>
[  154.315254][ T6741]  __dump_stack+0x1d/0x30
[  154.315291][ T6741]  dump_stack_lvl+0x95/0xd0
[  154.315314][ T6741]  dump_stack+0x15/0x1b
[  154.315334][ T6741]  should_fail_ex+0x25e/0x270
[  154.315389][ T6741]  should_fail+0xb/0x20
[  154.315409][ T6741]  should_fail_usercopy+0x1a/0x20
[  154.315479][ T6741]  _copy_to_user+0x20/0xa0
[  154.315496][ T6741]  simple_read_from_buffer+0xb5/0x130
[  154.315523][ T6741]  proc_fail_nth_read+0x10e/0x150
[  154.315555][ T6741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.315573][ T6741]  vfs_read+0x18e/0x7c0
[  154.315612][ T6741]  ? __rcu_read_unlock+0x4e/0x70
[  154.315635][ T6741]  ? __fget_files+0x184/0x1c0
[  154.315780][ T6741]  ? mutex_lock+0x57/0x90
[  154.315842][ T6741]  ksys_read+0xdc/0x1a0
[  154.315861][ T6741]  __x64_sys_read+0x40/0x50
[  154.315878][ T6741]  x64_sys_call+0x2886/0x3020
[  154.316096][ T6741]  do_syscall_64+0x136/0x3c0
[  154.316126][ T6741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.316148][ T6741] RIP: 0033:0x7f9eda5ee68e
[  154.316164][ T6741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  154.316248][ T6741] RSP: 002b:00007f9ed9086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  154.316271][ T6741] RAX: ffffffffffffffda RBX: 00007f9ed90876c0 RCX: 00007f9eda5ee68e
[  154.316292][ T6741] RDX: 000000000000000f RSI: 00007f9ed90870a0 RDI: 0000000000000005
[  154.316355][ T6741] RBP: 00007f9ed9087090 R08: 0000000000000000 R09: 0000000000000000
[  154.316367][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.316381][ T6741] R13: 00007f9eda8b6038 R14: 00007f9eda8b5fa0 R15: 00007ffda4454cf8
[  154.316402][ T6741]  </TASK>
[  154.526174][ T6743] EXT4-fs: Mount option(s) incompatible with ext2
[  154.818937][ T6753] sg_write: data in/out 399580/23 bytes for SCSI command 0x0-- guessing data in;
[  154.818937][ T6753]    program syz.1.1070 not setting count and/or reply_len properly
[  154.891050][ T6760] loop1: detected capacity change from 0 to 512
[  154.918294][ T6760] EXT4-fs: Ignoring removed nobh option
[  154.934554][ T6760] EXT4-fs (loop1): failed to initialize system zone (-117)
[  154.943155][ T6760] EXT4-fs (loop1): mount failed
[  154.960161][ T6764] No source specified
[  155.152281][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'.
[  155.174082][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  155.174097][   T28] audit: type=1400 audit(1783640950.177:4224): avc:  denied  { read } for  pid=6770 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  155.178284][ T6771] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  155.225170][ T6771] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  155.327181][ T6777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  155.358574][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'.
[  155.447437][ T6776] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  155.475213][ T6779] loop3: detected capacity change from 0 to 512
[  155.494433][ T6776] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  155.751943][ T6779] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  155.811373][ T6779] EXT4-fs (loop3): orphan cleanup on readonly fs
[  156.022486][ T6779] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  156.178709][ T6779] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  156.197221][ T6779] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  156.205901][ T6779] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.1079: inode has both inline data and extents flags
[  156.219492][ T6779] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  156.219981][ T6779] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1079: couldn't read orphan inode 16 (err -117)
[  156.229370][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  156.229402][    C0] EXT4-fs (loop3): initial error at time 1783640951: ext4_orphan_get:1399: inode 16
[  156.229455][    C0] EXT4-fs (loop3): last error at time 1783640951: ext4_orphan_get:1399: inode 16
[  156.895124][ T6783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.101608][ T6783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.135292][ T6779] loop3: lost filesystem error report for type 5 error -117
[  157.138036][ T6779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  157.177840][ T6795] sg_write: data in/out 399580/23 bytes for SCSI command 0x0-- guessing data in;
[  157.177840][ T6795]    program syz.1.1082 not setting count and/or reply_len properly
[  157.209090][ T6783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.260936][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1085'.
[  157.283806][ T6783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.324412][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'.
[  157.338052][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.422715][ T3979] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.432180][ T3979] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.453485][ T3979] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.462366][ T3979] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.648974][ T6808] 
ÿ: renamed from dummy0
[  158.207445][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'.
[  158.217587][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'.
[  158.227932][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'.
[  158.710075][ T6831] program syz.0.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.659106][ T6855] loop0: detected capacity change from 0 to 512
[  160.690563][ T6855] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.1103: corrupted inode contents
[  160.734923][ T6861] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1105'.
[  160.748310][ T6855] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  160.751681][ T6855] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  160.761037][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  160.761053][    C0] EXT4-fs (loop0): initial error at time 1783640955: ext4_do_update_inode:5742: inode 15
[  160.761093][    C0] EXT4-fs (loop0): last error at time 1783640955: ext4_do_update_inode:5742: inode 15
[  160.830613][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1106'.
[  160.859229][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'.
[  160.940828][ T6855] loop0: lost filesystem error report for type 5 error -117
[  161.057808][   T28] audit: type=1400 audit(1783640955.897:4225): avc:  denied  { mount } for  pid=6868 comm="syz.1.1107" name="/" dev="autofs" ino=17131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  161.104587][ T6855] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.1103: corrupted inode contents
[  161.256592][ T6855] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  161.447102][ T6855] EXT4-fs error (device loop0): ext4_evict_inode:315: inode #15: comm syz.0.1103: mark_inode_dirty error
[  161.544851][ T6877] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1108'.
[  161.584595][ T6855] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  161.585070][ T6855] EXT4-fs (loop0): 1 orphan inode deleted
[  161.638092][ T6855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.840654][ T6886] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  161.840654][ T6886]    program syz.2.1113 not setting count and/or reply_len properly
[  162.075331][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.158355][   T28] audit: type=1400 audit(1783640957.157:4226): avc:  denied  { mounton } for  pid=6904 comm="syz.3.1122" path="/proc/603/task" dev="proc" ino=17222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  162.393864][ T6916] sg_write: data in/out 399836/24 bytes for SCSI command 0x0-- guessing data in;
[  162.393864][ T6916]    program syz.0.1125 not setting count and/or reply_len properly
[  162.638025][ T6934] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  162.652809][ T6934] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.661431][ T6934] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3
[  162.708480][ T6937] x_tables: duplicate underflow at hook 2
[  162.730281][ T6939] netlink: 'syz.4.1133': attribute type 10 has an invalid length.
[  162.751127][ T6939] team0: Device wg2 is of different type
[  163.025304][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'.
[  163.077356][ T6962] ==================================================================
[  163.085733][ T6962] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
[  163.093594][ T6962] 
[  163.096222][ T6962] write to 0xffff88810a612b00 of 8 bytes by task 6958 on cpu 0:
[  163.104027][ T6962]  mas_wr_store_entry+0x3b95/0x5a90
[  163.109248][ T6962]  mas_store_prealloc+0x421/0x670
[  163.114455][ T6962]  vma_complete+0x3c7/0x850
[  163.118955][ T6962]  __split_vma+0x592/0x640
[  163.123375][ T6962]  vma_modify+0xb29/0xc80
[  163.127706][ T6962]  vma_modify_flags+0x182/0x210
[  163.132548][ T6962]  mprotect_fixup+0x3a2/0x680
[  163.137231][ T6962]  do_mprotect_pkey+0x69e/0x950
[  163.142072][ T6962]  __x64_sys_mprotect+0x48/0x60
[  163.146920][ T6962]  x64_sys_call+0x2768/0x3020
[  163.151582][ T6962]  do_syscall_64+0x136/0x3c0
[  163.156182][ T6962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.162119][ T6962] 
[  163.164424][ T6962] read to 0xffff88810a612b00 of 8 bytes by task 6962 on cpu 1:
[  163.171944][ T6962]  mtree_range_walk+0x35a/0x480
[  163.176877][ T6962]  mas_walk+0x1ac/0x340
[  163.181043][ T6962]  lock_vma_under_rcu+0xc9/0x210
[  163.186589][ T6962]  do_user_addr_fault+0x237/0x1060
[  163.191712][ T6962]  exc_page_fault+0x62/0xa0
[  163.196296][ T6962]  asm_exc_page_fault+0x26/0x30
[  163.201160][ T6962] 
[  163.203477][ T6962] value changed: 0xffff88810387e40e -> 0xffff88810a612b00
[  163.210571][ T6962] 
[  163.213528][ T6962] Reported by Kernel Concurrency Sanitizer on:
[  163.220298][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.3.1139 Not tainted syzkaller #0 PREEMPT(lazy) 
[  163.229952][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  163.240266][ T6962] ==================================================================