last executing test programs:

3m21.224801725s ago: executing program 3 (id=1470):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='dummy0\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x9, &(0x7f0000000b00)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xd, 0x71, 0x12, 0x86}, [@exit, @tail_call]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xce, &(0x7f00000004c0)=""/206, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8, 0x6}, 0x10}, 0x94)
r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff)
r10 = socket(0x28, 0x5, 0x0)
listen(r10, 0x1)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000680)={<r11=>r0, 0x3, 0x5, 0x2})
r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r13=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c100000", @ANYRES16=r9, @ANYBLOB="00012abd7000ffdbdf25050000004c0007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="04000a000c00020002000000000000000c00020000020000000000000c000200000400000000000008000100000000000c000300fcffffffffffffff"], 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80c5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000300)=""/246, 0x0, 0xf6, 0x1}, 0x28)

3m20.794249546s ago: executing program 3 (id=1472):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
write(r0, &(0x7f0000000000)="08001800000020a3", 0x8)
read(r0, &(0x7f00000003c0)=""/14, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000050000020500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc2}, &(0x7f00000009c0)={0x0, "fc1f401b0bf8968857b53b647906c615da582618967b1483c5ceea6d7b8f21939e2cb7b103a84241a7917fb01527622dbf3cd0ad0088a086987bf1d2c39bb06d", 0x3d}, 0x48, 0x0)
keyctl$update(0x2, r3, &(0x7f0000001400)="8c4903a3", 0x4)
mount(&(0x7f0000000000)=@filename='none\x00', 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x8003)
fcntl$setlease(r4, 0x400, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0x0)
write(r5, &(0x7f0000000000)='8086 7', 0x6)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)

3m19.918675068s ago: executing program 3 (id=1481):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002580)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20004800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x44, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x200080c0, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r8, {0x4, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5c19, 0x2, 0xb}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)

3m19.582499926s ago: executing program 3 (id=1485):
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0)
ioprio_get$uid(0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21089c, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@minixdf}]}, 0x9, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
close(0x3)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)

3m18.554657022s ago: executing program 3 (id=1496):
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3m17.84789558s ago: executing program 3 (id=1507):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}]}, 0x30}}, 0x0)
setsockopt(0xffffffffffffffff, 0x80, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0)

3m17.746900383s ago: executing program 32 (id=1507):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x9}}]}, 0x30}}, 0x0)
setsockopt(0xffffffffffffffff, 0x80, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0)

34.858531668s ago: executing program 2 (id=3121):
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
syz_open_dev$loop(0x0, 0xfffffffffffff001, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")

34.76767341s ago: executing program 2 (id=3125):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0x802, 0x1)
write(r0, &(0x7f0000000000)="08001800000020a3", 0x8)
read(r0, &(0x7f00000003c0)=""/14, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000050000020500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800)
r3 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc2}, &(0x7f00000009c0)={0x0, "fc1f401b0bf8968857b53b647906c615da582618967b1483c5ceea6d7b8f21939e2cb7b103a84241a7917fb01527622dbf3cd0ad0088a086987bf1d2c39bb06d", 0x3d}, 0x48, 0x0)
keyctl$update(0x2, r3, &(0x7f0000001400)="8c4903a3", 0x4)
mount(&(0x7f0000000000)=@filename='none\x00', 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r4, 0xa, 0x13)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000080)='./file0\x00', 0x8003)
fcntl$setlease(r4, 0x400, 0x2)

34.306893542s ago: executing program 2 (id=3128):
mount$9p_fd(0x0, &(0x7f0000000500)='./ffs\x00', &(0x7f0000000540), 0x2200844, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ptrace$peeksig(0x4209, r0, &(0x7f0000000100)={0x4, 0x0, 0x2}, &(0x7f0000000280)=[{}, {}])
mount(0x0, &(0x7f0000000140)='./dev/sda\x00', &(0x7f0000000200)='fuseblk\x00', 0x2820040, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0)
io_setup(0x3, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x300000000000000, 0x0, 0x0, 0x0, 0xe11, r1, 0x0, 0xf, 0x4, 0x0, 0x0, r1}])
openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xff6, 0x83cc861638786fe8)
ioctl$BLKZEROOUT(r3, 0xc01070ce, &(0x7f0000000000)={0x0, 0x40001000})
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172)

33.979438821s ago: executing program 2 (id=3136):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x0, 0x200)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000300)=r2, 0x4)
getpid()
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="01bbb9bb08004500002800000211009078000002000100dd7df3766633b201000000000000000200000000000000000000000000f7bfc25a6928915cc120d05f1e59c09d48813eec43beef902ff2b9389135"], 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200"/200], 0x10c}}, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x1c1300)
mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r5, 0x1e67e000)
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x12, 0x2)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0)
socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x409, &(0x7f0000000080)={[{@nogrpid}, {@init_itable}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4fa, &(0x7f0000000a00)="$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")

33.269220689s ago: executing program 2 (id=3143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0d, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000002c0)="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", 0xfc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x629, r3}, 0x38)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x7, 0x1, 0x80}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff8000}]}}]}, 0x44}}, 0x0)

31.798550317s ago: executing program 2 (id=3149):
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
socket(0x2, 0x3, 0x6)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_open_dev$loop(0x0, 0xfffffffffffff001, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")

31.798345097s ago: executing program 33 (id=3149):
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
socket(0x2, 0x3, 0x6)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
syz_open_dev$loop(0x0, 0xfffffffffffff001, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")

16.090362434s ago: executing program 6 (id=3275):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='dummy0\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x9, &(0x7f0000000b00)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xd, 0x71, 0x12, 0x86}, [@exit, @tail_call]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xce, &(0x7f00000004c0)=""/206, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8, 0x6}, 0x10}, 0x94)
r3 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
r10 = socket(0x28, 0x5, 0x0)
listen(r10, 0x1)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000680)={<r11=>r0, 0x3, 0x5, 0x2})
r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r13=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c100000", @ANYRES16=r9, @ANYBLOB="00012abd7000ffdbdf25050000004c0007800c00018008000100", @ANYRES32=r10, @ANYBLOB='\f\x00', @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="04000a000c00020002000000000000000c00020000020000000000000c000200000400000000000008000100000000000c000300fcffffffffffffff"], 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80c5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000300)=""/246, 0x0, 0xf6, 0x1}, 0x28)

15.163633638s ago: executing program 6 (id=3280):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x800)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x400, 0x70bd2c, 0x25dfdbff, {0x4, 0x1, 0x0, r1, 0x5, 0x9, 0x48000000, 0x5, 0x0, 0x3, 0x6}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={<r2=>0x0, 0x8}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0xfcb, 0x5cc, 0x6, 0x3, 0x43, 0x468, 0x5}, 0x9c)
sendto$inet_nvme_pdu(r0, &(0x7f0000000300)=@icresp={{0x1, 0xb, 0x80, 0xc}, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x25c, 0x9, 0x9, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x3}, [@generic="bd5af7d697bc9bb759ff953c79c4af199f4cab78e2f68d34c7526b6de0a425d9a69019cc7ae78f6b0ea3d27c724c825d233c22cda43335d744575aca49c1b3217ba0b27e", @nested={0xc9, 0x62, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x146}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0xfff}, @generic="4157f5cadc68a9638dcec4e44697b93788c8816cb4d38a91a2ba7c65fd657661a32aa130ff62dcb0e8cf08686578e72706d07244b012224ef04f42572ec11d1ff958b56ad8d647e27393b579ca8443da78ba72ae5657d23c723b7fcd7e0d0fa4a441cea96ab47b646ec204d06a59d349ab3cd277877f7634bd7e09de5b0e0db7cb3c362359de4f0ff68012abface72490b482cf178bd5c4ae6a11f3690347c6054b0ab6e8b7c0bf25d6b0562d3", @nested={0x4, 0xeb}]}, @nested={0xf5, 0xf8, 0x0, 0x1, [@nested={0x4, 0x104}, @generic="5cfc035a4a516306621be35abf41ff3380148ad55aec21fc53af3f8913d3ba5c4d7bdcab84d23249f0a39983cb8ddaa1c6fa0da0e5df9c8e4f480684d870708653d592515e098ef68da31305f82695df3a1b2abc9c61395faf731bf0c18c81aaa794f1a7f823d191206bef55c905321e09fdfee6fc16b4edbd44a0573d2e56224d03ab3575d887cd881ea4d70745acca8eb9cf3f28b3a981fd277b5d803a058ce1d62f86dfce0f79e8564fd85d906b57c744cf293120f0a69a37a508d3cad887fb8c1fad1c", @nested={0x4, 0xb9}, @generic="e1d8b8e9b400789a174a0eb13ee09c6e", @generic, @nested={0x4, 0x9b}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x25}, @nested={0x4, 0xf5}]}, @generic="9470f9d93aeffa38cc7536a6ccbddb2626ca2d1f01852a624c156a8a28efd931ad1e394790fe081bbe5bf37b3c5b1cc8ca519c974673d9aa4074a62989f3b353"]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = accept4$unix(r0, &(0x7f00000006c0), &(0x7f0000000740)=0x6e, 0x800)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x513903, 0x4, 0x1}, 0x18)
faccessat(r4, &(0x7f0000000800)='./file0\x00', 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000840)={r2, 0x2}, &(0x7f0000000880)=0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb0, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x32}, @void, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7ff}, @NL80211_ATTR_VENDOR_DATA={0x5d, 0xc5, "9fd8ee8f030a1b48bb1c137345018da8d2a265095fa00a92b608056491dd7505d8217e7cc95e27f935efc5d4ae84a46f4949610029ba0a2a1d9902ea4e7f40cd0c3bae88322e095abe83d1a4983b32826adb9a5f53082c0e2d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0xb0}}, 0x1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004850)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x4, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r10 = accept4$x25(r0, &(0x7f0000000d80)={0x9, @remote}, &(0x7f0000000dc0)=0x12, 0x140000)
bind$can_raw(r3, &(0x7f0000000e00)={0x1d, r5}, 0x10)
syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00')
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000e80)=0x7, 0x4)
fcntl$notify(r0, 0x402, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r11=>r10, {0x2}}, './file0\x00'})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000fc0)={r11, &(0x7f0000000f00)="10c32a3688b67acdf88a53442b365cdd9366a364bd276d3b778bb1cda930b2c51c9646caaab8afb07d1fa8d3890ce75aa97c95fffe36df8fcb07ab6d9a5cc58316c4c6dd021abb49ac6a82b6eaaeb2f7408b116fdee076a47174cf80bdef8c79b69ee7214447e4481a7c40dcb5fbd6e925f51372c2e99abb4fec5917c650cad31c51d4b93bf12df5c049f6c878a6d17b26"}, 0x20)
setsockopt$X25_QBITINCL(r11, 0x106, 0x1, &(0x7f0000001000)=0x1, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r11, &(0x7f0000001040)={0x5e3feb85ca494e0e})

14.732245869s ago: executing program 6 (id=3284):
mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x2200844, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172)

14.68103573s ago: executing program 6 (id=3287):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000005600000085000000080000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xb)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x9}, 0x4201, 0x201224, 0x0, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$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")
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000003c0)=@filename='./file0/file0\x00', 0x0, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff)
write$cgroup_devices(r6, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa)
syz_usb_connect$uac1(0x1, 0xc3, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003000000ffcc178d0d4000010203010902b10003010d80070904000000010100000a2401070035000201020924030305040106ff1324060303060a0003000300040009000700030f240606020403000800040007009e0904010000010200000904010101010200000b2402017f040c016af71a09240201001004039b09240201070302049109240201020709018309050109ff030740031025010c2df7ff090402004cca4067f0272c8be8000001020000090402010101020000090500eb080725010402010000000000"], &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x0, 0x5, 0x9, 0x8, 0x9}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}]})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00')
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})

14.437423507s ago: executing program 5 (id=3291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='\\', 0x1, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x629, r2}, 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r10, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x7, 0x1, 0x80}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff8000}]}}]}, 0x44}}, 0x0)

13.871017791s ago: executing program 5 (id=3295):
socket(0x22, 0x6, 0x401)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10)
shutdown(r0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffff090000000044000180060001000a00000008000500020000fb0b00070000000000e3ef17f5d37f75684c91dc2e68521ad40000000008010900000000"], 0x58}}, 0x800)
unshare(0x28000600)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000826000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004d008100000000000000000000000000870e7cba28d4a40a13b3"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0008000000000000000c0090007f00000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4010090}, 0x0)
io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7})

13.466234952s ago: executing program 5 (id=3298):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000d0000850000000d0000004e0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000))

13.429612113s ago: executing program 5 (id=3299):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x242, &(0x7f0000000b40)="$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")
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xaf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xfffffffffffff148}, 0x0, 0x4000000035, 0x6, 0x3, 0x1000, 0x6, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0c0004000000000020001280da670b000100627201696467650000100002800a001400ffffffff"], 0x40}}, 0x4040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fffffffffcdbdf25fe8000000000000000000000000000aaac1414bb000000000000000000000000000000004e2100000a0000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104a8, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pidfd_send_signal(r2, 0x0, 0x0, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x801, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
getdents64(r3, 0x0, 0x0)
r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0)

13.090490502s ago: executing program 5 (id=3302):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0, 0x43}, 0x28)
write(r0, &(0x7f0000000000)='=M', 0x2)
r1 = getpgid(0xffffffffffffffff)
setpriority(0x0, r1, 0x8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x41, 0x3, 0x2a8, 0x140, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1f0, 0x1f0, 0x210, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e24, 0x4e24, 0x4e24, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0xf, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
syz_pidfd_open(r5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r6=>0x0})
syz_open_procfs(r1, &(0x7f0000002c00)='coredump_filter\x00')
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r6, 0x3, {0x2, 0xf0}, 0xfe}, 0x18)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002c40), 0x1, 0x0)
r7 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'lo\x00', <r8=>0x0})
process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000002ec0)=""/129, 0x81}], 0x3, &(0x7f0000002b80)=[{&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/83, 0x53}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000980)=""/236, 0xec}, {&(0x7f0000000a80)=""/117, 0x75}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/80, 0x50}], 0x8, 0x0)
bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r8, 0x3, {0x0, 0xf0, 0x4c019d4a4e689bde}, 0xfe}, 0x18)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000002d40)=ANY=[@ANYBLOB="f8000080c409166249916973afede690f0eba313423fff0a3fea0fc663935400c66d702c0ad2632153f8663f82a8c44de9fd2ab5428d60b50511fea6515b82fbfadc1d42fa453249d85d2852fdae31868b64ef935d4842e9957b840822283acc1fea3cf83eb97dc1fd20d31761f415f86d886b22f60af68dd890eb09ae80eee595edae08b8619d2405ac8d4060b056f52f903c96b2a53cd72157acf83cb19d5bdb82074f0a55158e1b839b798b8f371adb64c8c59aff4a3db66521fa068e096000"/202, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf251d00000008000300", @ANYRES32=r10, @ANYBLOB="0c009100040000d32586d1210300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040000)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r11, 0x0, 0x1a, 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000002cc0)={{r11}, 0x9, &(0x7f0000002b00)=[0x6, 0x4d92, 0x1000000000000000, 0x7, 0x9, 0x3, 0x4, 0x6, 0x80000000000004], 0x8})
sendmmsg$inet(r9, &(0x7f0000000180)=[{{&(0x7f0000000240)={0x2, 0x4e62, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000840)="eb10", 0x2}], 0x2}}], 0x1, 0x90)
socket$inet6_mptcp(0xa, 0x1, 0x106)

12.824759549s ago: executing program 5 (id=3306):
gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x110640, 0x0, 0x10001, 0x0, 0x8, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40200)
setns(0xc9, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x800080, 0x0)
r0 = syz_io_uring_setup(0x2, &(0x7f0000000600)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005"], 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

12.452145758s ago: executing program 6 (id=3310):
unshare(0x400)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x620000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000400000000000000000000000711030000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001a0001002bbd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="04000004140003000700000000000000000000000000000014000100050000000000000004"], 0x44}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r3, &(0x7f0000000680)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/24/smp_affinity\x00', 0x1, 0x0)
syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[], 0xc)
write$vga_arbiter(r4, &(0x7f0000000200)=@unlock_all, 0xb)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r5, 0x29, 0x5, 0x0, 0x0)
r6 = socket(0x1d, 0xa, 0x0)
sendto$inet6(r6, &(0x7f0000000240)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00065c4e0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f7f0058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)

12.00655818s ago: executing program 6 (id=3313):
syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0xfffffffffffffffe, &(0x7f0000006680)=0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x161c4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aac90002010000000000000000000000000401040000000000"], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c)

3.910478559s ago: executing program 0 (id=3347):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0x3, 0x5}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xe}]}, 0x24}}, 0x0)
write$tun(r1, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0x8}}}, 0x2e)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
write(r5, &(0x7f0000000900)='nfsd 127.0.0.  2000000000 tes\\\n', 0x1f)

3.545210238s ago: executing program 0 (id=3348):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe2(&(0x7f0000000200)={0x0, <r0=>0x0}, 0x0)
write(r0, &(0x7f0000000210)="01", 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c00000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="40310000000000005c00128008000100736974005000028006000f000100000005000a000100000008000100", @ANYRES32, @ANYBLOB="0600100000f0000014000b0020010000000000000000000000000001080014"], 0x7c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000005080)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x0, {}, [{0x34, 0x1, [@m_ife={0x30, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "8034"}, {0xc, 0x7, {0x92f52d05a60322be, 0xc58826ad51c40e66}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x40810)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
pipe2(0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_open_dev$vcsu(&(0x7f0000000280), 0x5, 0x103000)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @dev, <r7=>0x0}, &(0x7f0000000300)=0xc)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0x1ff, '\x00', r7, r8, 0x1, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r9, &(0x7f0000000180)='p:s/p ./file0:', 0xe)
socket$kcm(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180))

3.331399964s ago: executing program 0 (id=3351):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)="6f050d05d60400", 0x7)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{}, "e64db72eb8308cfd", "adaae84cd1414dc011820d24428823f2", "d367e788", "675e72e7e993a6fa"}, 0x28)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, @nested={0x4, 0x37}]}, 0x38}], 0x1}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)

2.247079122s ago: executing program 1 (id=3360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
recvmsg(r0, &(0x7f00000024c0)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001380)=""/210, 0xd2}], 0x1, &(0x7f00000014c0)=""/4096, 0x1000}, 0x2000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x5, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x200000, 0x0, 0xc0}, 0x0, 0x5b7, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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")
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0xd, 0x2104, &(0x7f0000001600)=ANY=[@ANYBLOB="233de5d94e5d8f7191e26b748761740ba0c61ee467202a4c0a77f35ee96e94379c9b3c40407575a9e6611a2be84c0ca8d52a868a80fa78fac3c71eed7719683a42f7cc950758b9eef8bc724ac6a70a8b1ca5d12e876621237fec7966b238ca73f6a733e659cb43390331818bbc3ca183b1d06cb4cefedf8d8d0de1ba7442f30540ed090c42a7cce0a3b4f4606eec80097927c90fe67281d10c3ea4e55b87f0ab74a3ffe7a9100959b5e1e208f428d1775ca35ae87e3c5cdcef8c48c51802722cd8fb39597460f994991e941067290679d6576ab0f8227029c5397894508201b3ddc3f826cd6b420574705b0afbcac53ac76e408dad239f9e7fcdb026e736f481000ea3ae73c6ec0960056b62210a586a087afbef5b3698112e330de7127a05819cd7dff75bc2c724252f050e6c7bf994db40288cd4d2abcc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
unshare(0x64000600)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000006000294080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

2.243147592s ago: executing program 4 (id=3361):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xba, 0x69f, &(0x7f0000000f00)="$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")
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f0000000280)=[{0x1, 0x4, 0x1000}, {0x0, 0x8000, 0x87a0ac2c4d4ca5e3}], 0x2, &(0x7f0000000300))
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0)

1.716367026s ago: executing program 4 (id=3362):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000600)={[{@jqfmt_vfsold}, {@abort}]}, 0x2, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a3000000000080003400000"], 0x64}}, 0x0)
unshare(0x20000400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00"/13], 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ppoll(&(0x7f0000000080)=[{r2, 0x1120}, {r1, 0xa0c0}], 0x2, 0x0, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x44, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0x7fff}, 0x10040, 0x0, 0x0, 0x9, 0x20000003, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b7030000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d0000", @typed={0x4, 0xeb}, @nested={0x4, 0xaf}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

1.247216098s ago: executing program 1 (id=3363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000), 0x0)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
clock_adjtime(0x5, &(0x7f0000000b40)={0x9, 0x6a811517, 0xfffffffffffffffc, 0x9, 0xcb89, 0x0, 0xf, 0x9, 0x7, 0x6, 0x81, 0x7fff, 0x100000000008, 0x0, 0x8, 0x7fff, 0x1, 0x0, 0x4, 0x100000001, 0x10001, 0x1, 0x5, 0x5, 0xffffffff7ffffff9, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2a, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xf, &(0x7f0000000880)=@raw=[@call={0x85, 0x0, 0x0, 0xc1}, @alu={0x7, 0x1, 0x1, 0x2, 0x5, 0x1, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0xd}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/161}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20)

1.091382912s ago: executing program 0 (id=3364):
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map, 0xffffffffffffffff, 0x31, 0x2001}, 0x20)
fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000008c0)={[{}, {@gid}, {@gid}, {}, {@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}, {}, {}], [{@smackfsdef}]})
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7291, 0x3ff}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x1}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x6c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x3caa})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.074446032s ago: executing program 1 (id=3365):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001a0001002bbd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="04000004140003000700000000000000000000000000000014000100050000000000000004"], 0x44}}, 0x0)

982.447775ms ago: executing program 1 (id=3366):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5b", 0x7e)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='\\[', 0x2, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0x0, <r7=>0x0})
close(r6)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r9, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x7, 0x1, 0x80}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff8000}]}}]}, 0x44}}, 0x0)

777.57071ms ago: executing program 0 (id=3367):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0d, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x629, r3}, 0x38)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d0040000", @ANYRES16, @ANYBLOB="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"], 0x4d0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x7, 0x1, 0x80}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff8000}]}}]}, 0x44}}, 0x0)

737.329221ms ago: executing program 4 (id=3368):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x2, 0x0, &(0x7f0000000000)=0x32)
close(r2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{0x1}, &(0x7f0000001280), &(0x7f00000012c0)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x12, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000020000000000000080030000183b0000010000000000000000000000186b00000900000000000000f6ffffff1800000009000000008000000180000018200000", @ANYRES32, @ANYBLOB="00000000090000002c38300010000000026cff070200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000020000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0xef, &(0x7f0000000740)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x2, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000001380), 0x10, 0x7d}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x400000000010, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffef8, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="4c0f82044c83"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

615.273244ms ago: executing program 1 (id=3369):
gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x110640, 0x0, 0x10001, 0x0, 0x8, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x800080, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000600)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd7000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

568.116046ms ago: executing program 4 (id=3370):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042000102000007c8b26bbb884b6b"], 0x14}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x5, 0x2, 0x200, 0x8007, 0x19, "2e077b0a00f33f0300"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xa)
r2 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000640)='./bus\x00', 0x2800088, &(0x7f0000000680)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696c393524726f6469722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e0100744b696c3d312c757466383d3000800000736e2c726f6469722c73686f72746e616d65287769cbd7f8bad36e39352c73686f72746e616d753d77696e6e742c73686f72746e616d5aa0e924653d77696e39352c73686f77657865632c756e695f786c6174653d302c757466383d302c757466383d302c086e695f786c6174653d302c73686f72746e7e617d653d6d697865642c00", @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT=r1], 0x95, 0x2dc, &(0x7f0000000340)="$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")
splice(r2, &(0x7f00000001c0)=0xa, r2, &(0x7f0000000200)=0x6bdb, 0x3, 0xc)
write(r2, &(0x7f00000009c0)="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", 0x1000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000080)=""/237, 0xed)

449.226569ms ago: executing program 1 (id=3371):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x33, 0x3, [0xfffffffb, 0xe8d1, 0x8]}})
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000649, &(0x7f0000000000)={[{@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noinit_itable}]}, 0x9, 0x60d, &(0x7f0000000800)="$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")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0xfffffffc, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x40, 0x5, 0x3, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
socket$inet6_tcp(0xa, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000e00), 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x101020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x10ffe, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000001000000100000000320000000a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000300cd0000000000000048000200636263286165732900"/190], 0x140}}, 0x800)
r4 = syz_open_pts(r2, 0x0)
r5 = dup3(r4, r2, 0x0)
read$watch_queue(r5, &(0x7f0000000340)=""/133, 0xfdef)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000, 0x0, 0x7}, {0x0, 0xb99, 0x6}], 0x2, 0x1, 0x61, 0x0, 0x0, 0x6e})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd8c5a46fd7142ae7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

440.862579ms ago: executing program 4 (id=3372):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x11}]}, 0x108)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r2, 0x1, 0x3c, 0x0, &(0x7f0000003980)=0x56)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x20040084)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x1, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x80de, 0x8000000000000001}, 0x10ecc8, 0x2, 0x0, 0x3, 0xd, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0x5, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = semget(0x0, 0x1, 0x8)
semctl$IPC_RMID(r5, 0x0, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000002060103000000000000000003de0000050001000600400005000400000000000900020073797a3100000000050005000200003a69702c706f72742c69700000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0)
write(r7, &(0x7f0000000180)='0000:00:07.0', 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10)
write$tun(r7, &(0x7f00000001c0)={@val={0x0, 0xa01}, @void, @llc={@snap={0xab, 0x0, "ebfd", "95ded6", 0x806, "8fb6ebdbf7c751e7f93d2626ca093ac12a5c10aace39d765924595d5f839556d3b415ef931d0c81f79bb8e6a87630bcd0f7c48249b57ed5f6d6b000d351fb6a531c6c5571ee458216ed10b823eec486de2a6c69b97d7fc9e50f04b24173d24b46939841f419051425fdd166459aab9c3ac5faea3b49522072a4e5b738c6c8549dd475a2c1258185c0e4ea6982bb86528b7a8621f867f373408259d6feb90c48ea2f674c7a35d6c6d76f38999a93a25b0096f20f7"}}}, 0xc1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)

435.731789ms ago: executing program 0 (id=3373):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@sysvgroups}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x4a2, &(0x7f0000001400)="$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")
utime(0x0, &(0x7f0000000100)={0x3, 0xff})
r0 = openat(0xffffffffffffff9c, 0x0, 0x501800, 0x1b3)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[])
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002"], 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050)
timer_create(0x6, 0x0, &(0x7f00000004c0))
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x49, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31190000002c000000030a010100000000000000000a0000070900010073797a310000000009000300737900001400000011000100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1ffffffffffffcee, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f0000000540)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94)
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
io_destroy(r3)
io_cancel(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x2a43, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0)

0s ago: executing program 4 (id=3374):
socket$nl_generic(0x10, 0x3, 0x10)
alarm(0xfd48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
syz_open_procfs$namespace(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9}, 0x8)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x400001, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

t=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  328.286258][T10215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.317386][T10215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.331228][T10215] bond0 (unregistering): Released all slaves
[  328.341069][T10215] bond1 (unregistering): Released all slaves
[  328.413413][T10215] tipc: Left network mode
[  328.474827][T10215] hsr_slave_0: left promiscuous mode
[  328.501596][T10215] hsr_slave_1: left promiscuous mode
[  328.520943][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.549716][T10215] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.566201][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.584116][T10215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.609597][T10215] veth1_macvtap: left promiscuous mode
[  328.618978][T10215] veth0_macvtap: left promiscuous mode
[  328.630191][   T28] audit: type=1400 audit(1786120305.272:2040): avc:  denied  { write } for  pid=15487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  328.680048][T15509] iso9660: Unknown parameter ''
[  328.735647][T15501] ext4: Unknown parameter 'user_x'
[  328.815577][T10215] team0 (unregistering): Port device team_slave_1 removed
[  328.828944][T10215] team0 (unregistering): Port device team_slave_0 removed
[  329.201516][T15470] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.209018][T15470] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.216290][T15470] bridge_slave_0: entered allmulticast mode
[  329.223252][T15470] bridge_slave_0: entered promiscuous mode
[  329.230318][T15470] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.238658][T15470] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.246007][T15470] bridge_slave_1: entered allmulticast mode
[  329.252781][T15470] bridge_slave_1: entered promiscuous mode
[  329.281378][T15470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.311362][T15470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.334229][T15470] team0: Port device team_slave_0 added
[  329.341066][T15470] team0: Port device team_slave_1 added
[  329.358260][T15470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.365330][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.392299][T15470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.403976][T15470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.411052][T15470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.445985][T15470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.612076][T15544]  loop5: p2 < > p3 p4
[  329.623809][T15544] loop5: p3 start 65535 is beyond EOD, truncated
[  329.665922][T15544] loop5: p4 size 8192 extends beyond EOD, truncated
[  329.691387][T15470] hsr_slave_0: entered promiscuous mode
[  329.702363][T15470] hsr_slave_1: entered promiscuous mode
[  329.761916][T10215] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.920475][T10649] udevd[10649]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  329.930702][T13221] udevd[13221]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  329.967582][T15548] netlink: 'syz.2.3019': attribute type 1 has an invalid length.
[  330.040758][T15551] netlink: 'syz.5.3020': attribute type 1 has an invalid length.
[  330.076307][T10215] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.138489][T10215] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.220308][T15566] FAULT_INJECTION: forcing a failure.
[  330.220308][T15566] name fail_futex, interval 1, probability 0, space 0, times 1
[  330.233316][T15566] CPU: 0 UID: 0 PID: 15566 Comm: syz.5.3027 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  330.233379][T15566] Tainted: [W]=WARN
[  330.233388][T15566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  330.233401][T15566] Call Trace:
[  330.233418][T15566]  <TASK>
[  330.233428][T15566]  __dump_stack+0x1d/0x30
[  330.233455][T15566]  dump_stack_lvl+0x95/0xd0
[  330.233476][T15566]  dump_stack+0x15/0x1b
[  330.233497][T15566]  should_fail_ex+0x25e/0x270
[  330.233600][T15566]  should_fail+0xb/0x20
[  330.233634][T15566]  get_futex_key+0x596/0xb10
[  330.233672][T15566]  ? refill_pi_state_cache+0x5f/0xe0
[  330.233703][T15566]  futex_requeue+0x177/0x1450
[  330.233735][T15566]  ? _parse_integer+0x27/0x40
[  330.233773][T15566]  ? kstrtouint_from_user+0xa8/0xf0
[  330.233833][T15566]  ? get_pid_task+0x92/0xc0
[  330.233858][T15566]  do_futex+0x3bf/0x460
[  330.233881][T15566]  __se_sys_futex+0x2f6/0x370
[  330.233902][T15566]  ? mutex_unlock+0x4e/0x90
[  330.233953][T15566]  __x64_sys_futex+0x78/0x90
[  330.233983][T15566]  x64_sys_call+0x24ab/0x3020
[  330.234007][T15566]  do_syscall_64+0x136/0x3c0
[  330.234039][T15566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.234081][T15566] RIP: 0033:0x7f2f827be0d9
[  330.234100][T15566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.234160][T15566] RSP: 002b:00007f2f81217028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  330.234186][T15566] RAX: ffffffffffffffda RBX: 00007f2f82a45fa0 RCX: 00007f2f827be0d9
[  330.234205][T15566] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc
[  330.234221][T15566] RBP: 00007f2f81217090 R08: 0000200000048000 R09: 0000000000000000
[  330.234237][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.234253][T15566] R13: 00007f2f82a46038 R14: 00007f2f82a45fa0 R15: 00007ffeb1fc1268
[  330.234287][T15566]  </TASK>
[  330.257947][T15568] syzkaller1: entered promiscuous mode
[  330.462813][T15568] syzkaller1: entered allmulticast mode
[  330.508350][T10215] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.782073][T10215] netdevsim netdevsim10 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.796667][T15582] netlink: 'syz.2.3031': attribute type 12 has an invalid length.
[  330.945296][T15592] netlink: 'syz.5.3032': attribute type 1 has an invalid length.
[  330.953116][T15592] __nla_validate_parse: 14 callbacks suppressed
[  330.953136][T15592] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3032'.
[  330.969185][T10215] bridge_slave_1: left allmulticast mode
[  330.974912][T10215] bridge_slave_1: left promiscuous mode
[  330.980665][T10215] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.989391][T10215] bridge_slave_0: left allmulticast mode
[  330.995179][T10215] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.069559][T10215] bond1 (unregistering): (slave ip6gre1): Releasing backup interface
[  331.078012][T10215] ip6gre1 (unregistering): left promiscuous mode
[  331.141203][T10215] team0: Port device bond0 removed
[  331.150454][T10215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.160812][T10215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.170448][T10215] bond0 (unregistering): Released all slaves
[  331.178734][T10215] bond1 (unregistering): Released all slaves
[  331.188503][T10215] bond2 (unregistering): Released all slaves
[  331.218819][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5
[  331.277136][T10215] tipc: Left network mode
[  331.295873][T10215] hsr_slave_0: left promiscuous mode
[  331.303203][T10215] hsr_slave_1: left promiscuous mode
[  331.309364][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.317312][T10215] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.327050][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.334851][T10215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.344311][T15609] set_capacity_and_notify: 6 callbacks suppressed
[  331.344330][T15609] loop2: detected capacity change from 0 to 1764
[  331.371068][T10215] veth1_macvtap: left promiscuous mode
[  331.410040][T15606] syz.1.3035 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  331.456256][T15606] CPU: 1 UID: 0 PID: 15606 Comm: syz.1.3035 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  331.456290][T15606] Tainted: [W]=WARN
[  331.456296][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  331.456309][T15606] Call Trace:
[  331.456314][T15606]  <TASK>
[  331.456323][T15606]  __dump_stack+0x1d/0x30
[  331.456354][T15606]  dump_stack_lvl+0x95/0xd0
[  331.456381][T15606]  dump_stack+0x15/0x1b
[  331.456406][T15606]  dump_header+0x80/0x240
[  331.456434][T15606]  oom_kill_process+0x295/0x350
[  331.456470][T15606]  out_of_memory+0x981/0xbc0
[  331.456509][T15606]  try_charge_memcg+0x621/0xa00
[  331.456545][T15606]  __obj_cgroup_charge+0x105/0x230
[  331.456585][T15606]  __memcg_slab_post_alloc_hook+0x492/0x860
[  331.456619][T15606]  ? should_fail_ex+0x30/0x270
[  331.456654][T15606]  kmem_cache_alloc_noprof+0x1f1/0x3c0
[  331.456682][T15606]  ? vm_area_dup+0x33/0x2c0
[  331.456707][T15606]  ? vm_area_dup+0x33/0x2c0
[  331.456730][T15606]  vm_area_dup+0x33/0x2c0
[  331.456752][T15606]  __split_vma+0xe9/0x640
[  331.456778][T15606]  vma_modify+0xb29/0xc80
[  331.456814][T15606]  vma_modify_flags+0x182/0x210
[  331.456858][T15606]  mprotect_fixup+0x3a2/0x680
[  331.456887][T15606]  do_mprotect_pkey+0x69e/0x950
[  331.456913][T15606]  ? do_mmap+0x9f1/0xbc0
[  331.456950][T15606]  __x64_sys_mprotect+0x48/0x60
[  331.456969][T15606]  x64_sys_call+0x2768/0x3020
[  331.456997][T15606]  do_syscall_64+0x136/0x3c0
[  331.457027][T15606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.457047][T15606] RIP: 0033:0x7fc0fbbfded7
[  331.457064][T15606] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.457087][T15606] RSP: 002b:00007ffd4dd78a38 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  331.457113][T15606] RAX: ffffffffffffffda RBX: 00007fc0fa6366c0 RCX: 00007fc0fbbfded7
[  331.457132][T15606] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fc0fa617000
[  331.457149][T15606] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  331.457165][T15606] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd4dd78b90
[  331.457182][T15606] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  331.457201][T15606]  </TASK>
[  331.457208][T15606] memory: usage 8kB, limit 8kB, failcnt 77
[  331.700972][T15606] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0
[  331.708843][T15606] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[  331.718023][T15606] Memory cgroup stats for /syz1/test:
[  331.718165][T15606] cache 0
[  331.727068][T15606] rss 0
[  331.729997][T15606] shmem 0
[  331.732994][T15606] mapped_file 0
[  331.736768][T15606] dirty 0
[  331.739966][T15606] writeback 0
[  331.745021][T15606] workingset_refault_anon 0
[  331.750135][T15606] workingset_refault_file 0
[  331.754955][T15606] swap 0
[  331.758055][T15606] swapcached 0
[  331.761644][T15606] pgpgin 0
[  331.764794][T15606] pgpgout 0
[  331.768262][T15606] pgfault 0
[  331.771409][T15606] pgmajfault 0
[  331.774827][T15606] inactive_anon 0
[  331.778832][T15606] active_anon 0
[  331.782332][T15606] inactive_file 0
[  331.786222][T15606] active_file 0
[  331.789783][T15606] unevictable 0
[  331.793312][T15606] hierarchical_memory_limit 8192
[  331.800871][T15616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3034'.
[  331.802444][T15606] hierarchical_memsw_limit 9223372036854771712
[  331.810159][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3034'.
[  331.820279][T15606] total_cache 0
[  331.857597][T15606] total_rss 0
[  331.860998][T15606] total_shmem 0
[  331.864816][T10215] team0 (unregistering): Port device team_slave_1 removed
[  331.872032][T15606] total_mapped_file 0
[  331.879313][T15606] total_dirty 0
[  331.882896][T15606] total_writeback 0
[  331.887352][T10215] team0 (unregistering): Port device team_slave_0 removed
[  331.894555][T15606] total_workingset_refault_anon 0
[  331.905473][T15606] total_workingset_refault_file 0
[  331.916366][T15606] total_swap 0
[  331.924235][T15606] total_swapcached 0
[  331.932594][T15606] total_pgpgin 0
[  331.936900][T15606] total_pgpgout 0
[  331.942270][T15606] total_pgfault 0
[  331.946545][T15606] total_pgmajfault 0
[  331.959024][T15606] total_inactive_anon 0
[  331.963333][T15606] total_active_anon 0
[  331.968325][T15606] total_inactive_file 0
[  331.972901][ T3410] infiniband syz0: ib_query_port failed (-19)
[  331.979512][T15606] total_active_file 0
[  331.983738][T15606] total_unevictable 0
[  331.995194][T15613] vlan0: entered promiscuous mode
[  332.005443][T15613] bridge0: entered promiscuous mode
[  332.015417][T15606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.3035,pid=15606,uid=0
[  332.082901][T15606] Memory cgroup out of memory: Killed process 15606 (syz.1.3035) total-vm:94188kB, anon-rss:1416kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  332.136833][T15619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3038'.
[  332.231228][T15626] loop2: detected capacity change from 0 to 512
[  332.237345][T15623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3039'.
[  332.289300][T15623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3039'.
[  332.388492][   T28] kauditd_printk_skb: 131 callbacks suppressed
[  332.388511][   T28] audit: type=1400 audit(1786120309.032:2172): avc:  denied  { write } for  pid=15620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  332.464026][   T28] audit: type=1400 audit(1786120309.102:2173): avc:  denied  { create } for  pid=15648 comm="syz.2.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  332.498545][T15645] netlink: 'syz.5.3042': attribute type 1 has an invalid length.
[  332.506378][T15645] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3042'.
[  332.516674][T15470] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  332.537410][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  332.543759][   T28] audit: type=1400 audit(1786120309.112:2174): avc:  denied  { write } for  pid=15651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  332.579983][T15470] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  332.598114][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  332.607836][T15655] netlink: 'syz.2.3044': attribute type 12 has an invalid length.
[  332.622412][T15470] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  332.646906][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  332.662427][T15470] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  332.684142][T15660] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3045'.
[  332.702633][T15470] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  332.741104][T10215] IPVS: stop unused estimator thread 0...
[  332.756993][T15660] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3045'.
[  332.936292][T15680] FAULT_INJECTION: forcing a failure.
[  332.936292][T15680] name failslab, interval 1, probability 0, space 0, times 0
[  332.949168][T15680] CPU: 1 UID: 0 PID: 15680 Comm: syz.1.3049 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  332.949201][T15680] Tainted: [W]=WARN
[  332.949208][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.949220][T15680] Call Trace:
[  332.949235][T15680]  <TASK>
[  332.949246][T15680]  __dump_stack+0x1d/0x30
[  332.949265][T15668] loop5: detected capacity change from 0 to 512
[  332.949280][T15680]  dump_stack_lvl+0x95/0xd0
[  332.949321][T15680]  dump_stack+0x15/0x1b
[  332.949412][T15680]  should_fail_ex+0x25e/0x270
[  332.949532][T15680]  ? __se_sys_timerfd_create+0xe2/0x2b0
[  332.949669][T15680]  should_failslab+0x8c/0xb0
[  332.949747][T15680]  __kmalloc_cache_noprof+0x7b/0x3d0
[  332.949825][T15680]  ? __se_sys_timerfd_create+0xe2/0x2b0
[  332.949925][T15680]  __se_sys_timerfd_create+0xe2/0x2b0
[  332.950096][T15680]  __x64_sys_timerfd_create+0x31/0x40
[  332.950220][T15680]  x64_sys_call+0x2978/0x3020
[  332.950338][T15680]  do_syscall_64+0x136/0x3c0
[  332.950557][T15680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.950630][T15680] RIP: 0033:0x7fc0fbbfe0d9
[  332.950683][T15680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.950739][T15680] RSP: 002b:00007fc0fa657028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  332.950820][T15680] RAX: ffffffffffffffda RBX: 00007fc0fbe85fa0 RCX: 00007fc0fbbfe0d9
[  332.950885][T15680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  332.950969][T15680] RBP: 00007fc0fa657090 R08: 0000000000000000 R09: 0000000000000000
[  332.951013][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.951054][T15680] R13: 00007fc0fbe86038 R14: 00007fc0fbe85fa0 R15: 00007ffd4dd78a98
[  332.951120][T15680]  </TASK>
[  333.099324][T15678] loop2: detected capacity change from 0 to 512
[  333.153183][T15678] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.181322][   T28] audit: type=1400 audit(1786120309.822:2175): avc:  denied  { create } for  pid=15679 comm="syz.1.3049" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  333.221342][T15470] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.232813][T15470] 8021q: adding VLAN 0 to HW filter on device team0
[  333.251736][T15470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  333.262309][T15470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  333.283800][T15678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15678 comm=syz.2.3048
[  333.307374][T15668] EXT4-fs: Ignoring removed oldalloc option
[  333.330627][T10148] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.337785][T10148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.346534][T15668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  333.367241][   T28] audit: type=1400 audit(1786120310.002:2176): avc:  denied  { write } for  pid=15663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  333.379391][T10148] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.397534][T10148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.537684][   T28] audit: type=1400 audit(1786120310.182:2177): avc:  denied  { write } for  pid=15696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  333.572990][T15668] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3047: invalid indirect mapped block 83886080 (level 1)
[  333.588170][T15706] loop1: detected capacity change from 0 to 1024
[  333.657253][T15668] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  333.674220][T15668] EXT4-fs (loop5): Remounting filesystem read-only
[  333.675959][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8
[  333.694011][T15690] netlink: 'syz.0.3050': attribute type 1 has an invalid length.
[  333.694067][T15690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3050'.
[  333.695571][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  333.695601][    C1] EXT4-fs (loop5): initial error at time 1786120310: ext4_free_branches:1023: inode 16
[  333.695781][    C1] EXT4-fs (loop5): last error at time 1786120310: ext4_free_branches:1023: inode 16
[  333.761774][T15705] loop2: detected capacity change from 0 to 1024
[  333.835307][T15668] EXT4-fs (loop5): 1 orphan inode deleted
[  333.841607][T15668] EXT4-fs (loop5): 1 truncate cleaned up
[  333.995426][T15470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.062072][   T28] audit: type=1400 audit(1786120310.672:2178): avc:  denied  { write } for  pid=15715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.137348][   T28] audit: type=1400 audit(1786120310.752:2179): avc:  denied  { write } for  pid=15743 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  334.203528][   T28] audit: type=1400 audit(1786120310.832:2180): avc:  denied  { map } for  pid=15750 comm="syz.5.3055" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  334.332840][   T28] audit: type=1400 audit(1786120310.842:2181): avc:  denied  { read write } for  pid=15750 comm="syz.5.3055" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  334.362502][T15756] netlink: 'syz.5.3057': attribute type 12 has an invalid length.
[  334.407249][T15751] loop1: detected capacity change from 0 to 512
[  334.479239][T15470] veth0_vlan: entered promiscuous mode
[  334.516097][T15751] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3056: inode has both inline data and extents flags
[  334.534388][T15470] veth1_vlan: entered promiscuous mode
[  334.548861][T15751] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  334.551639][T15751] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3056: couldn't read orphan inode 15 (err -117)
[  334.575276][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  334.575396][    C1] EXT4-fs (loop1): initial error at time 1786120311: ext4_orphan_get:1399: inode 15
[  334.575515][    C1] EXT4-fs (loop1): last error at time 1786120311: ext4_orphan_get:1399: inode 15
[  334.647382][T15751] loop1: lost filesystem error report for type 5 error -117
[  334.650425][T15470] veth0_macvtap: entered promiscuous mode
[  334.719335][T15470] veth1_macvtap: entered promiscuous mode
[  334.741806][T15470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.781038][T15781] program syz.1.3061 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.784472][T15470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.810735][T10179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.826460][T10179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.875682][  T363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.893038][  T363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.986158][T15731] Set syz1 is full, maxelem 65536 reached
[  335.007531][T15799] loop4: detected capacity change from 0 to 1024
[  335.010821][T15800] loop5: detected capacity change from 0 to 1764
[  335.018094][T15787] netlink: 'syz.1.3062': attribute type 1 has an invalid length.
[  335.035912][T15799] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  335.045758][T15799] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  335.055350][T15799] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  335.110948][T15799] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: inode #5: comm syz.4.3005: unexpected bad inode w/o EXT4_IGET_BAD
[  335.124182][T15799] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  335.133381][T15799] EXT4-fs (loop4): no journal found
[  335.147684][T15799] EXT4-fs (loop4): can't get journal size
[  335.214854][T15812] loop2: detected capacity change from 0 to 1764
[  335.891743][T15827] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  335.912466][T15827] EXT4-fs (loop4): orphan cleanup on readonly fs
[  335.933264][T15827] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3067: bad orphan inode 15
[  335.951041][T15827] loop4: lost filesystem error report for type 5 error -117
[  335.956812][T15827] ext4_test_bit(bit=14, block=5) = 0
[  335.995404][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  336.001921][    C1] EXT4-fs (loop4): initial error at time 1786120312: ext4_orphan_get:1425
[  336.010523][    C1] EXT4-fs (loop4): last error at time 1786120312: ext4_orphan_get:1425
[  336.049876][T15827] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  336.079448][T15867] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  336.171352][T15876] netlink: 'syz.0.3072': attribute type 12 has an invalid length.
[  336.241469][T15867] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3071: corrupted xattr entries
[  336.253374][T15867] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  336.271613][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  336.287392][    C0] EXT4-fs (loop2): initial error at time 1786120312: xattr_find_entry:337: inode 15
[  336.296982][    C0] EXT4-fs (loop2): last error at time 1786120312: xattr_find_entry:337: inode 15
[  336.329528][T15867] EXT4-fs (loop2): 1 orphan inode deleted
[  336.493201][T15894] __nla_validate_parse: 13 callbacks suppressed
[  336.493282][T15894] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3076'.
[  336.637239][T15894] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.644590][T15894] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.652087][T15909] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3078'.
[  336.872188][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.907410][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.935733][T15945] netlink: 'syz.1.3079': attribute type 1 has an invalid length.
[  336.951367][T15945] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3079'.
[  337.105728][  T363] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.116514][  T363] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.163616][T15958] set_capacity_and_notify: 3 callbacks suppressed
[  337.163634][T15958] loop4: detected capacity change from 0 to 1764
[  337.178499][  T363] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.222129][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'.
[  337.263403][T15963] 8021q: adding VLAN 0 to HW filter on device bond31
[  337.285744][T10124] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.409321][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3080'.
[  337.418494][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3080'.
[  337.440540][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  337.440561][   T28] audit: type=1400 audit(1786120314.062:2201): avc:  denied  { write } for  pid=15974 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.624468][T15986] loop2: detected capacity change from 0 to 512
[  337.631092][T15971] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3083'.
[  337.631153][T15971] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3083'.
[  337.683900][T15986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  337.706495][T15992] loop1: detected capacity change from 0 to 512
[  337.719379][T15986] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.3085: corrupted xattr entries
[  337.740302][T15992] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.757315][T15986] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  337.758688][T15986] EXT4-fs (loop2): 1 orphan inode deleted
[  337.767934][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  337.767958][    C1] EXT4-fs (loop2): initial error at time 1786120314: xattr_find_entry:337: inode 15
[  337.767995][    C1] EXT4-fs (loop2): last error at time 1786120314: xattr_find_entry:337: inode 15
[  337.819396][T15998] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3087'.
[  337.830001][T15992] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3086'.
[  337.869564][   T28] audit: type=1400 audit(1786120314.472:2202): avc:  denied  { write } for  pid=15983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  337.902367][T16004] loop0: detected capacity change from 0 to 512
[  337.999202][   T28] audit: type=1400 audit(1786120314.642:2203): avc:  denied  { write } for  pid=16011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.188745][   T28] audit: type=1400 audit(1786120314.822:2204): avc:  denied  { write } for  pid=16025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.269637][T16040] netlink: 'syz.0.3095': attribute type 11 has an invalid length.
[  338.296942][   T28] audit: type=1400 audit(1786120314.902:2205): avc:  denied  { write } for  pid=16041 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  338.527079][T16055] loop2: detected capacity change from 0 to 512
[  338.555792][T16055] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.628244][T16062] netlink: 'syz.1.3102': attribute type 1 has an invalid length.
[  338.673894][T16060] loop0: detected capacity change from 0 to 512
[  338.680939][T16060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  338.701922][T16060] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.3101: corrupted xattr entries
[  338.713368][T16060] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  338.713733][T16060] EXT4-fs (loop0): 1 orphan inode deleted
[  338.714138][T16068] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  338.759502][T16071] loop1: detected capacity change from 0 to 1764
[  338.851677][   T28] audit: type=1400 audit(1786120315.492:2206): avc:  denied  { append } for  pid=16078 comm="syz.2.3110" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  338.886896][T16079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16079 comm=syz.2.3110
[  339.084852][T16090] loop2: detected capacity change from 0 to 512
[  339.112562][T16090] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.220282][T16095] netlink: 'syz.0.3114': attribute type 1 has an invalid length.
[  339.381013][T16105] bond1: entered allmulticast mode
[  339.471288][T16105] 8021q: adding VLAN 0 to HW filter on device bond1
[  339.580208][T16109] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  339.796289][   T28] audit: type=1400 audit(1786120316.432:2207): avc:  denied  { write } for  pid=16111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  339.915185][   T28] audit: type=1400 audit(1786120316.552:2208): avc:  denied  { write } for  pid=16136 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  340.000874][T16125] loop5: detected capacity change from 0 to 512
[  340.031929][T16125] EXT4-fs: Ignoring removed oldalloc option
[  340.043426][T16125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  340.096512][T16143] netlink: 'syz.0.3126': attribute type 1 has an invalid length.
[  340.113413][T16125] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3123: invalid indirect mapped block 83886080 (level 1)
[  340.127646][T16125] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  340.131897][T16125] EXT4-fs (loop5): Remounting filesystem read-only
[  340.147816][T16125] EXT4-fs (loop5): 1 orphan inode deleted
[  340.153581][T16125] EXT4-fs (loop5): 1 truncate cleaned up
[  340.190004][   T28] audit: type=1400 audit(1786120316.812:2209): avc:  denied  { read } for  pid=16144 comm="syz.0.3127" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  340.353401][T16151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  340.360108][T16151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  340.388843][T16151] vhci_hcd vhci_hcd.0: Device attached
[  340.397412][T16154] vhci_hcd: connection closed
[  340.397669][T10124] vhci_hcd vhci_hcd.0: stop threads
[  340.407706][T10124] vhci_hcd vhci_hcd.0: release socket
[  340.413327][T10124] vhci_hcd vhci_hcd.0: disconnect device
[  340.444513][T16164] loop4: detected capacity change from 0 to 512
[  340.462273][T16164] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  340.471293][T16164] EXT4-fs (loop4): orphan cleanup on readonly fs
[  340.486579][T16164] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3134: bad orphan inode 15
[  340.497910][T16164] loop4: lost filesystem error report for type 5 error -117
[  340.505373][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  340.509003][T16164] ext4_test_bit(bit=14, block=5) = 0
[  340.512840][    C1] EXT4-fs (loop4): initial error at time 1786120317: ext4_orphan_get:1425
[  340.533203][    C1] EXT4-fs (loop4): last error at time 1786120317: ext4_orphan_get:1425
[  340.556655][   T28] audit: type=1400 audit(1786120317.202:2210): avc:  denied  { write } for  pid=16172 comm="syz.2.3136" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  340.595463][T16164] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  340.677420][T10215] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.835189][T16173] EXT4-fs: Ignoring removed orlov option
[  340.836360][T16182] netlink: 'syz.4.3137': attribute type 1 has an invalid length.
[  340.889465][T10215] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.968823][T10215] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.192941][T10215] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.207442][T14056] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 0(0), depth 0(0)
[  341.622607][T14056] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 10a, entries 0, max 0(0), depth 0(0)
[  341.788212][T16211] __nla_validate_parse: 24 callbacks suppressed
[  341.788235][T16211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3139'.
[  342.006492][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3139'.
[  342.023340][T16217] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  342.054109][T16217] EXT4-fs (loop5): orphan cleanup on readonly fs
[  342.083630][T16217] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3146: bad orphan inode 15
[  342.094825][T16217] loop5: lost filesystem error report for type 5 error -117
[  342.095362][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  342.109175][    C0] EXT4-fs (loop5): initial error at time 1786120318: ext4_orphan_get:1425
[  342.117756][    C0] EXT4-fs (loop5): last error at time 1786120318: ext4_orphan_get:1425
[  342.126684][T16217] ext4_test_bit(bit=14, block=5) = 0
[  342.148858][T16217] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  342.207809][T16156] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.225782][T16156] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.246253][T16156] bridge_slave_0: entered allmulticast mode
[  342.268561][T16156] bridge_slave_0: entered promiscuous mode
[  342.315852][T16156] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.339090][T16156] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.346580][T16156] bridge_slave_1: entered allmulticast mode
[  342.360002][T16156] bridge_slave_1: entered promiscuous mode
[  342.398523][T16156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.422013][T16156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.731485][T16221] 8021q: adding VLAN 0 to HW filter on device bond32
[  342.766729][T10215] bridge_slave_1: left allmulticast mode
[  342.779157][T10215] bridge_slave_1: left promiscuous mode
[  342.785279][T10215] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.793282][T10215] bridge_slave_0: left allmulticast mode
[  342.799628][T10215] bridge_slave_0: left promiscuous mode
[  342.805818][T10215] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.857686][T10215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.868097][T10215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.877947][T10215] bond0 (unregistering): Released all slaves
[  342.893033][T16156] team0: Port device team_slave_0 added
[  342.968129][T16232] 8021q: adding VLAN 0 to HW filter on device bond33
[  342.986749][T16156] team0: Port device team_slave_1 added
[  342.992432][T10215] tipc: Left network mode
[  342.998471][T10215] hsr_slave_0: left promiscuous mode
[  343.004280][T10215] hsr_slave_1: left promiscuous mode
[  343.010100][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  343.017531][T10215] batman_adv: batadv0: Removing interface: batadv_slave_0
[  343.025325][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  343.034085][T10215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  343.046462][T10215] veth1_macvtap: left promiscuous mode
[  343.052020][T10215] veth0_macvtap: left promiscuous mode
[  343.101243][T16238] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3152'.
[  343.155471][T10215] team0 (unregistering): Port device team_slave_1 removed
[  343.166060][T10215] team0 (unregistering): Port device team_slave_0 removed
[  343.228942][T16156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.246513][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.273036][T16243] set_capacity_and_notify: 3 callbacks suppressed
[  343.273064][T16156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.273111][T16243] loop0: detected capacity change from 0 to 1024
[  343.286969][T16156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.334073][T16156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.360608][T16156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.457443][T16156] hsr_slave_0: entered promiscuous mode
[  343.464169][T16156] hsr_slave_1: entered promiscuous mode
[  343.470204][T16156] debugfs: 'hsr0' already exists in 'hsr'
[  343.476146][T16156] Cannot create hsr debugfs directory
[  343.519015][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  343.519033][   T28] audit: type=1400 audit(1786120320.162:2214): avc:  denied  { write } for  pid=16248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  343.598854][T16277] loop5: detected capacity change from 0 to 2048
[  343.599651][   T28] audit: type=1400 audit(1786120320.242:2215): avc:  denied  { write } for  pid=16276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  343.668875][   T28] audit: type=1400 audit(1786120320.312:2216): avc:  denied  { write } for  pid=16267 comm="syz.5.3157" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  343.730613][   T28] audit: type=1400 audit(1786120320.372:2217): avc:  denied  { write } for  pid=16267 comm="syz.5.3157" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  343.757322][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5
[  343.772349][T10215] IPVS: stop unused estimator thread 0...
[  343.814304][T16269] netlink: 'syz.5.3157': attribute type 1 has an invalid length.
[  343.827786][T16269] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3157'.
[  343.851928][T16284] 8021q: adding VLAN 0 to HW filter on device bond34
[  343.905749][T16292] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3160'.
[  343.923111][T10124] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  343.937594][T10124] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  343.950000][T10124] EXT4-fs (loop5): This should not happen!! Data will be lost
[  343.950000][T10124] 
[  343.959663][T10124] EXT4-fs (loop5): Total free blocks count 0
[  343.965701][T10124] EXT4-fs (loop5): Free/Dirty block details
[  343.971649][T10124] EXT4-fs (loop5): free_blocks=4096
[  343.972346][T16226] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.976905][T10124] EXT4-fs (loop5): dirty_blocks=576
[  343.989489][T10124] EXT4-fs (loop5): Block reservation details
[  343.995506][T10124] EXT4-fs (loop5): i_reserved_data_blocks=36
[  343.998967][T16226] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.012710][T10148] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 544 with error 28
[  344.030985][T10148] EXT4-fs (loop5): This should not happen!! Data will be lost
[  344.030985][T10148] 
[  344.037719][T16226] bridge_slave_0: entered allmulticast mode
[  344.048690][ T8894] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  344.074179][T16226] bridge_slave_0: entered promiscuous mode
[  344.107885][T16226] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.116632][T16226] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.123949][T16226] bridge_slave_1: entered allmulticast mode
[  344.131024][T16226] bridge_slave_1: entered promiscuous mode
[  344.139408][   T28] audit: type=1326 audit(1786120320.782:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.4.3164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c5fe0d9 code=0x7ffc0000
[  344.166522][   T28] audit: type=1326 audit(1786120320.782:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.4.3164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c5fe0d9 code=0x7ffc0000
[  344.192878][   T28] audit: type=1326 audit(1786120320.782:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.4.3164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c5fe0d9 code=0x7ffc0000
[  344.220029][   T28] audit: type=1326 audit(1786120320.782:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.4.3164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fa52c5fe0d9 code=0x7ffc0000
[  344.220553][T10215] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.249383][   T28] audit: type=1326 audit(1786120320.782:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.4.3164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52c5fe0d9 code=0x7ffc0000
[  344.286653][   T28] audit: type=1326 audit(1786120320.782:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.4.3164" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa52c5fe0d9 code=0x7ffc0000
[  344.323569][T16306] loop4: detected capacity change from 0 to 736
[  344.341209][T16306] rock: directory entry would overflow storage
[  344.348304][T16306] rock: sig=0x3b10, size=4, remaining=3
[  344.386253][T16308] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3167'.
[  344.397342][T16226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.412409][T10215] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.550789][T16226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.565595][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6
[  344.578295][T10215] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.602088][T16226] team0: Port device team_slave_0 added
[  344.609062][T16226] team0: Port device team_slave_1 added
[  344.625643][T16226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.632636][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.659594][T16226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.678888][T16226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.685977][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.689600][T16327] loop5: detected capacity change from 0 to 512
[  344.713440][T16226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.755323][T16327] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.792023][T16226] hsr_slave_0: entered promiscuous mode
[  344.799339][T16226] hsr_slave_1: entered promiscuous mode
[  344.805888][T16226] debugfs: 'hsr0' already exists in 'hsr'
[  344.812241][T16226] Cannot create hsr debugfs directory
[  344.826777][T10215] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.921140][T16337] loop0: detected capacity change from 0 to 1764
[  345.088283][T16336] bond3: entered allmulticast mode
[  345.093754][T16336] 8021q: adding VLAN 0 to HW filter on device bond3
[  345.146853][T16156] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  345.160897][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  345.252910][T10215] bridge_slave_1: left allmulticast mode
[  345.259334][T10215] bridge_slave_1: left promiscuous mode
[  345.264101][T16350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3173'.
[  345.272065][T10215] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.312353][T10215] bridge_slave_0: left allmulticast mode
[  345.324232][T10215] bridge_slave_0: left promiscuous mode
[  345.339270][T10215] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.361963][T16359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3170'.
[  345.387982][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3170'.
[  345.470514][T16370] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3177'.
[  345.512040][T10215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.541021][T10215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.585299][T10215] bond0 (unregistering): Released all slaves
[  345.602482][T16156] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  345.617577][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  345.633771][T16156] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  345.657226][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  345.730380][T16347] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.768454][T16347] 8021q: adding VLAN 0 to HW filter on device team0
[  345.793163][T16347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.848207][T16347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.867897][T16347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.890564][T16347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.910083][T16347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  345.934449][T16347] veth1_macvtap: left promiscuous mode
[  345.946702][T16347] veth0_macvtap: left promiscuous mode
[  345.960430][T16347] veth0_macvtap: entered promiscuous mode
[  345.973035][T16347] veth1_macvtap: entered promiscuous mode
[  345.992557][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  346.011072][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  346.029022][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  346.044915][T16347] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  346.084462][T10207] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.091615][T10207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.108490][T10207] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.115629][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.178428][T10215] hsr_slave_0: left promiscuous mode
[  346.184256][T10215] hsr_slave_1: left promiscuous mode
[  346.190195][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.203894][T10215] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.219712][T10215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.227462][T10215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.238082][T10215] veth1_macvtap: left promiscuous mode
[  346.243677][T10215] veth0_macvtap: left promiscuous mode
[  346.298963][T10215] team0 (unregistering): Port device team_slave_1 removed
[  346.311556][T10215] team0 (unregistering): Port device team_slave_0 removed
[  346.350140][T16156] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  346.362249][T16156] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  346.524927][T16381] 8021q: adding VLAN 0 to HW filter on device bond35
[  346.585076][T16226] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  346.598902][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  346.607313][T16226] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  346.617803][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  346.640637][T16226] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  346.652422][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  346.664204][T16226] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  346.680723][T16226] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  346.775827][T10175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.786057][T10175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.817078][T10148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.828218][T10148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.840718][T16156] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.872368][T16226] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.881474][T16156] 8021q: adding VLAN 0 to HW filter on device team0
[  346.900644][T16226] 8021q: adding VLAN 0 to HW filter on device team0
[  346.915740][T10148] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.923071][T10148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.932975][T10148] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.940183][T10148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.963397][T10207] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.970705][T10207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.989777][T10207] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.996998][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.130730][T16401] 8021q: adding VLAN 0 to HW filter on device bond36
[  347.193520][T16156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  347.229740][T16226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  347.243268][T16226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  347.419990][T16427] __nla_validate_parse: 2 callbacks suppressed
[  347.420009][T16427] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3184'.
[  347.435414][T16427] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3184'.
[  347.545134][T16226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.577230][T16452] loop4: detected capacity change from 0 to 1024
[  347.606213][T16452] EXT4-fs: Ignoring removed bh option
[  347.646585][T16156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.661244][T16452] EXT4-fs mount: 44 callbacks suppressed
[  347.661266][T16452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.791821][T16452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.921753][T16156] veth0_vlan: entered promiscuous mode
[  347.957329][T16156] veth1_vlan: entered promiscuous mode
[  347.974880][T16487] loop4: detected capacity change from 0 to 512
[  348.002295][T16156] veth0_macvtap: entered promiscuous mode
[  348.029314][T16487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  348.041451][T16226] veth0_vlan: entered promiscuous mode
[  348.048458][T16487] System zones: 1-12
[  348.053316][T16487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3189: error while reading EA inode 32 err=-116
[  348.066375][T16487] loop4: lost filesystem error report for type 5 error -117
[  348.068033][T16156] veth1_macvtap: entered promiscuous mode
[  348.081169][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  348.087637][    C1] EXT4-fs (loop4): initial error at time 1786120324: ext4_xattr_inode_iget:446
[  348.094127][T16487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3189: error while reading EA inode 32 err=-116
[  348.096653][    C1] EXT4-fs (loop4): last error at time 1786120324: ext4_xattr_inode_iget:446
[  348.127588][T16156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.139415][T16487] loop4: lost filesystem error report for type 5 error -117
[  348.147574][T16487] EXT4-fs (loop4): 1 orphan inode deleted
[  348.148022][T16226] veth1_vlan: entered promiscuous mode
[  348.160739][T16487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.183567][T16156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.215820][T10179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.228051][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.243780][T10179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.251497][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.289897][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'.
[  348.304889][T16226] veth0_macvtap: entered promiscuous mode
[  348.406159][T16487] team0: Port device team_slave_0 removed
[  348.445886][T10175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.460225][T16226] veth1_macvtap: entered promiscuous mode
[  348.506024][  T363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.520947][T16226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.560650][T16226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.666886][T10148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.682736][T10148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.721434][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  348.721452][   T28] audit: type=1400 audit(1786120325.362:2240): avc:  denied  { write } for  pid=16508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  348.752689][T10148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.769277][T10148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.866338][T16524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3190'.
[  348.885406][T16524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3190'.
[  348.965815][   T28] audit: type=1400 audit(1786120325.562:2241): avc:  denied  { write } for  pid=16527 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  349.031818][T16533] loop1: detected capacity change from 0 to 512
[  349.067422][T16533] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  349.082169][T16533] EXT4-fs (loop1): orphan cleanup on readonly fs
[  349.127752][T16533] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3191: bad orphan inode 15
[  349.138016][T16533] loop1: lost filesystem error report for type 5 error -117
[  349.147119][T16533] ext4_test_bit(bit=14, block=5) = 0
[  349.160421][T16533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  349.248696][T16539] loop5: detected capacity change from 0 to 1764
[  349.255111][T16533] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  349.269116][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.439014][T16156] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.448693][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3193'.
[  349.489408][T16552] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3195'.
[  349.536645][   T28] audit: type=1400 audit(1786120326.152:2242): avc:  denied  { write } for  pid=16544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  349.594694][T16565] FAULT_INJECTION: forcing a failure.
[  349.594694][T16565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.634500][T16565] CPU: 0 UID: 0 PID: 16565 Comm: syz.0.3198 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  349.634567][T16565] Tainted: [W]=WARN
[  349.634577][T16565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.634594][T16565] Call Trace:
[  349.634604][T16565]  <TASK>
[  349.634664][T16565]  __dump_stack+0x1d/0x30
[  349.634695][T16565]  dump_stack_lvl+0x95/0xd0
[  349.634724][T16565]  dump_stack+0x15/0x1b
[  349.634748][T16565]  should_fail_ex+0x25e/0x270
[  349.634803][T16565]  should_fail+0xb/0x20
[  349.634835][T16565]  should_fail_usercopy+0x1a/0x20
[  349.634872][T16565]  _copy_from_user+0x1c/0xb0
[  349.634945][T16565]  do_fcntl+0x662/0xf80
[  349.634972][T16565]  __se_sys_fcntl+0xb1/0x120
[  349.635015][T16565]  __x64_sys_fcntl+0x43/0x50
[  349.635059][T16565]  x64_sys_call+0x2844/0x3020
[  349.635083][T16565]  do_syscall_64+0x136/0x3c0
[  349.635156][T16565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.635186][T16565] RIP: 0033:0x7fc5733ce0d9
[  349.635208][T16565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.635233][T16565] RSP: 002b:00007fc571e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  349.635260][T16565] RAX: ffffffffffffffda RBX: 00007fc573655fa0 RCX: 00007fc5733ce0d9
[  349.635280][T16565] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000004
[  349.635304][T16565] RBP: 00007fc571e27090 R08: 0000000000000000 R09: 0000000000000000
[  349.635322][T16565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.635339][T16565] R13: 00007fc573656038 R14: 00007fc573655fa0 R15: 00007fffa9f1d1c8
[  349.635402][T16565]  </TASK>
[  349.652759][   T28] audit: type=1400 audit(1786120326.282:2243): avc:  denied  { write } for  pid=16567 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  349.686266][T16569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3199'.
[  349.732554][T16570] loop4: detected capacity change from 0 to 1024
[  350.094084][T16571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3192'.
[  350.102306][T16530] Set syz1 is full, maxelem 65536 reached
[  350.109210][T16570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.207164][T16571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3192'.
[  350.261733][T16593] netlink: 'syz.6.3202': attribute type 12 has an invalid length.
[  350.341026][   T28] audit: type=1400 audit(1786120326.982:2244): avc:  denied  { write } for  pid=16582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  350.391030][T16607] loop0: detected capacity change from 0 to 512
[  350.409583][   T28] audit: type=1400 audit(1786120327.052:2245): avc:  denied  { write } for  pid=16608 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  350.449871][T16607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.482886][T16613] FAULT_INJECTION: forcing a failure.
[  350.482886][T16613] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  350.494757][T16607] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.496426][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.1.3205 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  350.496476][T16613] Tainted: [W]=WARN
[  350.496498][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  350.496571][T16613] Call Trace:
[  350.496651][T16613]  <TASK>
[  350.496723][T16613]  __dump_stack+0x1d/0x30
[  350.496809][T16613]  dump_stack_lvl+0x95/0xd0
[  350.496876][T16613]  dump_stack+0x15/0x1b
[  350.496938][T16613]  should_fail_ex+0x25e/0x270
[  350.497058][T16613]  should_fail+0xb/0x20
[  350.497139][T16613]  should_fail_usercopy+0x1a/0x20
[  350.497320][T16613]  strncpy_from_user+0x27/0x250
[  350.497406][T16613]  do_getname+0x59/0x1c0
[  350.497493][T16613]  getname_flags+0x1d/0x30
[  350.497599][T16613]  do_sys_openat2+0x6c/0x130
[  350.497798][T16613]  __x64_sys_openat+0xf2/0x120
[  350.497895][T16613]  x64_sys_call+0x1e39/0x3020
[  350.497988][T16613]  do_syscall_64+0x136/0x3c0
[  350.498143][T16613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.498219][T16613] RIP: 0033:0x7fa35608e0d9
[  350.498280][T16613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.498343][T16613] RSP: 002b:00007fa354ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  350.498409][T16613] RAX: ffffffffffffffda RBX: 00007fa356315fa0 RCX: 00007fa35608e0d9
[  350.498453][T16613] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  350.498506][T16613] RBP: 00007fa354ae7090 R08: 0000000000000000 R09: 0000000000000000
[  350.498571][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.498628][T16613] R13: 00007fa356316038 R14: 00007fa356315fa0 R15: 00007ffc355eca58
[  350.498696][T16613]  </TASK>
[  350.730141][   T28] audit: type=1400 audit(1786120327.372:2246): avc:  denied  { unmount } for  pid=16156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  350.761376][T15302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.801968][T16618] Cannot find set identified by id 0 to match
[  350.823377][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.839283][   T28] audit: type=1400 audit(1786120327.482:2247): avc:  denied  { recv } for  pid=16617 comm="syz.1.3208" saddr=127.0.0.1 src=34504 daddr=127.0.0.1 dest=20000 netif=lo scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  350.921259][T16627] loop4: detected capacity change from 0 to 512
[  350.934771][   T28] audit: type=1400 audit(1786120327.552:2248): avc:  denied  { ioctl } for  pid=16621 comm="syz.0.3206" path="socket:[48614]" dev="sockfs" ino=48614 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  350.988118][T16627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  351.026781][T16627] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.3210: corrupted xattr entries
[  351.038464][T16627] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  351.049392][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  351.065269][    C0] EXT4-fs (loop4): initial error at time 1786120327: xattr_find_entry:337: inode 15
[  351.075273][    C0] EXT4-fs (loop4): last error at time 1786120327: xattr_find_entry:337: inode 15
[  351.094369][T16629] loop1: detected capacity change from 0 to 512
[  351.111459][T16627] EXT4-fs (loop4): 1 orphan inode deleted
[  351.164434][   T28] audit: type=1400 audit(1786120327.802:2249): avc:  denied  { write } for  pid=16619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  351.166365][T16627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.206198][T16629] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  351.279746][T16636] loop6: detected capacity change from 0 to 512
[  351.373491][T16629] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.3211: corrupted xattr entries
[  351.398885][T16629] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  351.405698][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  351.424309][    C1] EXT4-fs (loop1): initial error at time 1786120328: xattr_find_entry:337: inode 15
[  351.437607][    C1] EXT4-fs (loop1): last error at time 1786120328: xattr_find_entry:337: inode 15
[  351.469091][T16629] EXT4-fs (loop1): 1 orphan inode deleted
[  351.490333][T16629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.542334][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.546219][T16636] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  351.575508][T16636] EXT4-fs (loop6): orphan cleanup on readonly fs
[  351.600891][T16636] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  351.645474][T16156] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.647237][T16636] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  351.759227][T16671] loop5: detected capacity change from 0 to 512
[  351.774749][T16636] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #16: comm syz.6.3213: inode has both inline data and extents flags
[  351.807297][T16671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.827343][T16636] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  351.827741][T16636] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3213: couldn't read orphan inode 16 (err -117)
[  351.848930][T16636] loop6: lost filesystem error report for type 5 error -117
[  351.852940][T16676] loop4: detected capacity change from 0 to 2048
[  351.869882][T16636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  351.872578][T16671] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.908274][T16679] netlink: 'syz.1.3218': attribute type 12 has an invalid length.
[  351.939433][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.009047][T16676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.067738][ T8894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.193513][T16705] loop5: detected capacity change from 0 to 512
[  352.233616][T16705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.265906][T16705] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.271206][T16701] netlink: 'syz.4.3217': attribute type 1 has an invalid length.
[  352.400346][  T363] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  352.414632][  T363] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  352.426871][  T363] EXT4-fs (loop4): This should not happen!! Data will be lost
[  352.426871][  T363] 
[  352.437739][  T363] EXT4-fs (loop4): Total free blocks count 0
[  352.445176][  T363] EXT4-fs (loop4): Free/Dirty block details
[  352.451453][  T363] EXT4-fs (loop4): free_blocks=4096
[  352.456690][  T363] EXT4-fs (loop4): dirty_blocks=512
[  352.462028][  T363] EXT4-fs (loop4): Block reservation details
[  352.468136][  T363] EXT4-fs (loop4): i_reserved_data_blocks=32
[  352.496117][T10207] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  352.510841][ T8894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.538929][T15470] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  352.554909][T16710] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  352.624433][T16723] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  352.643218][T16710] EXT4-fs (loop6): orphan cleanup on readonly fs
[  352.649656][T16710] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3223: bad orphan inode 15
[  352.659841][T16710] loop6: lost filesystem error report for type 5 error -117
[  352.680510][T16710] ext4_test_bit(bit=14, block=5) = 0
[  352.728697][T16730] netlink: 'syz.4.3224': attribute type 12 has an invalid length.
[  352.743026][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  352.749561][    C0] EXT4-fs (loop6): initial error at time 1786120329: ext4_orphan_get:1425
[  352.758157][    C0] EXT4-fs (loop6): last error at time 1786120329: ext4_orphan_get:1425
[  352.765414][T16710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  353.000908][T16743] __nla_validate_parse: 5 callbacks suppressed
[  353.000928][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'.
[  353.043751][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5
[  353.130289][T16749] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3231'.
[  353.197051][T16747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.200927][T16710] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  353.226175][T16747] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  353.371552][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.451162][T16781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3227'.
[  353.473259][ T8894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.516724][T16786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  353.531408][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'.
[  353.551485][T16777] EXT4-fs: Ignoring removed nomblk_io_submit option
[  353.559019][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6
[  353.616986][T16786] EXT4-fs (loop4): 1 truncate cleaned up
[  353.623128][T16786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.635336][    T9] IPVS: starting estimator thread 0...
[  353.641731][T16784] EXT4-fs: Ignoring removed nomblk_io_submit option
[  353.700537][T16777] EXT4-fs (loop1): too many log groups per flexible block group
[  353.709195][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.728049][T16777] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  353.767893][T16777] EXT4-fs (loop1): mount failed
[  353.815816][T16794] IPVS: using max 2256 ests per chain, 112800 per kthread
[  353.935440][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  353.935462][   T28] audit: type=1400 audit(1786120330.522:2269): avc:  denied  { write } for  pid=16801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  354.080356][   T28] audit: type=1400 audit(1786120330.722:2270): avc:  denied  { write } for  pid=16817 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  354.123116][ T3388] IPVS: starting estimator thread 0...
[  354.126934][T16777] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  354.147924][T16821] set_capacity_and_notify: 8 callbacks suppressed
[  354.147943][T16821] loop6: detected capacity change from 0 to 2048
[  354.210271][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9
[  354.246667][T16823] IPVS: using max 1872 ests per chain, 93600 per kthread
[  354.256354][T16821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.291481][   T28] audit: type=1400 audit(1786120330.922:2271): avc:  denied  { write } for  pid=16820 comm="syz.6.3243" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  354.365309][   T28] audit: type=1400 audit(1786120330.982:2272): avc:  denied  { write } for  pid=16820 comm="syz.6.3243" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  354.367789][T16826] loop4: detected capacity change from 0 to 512
[  354.423603][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3245'.
[  354.554070][T16821] netlink: 'syz.6.3243': attribute type 1 has an invalid length.
[  354.572595][T16826] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  354.599733][T16832] 8021q: adding VLAN 0 to HW filter on device bond37
[  354.722631][T16821] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3243'.
[  354.740998][T16826] EXT4-fs (loop4): orphan cleanup on readonly fs
[  354.782641][T16826] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3244: bad orphan inode 15
[  354.802346][T16826] loop4: lost filesystem error report for type 5 error -117
[  354.805390][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  354.819233][    C1] EXT4-fs (loop4): initial error at time 1786120331: ext4_orphan_get:1425
[  354.827922][    C1] EXT4-fs (loop4): last error at time 1786120331: ext4_orphan_get:1425
[  354.837993][T16826] ext4_test_bit(bit=14, block=5) = 0
[  354.880528][T10175] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  354.880964][T16826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  354.933935][T10175] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  354.976975][T10175] EXT4-fs (loop6): This should not happen!! Data will be lost
[  354.976975][T10175] 
[  354.999308][T16847] loop1: detected capacity change from 0 to 164
[  355.008265][T10175] EXT4-fs (loop6): Total free blocks count 0
[  355.026567][T10175] EXT4-fs (loop6): Free/Dirty block details
[  355.054304][T10175] EXT4-fs (loop6): free_blocks=4096
[  355.067428][T10175] EXT4-fs (loop6): dirty_blocks=880
[  355.094830][   T28] audit: type=1400 audit(1786120331.722:2273): avc:  denied  { write } for  pid=16840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  355.121205][T10175] EXT4-fs (loop6): Block reservation details
[  355.131740][T10175] EXT4-fs (loop6): i_reserved_data_blocks=55
[  355.157131][T10175] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 848 with error 28
[  355.193812][T16226] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  355.194479][T16826] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  355.218330][   T28] audit: type=1400 audit(1786120331.862:2274): avc:  denied  { write } for  pid=16860 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  355.271642][T16847] iso9660: Corrupted directory entry in block 2 of inode 1792
[  355.304874][T16865] loop5: detected capacity change from 0 to 512
[  355.312635][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7
[  355.346023][T16865] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  355.352868][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.363525][T16865] EXT4-fs (loop5): Remounting filesystem read-only
[  355.376840][T16865] EXT4-fs (loop5): 1 truncate cleaned up
[  355.383014][T16865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.508612][T16877] FAULT_INJECTION: forcing a failure.
[  355.508612][T16877] name failslab, interval 1, probability 0, space 0, times 0
[  355.535626][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3247'.
[  355.541927][T16875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3254'.
[  355.571171][T16877] CPU: 1 UID: 60929 PID: 16877 Comm: syz.0.3253 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  355.571268][T16877] Tainted: [W]=WARN
[  355.571277][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  355.571295][T16877] Call Trace:
[  355.571305][T16877]  <TASK>
[  355.571319][T16877]  __dump_stack+0x1d/0x30
[  355.571351][T16877]  dump_stack_lvl+0x95/0xd0
[  355.571379][T16877]  dump_stack+0x15/0x1b
[  355.571422][T16877]  should_fail_ex+0x25e/0x270
[  355.571461][T16877]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  355.571527][T16877]  should_failslab+0x8c/0xb0
[  355.571609][T16877]  kmem_cache_alloc_lru_noprof+0x81/0x3d0
[  355.571640][T16877]  ? shmem_alloc_inode+0x34/0x50
[  355.571735][T16877]  ? shmem_alloc_inode+0x34/0x50
[  355.571773][T16877]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  355.571807][T16877]  shmem_alloc_inode+0x34/0x50
[  355.571851][T16877]  alloc_inode+0x40/0x170
[  355.571883][T16877]  new_inode+0x1d/0xe0
[  355.571917][T16877]  shmem_get_inode+0x24e/0x7a0
[  355.571962][T16877]  __shmem_file_setup+0x14f/0x260
[  355.571991][T16877]  shmem_file_setup+0x3b/0x50
[  355.572026][T16877]  memfd_alloc_file+0x4e/0x300
[  355.572072][T16877]  __se_sys_memfd_create+0x2e1/0x3b0
[  355.572118][T16877]  __x64_sys_memfd_create+0x31/0x40
[  355.572181][T16877]  x64_sys_call+0x1f22/0x3020
[  355.572213][T16877]  do_syscall_64+0x136/0x3c0
[  355.572331][T16877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.572358][T16877] RIP: 0033:0x7fc5733ce0d9
[  355.572374][T16877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.572393][T16877] RSP: 002b:00007fc571e26e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  355.572447][T16877] RAX: ffffffffffffffda RBX: 0000000000000801 RCX: 00007fc5733ce0d9
[  355.572464][T16877] RDX: 00007fc571e26ee0 RSI: 0000000000000000 RDI: 00007fc573465204
[  355.572478][T16877] RBP: 0000200000001740 R08: 00000000ffffffff R09: 0000000000000000
[  355.572535][T16877] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000
[  355.572553][T16877] R13: 00007fc571e26ee0 R14: 00007fc571e26ea0 R15: 00002000000001c0
[  355.572579][T16877]  </TASK>
[  355.839491][T16893] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3256'.
[  355.854725][T16863] loop6: detected capacity change from 0 to 512
[  355.861371][   T28] audit: type=1400 audit(1786120332.482:2275): avc:  denied  { write } for  pid=16872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  355.870013][T16863] EXT4-fs: Ignoring removed nomblk_io_submit option
[  355.947884][   T28] audit: type=1400 audit(1786120332.582:2276): avc:  denied  { write } for  pid=16896 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  356.013657][T16863] EXT4-fs (loop6): too many log groups per flexible block group
[  356.037044][T16899] loop1: detected capacity change from 0 to 2048
[  356.065119][T16863] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  356.075324][T16863] EXT4-fs (loop6): mount failed
[  356.097035][T16899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.112136][   T28] audit: type=1400 audit(1786120332.752:2277): avc:  denied  { write } for  pid=16898 comm="syz.1.3257" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  356.241328][   T28] audit: type=1400 audit(1786120332.822:2278): avc:  denied  { write } for  pid=16898 comm="syz.1.3257" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  356.243785][T16899] netlink: 'syz.1.3257': attribute type 1 has an invalid length.
[  356.276617][T16899] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3257'.
[  356.389193][T10207] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  356.417431][T10207] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  356.430939][ T8894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.440822][T10207] EXT4-fs (loop1): This should not happen!! Data will be lost
[  356.440822][T10207] 
[  356.456692][T16888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  356.467803][T10207] EXT4-fs (loop1): Total free blocks count 0
[  356.495460][T10207] EXT4-fs (loop1): Free/Dirty block details
[  356.496087][T16863] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  356.504416][T10207] EXT4-fs (loop1): free_blocks=4096
[  356.538833][T10207] EXT4-fs (loop1): dirty_blocks=944
[  356.551017][T10207] EXT4-fs (loop1): Block reservation details
[  356.562899][T10207] EXT4-fs (loop1): i_reserved_data_blocks=59
[  356.590991][T10207] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 912 with error 28
[  356.638418][T16156] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  356.679272][T16936] loop6: detected capacity change from 0 to 512
[  356.722833][T16940] netlink: 'syz.1.3260': attribute type 1 has an invalid length.
[  356.744477][T16936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.756784][T16935] loop5: detected capacity change from 0 to 512
[  356.764829][T16929] loop0: detected capacity change from 0 to 512
[  356.805617][T16929] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  356.814064][T16929] EXT4-fs (loop0): orphan cleanup on readonly fs
[  356.820609][T16929] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3262: bad orphan inode 15
[  356.829176][T16935] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  356.830694][T16929] loop0: lost filesystem error report for type 5 error -117
[  356.848995][T16946] loop4: detected capacity change from 0 to 1764
[  356.868656][T16929] ext4_test_bit(bit=14, block=5) = 0
[  356.874517][T16929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  356.965196][T16929] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  357.023693][T16935] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3265: invalid indirect mapped block 8 (level 2)
[  357.031468][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.054615][T16935] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  357.055618][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  357.073478][    C1] EXT4-fs (loop5): initial error at time 1786120333: ext4_free_branches:1023: inode 13
[  357.084615][    C1] EXT4-fs (loop5): last error at time 1786120333: ext4_free_branches:1023: inode 13
[  357.115950][T15302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.123578][T16935] EXT4-fs (loop5): 1 truncate cleaned up
[  357.145459][T16935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.205975][T10124] bridge_slave_1: left allmulticast mode
[  357.214319][T10124] bridge_slave_1: left promiscuous mode
[  357.220775][T16935] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  357.236302][T10124] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.245175][T16970] FAULT_INJECTION: forcing a failure.
[  357.245175][T16970] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  357.252709][T16964] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  357.273043][T16970] CPU: 0 UID: 0 PID: 16970 Comm: syz.0.3269 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  357.273130][T16970] Tainted: [W]=WARN
[  357.273138][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  357.273152][T16970] Call Trace:
[  357.273190][T16970]  <TASK>
[  357.273200][T16970]  __dump_stack+0x1d/0x30
[  357.273298][T16970]  dump_stack_lvl+0x95/0xd0
[  357.273364][T16970]  dump_stack+0x15/0x1b
[  357.273392][T16970]  should_fail_ex+0x25e/0x270
[  357.273440][T16970]  should_fail+0xb/0x20
[  357.273477][T16970]  should_fail_usercopy+0x1a/0x20
[  357.273522][T16970]  _copy_from_user+0x1c/0xb0
[  357.273624][T16970]  kstrtouint_from_user+0x69/0xf0
[  357.273666][T16970]  ? 0xffffffff81000000
[  357.273682][T16970]  ? avc_policy_seqno+0x15/0x30
[  357.273715][T16970]  proc_fail_nth_write+0x50/0x160
[  357.273805][T16970]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  357.273831][T16970]  vfs_write+0x252/0x990
[  357.273860][T16970]  ? __fget_files+0x184/0x1c0
[  357.273928][T16970]  ? mutex_lock+0x57/0x90
[  357.273961][T16970]  ksys_write+0xdc/0x1a0
[  357.274002][T16970]  __x64_sys_write+0x40/0x50
[  357.274024][T16970]  x64_sys_call+0x27e1/0x3020
[  357.274068][T16970]  do_syscall_64+0x136/0x3c0
[  357.274109][T16970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.274195][T16970] RIP: 0033:0x7fc57338e90e
[  357.274214][T16970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  357.274236][T16970] RSP: 002b:00007fc571e26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  357.274320][T16970] RAX: ffffffffffffffda RBX: 00007fc571e276c0 RCX: 00007fc57338e90e
[  357.274341][T16970] RDX: 0000000000000001 RSI: 00007fc571e270a0 RDI: 0000000000000004
[  357.274360][T16970] RBP: 00007fc571e27090 R08: 0000000000000000 R09: 0000000000000000
[  357.274378][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  357.274397][T16970] R13: 00007fc573656038 R14: 00007fc573655fa0 R15: 00007fffa9f1d1c8
[  357.274497][T16970]  </TASK>
[  357.283890][T16964] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  357.439768][T10124] bridge_slave_0: left allmulticast mode
[  357.439795][T10124] bridge_slave_0: left promiscuous mode
[  357.439921][T10124] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.648941][T12667] SELinux: failure in sel_netif_sid_slow(), invalid network interface (81)
[  357.649478][T16964] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.683578][ T8894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.812156][T10124] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  357.840005][T10124] bridge1 (unregistering): left promiscuous mode
[  357.873154][T10124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.896024][T10124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.919245][T16986] EXT4-fs: Ignoring removed oldalloc option
[  357.924640][T10124] bond0 (unregistering): Released all slaves
[  357.932012][T16986] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  357.945317][T10124] bond1 (unregistering): Released all slaves
[  357.957559][T16986] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3271: invalid indirect mapped block 83886080 (level 1)
[  357.971423][T16986] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  357.992911][T16986] EXT4-fs (loop5): Remounting filesystem read-only
[  358.012968][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  358.013426][    C0] EXT4-fs (loop5): initial error at time 1786120334: ext4_free_branches:1023: inode 16
[  358.014477][    C0] EXT4-fs (loop5): last error at time 1786120334: ext4_free_branches:1023: inode 16
[  358.137334][T16986] EXT4-fs (loop5): 1 orphan inode deleted
[  358.148905][T16986] EXT4-fs (loop5): 1 truncate cleaned up
[  358.195782][T16986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.327457][T10124] tipc: Left network mode
[  358.366938][T10124] hsr_slave_0: left promiscuous mode
[  358.384953][T10124] hsr_slave_1: left promiscuous mode
[  358.405789][T10124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.505507][T10124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.517670][T10124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.525904][T10124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.540425][T10124] veth1_macvtap: left promiscuous mode
[  358.552845][T10124] veth0_macvtap: left promiscuous mode
[  358.591740][T17015] __nla_validate_parse: 5 callbacks suppressed
[  358.591840][T17015] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3276'.
[  358.667277][T10124] team0 (unregistering): Port device team_slave_1 removed
[  358.678946][T10124] team0 (unregistering): Port device team_slave_0 removed
[  358.742597][ T8894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.813597][T17015] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3276'.
[  358.814529][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'.
[  359.038079][T17024] 8021q: adding VLAN 0 to HW filter on device bond38
[  359.039965][T17027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3279'.
[  359.659802][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  359.659821][   T28] audit: type=1400 audit(1786120336.232:2285): avc:  denied  { write } for  pid=17036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  359.688975][   T28] audit: type=1400 audit(1786120336.292:2286): avc:  denied  { write } for  pid=17047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  359.795310][   T28] audit: type=1400 audit(1786120336.292:2287): avc:  denied  { read } for  pid=17034 comm="syz.0.3282" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  359.834409][   T28] audit: type=1400 audit(1786120336.292:2288): avc:  denied  { open } for  pid=17034 comm="syz.0.3282" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  359.864685][T10124] IPVS: stop unused estimator thread 0...
[  359.886731][T10215] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.912578][T10215] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.930065][T17065] set_capacity_and_notify: 4 callbacks suppressed
[  359.930088][T17065] loop1: detected capacity change from 0 to 2048
[  359.938613][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'.
[  359.955713][   T28] audit: type=1400 audit(1786120336.362:2289): avc:  denied  { ioctl } for  pid=17034 comm="syz.0.3282" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  360.002835][T17061] loop6: detected capacity change from 0 to 512
[  360.049430][T10124] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.060579][T10124] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.061709][T17061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002]
[  360.098474][T17061] System zones: 1-12
[  360.116273][T17065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.148576][   T28] audit: type=1400 audit(1786120336.762:2291): avc:  denied  { write } for  pid=17050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.171894][   T28] audit: type=1400 audit(1786120336.762:2290): avc:  denied  { write } for  pid=17064 comm="syz.1.3288" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  360.194688][T17061] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3287: error while reading EA inode 32 err=-116
[  360.207897][T17061] loop6: lost filesystem error report for type 5 error -117
[  360.209019][T17059] 8021q: adding VLAN 0 to HW filter on device bond39
[  360.225356][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  360.231835][    C1] EXT4-fs (loop6): initial error at time 1786120336: ext4_xattr_inode_iget:446
[  360.240859][    C1] EXT4-fs (loop6): last error at time 1786120336: ext4_xattr_inode_iget:446
[  360.272713][T17061] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3287: error while reading EA inode 32 err=-116
[  360.290910][T17085] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3291'.
[  360.297274][   T28] audit: type=1400 audit(1786120336.892:2292): avc:  denied  { write } for  pid=17064 comm="syz.1.3288" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  360.320909][T17061] loop6: lost filesystem error report for type 5 error -117
[  360.330090][T17061] EXT4-fs (loop6): 1 orphan inode deleted
[  360.345297][T17061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.345620][   T28] audit: type=1400 audit(1786120336.972:2293): avc:  denied  { write } for  pid=17087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.377436][T17065] netlink: 'syz.1.3288': attribute type 1 has an invalid length.
[  360.402166][T17075] netlink: 'syz.0.3290': attribute type 12 has an invalid length.
[  360.418697][T17065] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3288'.
[  360.443230][T17085] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3291'.
[  360.447781][T10207] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  360.467020][T10207] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  360.479447][T10207] EXT4-fs (loop1): This should not happen!! Data will be lost
[  360.479447][T10207] 
[  360.489110][T10207] EXT4-fs (loop1): Total free blocks count 0
[  360.513408][T17061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.527689][T17061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.542038][T10207] EXT4-fs (loop1): Free/Dirty block details
[  360.556467][T10207] EXT4-fs (loop1): free_blocks=4096
[  360.574592][T17093] loop4: detected capacity change from 0 to 512
[  360.586356][T10207] EXT4-fs (loop1): dirty_blocks=512
[  360.610349][T10207] EXT4-fs (loop1): Block reservation details
[  360.624330][T10207] EXT4-fs (loop1): i_reserved_data_blocks=32
[  360.639052][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3287'.
[  360.642005][T10207] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  360.663930][   T28] audit: type=1400 audit(1786120337.282:2294): avc:  denied  { create } for  pid=17100 comm="syz.5.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  360.683943][T17093] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  360.691976][T17093] EXT4-fs (loop4): orphan cleanup on readonly fs
[  360.698403][T17093] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3292: bad orphan inode 15
[  360.701045][T17098] loop0: detected capacity change from 0 to 1024
[  360.708414][T17093] loop4: lost filesystem error report for type 5 error -117
[  360.719361][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'.
[  360.724046][T16156] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  360.746921][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  360.746949][    C0] EXT4-fs (loop4): initial error at time 1786120337: ext4_orphan_get:1425
[  360.746978][    C0] EXT4-fs (loop4): last error at time 1786120337: ext4_orphan_get:1425
[  360.776005][T17093] ext4_test_bit(bit=14, block=5) = 0
[  360.789324][T17093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  360.821204][T17061] team0: Port device team_slave_0 removed
[  360.842482][T17093] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  360.862721][T17104] erspan0: entered promiscuous mode
[  360.892819][T17102] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  360.902979][T17098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.941631][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.962655][T17122] FAULT_INJECTION: forcing a failure.
[  360.962655][T17122] name failslab, interval 1, probability 0, space 0, times 0
[  360.975329][T17122] CPU: 0 UID: 0 PID: 17122 Comm: syz.1.3296 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  360.975370][T17122] Tainted: [W]=WARN
[  360.975378][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  360.975391][T17122] Call Trace:
[  360.975399][T17122]  <TASK>
[  360.975408][T17122]  __dump_stack+0x1d/0x30
[  360.975434][T17122]  dump_stack_lvl+0x95/0xd0
[  360.975455][T17122]  dump_stack+0x15/0x1b
[  360.975474][T17122]  should_fail_ex+0x25e/0x270
[  360.975505][T17122]  should_failslab+0x8c/0xb0
[  360.975529][T17122]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  360.975552][T17122]  ? vm_area_dup+0x33/0x2c0
[  360.975574][T17122]  ? vm_area_dup+0x33/0x2c0
[  360.975599][T17122]  vm_area_dup+0x33/0x2c0
[  360.975623][T17122]  __split_vma+0xe9/0x640
[  360.975647][T17122]  vms_gather_munmap_vmas+0x265/0x7f0
[  360.975684][T17122]  mmap_region+0x7e3/0x20c0
[  360.975703][T17122]  ? avc_has_perm_noaudit+0xa3/0x120
[  360.975728][T17122]  ? avc_has_perm+0x101/0x190
[  360.975753][T17122]  ? selinux_file_open+0x2e6/0x330
[  360.975794][T17122]  do_mmap+0x970/0xbc0
[  360.975823][T17122]  vm_mmap_pgoff+0x183/0x2d0
[  360.975848][T17122]  ksys_mmap_pgoff+0xc1/0x310
[  360.975874][T17122]  ? __x64_sys_mmap+0x49/0x70
[  360.975905][T17122]  x64_sys_call+0x14df/0x3020
[  360.975930][T17122]  do_syscall_64+0x136/0x3c0
[  360.975961][T17122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.975984][T17122] RIP: 0033:0x7fa35608e0d9
[  360.976002][T17122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.976021][T17122] RSP: 002b:00007fa354ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  360.976041][T17122] RAX: ffffffffffffffda RBX: 00007fa356315fa0 RCX: 00007fa35608e0d9
[  360.976057][T17122] RDX: 0000000002000001 RSI: 0000000000600000 RDI: 00002000009fd000
[  360.976071][T17122] RBP: 00007fa354ae7090 R08: ffffffffffffffff R09: 0000000000000000
[  360.976085][T17122] R10: 0000000000006031 R11: 0000000000000246 R12: 0000000000000001
[  360.976105][T17122] R13: 00007fa356316038 R14: 00007fa356315fa0 R15: 00007ffc355eca58
[  360.976126][T17122]  </TASK>
[  361.214985][T17132] loop5: detected capacity change from 0 to 512
[  361.223459][T17127] loop4: detected capacity change from 0 to 1764
[  361.444921][T15302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.477278][T17143] xt_CT: No such helper "pptp"
[  361.776593][T17153] netlink: 'syz.1.3304': attribute type 12 has an invalid length.
[  361.917771][T17171] loop0: detected capacity change from 0 to 512
[  362.081274][T16226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.092717][T17171] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  362.100774][T17171] EXT4-fs (loop0): orphan cleanup on readonly fs
[  362.107142][T17171] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3308: bad orphan inode 15
[  362.117372][T17171] loop0: lost filesystem error report for type 5 error -117
[  362.117925][T17175] loop1: detected capacity change from 0 to 512
[  362.132710][T17171] ext4_test_bit(bit=14, block=5) = 0
[  362.138947][T17171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  362.187823][T17171] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  362.215544][T15302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.231603][T17183] netlink: 'syz.6.3310': attribute type 3 has an invalid length.
[  362.284326][T17183] can: request_module (can-proto-0) failed.
[  362.285869][T17175] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  362.361748][T17175] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3309: invalid indirect mapped block 8 (level 2)
[  362.374931][T17175] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  362.377435][T17195] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  362.395916][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  362.402448][    C0] EXT4-fs (loop1): initial error at time 1786120339: ext4_free_branches:1023: inode 13
[  362.412190][    C0] EXT4-fs (loop1): last error at time 1786120339: ext4_free_branches:1023: inode 13
[  362.429562][T17175] EXT4-fs (loop1): 1 truncate cleaned up
[  362.506565][T17175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.573898][T17200] loop4: detected capacity change from 0 to 256
[  362.710978][T17175] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  362.828986][T16156] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.235729][T17233] loop1: detected capacity change from 0 to 1024
[  363.500934][T17233] ext4: Unknown parameter 'user_x'
[  365.304097][T17273] loop1: detected capacity change from 0 to 1764
[  366.527648][T17281] __nla_validate_parse: 9 callbacks suppressed
[  366.527672][T17281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3320'.
[  366.721052][T17286] netlink: 'syz.0.3319': attribute type 12 has an invalid length.
[  366.889852][T17285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3321'.
[  366.899812][T17285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3321'.
[  367.288687][T17294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'.
[  367.525538][T17302] loop1: detected capacity change from 0 to 1764
[  367.736461][T17305] netlink: 'syz.4.3325': attribute type 21 has an invalid length.
[  367.744413][T17305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3325'.
[  367.803743][T17305] loop4: detected capacity change from 0 to 4096
[  367.853672][T17305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.278871][T17312] loop0: detected capacity change from 0 to 2048
[  368.297827][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.320945][T17312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.341804][T17312] EXT4-fs error (device loop0): ext4_find_extent:904: inode #2: comm syz.0.3328: inode has invalid extent depth: 8
[  368.367493][T17312] EXT4-fs (loop0): Remounting filesystem read-only
[  368.386144][T17317] loop4: detected capacity change from 0 to 2048
[  368.428999][T17317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.547993][T17322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3324'.
[  368.557107][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3324'.
[  368.585097][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  368.585112][   T28] audit: type=1400 audit(1786120345.222:2309): avc:  denied  { write } for  pid=17316 comm="syz.4.3329" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  368.661511][T17317] netlink: 'syz.4.3329': attribute type 1 has an invalid length.
[  368.694709][T17317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3329'.
[  368.710199][   T28] audit: type=1400 audit(1786120345.282:2310): avc:  denied  { write } for  pid=17316 comm="syz.4.3329" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  368.795734][T15302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.892204][T15470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.961101][   T28] audit: type=1400 audit(1786120345.592:2311): avc:  denied  { ioctl } for  pid=17336 comm="syz.1.3334" path="socket:[50534]" dev="sockfs" ino=50534 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  369.005776][   T28] audit: type=1400 audit(1786120345.602:2312): avc:  denied  { ioctl } for  pid=17336 comm="syz.1.3334" path="socket:[50536]" dev="sockfs" ino=50536 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  369.049367][T17350] FAULT_INJECTION: forcing a failure.
[  369.049367][T17350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.069226][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.1.3335 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  369.069268][T17350] Tainted: [W]=WARN
[  369.069278][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  369.069378][T17350] Call Trace:
[  369.069388][T17350]  <TASK>
[  369.069399][T17350]  __dump_stack+0x1d/0x30
[  369.069430][T17350]  dump_stack_lvl+0x95/0xd0
[  369.069450][T17350]  dump_stack+0x15/0x1b
[  369.069491][T17350]  should_fail_ex+0x25e/0x270
[  369.069565][T17350]  should_fail+0xb/0x20
[  369.069591][T17350]  should_fail_usercopy+0x1a/0x20
[  369.069622][T17350]  _copy_from_user+0x1c/0xb0
[  369.069733][T17350]  ___sys_sendmsg+0xc1/0x1e0
[  369.069782][T17350]  __x64_sys_sendmsg+0xd4/0x160
[  369.069813][T17350]  x64_sys_call+0x194c/0x3020
[  369.069923][T17350]  do_syscall_64+0x136/0x3c0
[  369.069959][T17350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.069982][T17350] RIP: 0033:0x7fa35608e0d9
[  369.070003][T17350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.070101][T17350] RSP: 002b:00007fa354ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.070122][T17350] RAX: ffffffffffffffda RBX: 00007fa356315fa0 RCX: 00007fa35608e0d9
[  369.070139][T17350] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000004
[  369.070157][T17350] RBP: 00007fa354ae7090 R08: 0000000000000000 R09: 0000000000000000
[  369.070184][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.070245][T17350] R13: 00007fa356316038 R14: 00007fa356315fa0 R15: 00007ffc355eca58
[  369.070270][T17350]  </TASK>
[  369.092946][T17351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3332'.
[  369.532168][T17365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3338'.
[  369.625818][T17370] loop1: detected capacity change from 0 to 512
[  369.651475][T17370] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3340: iget: bad i_size value: 38620345925642
[  369.689810][T17370] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  369.690063][T17370] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3340: couldn't read orphan inode 15 (err -117)
[  369.699538][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  369.699563][    C1] EXT4-fs (loop1): initial error at time 1786120346: ext4_orphan_get:1399: inode 15
[  369.699591][    C1] EXT4-fs (loop1): last error at time 1786120346: ext4_orphan_get:1399: inode 15
[  369.835547][T17370] loop1: lost filesystem error report for type 5 error -117
[  369.844651][   T28] audit: type=1400 audit(1786120346.482:2313): avc:  denied  { write } for  pid=17368 comm="syz.1.3340" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  369.951422][   T28] audit: type=1400 audit(1786120346.592:2314): avc:  denied  { map } for  pid=17368 comm="syz.1.3340" path="/51/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  370.002156][T17382] loop4: detected capacity change from 0 to 1764
[  370.009644][T17370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3340: bg 0: block 5: invalid block bitmap
[  370.016205][   T28] audit: type=1400 audit(1786120346.592:2315): avc:  denied  { write } for  pid=17368 comm="syz.1.3340" path="/51/file0/cpuset.effective_mems" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  370.062162][T17370] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 712 with error 28
[  370.092746][T17370] EXT4-fs (loop1): This should not happen!! Data will be lost
[  370.092746][T17370] 
[  370.160490][T17370] EXT4-fs (loop1): Total free blocks count 0
[  370.175437][T17370] EXT4-fs (loop1): Free/Dirty block details
[  370.195517][T17370] EXT4-fs (loop1): free_blocks=0
[  370.207135][T17370] EXT4-fs (loop1): dirty_blocks=716
[  370.229571][T17370] EXT4-fs (loop1): Block reservation details
[  370.245461][T17370] EXT4-fs (loop1): i_reserved_data_blocks=716
[  370.314772][T16156] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  370.427526][T17393] loop0: detected capacity change from 0 to 8192
[  370.480754][T17393] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  370.533263][T17395] loop1: detected capacity change from 0 to 164
[  370.612943][T17399] Failed to initialize the IGMP autojoin socket (err -2)
[  371.018868][T17410] netlink: 'syz.0.3348': attribute type 7 has an invalid length.
[  371.043129][T17410] netlink: 'syz.0.3348': attribute type 8 has an invalid length.
[  371.125900][T17412] netlink: 'syz.4.3349': attribute type 1 has an invalid length.
[  371.160021][T17414] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.167397][T17414] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.215948][T17419] loop4: detected capacity change from 0 to 128
[  371.244080][T10175] Bluetooth: hci0: Frame reassembly failed (-84)
[  371.259177][T17419] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  371.311481][T17414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.327366][   T28] audit: type=1400 audit(1786120347.972:2316): avc:  denied  { create } for  pid=17418 comm="syz.4.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  371.360601][T17414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  371.399888][   T28] audit: type=1400 audit(1786120348.022:2317): avc:  denied  { setopt } for  pid=17418 comm="syz.4.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  371.447519][T17417] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  371.495431][T10215] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.504516][T10215] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.523853][T10215] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.535514][T10215] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.598882][T17426] __nla_validate_parse: 10 callbacks suppressed
[  371.598905][T17426] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3353'.
[  371.614371][T17426] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3353'.
[  371.828758][T17430] loop1: detected capacity change from 0 to 128
[  371.845850][T17430] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  371.879728][T17434] loop4: detected capacity change from 0 to 512
[  371.983409][T17438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3358'.
[  372.071343][T17434] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  372.088282][T17434] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3357: invalid indirect mapped block 8 (level 2)
[  372.105769][T17434] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  372.107306][T17441] loop1: detected capacity change from 0 to 256
[  372.125410][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  372.131894][    C1] EXT4-fs (loop4): initial error at time 1786120348: ext4_free_branches:1023: inode 13
[  372.136762][T17434] EXT4-fs (loop4): 1 truncate cleaned up
[  372.141753][    C1] EXT4-fs (loop4): last error at time 1786120348: ext4_free_branches:1023: inode 13
[  372.161775][T17441] vfat: Bad value for 'shortname'
[  372.195996][T17434] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  372.304162][T17446] loop1: detected capacity change from 0 to 1764
[  372.427238][T17445] loop4: detected capacity change from 0 to 164
[  372.606009][T17448] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.616221][T17448] 8021q: adding VLAN 0 to HW filter on device team0
[  372.629772][T17448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.643283][T17448] wireguard: wg0: Could not create IPv4 socket
[  372.649562][T17448] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  372.683966][T17448] Failed to initialize the IGMP autojoin socket (err -2)
[  372.736944][T17449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3360'.
[  372.746618][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'.
[  373.004399][T17451] loop4: detected capacity change from 0 to 2048
[  373.068538][   T28] audit: type=1400 audit(1786120349.712:2318): avc:  denied  { write } for  pid=17450 comm="syz.4.3362" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  373.135198][T17454] netlink: 'syz.4.3362': attribute type 1 has an invalid length.
[  373.143067][T17454] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3362'.
[  373.267416][T17457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3363'.
[  373.325510][T15366] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  373.648402][T17459] program syz.0.3364 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.669227][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  373.669306][   T28] audit: type=1400 audit(1786120350.302:2321): avc:  denied  { unmount } for  pid=15302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  373.768867][T17467] netlink: 'syz.0.3367': attribute type 12 has an invalid length.
[  373.828204][T17469] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3368'.
[  373.837222][T17469] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3368'.
[  373.936105][T17475] loop4: detected capacity change from 0 to 256
[  373.961921][T17475] vfat: Bad value for 'shortname'
[  373.974803][T17473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3369'.
[  374.068923][T17481] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  374.095485][T17481] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  374.143885][T17481] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  374.166957][T17481] EXT4-fs (loop1): orphan cleanup on readonly fs
[  374.203841][T17481] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3371: Invalid inode table block 0 in block_group 0
[  374.267781][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.269345][T17481] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  374.276755][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  374.276784][    C1] EXT4-fs (loop1): initial error at time 1786120350: __ext4_get_inode_loc:4886
[  374.276830][    C1] EXT4-fs (loop1): last error at time 1786120350: __ext4_get_inode_loc:4886
[  374.316139][   T28] audit: type=1400 audit(1786120350.962:2322): avc:  denied  { write } for  pid=17485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  374.347652][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.347830][T17481] EXT4-fs error (device loop1): ext4_quota_write:7430: inode #3: comm syz.1.3371: mark_inode_dirty error
[  374.390389][T17481] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  374.390539][T17481] Quota error (device loop1): write_blk: dquota write failed
[  374.392859][T17479] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  374.399676][T17481] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  374.399727][T17481] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3371: Failed to acquire dquot type 0
[  374.399756][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.399944][T17481] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3371: Invalid inode table block 0 in block_group 0
[  374.399976][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.400050][T17481] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  374.400072][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.400148][T17481] EXT4-fs error (device loop1): ext4_ext_truncate:4557: inode #15: comm syz.1.3371: mark_inode_dirty error
[  374.400225][T17481] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  374.400301][T17481] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3371: Invalid inode table block 0 in block_group 0
[  374.477212][T17479] EXT4-fs (loop0): orphan cleanup on readonly fs
[  374.481884][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.481989][T17481] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  374.482014][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.482084][T17481] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  374.482108][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.482192][T17481] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.3371: Invalid inode table block 0 in block_group 0
[  374.482226][T17481] loop1: lost filesystem error report for type 5 error -117
[  374.482357][T17481] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  374.482435][T17481] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.3371: mark_inode_dirty error
[  374.482466][T17481] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  374.482613][T17481] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  374.482748][T17481] EXT4-fs (loop1): 1 truncate cleaned up
[  374.595899][   T28] audit: type=1400 audit(1786120351.172:2323): avc:  denied  { write } for  pid=17497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  374.610114][T17479] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3373: bad orphan inode 15
[  374.710148][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  374.716658][    C0] EXT4-fs (loop0): initial error at time 1786120351: ext4_orphan_get:1425
[  374.725210][    C0] EXT4-fs (loop0): last error at time 1786120351: ext4_orphan_get:1425
[  374.794065][T17479] ext4_test_bit(bit=14, block=5) = 0
[  374.826708][T10124] ==================================================================
[  374.834873][T10124] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios
[  374.843178][T10124] 
[  374.845555][T10124] write to 0xffff8881397748e0 of 44 bytes by task 17506 on cpu 1:
[  374.853403][T10124]  tty_set_termios+0xc0/0x900
[  374.858309][T10124]  set_termios+0x373/0x4f0
[  374.862774][T10124]  tty_mode_ioctl+0x37f/0x5b0
[  374.867515][T10124]  n_tty_ioctl_helper+0x87/0x370
[  374.872508][T10124]  n_tty_ioctl+0x101/0x200
[  374.876959][T10124]  tty_ioctl+0x83e/0xb80
[  374.881265][T10124]  __se_sys_ioctl+0xce/0x140
[  374.885901][T10124]  __x64_sys_ioctl+0x43/0x50
[  374.890528][T10124]  x64_sys_call+0x1563/0x3020
[  374.895249][T10124]  do_syscall_64+0x136/0x3c0
[  374.899917][T10124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.905848][T10124] 
[  374.908198][T10124] read to 0xffff8881397748f9 of 1 bytes by task 10124 on cpu 0:
[  374.915867][T10124]  n_tty_lookahead_flow_ctrl+0x12b/0x2d0
[  374.921554][T10124]  tty_port_default_lookahead_buf+0x91/0xc0
[  374.927532][T10124]  flush_to_ldisc+0x279/0x330
[  374.932249][T10124]  process_scheduled_works+0x4d4/0x9a0
[  374.937748][T10124]  worker_thread+0x569/0x750
[  374.942384][T10124]  kthread+0x221/0x270
[  374.946478][T10124]  ret_from_fork+0x146/0x330
[  374.951101][T10124]  ret_from_fork_asm+0x1a/0x30
[  374.955893][T10124] 
[  374.958235][T10124] value changed: 0x11 -> 0xcd
[  374.962936][T10124] 
[  374.965295][T10124] Reported by Kernel Concurrency Sanitizer on:
[  374.971502][T10124] CPU: 0 UID: 0 PID: 10124 Comm: kworker/u8:43 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  374.982824][T10124] Tainted: [W]=WARN
[  374.986644][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  374.997076][T10124] Workqueue: events_unbound flush_to_ldisc
[  375.002934][T10124] ==================================================================
[  375.627052][   T28] audit: type=1400 audit(1786120352.272:2324): avc:  denied  { write } for  pid=17503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.705415][   T28] audit: type=1400 audit(1786120352.322:2325): avc:  denied  { write } for  pid=17517 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.882022][   T28] audit: type=1400 audit(1786120352.522:2326): avc:  denied  { write } for  pid=17520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  375.941171][   T28] audit: type=1400 audit(1786120352.582:2327): avc:  denied  { write } for  pid=17531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  376.136947][   T28] audit: type=1400 audit(1786120352.772:2328): avc:  denied  { write } for  pid=17534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1