last executing test programs:

6m49.436705112s ago: executing program 1 (id=138):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_clone3(&(0x7f0000000480)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x2)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)=[0x1], &(0x7f0000000180), 0x0, 0x1, 0x1, r1}}, 0x40)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000780), &(0x7f0000000740)=r3}, 0x20)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
close(r0)

6m48.600611965s ago: executing program 1 (id=142):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x9e, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
accept(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x44)

6m46.045985026s ago: executing program 1 (id=159):
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000063113400000000006037090003fe2c38e000000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="2d63707520cff4f40300167eeb70331599c5223e7529f8e0bae5a26ad430019480"], 0x5)
r4 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000080), 0x9)

6m45.91350307s ago: executing program 1 (id=160):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'gre0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2c8070, &(0x7f0000000280)={[{}, {@gid}]})
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
sendfile(r2, r0, 0x0, 0xe3aa6e5)

6m45.471712952s ago: executing program 1 (id=165):
socket(0xa, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x10, <r1=>0xffffffffffffffff, 'id0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x7ffffe2, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f0000001480)="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", 0xd9a}], 0x2}}], 0x1, 0x9200000000040000)
bind$tipc(r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4201, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000180))
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd8cf932b327f8a8b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x170, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xc}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_PEER_MEASUREMENTS={0x138, 0x111, 0x0, 0x1, {0x134, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x119}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x170}}, 0x2000800)

6m43.571059325s ago: executing program 1 (id=171):
getpgrp(0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r0, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000440)="a3", 0x1}], 0x3, 0xbec, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0xb0f7, 0xa04c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x2, 0x7fffffff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

6m43.521297937s ago: executing program 32 (id=171):
getpgrp(0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r0, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000440)="a3", 0x1}], 0x3, 0xbec, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0xb0f7, 0xa04c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x2, 0x7fffffff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

56.048163927s ago: executing program 3 (id=2592):
socket(0x2, 0x80805, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x20010)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000000)=0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048044}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)

55.802293313s ago: executing program 3 (id=2594):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

55.753462724s ago: executing program 3 (id=2596):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3)
syz_emit_ethernet(0x98, &(0x7f0000000440)=ANY=[@ANYBLOB="856b934629faaaaaaaaa3c1b401836a70ed0c30d93e6b829c856647357c4ee7d5a3171a3e2ae6fec7d3b685e1aa88190a38f3a9cc12d575a499dcf7ceb23d19028014d027adb31030962b13c36068720c3b99d0d6ad8ade58e24ca31de73aba1e9c921acb3247befdc75789c91e0263c84ab7ac7d5bbc68fe86ebf59c20c0ed64d1afe6764aa25dc1146e31e6400"/152], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0xf)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x4000040}, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x400, 0x823}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff8}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8df1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2d}]}}}]}, 0x60}}, 0x24000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7724, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080601020a000000000000000100000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004004)
fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000921)
read(r6, 0x0, 0x0)
close(r6)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2, 0x0)

52.757788867s ago: executing program 3 (id=2618):
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
r1 = fsopen(&(0x7f0000000000)='minix\x00', 0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x660180, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8050, &(0x7f00000004c0), 0x1, 0x418, &(0x7f0000001880)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000000))
open(0x0, 0x0, 0x112)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='#/!-&-\x00', &(0x7f00000000c0)='./file0\x00', r2)
timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r5, &(0x7f0000000180)={0x11, 0x2, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r5, &(0x7f00000015c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_clone3(&(0x7f0000000140)={0x4282e200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380))

52.389573588s ago: executing program 3 (id=2623):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0xa, 0x300)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e100", 0x8, 0x11, 0x1, @local, @mcast2, {[], {0x4000, 0xe22, 0x8}}}}}}, 0x0)

52.199489143s ago: executing program 3 (id=2626):
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x1409, 0x1, 0x70bd2d, 0x27dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x4854)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x1, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e20, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff8}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x844)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x7}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0x8, 0x4)

52.199190573s ago: executing program 33 (id=2626):
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x1409, 0x1, 0x70bd2d, 0x27dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x4854)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x1, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e20, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffff8}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x844)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x7}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0x8, 0x4)

7.990835458s ago: executing program 0 (id=2958):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x3, 0x3, 0x0, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x61, 0x37, 0x35, 0x64, 0x36, 0x0, 0x30, 0x66, 0x64, 0x62, 0x64, 0x63, 0x66, 0x37, 0x35, 0x34]}, &(0x7f0000000d40)={0x0, "f86aed7592f0ade2b8b6ba580c8114ef27b2f4402fdbfc1cad2d6cf3c54ef4eb5016aa5e3abacc2dcd674d422329deb8aa108e92fe501c168ddf6bbf9077c441", 0x34}, 0x48, 0xfffffffffffffffc)
lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x400)
keyctl$chown(0x4, r5, r6, r7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x36, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff80}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x75c2a5f9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000400)='syzkaller\x00', 0x1ff, 0xf4, &(0x7f0000000680)=""/244, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x0, &(0x7f0000000c00)=[r9, r3, r3, r0], &(0x7f0000000c40), 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003180)='&', 0x1}], 0x1}, 0x0)
r11 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$sock(r10, &(0x7f0000001f00), 0x0, 0x1)

7.613674169s ago: executing program 0 (id=2962):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan1\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x4960}}]}, 0x1, 0x5a3, &(0x7f0000000a80)="$eJzs3U9oHNUfAPDvzGab/snvlwoKKj0UFSqUbpL+0eqpvYqFQg+CFw3bbSjZZEs20SYETO9F7EFUeqk3PXhUPHgQLx69elE8C8UGhaaCrmx2Nk3TTZvEbBYznw9M9r2Z2fm+N7Pfl51hhg0gtw43/6QRz0TE+SRicNWyvsgWHm6tt7Q4X763OF9OotG48FsSSUTcXZwvt9dPstcDEbEQEU9HxHfFiKPpyib3tAv12bnx0Wq1MpXVh6YnrgzVZ+eOXZ4YHauMVSZPvPzKqdMnT40cH1nd3HuN1bXi5vp6/ecb71//4bVbNz7/4tBC+cPRJM7EQLZsdT+2U2ufFOPMmvknuxGsh5JeN4AtKWR53kylp2IwClnWd9JYPTj070jzgC5q9Ec0VqwqAjmQSHrIqfb3gOb5b3vaye8ft8+2TkCacZcW58vvRTt+X+vaROxdPjfZ/3vywJlJ83zz4E42lF1p4VpEDPf1Pfz5T7LP39YNb0cD6apvz7YO1MPHP10Zf6LD+DPQvnb6L7XHv6Vs/FvqEL+wzvh3foMx/nrzl0/WjX+tP57tGD9ZiZ90iJ9GxNsbjH/zja9Pr7es8WnEkegcvy159PXhoUuXq5Xh1t+OMb45cujV9fsfsX+d+K1rtnuXG7K6/3uyNqUb7P9X33/53MIj4r/4/KOPf6f9vy8iPthg/Cfufvb6estuX0vuNL8FbPb4J1GMW503+dBV+ZfOHP4pK7pqCAAAAAAAAAAA2yhdvpctSUsr5TQtlVrP8D4Z+9NqrT599FJtZvJi6563g1FM23daDbbqSbM+kt2P264fX1M/UcgCFvYt10vlWtJ6ShgAAAAAAAAAAAAAAAAAAAA4sOb5/z8Ky8//r/25amC3Wv8nv4HdTv5Dfj2Y/0nP2gHsPP//Ibca8h/yS/5Dfsl/yC/5D/kl/yG/NpH/hgrYZSQ1AAAAAAAAAAAAAAAAAAAAAAAAAAB0xflz55pT497ifLlZv9g3OzNee+fYxUp9vDQxUy6Va1NXSmO12li1UirXJh63vaRWuzIckzNXh6Yr9emh+uzcWxO1mcn2b4pWil3vEQAAAAAAAAAAAAAAAAAAAPz3DCxPSVqKKLbqaVoqRfwvIg4mkVy6XK0MR8T/I+LHQrG/WR/pdaMBAAAAAAAAAAAAAAAAAABgl6nPzo2PVquVqe4V+rJQW3r7n43HrZNsaoN9m1k5Iha2d280t7jpdxWzHdjdw5STQmFrn8P8FXo4KAEAAAAAAAAAAAAAAAAAQE7df+h3o+/4u7sNAgAAAAAAAAAAAAAAAAAAgFxKf00iojkdGXxhYO3SPclSYfk1It69eeGjq6PT01Mjzfl3VuZPf5zNP96L9gMb1c7TNCKaeQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcV5+dGx+tVitTWyz0b2CdXvcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYCv+CQAA//8ls87C")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xffffffffffffff58}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00')
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000200))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163041, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x80, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7d, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008004}, 0x400e095)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))

6.597726217s ago: executing program 0 (id=2976):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x22004840}, 0x10)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0xfff, 0x3, 0x811a, 0x3, "04fdffff000800", 0x48, 0x1})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff)
set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x7)
syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x6a04e8b0c95b971a)

5.861205507s ago: executing program 0 (id=2980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x84000)

5.782449349s ago: executing program 0 (id=2981):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20008000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x400000000000000)

5.730207791s ago: executing program 0 (id=2983):
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$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")
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000004051400022bbd7000fedbdf25080003000100c5fd4bf2fd000008000300040000000800010000000000080003000200000008000100000000000800030004000400000000000000000000000300020000000800010000000000080003000400000008000100010000000800030003000000080008000300030000080800010800000000080003000000000008000100010000000800030003000000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4004089}, 0x20000080)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0xc83}, 0x38)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5)
io_uring_enter(r3, 0x19ff, 0x7721, 0x16, 0x0, 0x26)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x82, 0x0, &(0x7f0000000000)=0x3, 0x5000002)
mlockall(0x1)
sendfile(r2, r2, 0x0, 0xe3aa6ea)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x2000c041}, 0x40000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)

5.608402004s ago: executing program 5 (id=2986):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
socket$l2tp(0x2, 0x2, 0x73)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.02408909s ago: executing program 2 (id=2992):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
mkdir(0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x22020400)
poll(0x0, 0x0, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt(r3, 0x1, 0x1, 0x0, &(0x7f0000000580))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$kcm(0xa, 0x5, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000001340)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
rename(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x20040110)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)

4.831886696s ago: executing program 5 (id=2993):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async)
r1 = getpid()
fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x1, 0x4, 0x2ad, 0x8, r1}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff3b) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@resgid}]}, 0x1, 0x535, &(0x7f0000000cc0)="$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")

4.619746892s ago: executing program 5 (id=2994):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0xa, 0x6)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4c, 0xbe, "d7967576deec142e574e90ba995b49291f4d6a1b3a399ea00c06b324a0fcb27d0a8d6ac6597266f781ffc68f3f669da23b96256a52f17199bb36087fe672e02bec0f0ada2e1c68b0"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xd}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3ff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x3, 0x1}, {0x1b}, {0x16, 0x1}, {0x6c, 0x1}, {0x36, 0x1}, {0x18, 0x1}, {0x12, 0x1}, {0x18}, {0x9}, {0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x30, 0x1}, {0x5}, {0x12}, {0x18}, {0x4, 0x1}, {0x3, 0x1}, {0x1b, 0x1}, {0x48, 0x1}, {0x1b}, {0x6, 0x1}, {0x6e, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x18}, {0x36}, {0x18, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x10001)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

4.028560248s ago: executing program 2 (id=3000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1)

3.747361536s ago: executing program 5 (id=3001):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.406904955s ago: executing program 5 (id=3002):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000700040004000180"], 0x18}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0xa8, 0x30, 0xffff, 0x0, 0x25dfdbfc, {}, [{0x94, 0x1, [@m_ife={0x90, 0x1, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x13, 0x1, {{0xa, 0x80, 0x3, 0x2, 0x10}, 0x20}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x9, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
time(0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]})
select(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f00000000c0)={[{@init_itable_val}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x80, 0x640, &(0x7f0000000400)="$eJzs3c9rG9kdAPDvjCwnTtw6KaU0aUsNPSRQothpaNqekvTQHAINNIdSeoiJ7dRE+UHsQOIG4kAPLbRQSq+l5NJ/oPRafC29lUKb254XssuS3T3sLtEyo1GsyJKt2JalzXw+IOnNm5He+2r09N7MaDQBlNZ0dpdGHIuIa0nEVNu8yWjOnC6We/HBo+vZLYlG42fvJ5EUea3lXxaPh7O7pPmc/1yM+Eplc7nLD1dvztUbTY8jTq/cunt6+eHqqaVbczcWbizcnj3zg7PnZn44+68eFX/8ZnEeLh4vXf7pN//wm199f/G/9VNJnI+r1V/PR0cce2W6+e5GFmJ7/lhEnMsSXd4X2E+V4vNYjYivxVRU8qmmqVj6/VArBwxUo9LsnxrjDaB0khh2DYDhaI0DWtv2g9gOHmXPL2T3D7rEP1ZsvR/Mt40OvUjatoyy3Igje1D+WkR89uj4X7Jb9NgPMbYH5fQs/0lEfL3b+k/y+I/kkWbxp5G2PS9LzxT7NrL6/XgXdUja0v19/t5w588W3iT+9vWQxX++eMzyL/Z4/e128Ux3TJet/QEwHOsXio48G4jERv+XjQxb45/oHP80/pEfG+rsu3aid/+X7sGrby8f/4116/9b/f3BvA9PO8ZhSax9dKX7S1Y7M9753aU/9Sp/um38l92y8ltjwT7semj4/EnE8Y74f5u/9cmr9Z90Gf9mi1zrs4yf/O+9S73m7TL+XWs8jTjRdftnY1SapTqOTybROj55dvb04lJ9YaZ537WMf/77l3/rVf6w48/W/6HX4l/9RnPO1us/y7vbZxl/v/L0VjN1YNO8yW3jT98dT67mqfH8fqN5jSeXi0WaDw/mVlbundm6Lq1l8sfZZvwnv9O9/feIP9/4mGh9Zfbh7s9vvmh9j3ba5fp/2ehzwV6y+Od7fP63W/9/7LOMj39x/1tdZ7Tektfi39gnMbHDmAAAAAAAAKCs0vwYbJLWXqXTtFYcePtqHErrd5ZXvrt45/7t+YiT+e8hq2nrSPdUczrJpmeL38O2ps90TH8vIo5GxJ8rE/l07Xq1Pj/s4AEAAAAAAAAAAAAAAAAAAGBEHC7O/39ZXA/sw0qa1mrDrhWwbwZ5gTlgtGn/UF55+9+f660BI0b/D+XVtf37UoBS0NShvLR/KC/tH8pL+4fy0v6hvHq3/01zngy6LgAAAADAnjn67fVnYxGx9qOJ/JYZL+ZVh1ozYNA62rgjgVAilWFXABiaVx2+0/+hdPraxv+k+HPAwVcHGIKkW2Y+OGhs3fjXuz4TAAAAAAAAAAAAABiAE8fWnyXO/4dSctoflNfOzv+v7PypwMjo9oc//gQIysE2PpRcHzsBDvaa4fx/AAAAAAAAAAAAANg3k/ktSWvFz4AnI01rtYgvRcSRqCaLS/WFmYj4ckT8v1I9kE3PDrvSAAAAAAAAAAAAAAAAAAAA8JZZfrh6c65eX7jXnvh0U87bnWhd8XRU6tOeiGTgRaTRkTMREaMQ+2ASY205ScRatub34pWT3X9+YhTen3vLPS/2BwAAAAAAAAAAAAAAAAAADFLbucfdHf/rPtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbfxvX/B5cYdowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfT5wEAAP//x6g4cg==")
io_setup(0x3, &(0x7f0000000180))
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6)
r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r7, 0x0, 0x0)
getdents(r6, &(0x7f0000000280)=""/184, 0xb8)

2.989471997s ago: executing program 2 (id=3003):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000240)={0x9317, 0x1, [{0x1, 0x1}]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
ioctl$FITRIM(r0, 0xc0185879, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0x6}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mq_open(0xfffffffffffffffd, 0x1, 0x10, &(0x7f00000001c0)={0x97fe, 0xdd80, 0x8, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x8500014c)
inotify_add_watch(r3, &(0x7f0000000200)='./file0/file3/file0\x00', 0xd0000080)
inotify_add_watch(r3, &(0x7f00000000c0)='./file1/file3\x00', 0x8)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000007c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=@v1={0x1000000, [{0x6, 0x2}]}, 0xc, 0x4)
socket$inet6(0xa, 0x800, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b700000000000000950000000000000006531059034dec39ffa4fc6403248c64e37cebc0340a82b9add1ae3dec1bab4e2a1080160705aa98d2fd4a9a8e252892b859e566f7b5109f702819109f20ee5597aecf91b73c3ae4a414ede12d09ff7265d5ee66bb408d60a05d838c786ab4441e1239bcea3c9fb10cab786c2a90e853bb54c5b05ef82841cc1a118c292d"], &(0x7f0000000080)='syzkaller\x00'}, 0x90)

2.736306204s ago: executing program 6 (id=3007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x211a, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x2040400)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
truncate(0x0, 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cfcff0004060108000000000000000003001c0605000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000)

2.619856557s ago: executing program 6 (id=3008):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x30, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x4, 0xfa, 0x4, 0x2, 0xc, 0x59, 0x6, 0xb, 0x7, [0x1, 0x7fff, 0x3, 0xfffffff8, 0x7, 0x20000, 0x2, 0x4]}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r1, 0xcfa3e000)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x9, 0x5, 0x4, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x20}}, 0x1400c880)

2.567900899s ago: executing program 6 (id=3009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070a050000000000000000000a0040010900010073797a3100001f000900020073797a32fc0000008958eb77ae2810a55c839fe26442f9ee145deb5a215f2b94c2714179a52f370ef8df755e41e8a676f08a35a5bd2660cf68b0277041b19f2ac975961cc1693c3e37710d9eb153921d813eef0503a921a18bed873ec5d01d86167f7c92353d915217f501e6d0adda88f71f9b8e5fab4091dc846866b8c3c92a8a0959f00c407a868ca9291fa40ce3e698ef3fb6690cde5f37b854f979d5d111fa01c6b664ab74689bb931d00168a8def3ca2d2d73a706000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x24084014)

2.534569699s ago: executing program 2 (id=3010):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x13, 0x6, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000000bc0)=""/210, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, 0x0, &(0x7f0000000280), &(0x7f0000000000))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3, 0x4}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connmark={{0x30}, {0x6, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (fail_nth: 4)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1, 0x0, 0x188}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000780)}, {&(0x7f0000000b80)="4b6d7c705c0b33346a5657ad3b72e234cb248dee", 0x14}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)

2.426812182s ago: executing program 6 (id=3011):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan1\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x4960}}]}, 0x1, 0x5a3, &(0x7f0000000a80)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xffffffffffffff58}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00')
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000200))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163041, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x80, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7d, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008004}, 0x400e095)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))

2.412600763s ago: executing program 4 (id=3012):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.831763089s ago: executing program 5 (id=3013):
r0 = syz_usb_connect$midi(0x0, 0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="120111010000000899041b104000010203010902740001015080ff090400000301033001072403b58000290724010000070006"], 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES8=r0], 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x17, {0x17, 0xf, "32447a7dfcb7848cb3a1dddecec55ac98beb098b9e"}}, &(0x7f0000000180)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "641c1e65675bcc35f851c23da7be0b9f4af73a04f3e57a17a4ffe18691d2dbce457361da6149dae46654548c1e8c39430df82b1b96651f0667203bd506109f92308a6d556962676f8fca22b3d8fcbe98f0ad983a97e2a44df143dde39159da164ee30c2e7d7778ccffc5d3f5d87c91100cd30c3786e4ebf452f0347e3c3f0d5f4236936962b5b1473affb9fbc92d606a39b4c61060988cbca3774a90cfa24e4e64c8eec76f42632c8681178c69ff0a427b153b842e20b356aebd44a71c13d4d7a230a02ef1e01103c48e451a336af55e949d7be83c3ff54ac763db4ac44f262174158d4806a4aeb1ef379747291daa34d8ed51ab250ba4"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x20, 0x12, 0xb1, "6bbc3f8a99a116eb67e1e9870de00c09dbc06a0a3f086717bad329cacc89a8844875a8a7f686551f0d989dd7a5e19ca12cb7c325623425c554b59084dd4a81d4ae268e904a5684bc0c458bb0efcc11a8f3f55edb2690c6fd477f18835c44ff7b88bff933a90a15e3eaebd31b9e0b2194e4b11fb50a721327834a4be70e28a370678f7f1e3ad44e205df67dac6260b542fcb1482b1a76464c4d4bbdca095813626ed7979e73fd85384c3bee6b84687cdac8"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x40}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "289e10178e6a6f12aa32f1d29c03b6f55c8a2f4eae2e3a1b0e5b4b46d7a1bd02ee56df6e54019f47b856bcd4711164"}})
r1 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000280), 0x0)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x0, 0x81}, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10425, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2c, 0x34, 0x2c, 0x37]}}}}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000feffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000005000000e0394339d68795e63e76a95430fd7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000e583"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = inotify_init1(0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000640)='./file0\x00', 0x648, &(0x7f0000000340)={[{@usrjquota}, {@sb={'sb', 0x3d, 0x81}}]}, 0x0, 0x4a4, &(0x7f00000008c0)="$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")
creat(&(0x7f0000000600)='./file0\x00', 0x104)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x12000021)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
fgetxattr(r5, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000100)=""/83, 0x53)

1.630776964s ago: executing program 4 (id=3014):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c"], 0x92fc}}, 0x40) (fail_nth: 8)

1.120771118s ago: executing program 4 (id=3015):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x13, 0x9, 0x5, 0x4, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x20}}, 0x1400c880) (fail_nth: 7)

403.797189ms ago: executing program 2 (id=3017):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan1\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000004b, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20001, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@lazytime}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x4960}}]}, 0x1, 0x5a3, &(0x7f0000000a80)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xffffffffffffff58}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip6_mr_vif\x00')
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000200))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163041, 0x0)
write$P9_ROPEN(r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x80, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7d, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008004}, 0x400e095)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000))

403.561999ms ago: executing program 4 (id=3018):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x969edffe39095fd4, 0x3800)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$tipc(0x1e, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000013c0)='./file0\x00')

338.59638ms ago: executing program 6 (id=3019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f00000000c0)={0xd, 0x476, 0xc, 0x80000000, 0x1})
write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/17, 0x11, 0x0, 0x0, 0xe}}, 0x120)
write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff020100bfa30000000000000703000018feffff720aa9fff8ffffff71a4a9ff0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680200000005010400000000000000000a00000a54020100000000000700000007010400000002"], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000)

201.928954ms ago: executing program 6 (id=3020):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0xfd2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x319, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x0, 0x41, 0x0, 0x1}, 0x28)
unshare(0x22020400)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
unshare(0x2c020400)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0})
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 6)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x80040, 0x100, 0x10}, 0x18)

55.892578ms ago: executing program 4 (id=3021):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070a050000000000000000000a0040010900010073797a3100001f000900020073797a32fc0000008958eb77ae2810a55c839fe26442f9ee145deb5a215f2b94c2714179a52f370ef8df755e41e8a676f08a35a5bd2660cf68b0277041b19f2ac975961cc1693c3e37710d9eb153921d813eef0503a921a18bed873ec5d01d86167f7c92353d915217f501e6d0adda88f71f9b8e5fab4091dc846866b8c3c92a8a0959f00c407a868ca9291fa40ce3e698ef3fb6690cde5f37b854f979d5d111fa01c6b664ab74689bb931d00168a8def3ca2d2d73a706000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x24084014)

8.067439ms ago: executing program 4 (id=3022):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="830025bd7000fbdbdf251c0000000800030004000000080004000000000008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4002}, 0x400c0c8)

0s ago: executing program 2 (id=3023):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xe98, 0x14040)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
getcwd(0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x238, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x208, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x36}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x4c}, @TCA_ROUTE4_ACT={0x150, 0x6, [@m_ct={0xd8, 0x12, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0xfffffffc, 0xe391b65d4e0308ef, 0x8, 0x1c00000}}, @TCA_CT_PARMS={0x18, 0x1, {0x10000, 0x10001, 0x20000000, 0x400, 0xfffff801}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0x6e, 0x6, "2e468124e073043ebdefe86b8b1f43b7cc346bc39be17edb817dadaac892b1ba637451337c680633550002aad365ce8ec77328a80e17a0f7da48444566d2f860e1b01437c6c0f2b9a8c839d8e0a2df6f7852210c4b91d500e003a14d8bb2250012fe166b600a55acfa47"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x74, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x3d, 0x6, "d15e13e780c669591856ce5f01e81366b6cb20250fe0873f46286fb48260bb249edfaa23fea78ed97a35187cd519c11cfbcf7c2d46306e2450"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x9c, 0x6, [@m_skbmod={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x68, 0x12, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x24a4a03a}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x61be}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x190}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686, @ANYBLOB="c075ebc32753eac89cabcbdd74595afc85ecde3f5d721cf80d1078d5a5ec1240efa91f708dd944299ae4831f63a9afa127187c263cd0a3596aabc5e1497958b71b2f3f091439020cf6056efdd45768e5c5808dadb6e457f3be5a98e323125441b1a3692800044e88928020461b79be8d72411fa20f4c17be8a92369548ae96bf922ca13e29705f53239aa991a1b5c079580d410f6495a6de686ae9a3f068d887d54ddd0c417e379466d37fed0696f2a15d961826ec1de2e6f27dfd500992eddbdb2e24adf37b2745ec2bfeaa2f16dc9626645e3eba68383825116ce50bca0c172a52", @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x10b, &(0x7f0000000380)={@multicast, @broadcast, @void, {@llc={0x4, {@llc={0xd8, 0x8e, "f5", "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"}}}}}, 0x0)
clock_nanosleep(0x1, 0xf29196cfc104dd13, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100))
pread64(r1, &(0x7f0000000040)=""/45, 0x2d, 0x9e6000)

kernel console output (not intermixed with test programs):

tname+0x2e/0x1c0
[  438.531057][T12494]  do_getname+0x2e/0x1c0
[  438.531082][T12494]  __se_sys_link+0x2f/0x1c0
[  438.531114][T12494]  __x64_sys_link+0x31/0x40
[  438.531133][T12494]  x64_sys_call+0x12d1/0x3020
[  438.531164][T12494]  do_syscall_64+0x12c/0x3b0
[  438.531192][T12494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.531277][T12494] RIP: 0033:0x7fa187a0cdd9
[  438.531299][T12494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.531322][T12494] RSP: 002b:00007fa186467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[  438.531350][T12494] RAX: ffffffffffffffda RBX: 00007fa187c85fa0 RCX: 00007fa187a0cdd9
[  438.531365][T12494] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 00002000000006c0
[  438.531474][T12494] RBP: 00007fa186467090 R08: 0000000000000000 R09: 0000000000000000
[  438.531491][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.531506][T12494] R13: 00007fa187c86038 R14: 00007fa187c85fa0 R15: 00007ffc9a63aca8
[  438.531528][T12494]  </TASK>
[  438.865039][T12496] loop5: detected capacity change from 0 to 1024
[  438.895944][T12496] EXT4-fs (loop5): unable to read superblock
[  438.911830][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  438.944291][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.970433][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  438.997162][   T28] kauditd_printk_skb: 27 callbacks suppressed
[  438.997180][   T28] audit: type=1400 audit(1777771366.142:4134): avc:  denied  { mount } for  pid=12493 comm="syz.6.2684" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  439.032730][T12500] loop5: detected capacity change from 0 to 512
[  439.046940][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.060637][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.084965][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.094701][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.104724][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.115550][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.125721][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.135505][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'.
[  439.153223][T12500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.210536][T12500] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  439.230126][T12496] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.2685: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  439.348089][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.454907][T12520] program syz.4.2690 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  439.504678][T12524] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  439.511318][T12524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  439.527635][T12524] vhci_hcd vhci_hcd.0: Device attached
[  439.560223][T12528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  439.566809][T12528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  439.583720][T12525] vhci_hcd: connection closed
[  439.583898][ T8799] vhci_hcd vhci_hcd.6: stop threads
[  439.596792][ T8799] vhci_hcd vhci_hcd.6: release socket
[  439.603718][T12528] vhci_hcd vhci_hcd.0: Device attached
[  439.610524][ T8799] vhci_hcd vhci_hcd.6: disconnect device
[  439.622334][T12531] loop2: detected capacity change from 0 to 512
[  439.640964][T12531] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[  439.662538][T12531] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  439.683228][T12531] EXT4-fs (loop2): orphan cleanup on readonly fs
[  439.690073][T12531] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.2696: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  439.708303][T12531] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  439.708547][T12531] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2696: couldn't read orphan inode 13 (err -117)
[  439.717764][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  439.717792][    C0] EXT4-fs (loop2): last error at time 1777771366: ext4_ext_check_inode:521: inode 13
[  439.747572][T12531] loop2: lost filesystem error report for type 5 error -117
[  439.749092][T12531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  439.772979][T12528] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (24564!=0)
[  439.799432][T12529] vhci_hcd: connection closed
[  439.799559][ T8799] vhci_hcd vhci_hcd.2: stop threads
[  439.819513][ T8799] vhci_hcd vhci_hcd.2: release socket
[  439.825058][ T3398] usb 5-1: new low-speed USB device number 2 using vhci_hcd
[  439.840262][ T8799] vhci_hcd vhci_hcd.2: disconnect device
[  439.859485][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  440.315747][T12548] loop6: detected capacity change from 0 to 1024
[  440.332125][T12548] EXT4-fs (loop6): unable to read superblock
[  440.373290][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.442919][T12556] loop6: detected capacity change from 0 to 512
[  440.484276][T12556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.498721][T12556] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  440.510261][T12556] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.2702: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  440.599326][T12570] program syz.5.2708 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  440.725820][T12574] loop2: detected capacity change from 0 to 512
[  440.736239][T12574] loop2: detected capacity change from 0 to 128
[  440.745865][T12574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  440.759506][T12574] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2709: checksumming directory block 0
[  440.962509][T12585] set_capacity_and_notify: 1 callbacks suppressed
[  440.962528][T12585] loop6: detected capacity change from 0 to 512
[  440.975794][T12585] ext3: Bad value for 'mb_optimize_scan'
[  441.063573][   T54] tipc: Subscription rejected, illegal request
[  441.613040][T12608] loop6: detected capacity change from 0 to 1024
[  441.646751][T12608] EXT4-fs (loop6): unable to read superblock
[  441.665147][T12610] loop5: detected capacity change from 0 to 512
[  441.687603][T12610] loop5: detected capacity change from 0 to 128
[  441.703314][T12610] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  441.727514][T12610] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2722: checksumming directory block 0
[  441.840269][T12612] loop6: detected capacity change from 0 to 512
[  441.871306][ T4869] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  441.927915][T12615] loop5: detected capacity change from 0 to 164
[  441.953045][T12612] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  442.067515][T12608] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.2721: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  442.236227][T12630] netlink: 'syz.5.2725': attribute type 4 has an invalid length.
[  442.292772][T12633] program syz.0.2726 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  442.339236][   T28] audit: type=1326 audit(1777771369.482:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.365190][   T28] audit: type=1326 audit(1777771369.512:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.391338][   T28] audit: type=1326 audit(1777771369.532:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.420186][   T28] audit: type=1326 audit(1777771369.532:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.462188][   T28] audit: type=1326 audit(1777771369.532:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.487729][   T28] audit: type=1326 audit(1777771369.562:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.513216][   T28] audit: type=1326 audit(1777771369.562:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.538706][   T28] audit: type=1326 audit(1777771369.562:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.579865][   T28] audit: type=1326 audit(1777771369.562:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12634 comm="syz.4.2729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdeb9dbcdd9 code=0x7ffc0000
[  442.622816][T12637] loop6: detected capacity change from 0 to 1764
[  442.936658][T12652] loop5: detected capacity change from 0 to 164
[  443.066210][T12656] random: crng reseeded on system resumption
[  443.073031][T12659] loop0: detected capacity change from 0 to 1024
[  443.091946][T12659] EXT4-fs (loop0): unable to read superblock
[  443.220445][T12662] loop0: detected capacity change from 0 to 512
[  443.281106][T12662] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  443.518572][T12659] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.2738: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  443.854034][ T3296] EXT4-fs unmount: 8 callbacks suppressed
[  443.854051][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.933442][T12674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.055770][T12678] batman_adv: batadv0: Adding interface: dummy0
[  444.062207][T12678] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.087816][T12678] batman_adv: batadv0: Interface activated: dummy0
[  444.095622][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.113123][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  444.113141][   T28] audit: type=1326 audit(1777771371.262:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  444.145924][T12685] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  444.160135][T12685] audit: out of memory in audit_log_start
[  444.174237][T12685] batadv0: mtu less than device minimum
[  444.198765][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.209789][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.220883][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.221473][   T28] audit: type=1326 audit(1777771371.292:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  444.232403][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.267683][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.278709][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.289842][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.300890][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.311860][T12685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  444.342635][   T28] audit: type=1326 audit(1777771371.292:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  444.373662][T12692] __nla_validate_parse: 336 callbacks suppressed
[  444.373739][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2748'.
[  444.418744][   T28] audit: type=1326 audit(1777771371.292:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1879cd60e code=0x7ffc0000
[  444.444887][   T28] audit: type=1326 audit(1777771371.292:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1879cd60e code=0x7ffc0000
[  444.472808][   T28] audit: type=1400 audit(1777771371.322:4206): avc:  denied  { ioctl } for  pid=12677 comm="syz.6.2745" path="socket:[36423]" dev="sockfs" ino=36423 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  444.503500][   T28] audit: type=1326 audit(1777771371.552:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa1879cd60e code=0x7ffc0000
[  444.531146][T12697] program syz.2.2746 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  444.545531][   T28] audit: type=1326 audit(1777771371.552:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.6.2745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1879cd60e code=0x7ffc0000
[  444.901362][ T3398] usb 5-1: enqueue for inactive port 0
[  444.911885][ T3398] usb 5-1: enqueue for inactive port 0
[  444.931646][T12699] FAULT_INJECTION: forcing a failure.
[  444.931646][T12699] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.961334][T12699] CPU: 0 UID: 0 PID: 12699 Comm: syz.5.2749 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  444.961403][T12699] Tainted: [W]=WARN
[  444.961499][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  444.961514][T12699] Call Trace:
[  444.961524][T12699]  <TASK>
[  444.961536][T12699]  __dump_stack+0x1d/0x30
[  444.961614][T12699]  dump_stack_lvl+0x95/0xd0
[  444.961638][T12699]  dump_stack+0x15/0x1b
[  444.961667][T12699]  should_fail_ex+0x263/0x280
[  444.961772][T12699]  should_fail+0xb/0x20
[  444.961808][T12699]  should_fail_usercopy+0x1a/0x20
[  444.961889][T12699]  _copy_to_user+0x20/0xa0
[  444.961961][T12699]  simple_read_from_buffer+0xb5/0x130
[  444.962011][T12699]  proc_fail_nth_read+0x10e/0x150
[  444.962053][T12699]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  444.962190][T12699]  vfs_read+0x1ab/0x7f0
[  444.962230][T12699]  ? __rcu_read_unlock+0x4e/0x70
[  444.962259][T12699]  ? __fget_files+0x184/0x1c0
[  444.962341][T12699]  ? mutex_lock+0x57/0x90
[  444.962388][T12699]  ksys_read+0xdc/0x1a0
[  444.962428][T12699]  __x64_sys_read+0x40/0x50
[  444.962467][T12699]  x64_sys_call+0x2886/0x3020
[  444.962502][T12699]  do_syscall_64+0x12c/0x3b0
[  444.962605][T12699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.962630][T12699] RIP: 0033:0x7f827487d60e
[  444.962647][T12699] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  444.962749][T12699] RSP: 002b:00007f827330efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  444.962776][T12699] RAX: ffffffffffffffda RBX: 00007f827330f6c0 RCX: 00007f827487d60e
[  444.962842][T12699] RDX: 000000000000000f RSI: 00007f827330f0a0 RDI: 0000000000000004
[  444.962935][T12699] RBP: 00007f827330f090 R08: 0000000000000000 R09: 0000000000000000
[  444.962955][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.962973][T12699] R13: 00007f8274b36038 R14: 00007f8274b35fa0 R15: 00007ffe9c46f018
[  444.963059][T12699]  </TASK>
[  445.022277][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  445.231125][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'.
[  445.476657][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2757'.
[  445.545334][T12714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.715085][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.796884][T12728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.873036][T12728] Q±6ăť`Ň�: renamed from lo
[  445.983380][T12728] set_capacity_and_notify: 3 callbacks suppressed
[  445.983404][T12728] loop6: detected capacity change from 0 to 8
[  446.031672][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.042063][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.056511][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.066808][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.076146][T12728]  loop6: unable to read partition table
[  446.086012][T12728] loop_reread_partitions: partition scan of loop6 (ÄNůh*h‘…˙ěžÝ×pਸ਼ "ýo§ć?<íŻĘşöŮXD�Ú
bÔĚp0ěO{š¸›>.) failed (rc=-5)
[  446.163500][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.173776][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.183204][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.193530][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.204154][T12736]  loop6: unable to read partition table
[  446.221982][T12736] loop_reread_partitions: partition scan of loop6 (ÄNůh*h‘…˙ěžÝ×pਸ਼ "ýo§ć?<íŻĘşöŮXD�Ú
bÔĚp0ěO{š¸›>.) failed (rc=-5)
[  446.222832][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.245856][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.258177][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.268471][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.284385][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.294658][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.302939][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.313219][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.321517][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  446.331751][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  446.395041][T12743] FAULT_INJECTION: forcing a failure.
[  446.395041][T12743] name failslab, interval 1, probability 0, space 0, times 0
[  446.418085][T12743] CPU: 1 UID: 0 PID: 12743 Comm: syz.0.2762 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  446.418120][T12743] Tainted: [W]=WARN
[  446.418170][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  446.418188][T12743] Call Trace:
[  446.418198][T12743]  <TASK>
[  446.418208][T12743]  __dump_stack+0x1d/0x30
[  446.418237][T12743]  dump_stack_lvl+0x95/0xd0
[  446.418261][T12743]  dump_stack+0x15/0x1b
[  446.418295][T12743]  should_fail_ex+0x263/0x280
[  446.418384][T12743]  ? audit_log_d_path+0x8d/0x150
[  446.418410][T12743]  should_failslab+0x8c/0xb0
[  446.418486][T12743]  __kmalloc_cache_noprof+0x5f/0x400
[  446.418536][T12743]  audit_log_d_path+0x8d/0x150
[  446.418615][T12743]  audit_log_d_path_exe+0x42/0x70
[  446.418645][T12743]  audit_log_task+0x1e8/0x250
[  446.418670][T12743]  audit_seccomp+0x60/0x100
[  446.418738][T12743]  ? __seccomp_filter+0x8db/0x1350
[  446.418781][T12743]  __seccomp_filter+0x8ec/0x1350
[  446.418816][T12743]  ? __rcu_read_unlock+0x4e/0x70
[  446.418882][T12743]  ? __rcu_read_unlock+0x4e/0x70
[  446.418903][T12743]  ? __fget_files+0x184/0x1c0
[  446.418928][T12743]  __secure_computing+0x81/0x150
[  446.418995][T12743]  do_syscall_64+0xce/0x3b0
[  446.419027][T12743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.419057][T12743] RIP: 0033:0x7f7d76aed60e
[  446.419078][T12743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  446.419110][T12743] RSP: 002b:00007f7d7557efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  446.419131][T12743] RAX: ffffffffffffffda RBX: 00007f7d7557f6c0 RCX: 00007f7d76aed60e
[  446.419148][T12743] RDX: 000000000000000f RSI: 00007f7d7557f0a0 RDI: 0000000000000005
[  446.419165][T12743] RBP: 00007f7d7557f090 R08: 0000000000000000 R09: 0000000000000000
[  446.419182][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  446.419199][T12743] R13: 00007f7d76da6038 R14: 00007f7d76da5fa0 R15: 00007ffd9be00d98
[  446.419293][T12743]  </TASK>
[  446.420148][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.715436][T12757] loop4: detected capacity change from 0 to 2048
[  446.760799][T12757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.832744][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.880557][T12773] loop4: detected capacity change from 0 to 164
[  447.317501][T12786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2778'.
[  447.439592][T12786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.486288][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2781'.
[  447.498850][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2781'.
[  447.522596][T12786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.528311][T12792] loop2: detected capacity change from 0 to 512
[  447.550101][T12792] EXT4-fs: Ignoring removed mblk_io_submit option
[  447.564187][T12792] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2782: corrupted in-inode xattr: e_value size too large
[  447.578328][T12792] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  447.578666][T12792] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2782: couldn't read orphan inode 15 (err -117)
[  447.599792][T12792] loop2: lost filesystem error report for type 5 error -117
[  447.600393][T12792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.636496][T12786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.656383][T12801] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2783'.
[  447.697984][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.713919][T12786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.731187][T12803] loop6: detected capacity change from 0 to 2048
[  447.742591][T12806] FAULT_INJECTION: forcing a failure.
[  447.742591][T12806] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  447.757792][T12806] CPU: 0 UID: 0 PID: 12806 Comm: syz.5.2786 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  447.757832][T12806] Tainted: [W]=WARN
[  447.757840][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  447.757854][T12806] Call Trace:
[  447.757860][T12806]  <TASK>
[  447.757869][T12806]  __dump_stack+0x1d/0x30
[  447.757982][T12806]  dump_stack_lvl+0x95/0xd0
[  447.758011][T12806]  dump_stack+0x15/0x1b
[  447.758038][T12806]  should_fail_ex+0x263/0x280
[  447.758081][T12806]  should_fail_alloc_page+0xf2/0x100
[  447.758130][T12806]  __alloc_frozen_pages_noprof+0x108/0x350
[  447.758166][T12806]  alloc_pages_mpol+0xb3/0x260
[  447.758196][T12806]  alloc_pages_noprof+0x8f/0x140
[  447.758225][T12806]  pte_alloc_one+0x1c/0xc0
[  447.758275][T12806]  __pte_alloc+0x32/0x2a0
[  447.758353][T12806]  handle_mm_fault+0x239e/0x2e70
[  447.758393][T12806]  ? vma_start_read+0x1c7/0x2c0
[  447.758516][T12806]  do_user_addr_fault+0x62f/0x1050
[  447.758629][T12806]  ? ksys_mmap_pgoff+0xc1/0x310
[  447.758654][T12806]  ? __x64_sys_mmap+0x49/0x70
[  447.758724][T12806]  ? trace_page_fault_user+0x1f/0xa0
[  447.758838][T12806]  exc_page_fault+0x62/0xa0
[  447.758865][T12806]  asm_exc_page_fault+0x26/0x30
[  447.758898][T12806] RIP: 0033:0x7f8274773f0e
[  447.758915][T12806] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  447.759012][T12806] RSP: 002b:00007f827330e470 EFLAGS: 00010246
[  447.759032][T12806] RAX: 0000000000000001 RBX: 00007f827330e530 RCX: 0000000000000101
[  447.759103][T12806] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f827330e5d0
[  447.759117][T12806] RBP: 0000000000000102 R08: 00007f826aeef000 R09: 0000000000000000
[  447.759131][T12806] R10: 0000000000000000 R11: 00007f827330e540 R12: 0000000000000001
[  447.759144][T12806] R13: 00007f8274972900 R14: 0000000000000000 R15: 00007f827330e5d0
[  447.759165][T12806]  </TASK>
[  447.759382][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'.
[  447.775057][T12806] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  447.786987][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2783'.
[  447.796547][T12803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.800945][T12801] tipc: MTU too low for tipc bearer
[  447.880540][T12806] loop5: detected capacity change from 0 to 512
[  448.020057][ T8799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.048639][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.057013][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.090690][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.106968][T12806] EXT4-fs: Ignoring removed bh option
[  448.112806][T12806] EXT4-fs: Ignoring removed mblk_io_submit option
[  448.121349][T12806] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  448.134058][T12806] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  448.142897][T12806] EXT4-fs (loop5): orphan cleanup on readonly fs
[  448.150073][T12806] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2786: Failed to acquire dquot type 1
[  448.161572][T12806] loop5: lost filesystem error report for type 5 error -5
[  448.161959][T12806] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2786: Invalid block bitmap block 0 in block_group 0
[  448.182552][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  448.182582][    C0] EXT4-fs (loop5): last error at time 1777771375: ext4_acquire_dquot:7034
[  448.203791][T12806] loop5: lost filesystem error report for type 5 error -117
[  448.209362][T12806] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2786: Invalid block bitmap block 0 in block_group 0
[  448.237072][T12806] loop5: lost filesystem error report for type 5 error -117
[  448.237457][T12806] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2786: Invalid block bitmap block 0 in block_group 0
[  448.259321][T12806] loop5: lost filesystem error report for type 5 error -117
[  448.260069][T12806] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2786: Failed to acquire dquot type 1
[  448.293048][T12806] loop5: lost filesystem error report for type 5 error -28
[  448.293749][T12806] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2786: Failed to acquire dquot type 1
[  448.325810][T12806] loop5: lost filesystem error report for type 5 error -28
[  448.326170][T12806] EXT4-fs (loop5): 1 orphan inode deleted
[  448.371643][T12806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  448.464293][T12806] syz.5.2786 (12806) used greatest stack depth: 7800 bytes left
[  448.482867][T12831] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  448.487091][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.489458][T12831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  448.508068][T12831] vhci_hcd vhci_hcd.0: Device attached
[  448.553047][T12831] loop2: detected capacity change from 0 to 512
[  448.578196][T12831] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[  448.609283][T12831] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  448.628056][T12831] EXT4-fs (loop2): orphan cleanup on readonly fs
[  448.667426][T12831] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.2795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  448.692356][T12831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  448.694152][T12831] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2795: couldn't read orphan inode 13 (err -117)
[  448.703373][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  448.703395][    C0] EXT4-fs (loop2): last error at time 1777771375: ext4_ext_check_inode:521: inode 13
[  448.741619][T12831] loop2: lost filesystem error report for type 5 error -117
[  448.744078][T12831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  448.777808][T12838] loop5: detected capacity change from 0 to 512
[  448.812924][T12839] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.832270][T12838] EXT4-fs: Ignoring removed nobh option
[  448.883722][T12839] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.919417][T12831] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (24564!=0)
[  448.934520][T12839] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.964904][T12838] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #3: comm syz.5.2794: corrupted inode contents
[  448.994417][T12839] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.007757][T12832] vhci_hcd: connection closed
[  449.008607][ T3421] vhci_hcd vhci_hcd.2: stop threads
[  449.023485][T12838] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  449.023986][T12838] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #3: comm syz.5.2794: mark_inode_dirty error
[  449.033274][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  449.033309][    C1] EXT4-fs (loop5): initial error at time 1777771376: ext4_do_update_inode:5690: inode 3
[  449.033354][    C1] EXT4-fs (loop5): last error at time 1777771376: ext4_do_update_inode:5690: inode 3
[  449.075051][ T3421] vhci_hcd vhci_hcd.2: release socket
[  449.090868][ T3421] vhci_hcd vhci_hcd.2: disconnect device
[  449.197967][T11285] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.227252][T11285] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.255602][T11285] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.283413][T11285] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.331003][T12838] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  449.334181][T12838] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #3: comm syz.5.2794: corrupted inode contents
[  449.480014][T12838] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  449.480813][T12838] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.2794: mark_inode_dirty error
[  449.569968][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.634893][T12838] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  449.635914][T12838] __quota_error: 68 callbacks suppressed
[  449.635939][T12838] Quota error (device loop5): write_blk: dquota write failed
[  449.681645][ T3376] usb 5-1: new low-speed USB device number 3 using vhci_hcd
[  449.689132][ T3376] usb 5-1: enqueue for inactive port 0
[  449.694783][ T3376] usb 5-1: enqueue for inactive port 0
[  449.700661][ T3376] usb 5-1: enqueue for inactive port 0
[  449.751197][T12838] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  449.771321][ T3376] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  449.860643][T12846] xt_hashlimit: size too large, truncated to 1048576
[  449.880930][T12838] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2794: Failed to acquire dquot type 0
[  449.946668][T12838] loop5: lost filesystem error report for type 5 error -117
[  449.950075][T12838] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2794: corrupted inode contents
[  450.027914][T12838] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  450.033946][T12838] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.2794: mark_inode_dirty error
[  450.149194][T12838] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  450.150313][T12838] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2794: corrupted inode contents
[  450.323285][T12838] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  450.327205][T12838] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2794: mark_inode_dirty error
[  450.499258][T12838] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  450.500301][T12838] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2794: corrupted inode contents
[  450.655739][T12849] program syz.0.2798 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  450.693152][T12838] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  450.742759][T12838] loop5: lost filesystem error report for type 5 error -117
[  450.745451][T12838] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2794: corrupted inode contents
[  450.915114][T12838] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.2794: mark_inode_dirty error
[  450.998245][T12838] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  451.028395][T12838] EXT4-fs (loop5): 1 truncate cleaned up
[  451.034575][T12838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.058145][T12838] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.072098][T12838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.248751][T12233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.258076][T12860] loop0: detected capacity change from 0 to 764
[  451.278326][   T28] audit: type=1400 audit(1777771378.422:4271): avc:  denied  { mount } for  pid=12859 comm="syz.0.2803" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  451.278882][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2804'.
[  451.314097][T12860] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2803'.
[  451.442318][T12863] loop2: detected capacity change from 0 to 1024
[  451.467855][T12863] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  451.478859][T12863] EXT4-fs (loop2): group descriptors corrupted!
[  451.575274][   T28] audit: type=1326 audit(1777771378.712:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  451.685967][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2804'.
[  451.834948][   T28] audit: type=1326 audit(1777771378.712:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  451.890241][   T28] audit: type=1326 audit(1777771378.712:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  452.233459][   T28] audit: type=1326 audit(1777771378.712:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f827487d60e code=0x7ffc0000
[  452.499405][T11285] Bluetooth: hci0: Frame reassembly failed (-84)
[  452.540552][   T28] audit: type=1326 audit(1777771378.712:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  452.663785][   T28] audit: type=1326 audit(1777771378.722:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  452.689393][   T28] audit: type=1326 audit(1777771378.722:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12861 comm="syz.5.2804" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  452.983095][T12881] loop6: detected capacity change from 0 to 512
[  453.011861][T12881] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  453.292199][ T9293] Bluetooth: hci1: Frame reassembly failed (-84)
[  453.341636][T12881] loop6: detected capacity change from 0 to 512
[  453.359313][T12881] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2809: inode has both inline data and extents flags
[  453.391377][T12881] fserror_report: 3 callbacks suppressed
[  453.391408][T12881] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  453.397802][T12881] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2809: couldn't read orphan inode 15 (err -117)
[  453.407191][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  453.407224][    C1] EXT4-fs (loop6): initial error at time 1777771380: ext4_orphan_get:1397: inode 15
[  453.407340][    C1] EXT4-fs (loop6): last error at time 1777771380: ext4_orphan_get:1397: inode 15
[  453.444590][T12881] fserror_report: 1 callbacks suppressed
[  453.444610][T12881] loop6: lost filesystem error report for type 5 error -117
[  453.444610][T12885] loop2: detected capacity change from 0 to 8192
[  453.602174][T12881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.642917][T12890] loop4: detected capacity change from 0 to 2048
[  453.666657][T12890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.877464][T12894] netlink: 'syz.2.2811': attribute type 6 has an invalid length.
[  454.528801][ T3536] Bluetooth: hci0: command 0x1003 tx timeout
[  454.528923][ T6031] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  454.745371][T12902] loop2: detected capacity change from 0 to 512
[  454.752899][T12900] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2813'.
[  454.795823][T12902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.841582][T12902] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.872238][T12902] tmpfs: Unknown parameter 'inode31'
[  454.933650][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2815'.
[  454.944963][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  454.944982][   T28] audit: type=1400 audit(1777771382.052:4336): avc:  denied  { write } for  pid=12901 comm="syz.2.2814" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  455.301987][ T4869] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  455.308366][ T6031] Bluetooth: hci1: command 0x1003 tx timeout
[  455.314884][   T28] audit: type=1400 audit(1777771382.442:4337): avc:  denied  { getopt } for  pid=12908 comm="syz.0.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  455.508310][T12233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.757295][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.921694][   T28] audit: type=1400 audit(1777771383.072:4338): avc:  denied  { read } for  pid=12922 comm="syz.4.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  456.167306][T12930] loop0: detected capacity change from 0 to 1024
[  456.210905][T12931] loop5: detected capacity change from 0 to 1024
[  456.211924][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.227771][T12931] EXT4-fs (loop5): unable to read superblock
[  456.238161][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.268871][T12930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.284496][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.298450][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.308273][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.318235][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.328284][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.345496][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.358807][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.368508][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.378324][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.388169][T12931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2823'.
[  456.462898][T12934] loop5: detected capacity change from 0 to 512
[  456.490524][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.532361][T12934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.568579][T12934] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  456.585739][T12943] loop0: detected capacity change from 0 to 1024
[  456.622859][T12943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  456.631201][T12943] System zones: 0-1, 3-36
[  456.690794][T12943] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2825: bad orphan inode 134217728
[  456.746398][T12943] loop0: lost filesystem error report for type 5 error -117
[  456.747001][T12943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.784793][T12931] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.2823: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  456.878612][T12955] loop4: detected capacity change from 0 to 2048
[  456.889775][ T3423] Bluetooth: hci0: Frame reassembly failed (-84)
[  456.921277][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.955298][T12955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.137922][T12964] loop2: detected capacity change from 0 to 512
[  457.177199][T12964] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  457.226926][  T117] Bluetooth: hci1: Frame reassembly failed (-84)
[  457.242803][T12964] loop2: detected capacity change from 0 to 512
[  457.269959][T12964] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2830: inode has both inline data and extents flags
[  457.283152][T12964] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  457.309843][T12964] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2830: couldn't read orphan inode 15 (err -117)
[  457.331048][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  457.331109][    C0] EXT4-fs (loop2): initial error at time 1777771384: ext4_orphan_get:1397: inode 15
[  457.331201][    C0] EXT4-fs (loop2): last error at time 1777771384: ext4_orphan_get:1397: inode 15
[  457.385042][T12964] loop2: lost filesystem error report for type 5 error -117
[  457.389192][T12964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.425758][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.438911][T12971] loop5: detected capacity change from 0 to 128
[  457.467137][T12971] FAT-fs (loop5): bogus number of reserved sectors
[  457.473656][T12973] FAULT_INJECTION: forcing a failure.
[  457.473656][T12973] name failslab, interval 1, probability 0, space 0, times 0
[  457.505069][T12971] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  457.506279][   T28] audit: type=1400 audit(1777771384.602:4339): avc:  denied  { write } for  pid=12963 comm="syz.2.2830" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  457.514433][T12971] FAT-fs (loop5): Can't find a valid FAT filesystem
[  457.551677][T12973] CPU: 1 UID: 0 PID: 12973 Comm: syz.0.2834 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  457.551751][T12973] Tainted: [W]=WARN
[  457.551817][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  457.551837][T12973] Call Trace:
[  457.551846][T12973]  <TASK>
[  457.551858][T12973]  __dump_stack+0x1d/0x30
[  457.551946][T12973]  dump_stack_lvl+0x95/0xd0
[  457.551977][T12973]  dump_stack+0x15/0x1b
[  457.552006][T12973]  should_fail_ex+0x263/0x280
[  457.552047][T12973]  should_failslab+0x8c/0xb0
[  457.552160][T12973]  kmem_cache_alloc_noprof+0x66/0x3f0
[  457.552208][T12973]  ? dup_fd+0x3a/0x510
[  457.552250][T12973]  ? proc_fail_nth_write+0x13b/0x160
[  457.552339][T12973]  dup_fd+0x3a/0x510
[  457.552381][T12973]  ? __rcu_read_unlock+0x4e/0x70
[  457.552414][T12973]  __se_sys_close_range+0x120/0x4f0
[  457.552496][T12973]  __x64_sys_close_range+0x43/0x50
[  457.552529][T12973]  x64_sys_call+0x2cdd/0x3020
[  457.552556][T12973]  do_syscall_64+0x12c/0x3b0
[  457.552602][T12973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.552628][T12973] RIP: 0033:0x7f7d76b2cdd9
[  457.552649][T12973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.552675][T12973] RSP: 002b:00007f7d7557f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  457.552776][T12973] RAX: ffffffffffffffda RBX: 00007f7d76da5fa0 RCX: 00007f7d76b2cdd9
[  457.552796][T12973] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 0000000000000000
[  457.552814][T12973] RBP: 00007f7d7557f090 R08: 0000000000000000 R09: 0000000000000000
[  457.552833][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.552895][T12973] R13: 00007f7d76da6038 R14: 00007f7d76da5fa0 R15: 00007ffd9be00d98
[  457.552923][T12973]  </TASK>
[  457.691557][T12971] loop5: detected capacity change from 0 to 256
[  457.806487][T12971] FAT-fs (loop5): unable to read block(197568495616) for building NFS inode
[  457.872318][T12975] netlink: 'syz.0.2835': attribute type 1 has an invalid length.
[  457.888631][T12975] 8021q: adding VLAN 0 to HW filter on device bond10
[  457.944799][   T28] audit: type=1400 audit(1777771385.092:4340): avc:  denied  { watch watch_reads } for  pid=12981 comm="syz.0.2838" path="/proc/1581/net" dev="proc" ino=37875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  457.971757][T12982] loop0: detected capacity change from 0 to 512
[  457.999191][T12982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  458.038984][T12982] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2838: iget: bad i_size value: 38620345925642
[  458.083205][T12982] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  458.083491][T12982] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2838: couldn't read orphan inode 15 (err -117)
[  458.092809][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  458.092825][    C0] EXT4-fs (loop0): initial error at time 1777771385: ext4_orphan_get:1397: inode 15
[  458.092862][    C0] EXT4-fs (loop0): last error at time 1777771385: ext4_orphan_get:1397: inode 15
[  458.154339][T12982] loop0: lost filesystem error report for type 5 error -117
[  458.157490][T12982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.212632][   T28] audit: type=1400 audit(1777771385.322:4341): avc:  denied  { write } for  pid=12981 comm="syz.0.2838" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  458.257405][   T28] audit: type=1400 audit(1777771385.322:4342): avc:  denied  { mount } for  pid=12981 comm="syz.0.2838" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  458.302777][   T28] audit: type=1400 audit(1777771385.382:4343): avc:  denied  { write } for  pid=12981 comm="syz.0.2838" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  458.337124][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.346864][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.375201][   T28] audit: type=1400 audit(1777771385.402:4344): avc:  denied  { ioctl } for  pid=12981 comm="syz.0.2838" path="/560/bus/file1" dev="loop0" ino=19 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  458.400784][T12988] FAULT_INJECTION: forcing a failure.
[  458.400784][T12988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.414153][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.0.2840 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  458.414218][T12988] Tainted: [W]=WARN
[  458.414226][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  458.414243][T12988] Call Trace:
[  458.414251][T12988]  <TASK>
[  458.414261][T12988]  __dump_stack+0x1d/0x30
[  458.414291][T12988]  dump_stack_lvl+0x95/0xd0
[  458.414331][T12988]  dump_stack+0x15/0x1b
[  458.414354][T12988]  should_fail_ex+0x263/0x280
[  458.414394][T12988]  should_fail+0xb/0x20
[  458.414424][T12988]  should_fail_usercopy+0x1a/0x20
[  458.414460][T12988]  _copy_from_user+0x1c/0xb0
[  458.414558][T12988]  ___sys_sendmsg+0xc1/0x1e0
[  458.414755][T12988]  __x64_sys_sendmsg+0xd4/0x160
[  458.414792][T12988]  x64_sys_call+0x194c/0x3020
[  458.414826][T12988]  do_syscall_64+0x12c/0x3b0
[  458.414863][T12988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.414930][T12988] RIP: 0033:0x7f7d76b2cdd9
[  458.414952][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.414977][T12988] RSP: 002b:00007f7d7557f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  458.415047][T12988] RAX: ffffffffffffffda RBX: 00007f7d76da5fa0 RCX: 00007f7d76b2cdd9
[  458.415067][T12988] RDX: 0000000000084000 RSI: 0000200000000500 RDI: 0000000000000003
[  458.415086][T12988] RBP: 00007f7d7557f090 R08: 0000000000000000 R09: 0000000000000000
[  458.415104][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.415127][T12988] R13: 00007f7d76da6038 R14: 00007f7d76da5fa0 R15: 00007ffd9be00d98
[  458.415154][T12988]  </TASK>
[  458.417506][   T28] audit: type=1400 audit(1777771385.522:4345): avc:  denied  { setattr } for  pid=12985 comm="syz.4.2839" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  458.709137][T12993] loop0: detected capacity change from 0 to 512
[  458.754394][T12995] netlink: 'syz.5.2842': attribute type 30 has an invalid length.
[  458.780287][  T117] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  458.790225][T12995] netlink: 'syz.5.2842': attribute type 30 has an invalid length.
[  458.790809][  T117] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  458.881870][  T117] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  458.892222][T12993] loop0: detected capacity change from 0 to 128
[  458.898840][  T117] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.935974][T12993] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  458.952881][T12993] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  458.968774][T12993] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2843: checksumming directory block 0
[  458.981632][ T4869] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  458.984342][ T3536] Bluetooth: hci0: command 0x1003 tx timeout
[  459.038163][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  459.102933][T13004] FAT-fs (loop5): Directory bread(block 64) failed
[  459.109548][T13004] FAT-fs (loop5): Directory bread(block 65) failed
[  459.116234][T13004] FAT-fs (loop5): Directory bread(block 66) failed
[  459.122864][T13004] FAT-fs (loop5): Directory bread(block 67) failed
[  459.129543][T13004] FAT-fs (loop5): Directory bread(block 68) failed
[  459.136249][T13004] FAT-fs (loop5): Directory bread(block 69) failed
[  459.142878][T13004] FAT-fs (loop5): Directory bread(block 70) failed
[  459.149499][T13004] FAT-fs (loop5): Directory bread(block 71) failed
[  459.156084][T13004] FAT-fs (loop5): Directory bread(block 72) failed
[  459.171411][T13004] FAT-fs (loop5): Directory bread(block 73) failed
[  459.191844][T13004] FAULT_INJECTION: forcing a failure.
[  459.191844][T13004] name failslab, interval 1, probability 0, space 0, times 0
[  459.208577][T13004] CPU: 1 UID: 0 PID: 13004 Comm: syz.5.2846 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  459.208666][T13004] Tainted: [W]=WARN
[  459.208675][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  459.208688][T13004] Call Trace:
[  459.208696][T13004]  <TASK>
[  459.208704][T13004]  __dump_stack+0x1d/0x30
[  459.208731][T13004]  dump_stack_lvl+0x95/0xd0
[  459.208807][T13004]  dump_stack+0x15/0x1b
[  459.208827][T13004]  should_fail_ex+0x263/0x280
[  459.208917][T13004]  should_failslab+0x8c/0xb0
[  459.208958][T13004]  kmem_cache_alloc_noprof+0x66/0x3f0
[  459.208996][T13004]  ? do_getname+0x2e/0x1c0
[  459.209016][T13004]  do_getname+0x2e/0x1c0
[  459.209090][T13004]  __se_sys_mkdirat+0x21/0xf0
[  459.209135][T13004]  __x64_sys_mkdirat+0x43/0x50
[  459.209243][T13004]  x64_sys_call+0x2c4e/0x3020
[  459.209272][T13004]  do_syscall_64+0x12c/0x3b0
[  459.209299][T13004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.209329][T13004] RIP: 0033:0x7f82748bbc47
[  459.209351][T13004] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.209387][T13004] RSP: 002b:00007f827330ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  459.209408][T13004] RAX: ffffffffffffffda RBX: 00007f827330eee0 RCX: 00007f82748bbc47
[  459.209474][T13004] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c
[  459.209488][T13004] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000
[  459.209507][T13004] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000100
[  459.209525][T13004] R13: 00007f827330eea0 R14: 0000000000000000 R15: 00002000000001c0
[  459.209610][T13004]  </TASK>
[  459.482862][ T4869] Bluetooth: hci1: command 0x1003 tx timeout
[  459.489365][ T6031] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  459.543109][T13021] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  459.553325][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.607448][T13035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  459.614080][T13035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  459.624125][T13035] vhci_hcd vhci_hcd.0: Device attached
[  459.637548][T13021] EXT4-fs (loop0): 1 truncate cleaned up
[  459.643779][T13021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.659375][T13035] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[  459.679682][ T9293] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.704177][T13035] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  459.712328][T13035] EXT4-fs (loop2): orphan cleanup on readonly fs
[  459.718986][T13001] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.733931][T13001] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.741240][T13001] bridge_slave_0: entered allmulticast mode
[  459.747898][T13001] bridge_slave_0: entered promiscuous mode
[  459.754974][T13035] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.2850: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  459.772855][T13035] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  459.774242][T13001] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.790659][T13001] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.798009][T13001] bridge_slave_1: entered allmulticast mode
[  459.804613][T13001] bridge_slave_1: entered promiscuous mode
[  459.825131][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.834297][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  459.834324][    C1] EXT4-fs (loop2): last error at time 1777771386: ext4_ext_check_inode:521: inode 13
[  459.852475][T13044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  459.859848][T13044] IPv6: NLM_F_CREATE should be set when creating new route
[  459.861596][ T9376] usb 5-1: new low-speed USB device number 4 using vhci_hcd
[  459.872955][T13035] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2850: couldn't read orphan inode 13 (err -117)
[  459.887647][T13035] loop2: lost filesystem error report for type 5 error -117
[  459.900339][ T9293] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.923063][T13035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  459.950295][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.976524][T13035] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (24564!=0)
[  459.993424][T13001] team0: Port device team_slave_0 added
[  459.999766][T13038] vhci_hcd: connection reset by peer
[  460.003104][T13001] team0: Port device team_slave_1 added
[  460.005830][   T12] vhci_hcd vhci_hcd.2: stop threads
[  460.016104][   T12] vhci_hcd vhci_hcd.2: release socket
[  460.021835][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  460.030793][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.037779][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.063740][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.076063][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.083032][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  460.115300][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.132657][ T9293] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.177146][T13001] hsr_slave_0: entered promiscuous mode
[  460.192270][T13001] hsr_slave_1: entered promiscuous mode
[  460.199809][T13001] debugfs: 'hsr0' already exists in 'hsr'
[  460.207423][T13001] Cannot create hsr debugfs directory
[  460.229022][ T9293] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.250481][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.327884][T13057] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  460.350744][T13057] ext4 filesystem being mounted at /564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  460.389709][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  460.389726][   T28] audit: type=1400 audit(1777771387.532:4352): avc:  denied  { write } for  pid=13056 comm="syz.0.2855" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  460.458918][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  460.468489][ T9293] bond9 (unregistering): (slave geneve2): Releasing active interface
[  460.547863][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.567770][T13064] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  460.582113][T13064] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  460.594889][T13064] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.2857: checksumming directory block 0
[  460.615328][T13067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  460.624181][T13067] System zones: 0-1, 3-36
[  460.629078][T13067] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2858: bad orphan inode 134217728
[  460.639840][T13067] loop2: lost filesystem error report for type 5 error -117
[  460.640545][T13067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.662792][ T9293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.672819][ T9293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.682740][ T9293] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  460.693785][ T9293] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface
[  460.704963][ T9293] bond0 (unregistering): Released all slaves
[  460.712517][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  460.722020][ T9293] bond1 (unregistering): (slave veth3): Releasing active interface
[  460.730767][ T9293] bond1 (unregistering): Released all slaves
[  460.744997][ T9293] bond2 (unregistering): (slave veth5): Releasing active interface
[  460.755712][ T9293] bond2 (unregistering): Released all slaves
[  460.766602][ T9293] bond3 (unregistering): (slave veth7): Releasing active interface
[  460.775912][ T9293] bond3 (unregistering): Released all slaves
[  460.786659][ T9293] bond4 (unregistering): (slave veth9): Releasing backup interface
[  460.795960][ T9293] bond4 (unregistering): Released all slaves
[  460.816834][ T9293] bond5 (unregistering): (slave veth11): Releasing backup interface
[  460.826216][ T9293] bond5 (unregistering): Released all slaves
[  460.851649][ T9293] bond6 (unregistering): Released all slaves
[  460.873364][ T9293] bond7 (unregistering): (slave veth13): Releasing active interface
[  460.889606][ T9293] bond7 (unregistering): Released all slaves
[  460.907965][ T9293] bond8 (unregistering): Released all slaves
[  460.916894][ T9293] bond9 (unregistering): Released all slaves
[  460.926387][ T9293] bond10 (unregistering): Released all slaves
[  460.936059][ T9293] bond11 (unregistering): Released all slaves
[  461.053416][T13094] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  461.078050][T13097] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  461.095549][T13094] Quota error (device loop0): v2_read_file_info: Free block number 7 out of range (1, 6).
[  461.108686][T13094] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  461.129851][T13097] Quota error (device loop5): v2_read_file_info: Free block number 7 out of range (1, 6).
[  461.157629][T13097] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  461.175967][T13094] EXT4-fs (loop0): mount failed
[  461.203489][T13097] EXT4-fs (loop5): mount failed
[  461.213260][   T28] audit: type=1400 audit(1777771388.362:4353): avc:  denied  { write } for  pid=13087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.359807][ T9293] hsr_slave_0: left promiscuous mode
[  461.374615][T13113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  461.381298][T13113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  461.405450][ T9293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.436069][ T9293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.448429][T13113] vhci_hcd vhci_hcd.0: Device attached
[  461.467738][   T28] audit: type=1400 audit(1777771388.612:4354): avc:  denied  { write } for  pid=13118 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.503916][T13122] set_capacity_and_notify: 9 callbacks suppressed
[  461.503951][T13122] loop0: detected capacity change from 0 to 512
[  461.518476][T13125] __nla_validate_parse: 103 callbacks suppressed
[  461.518504][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2868'.
[  461.552539][T13122] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[  461.596255][T13122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  461.611647][T13122] EXT4-fs (loop0): orphan cleanup on readonly fs
[  461.625251][T13122] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.2867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  461.668072][T13122] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  461.668363][T13122] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2867: couldn't read orphan inode 13 (err -117)
[  461.677591][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  461.677613][    C1] EXT4-fs (loop0): last error at time 1777771388: ext4_ext_check_inode:521: inode 13
[  461.706230][   T23] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  461.721924][T13122] loop0: lost filesystem error report for type 5 error -117
[  461.723074][T13122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  461.752960][T13128] loop6: detected capacity change from 0 to 512
[  461.786201][T13128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.799118][T13128] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.812560][T13128] tmpfs: Unknown parameter 'inode31'
[  462.094438][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.104732][T13113] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (24564!=0)
[  462.134444][   T28] audit: type=1400 audit(1777771389.272:4355): avc:  denied  { write } for  pid=13127 comm="syz.6.2870" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.162307][T13114] vhci_hcd: connection reset by peer
[  462.173199][ T3423] vhci_hcd vhci_hcd.0: stop threads
[  462.195535][ T3423] vhci_hcd vhci_hcd.0: release socket
[  462.219954][ T3423] vhci_hcd vhci_hcd.0: disconnect device
[  462.232903][T13136] loop2: detected capacity change from 0 to 512
[  462.290915][T13136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.311719][T13136] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.367861][T13136] tmpfs: Unknown parameter 'inode31'
[  462.396540][ T9293] team0 (unregistering): Port device team_slave_1 removed
[  462.419163][ T9293] team0 (unregistering): Port device team_slave_0 removed
[  462.426775][ T1035] IPVS: starting estimator thread 0...
[  462.521307][T13145] IPVS: using max 1776 ests per chain, 88800 per kthread
[  462.531168][   T28] audit: type=1400 audit(1777771389.662:4356): avc:  denied  { write } for  pid=13135 comm="syz.2.2869" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  462.584357][T13001] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  462.603572][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  462.614972][T13001] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  462.634700][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  462.653900][T13001] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  462.663987][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  462.682675][T13001] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  462.693693][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  462.702182][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.794253][ T9293] IPVS: stop unused estimator thread 0...
[  462.856193][T13001] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.864589][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'.
[  462.893115][T13001] 8021q: adding VLAN 0 to HW filter on device team0
[  462.920727][T12233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.932399][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.939534][ T9293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.975646][T13001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  462.983222][   T28] audit: type=1400 audit(1777771390.122:4357): avc:  denied  { write } for  pid=13151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  463.002726][T13001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.042513][T13178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13178 comm=syz.6.2876
[  463.048766][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'.
[  463.082964][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.090092][ T9293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.099970][   T28] audit: type=1400 audit(1777771390.192:4358): avc:  denied  { write } for  pid=13179 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  463.147475][T13178] netlink: 'syz.6.2876': attribute type 1 has an invalid length.
[  463.191586][T13178] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2876'.
[  463.218125][T13183] loop6: detected capacity change from 0 to 512
[  463.237273][T13136] syz.2.2869 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  463.251527][T13136] CPU: 1 UID: 0 PID: 13136 Comm: syz.2.2869 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  463.251617][T13136] Tainted: [W]=WARN
[  463.251627][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  463.251644][T13136] Call Trace:
[  463.251652][T13136]  <TASK>
[  463.251664][T13136]  __dump_stack+0x1d/0x30
[  463.251696][T13136]  dump_stack_lvl+0x95/0xd0
[  463.251723][T13136]  dump_stack+0x15/0x1b
[  463.251810][T13136]  dump_header+0x80/0x240
[  463.251906][T13136]  oom_kill_process+0x295/0x350
[  463.251952][T13136]  out_of_memory+0x97d/0xb80
[  463.251998][T13136]  try_charge_memcg+0x62f/0xa10
[  463.252037][T13136]  __memcg_kmem_charge_page+0x1ce/0x3d0
[  463.252131][T13136]  __alloc_frozen_pages_noprof+0x18a/0x350
[  463.252217][T13136]  alloc_pages_mpol+0xb3/0x260
[  463.252253][T13136]  alloc_pages_noprof+0x8f/0x140
[  463.252284][T13136]  __vmalloc_node_range_noprof+0xaed/0x11c0
[  463.252396][T13136]  __kvmalloc_node_noprof+0x3d4/0x640
[  463.252467][T13136]  ? futex_hash_allocate+0x190/0x9a0
[  463.252509][T13136]  ? futex_hash_allocate+0x190/0x9a0
[  463.252558][T13136]  futex_hash_allocate+0x190/0x9a0
[  463.252612][T13136]  ? cap_task_prctl+0x13f/0x6b0
[  463.252699][T13136]  futex_hash_prctl+0xd8/0xf0
[  463.252739][T13136]  __se_sys_prctl+0x4f4/0x1400
[  463.252768][T13136]  __x64_sys_prctl+0x67/0x80
[  463.252877][T13136]  x64_sys_call+0x2533/0x3020
[  463.252903][T13136]  do_syscall_64+0x12c/0x3b0
[  463.253007][T13136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.253037][T13136] RIP: 0033:0x7fd9adafcdd9
[  463.253057][T13136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  463.253077][T13136] RSP: 002b:00007fd9ac54f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  463.253178][T13136] RAX: ffffffffffffffda RBX: 00007fd9add75fa0 RCX: 00007fd9adafcdd9
[  463.253195][T13136] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e
[  463.253209][T13136] RBP: 00007fd9adb92d69 R08: 0000000000000000 R09: 0000000000000000
[  463.253223][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.253237][T13136] R13: 00007fd9add76038 R14: 00007fd9add75fa0 R15: 00007ffdb034f628
[  463.253278][T13136]  </TASK>
[  463.253288][T13136] memory: usage 307200kB, limit 307200kB, failcnt 453
[  463.465769][T13183] ext4: Bad value for 'data_err'
[  463.513632][T13136] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0
[  463.521704][T13136] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  463.537698][T13136] Memory cgroup stats for /syz2:
[  463.537950][T13136] cache 8192
[  463.691101][T13189] loop5: detected capacity change from 0 to 1024
[  463.725194][T13136] rss 0
[  463.728108][T13136] shmem 0
[  463.731101][T13136] mapped_file 0
[  463.734616][T13136] dirty 0
[  463.737676][T13136] writeback 0
[  463.741007][T13136] workingset_refault_anon 2334
[  463.745820][T13136] workingset_refault_file 1019
[  463.750632][T13136] swap 462848
[  463.753953][T13136] swapcached 10735616
[  463.757970][T13136] pgpgin 364674
[  463.761460][T13136] pgpgout 364672
[  463.765062][T13136] pgfault 409792
[  463.768668][T13136] pgmajfault 353
[  463.772260][T13136] inactive_anon 0
[  463.775955][T13136] active_anon 0
[  463.779480][T13136] inactive_file 0
[  463.797741][T13136] active_file 8192
[  463.802075][T13136] unevictable 0
[  463.805863][T13136] hierarchical_memory_limit 314572800
[  463.852862][T13136] hierarchical_memsw_limit 9223372036854771712
[  463.918979][T13136] total_cache 8192
[  463.955841][T13136] total_rss 0
[  463.983521][T13136] total_shmem 0
[  464.015894][T13136] total_mapped_file 0
[  464.053311][T13136] total_dirty 0
[  464.056883][T13136] total_writeback 0
[  464.060745][T13136] total_workingset_refault_anon 2334
[  464.069943][T13136] total_workingset_refault_file 1019
[  464.075821][T13136] total_swap 462848
[  464.079765][T13136] total_swapcached 10735616
[  464.084668][T13136] total_pgpgin 364674
[  464.088814][T13136] total_pgpgout 364672
[  464.093826][T13136] total_pgfault 409792
[  464.097951][T13136] total_pgmajfault 353
[  464.102200][T13136] total_inactive_anon 0
[  464.106462][T13136] total_active_anon 0
[  464.110546][T13136] total_inactive_file 0
[  464.115099][T13136] total_active_file 8192
[  464.119512][T13136] total_unevictable 0
[  464.126841][T13136] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2869,pid=13135,uid=0
[  464.147087][T13136] Memory cgroup out of memory: Killed process 13135 (syz.2.2869) total-vm:94300kB, anon-rss:1232kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  464.421754][T13191] loop6: detected capacity change from 0 to 1024
[  465.154632][ T9376] usb 5-1: enqueue for inactive port 0
[  465.173654][T13189] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  465.176556][ T9376] usb 5-1: enqueue for inactive port 0
[  465.187097][T13189] EXT4-fs (loop5): group descriptors corrupted!
[  465.709304][T13198] loop0: detected capacity change from 0 to 1024
[  466.182354][T13198] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  466.194105][T13198] EXT4-fs (loop0): group descriptors corrupted!
[  466.497586][   T29] oom_reaper: reaped process 13135 (syz.2.2869), now anon-rss:0kB, file-rss:21252kB, shmem-rss:0kB
[  466.523344][T13191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  466.936167][T13191] System zones: 0-1, 3-36
[  466.951013][T13191] EXT4-fs: error -4 creating inode table initialization thread
[  466.958841][T13191] EXT4-fs (loop6): mount failed
[  467.214011][ T9376] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  467.347948][   T23] usb 1-1: enqueue for inactive port 0
[  467.353843][   T23] usb 1-1: enqueue for inactive port 0
[  467.408687][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.436281][T13001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.451411][   T23] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  467.531571][T13221] program syz.2.2884 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  467.681618][T13231] xt_hashlimit: size too large, truncated to 1048576
[  467.749101][T13001] veth0_vlan: entered promiscuous mode
[  467.768955][T13001] veth1_vlan: entered promiscuous mode
[  467.807346][T13001] veth0_macvtap: entered promiscuous mode
[  467.823372][T13001] veth1_macvtap: entered promiscuous mode
[  467.849257][T13001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.869707][T13001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.891174][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.914271][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.933691][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.955068][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.091322][T13244] loop4: detected capacity change from 0 to 128
[  468.215197][T13248] loop5: detected capacity change from 0 to 1024
[  468.236772][   T28] audit: type=1400 audit(1777771395.342:4359): avc:  denied  { map } for  pid=13243 comm="syz.4.2845" path="socket:[38584]" dev="sockfs" ino=38584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  468.263030][T13248] EXT4-fs (loop5): unable to read superblock
[  468.284167][   T28] audit: type=1400 audit(1777771395.342:4360): avc:  denied  { kexec_image_load } for  pid=13243 comm="syz.4.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  468.307082][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.307082][   T12] loop4: rw=1, sector=145, nr_sectors = 112 limit=128
[  468.329577][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.329577][   T12] loop4: rw=1, sector=265, nr_sectors = 8 limit=128
[  468.344567][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.354648][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.363923][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.363923][   T12] loop4: rw=1, sector=281, nr_sectors = 8 limit=128
[  468.379292][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.388563][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.388563][   T12] loop4: rw=1, sector=297, nr_sectors = 8 limit=128
[  468.402903][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.412115][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.412115][   T12] loop4: rw=1, sector=313, nr_sectors = 8 limit=128
[  468.438853][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.448114][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.448114][   T12] loop4: rw=1, sector=329, nr_sectors = 8 limit=128
[  468.461825][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.461825][   T12] loop4: rw=1, sector=345, nr_sectors = 8 limit=128
[  468.476178][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.487146][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.487146][   T12] loop4: rw=1, sector=361, nr_sectors = 8 limit=128
[  468.508093][T13251] loop5: detected capacity change from 0 to 512
[  468.512885][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.512885][   T12] loop4: rw=1, sector=377, nr_sectors = 8 limit=128
[  468.527878][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.544202][   T12] kworker/u8:0: attempt to access beyond end of device
[  468.544202][   T12] loop4: rw=1, sector=393, nr_sectors = 8 limit=128
[  468.561580][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.570087][   T28] audit: type=1400 audit(1777771395.712:4361): avc:  denied  { ioctl } for  pid=13257 comm="syz.0.2894" path="socket:[39478]" dev="sockfs" ino=39478 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  468.574955][T13260] netlink: 'syz.6.2893': attribute type 1 has an invalid length.
[  468.622058][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.664454][T13261] loop2: detected capacity change from 0 to 2048
[  468.666948][   T28] audit: type=1400 audit(1777771395.722:4362): avc:  denied  { shutdown } for  pid=13254 comm="syz.6.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  468.694627][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'.
[  468.754080][T13251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.792158][T13251] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  468.799576][T13261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.812595][T13260] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  468.815226][T13261] ext4 filesystem being mounted at /558/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  468.876855][T13248] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.2890: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  468.920481][   T28] audit: type=1400 audit(1777771396.052:4363): avc:  denied  { write } for  pid=13252 comm="syz.2.2892" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  469.006643][   T28] audit: type=1326 audit(1777771396.152:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13279 comm="syz.6.2899" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  469.062224][   T28] audit: type=1326 audit(1777771396.182:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13279 comm="syz.6.2899" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  469.126189][   T28] audit: type=1326 audit(1777771396.182:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13279 comm="syz.6.2899" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  469.185229][   T28] audit: type=1326 audit(1777771396.182:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13279 comm="syz.6.2899" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa187a0cdd9 code=0x7ffc0000
[  469.213371][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.294286][T13289] FAULT_INJECTION: forcing a failure.
[  469.294286][T13289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.318949][T13289] CPU: 1 UID: 0 PID: 13289 Comm: syz.5.2901 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  469.319021][T13289] Tainted: [W]=WARN
[  469.319029][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  469.319045][T13289] Call Trace:
[  469.319063][T13289]  <TASK>
[  469.319075][T13289]  __dump_stack+0x1d/0x30
[  469.319112][T13289]  dump_stack_lvl+0x95/0xd0
[  469.319141][T13289]  dump_stack+0x15/0x1b
[  469.319164][T13289]  should_fail_ex+0x263/0x280
[  469.319236][T13289]  should_fail+0xb/0x20
[  469.319268][T13289]  should_fail_usercopy+0x1a/0x20
[  469.319304][T13289]  _copy_to_user+0x20/0xa0
[  469.319434][T13289]  vt_ioctl+0x1672/0x18d0
[  469.319474][T13289]  tty_ioctl+0x7d7/0xb80
[  469.319514][T13289]  ? __pfx_tty_ioctl+0x10/0x10
[  469.319545][T13289]  __se_sys_ioctl+0xce/0x140
[  469.319579][T13289]  __x64_sys_ioctl+0x43/0x50
[  469.319617][T13289]  x64_sys_call+0x1563/0x3020
[  469.319783][T13289]  do_syscall_64+0x12c/0x3b0
[  469.319813][T13289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.319836][T13289] RIP: 0033:0x7f82748bcdd9
[  469.319856][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.319931][T13289] RSP: 002b:00007f827330f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  469.319958][T13289] RAX: ffffffffffffffda RBX: 00007f8274b35fa0 RCX: 00007f82748bcdd9
[  469.319986][T13289] RDX: 0000200000000740 RSI: 0000000000004b72 RDI: 0000000000000008
[  469.320003][T13289] RBP: 00007f827330f090 R08: 0000000000000000 R09: 0000000000000000
[  469.320020][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.320036][T13289] R13: 00007f8274b36038 R14: 00007f8274b35fa0 R15: 00007ffe9c46f018
[  469.320063][T13289]  </TASK>
[  469.592026][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.794113][T13300] loop0: detected capacity change from 0 to 164
[  469.852518][T13305] loop0: detected capacity change from 0 to 1024
[  469.861769][T13305] EXT4-fs (loop0): unable to read superblock
[  469.975699][T13307] loop0: detected capacity change from 0 to 512
[  470.015015][T13307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.058613][T13307] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  470.128950][T13312] 8021q: VLANs not supported on ip6_vti0
[  470.210745][   T28] audit: type=1400 audit(1777771397.322:4368): avc:  denied  { write } for  pid=13313 comm="syz.2.2908" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  470.284273][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.448089][T13333] netlink: 'syz.0.2914': attribute type 1 has an invalid length.
[  470.613916][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.640889][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.835227][T13340] loop0: detected capacity change from 0 to 512
[  470.861068][T13340] EXT4-fs warning (device loop0): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  470.964627][ T3423] Bluetooth: hci0: Frame reassembly failed (-84)
[  471.002313][T13345] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  471.008901][T13345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  471.018873][T13340] loop0: detected capacity change from 0 to 512
[  471.036870][T13340] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2916: inode has both inline data and extents flags
[  471.051039][T13345] vhci_hcd vhci_hcd.0: Device attached
[  471.069058][T13340] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  471.072914][T13340] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2916: couldn't read orphan inode 15 (err -117)
[  471.082714][T13345] loop4: detected capacity change from 0 to 512
[  471.104067][T13340] loop0: lost filesystem error report for type 5 error -117
[  471.110340][T13340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.135101][T13345] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0)
[  471.168626][T13345] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  471.187127][T13345] EXT4-fs (loop4): orphan cleanup on readonly fs
[  471.196389][T13345] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.2919: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  471.214493][T13345] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  471.216009][T13345] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2919: couldn't read orphan inode 13 (err -117)
[  471.225235][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  471.225257][    C1] EXT4-fs (loop4): last error at time 1777771398: ext4_ext_check_inode:521: inode 13
[  471.253619][T13345] loop4: lost filesystem error report for type 5 error -117
[  471.258603][T13345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  471.282649][T13345] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (24564!=0)
[  471.295743][T13347] vhci_hcd: connection closed
[  471.295897][ T3421] vhci_hcd vhci_hcd.4: stop threads
[  471.306447][ T3421] vhci_hcd vhci_hcd.4: release socket
[  471.312320][ T3421] vhci_hcd vhci_hcd.4: disconnect device
[  471.397797][   T23] usb 9-1: new low-speed USB device number 3 using vhci_hcd
[  471.405258][   T23] usb 9-1: enqueue for inactive port 0
[  471.410850][   T23] usb 9-1: enqueue for inactive port 0
[  471.417111][   T23] usb 9-1: enqueue for inactive port 0
[  471.491362][   T23] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  471.825718][T13001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.397441][T13379] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  472.424799][T13380] netlink: 'syz.6.2927': attribute type 1 has an invalid length.
[  472.440632][T13377] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.2928: checksumming directory block 0
[  472.787348][T13403] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  472.814231][T13403] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  472.921317][T13401] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  472.951203][T13401] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8223 with max blocks 513 with error 28
[  472.965705][T13401] EXT4-fs (loop5): This should not happen!! Data will be lost
[  472.965705][T13401] 
[  472.975482][T13401] EXT4-fs (loop5): Total free blocks count 0
[  472.981571][ T3536] Bluetooth: hci0: command 0x1003 tx timeout
[  472.987922][ T6031] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  472.994746][T13401] EXT4-fs (loop5): Free/Dirty block details
[  473.000698][T13401] EXT4-fs (loop5): free_blocks=66060288
[  473.006339][T13401] EXT4-fs (loop5): dirty_blocks=528
[  473.011620][T13401] EXT4-fs (loop5): Block reservation details
[  473.017645][T13401] EXT4-fs (loop5): i_reserved_data_blocks=33
[  473.105436][T13409] set_capacity_and_notify: 4 callbacks suppressed
[  473.105456][T13409] loop4: detected capacity change from 0 to 2048
[  473.153692][T13415] program syz.6.2941 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  473.180507][ T4131] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  473.280536][T13417] loop6: detected capacity change from 0 to 164
[  473.322109][T13419] loop5: detected capacity change from 0 to 128
[  473.352780][T13419] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  473.374501][T13423] loop6: detected capacity change from 0 to 128
[  473.401208][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  473.413289][   T28] audit: type=1400 audit(1777771400.502:4378): avc:  denied  { append } for  pid=13424 comm="syz.0.2946" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  473.452329][T13423] loop6: detected capacity change from 0 to 512
[  473.458686][   T28] audit: type=1400 audit(1777771400.552:4379): avc:  denied  { ioctl } for  pid=13424 comm="syz.0.2946" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  473.459151][T13423] EXT4-fs: Ignoring removed nobh option
[  473.511044][T13427] loop2: detected capacity change from 0 to 512
[  473.535929][T13419] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2942: checksumming directory block 0
[  473.603914][   T28] audit: type=1400 audit(1777771400.682:4380): avc:  denied  { create } for  pid=13431 comm="syz.0.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  473.650638][T13427] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.676063][T13427] tmpfs: Unknown parameter 'inode31'
[  473.690766][T13445] FAULT_INJECTION: forcing a failure.
[  473.690766][T13445] name failslab, interval 1, probability 0, space 0, times 0
[  473.752891][T13423] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.2945: corrupted inode contents
[  473.766924][T13445] CPU: 1 UID: 0 PID: 13445 Comm: syz.0.2952 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  473.766958][T13445] Tainted: [W]=WARN
[  473.766965][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  473.766978][T13445] Call Trace:
[  473.767057][T13445]  <TASK>
[  473.767066][T13445]  __dump_stack+0x1d/0x30
[  473.767098][T13445]  dump_stack_lvl+0x95/0xd0
[  473.767127][T13445]  dump_stack+0x15/0x1b
[  473.767199][T13445]  should_fail_ex+0x263/0x280
[  473.767230][T13445]  should_failslab+0x8c/0xb0
[  473.767266][T13445]  kmem_cache_alloc_noprof+0x66/0x3f0
[  473.767403][T13445]  ? __anon_vma_prepare+0x70/0x2f0
[  473.767432][T13445]  ? __alloc_frozen_pages_noprof+0x18a/0x350
[  473.767481][T13445]  __anon_vma_prepare+0x70/0x2f0
[  473.767513][T13445]  do_wp_page+0x1910/0x2040
[  473.767549][T13445]  ? _raw_spin_lock+0x52/0xa0
[  473.767582][T13445]  ? __rcu_read_lock+0x36/0x50
[  473.767680][T13445]  handle_mm_fault+0x8b9/0x2e70
[  473.767710][T13445]  ? vma_start_read+0x1c7/0x2c0
[  473.767749][T13445]  do_user_addr_fault+0x62f/0x1050
[  473.767846][T13445]  ? ksys_mmap_pgoff+0xc1/0x310
[  473.767873][T13445]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  473.767900][T13445]  ? arch_exit_to_user_mode_prepare+0x26/0x60
[  473.767926][T13445]  ? trace_page_fault_user+0x1f/0xa0
[  473.768109][T13445]  exc_page_fault+0x62/0xa0
[  473.768138][T13445]  asm_exc_page_fault+0x26/0x30
[  473.768167][T13445] RIP: 0033:0x7f7d769e3e63
[  473.768189][T13445] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  473.768265][T13445] RSP: 002b:00007f7d7557e470 EFLAGS: 00010202
[  473.768343][T13445] RAX: 0000000000000400 RBX: 00007f7d7557e530 RCX: 00007f7d6d15f000
[  473.768363][T13445] RDX: 00007f7d7557e6d0 RSI: 0000000000000009 RDI: 00007f7d7557e5d0
[  473.768378][T13445] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009f
[  473.768391][T13445] R10: 00000000000000b8 R11: 00007f7d7557e530 R12: 0000000000000001
[  473.768405][T13445] R13: 00007f7d76be2900 R14: 0000000000000020 R15: 00007f7d7557e5d0
[  473.768431][T13445]  </TASK>
[  473.872067][   T28] audit: type=1400 audit(1777771400.852:4381): avc:  denied  { setopt } for  pid=13442 comm="syz.5.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  473.877246][T13445] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  473.948791][T13423] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  474.018347][T13445] loop0: detected capacity change from 0 to 512
[  474.043016][T13423] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #3: comm syz.6.2945: mark_inode_dirty error
[  474.055513][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  474.055552][    C1] EXT4-fs (loop6): initial error at time 1777771401: ext4_do_update_inode:5690: inode 3
[  474.055801][    C1] EXT4-fs (loop6): last error at time 1777771401: ext4_do_update_inode:5690: inode 3
[  474.119458][T13445] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.2952: corrupted inode contents
[  474.131971][T13423] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  474.144618][T13445] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  474.165703][T13454] __nla_validate_parse: 212 callbacks suppressed
[  474.165819][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2954'.
[  474.178595][T13423] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.2945: corrupted inode contents
[  474.191764][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  474.208638][    C1] EXT4-fs (loop0): initial error at time 1777771401: ext4_do_update_inode:5690: inode 15
[  474.218573][    C1] EXT4-fs (loop0): last error at time 1777771401: ext4_do_update_inode:5690: inode 15
[  474.229166][T13445] EXT4-fs (loop0): Remounting filesystem read-only
[  474.242834][T13445] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30)
[  474.252103][T13445] EXT4-fs (loop0): 1 orphan inode deleted
[  474.252596][T13423] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  474.258078][T13423] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.2945: mark_inode_dirty error
[  474.259513][T13445] EXT4-fs mount: 10 callbacks suppressed
[  474.259558][T13445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.267159][T13423] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  474.300796][T13423] Quota error (device loop6): write_blk: dquota write failed
[  474.323131][T13423] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  474.335464][T13423] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2945: Failed to acquire dquot type 0
[  474.348815][T13423] loop6: lost filesystem error report for type 5 error -117
[  474.394768][T13423] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2945: corrupted inode contents
[  474.396564][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.421041][T13423] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  474.427188][T13457] netlink: 'syz.4.2955': attribute type 1 has an invalid length.
[  474.444756][T13423] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #16: comm syz.6.2945: mark_inode_dirty error
[  474.456382][T13423] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  474.456589][T13423] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2945: corrupted inode contents
[  474.482301][T13423] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  474.482689][T13423] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2945: mark_inode_dirty error
[  474.511405][T13423] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2945: corrupted inode contents
[  474.568394][   T28] audit: type=1400 audit(1777771401.712:4382): avc:  denied  { write } for  pid=13426 comm="syz.2.2947" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  474.651890][T13461] vlan2: entered allmulticast mode
[  474.658707][T13423] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  474.668815][T13461] veth0_to_bond: entered allmulticast mode
[  474.674777][T13423] loop6: lost filesystem error report for type 5 error -117
[  474.679953][T13423] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #16: comm syz.6.2945: corrupted inode contents
[  474.735797][T13423] EXT4-fs error (device loop6): ext4_truncate:4690: inode #16: comm syz.6.2945: mark_inode_dirty error
[  474.757402][T13470] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
[  474.770219][T13470] audit: out of memory in audit_log_start
[  474.776125][   T28] audit: type=1400 audit(1777771401.922:4383): avc:  denied  { connect } for  pid=13467 comm="syz.5.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  474.797465][T13423] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  474.813782][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2958'.
[  474.823519][T13423] loop6: lost filesystem error report for type 5 error -117
[  474.838973][T13423] EXT4-fs (loop6): 1 truncate cleaned up
[  474.852395][T13423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.864913][T13423] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.875184][T13475] loop4: detected capacity change from 0 to 128
[  474.924164][T13423] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.934579][T13475] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  474.976610][T13475] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  475.088442][T13482] loop0: detected capacity change from 0 to 1024
[  475.095681][T13001] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  475.109928][T13482] EXT4-fs (loop0): unable to read superblock
[  475.147453][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.190775][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.220061][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.230331][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.250386][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.250828][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.251669][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.252122][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2962'.
[  475.374205][T13495] netlink: 'syz.6.2966': attribute type 21 has an invalid length.
[  475.432225][T13497] FAULT_INJECTION: forcing a failure.
[  475.432225][T13497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.432258][T13497] CPU: 1 UID: 0 PID: 13497 Comm: syz.6.2967 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  475.432342][T13497] Tainted: [W]=WARN
[  475.432352][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  475.432367][T13497] Call Trace:
[  475.432374][T13497]  <TASK>
[  475.432382][T13497]  __dump_stack+0x1d/0x30
[  475.432485][T13497]  dump_stack_lvl+0x95/0xd0
[  475.432513][T13497]  dump_stack+0x15/0x1b
[  475.432532][T13497]  should_fail_ex+0x263/0x280
[  475.432664][T13497]  should_fail+0xb/0x20
[  475.432708][T13497]  should_fail_usercopy+0x1a/0x20
[  475.432794][T13497]  _copy_to_user+0x20/0xa0
[  475.432898][T13497]  simple_read_from_buffer+0xb5/0x130
[  475.432944][T13497]  proc_fail_nth_read+0x10e/0x150
[  475.433058][T13497]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  475.433145][T13497]  vfs_read+0x1ab/0x7f0
[  475.433182][T13497]  ? __rcu_read_unlock+0x4e/0x70
[  475.433210][T13497]  ? __fget_files+0x184/0x1c0
[  475.433237][T13497]  ? mutex_lock+0x57/0x90
[  475.433321][T13497]  ksys_read+0xdc/0x1a0
[  475.433351][T13497]  __x64_sys_read+0x40/0x50
[  475.433380][T13497]  x64_sys_call+0x2886/0x3020
[  475.433440][T13497]  do_syscall_64+0x12c/0x3b0
[  475.433475][T13497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.433504][T13497] RIP: 0033:0x7fa1879cd60e
[  475.433524][T13497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  475.433547][T13497] RSP: 002b:00007fa186466fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  475.433643][T13497] RAX: ffffffffffffffda RBX: 00007fa1864676c0 RCX: 00007fa1879cd60e
[  475.433664][T13497] RDX: 000000000000000f RSI: 00007fa1864670a0 RDI: 0000000000000003
[  475.433682][T13497] RBP: 00007fa186467090 R08: 0000000000000000 R09: 0000000000000000
[  475.433696][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.433721][T13497] R13: 00007fa187c86038 R14: 00007fa187c85fa0 R15: 00007ffc9a63aca8
[  475.433747][T13497]  </TASK>
[  475.479942][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.541448][T13500] loop2: detected capacity change from 0 to 1024
[  475.595802][T13500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  475.595934][T13500] System zones: 0-1, 3-36
[  475.596712][T13500] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2968: bad orphan inode 134217728
[  475.596743][T13500] loop2: lost filesystem error report for type 5 error -117
[  475.597413][T13500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.993092][T13519] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙'
[  476.012471][T13519] netlink: 'syz.6.2974': attribute type 10 has an invalid length.
[  476.041622][T13519] dummy0: entered promiscuous mode
[  476.048326][T13519] dummy0: entered allmulticast mode
[  476.055194][T13519] batman_adv: batadv0: Interface deactivated: dummy0
[  476.062168][T13519] batman_adv: batadv0: Removing interface: dummy0
[  476.064544][T13519] bridge0: port 3(dummy0) entered blocking state
[  476.092252][T13519] bridge0: port 3(dummy0) entered disabled state
[  476.100114][T13519] bridge0: port 3(dummy0) entered blocking state
[  476.106617][T13519] bridge0: port 3(dummy0) entered listening state
[  476.461663][T13533] FAULT_INJECTION: forcing a failure.
[  476.461663][T13533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.474897][T13533] CPU: 0 UID: 0 PID: 13533 Comm: syz.5.2977 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  476.474937][T13533] Tainted: [W]=WARN
[  476.474945][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  476.474958][T13533] Call Trace:
[  476.474967][T13533]  <TASK>
[  476.474978][T13533]  __dump_stack+0x1d/0x30
[  476.475051][T13533]  dump_stack_lvl+0x95/0xd0
[  476.475077][T13533]  dump_stack+0x15/0x1b
[  476.475158][T13533]  should_fail_ex+0x263/0x280
[  476.475190][T13533]  should_fail+0xb/0x20
[  476.475223][T13533]  should_fail_usercopy+0x1a/0x20
[  476.475314][T13533]  strncpy_from_user+0x27/0x250
[  476.475344][T13533]  ? kmem_cache_alloc_noprof+0x18c/0x3f0
[  476.475385][T13533]  do_getname+0x59/0x1c0
[  476.475406][T13533]  __se_sys_mkdirat+0x21/0xf0
[  476.475449][T13533]  __x64_sys_mkdirat+0x43/0x50
[  476.475491][T13533]  x64_sys_call+0x2c4e/0x3020
[  476.475516][T13533]  do_syscall_64+0x12c/0x3b0
[  476.475567][T13533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.475604][T13533] RIP: 0033:0x7f82748bbc47
[  476.475637][T13533] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.475720][T13533] RSP: 002b:00007f82732cce58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  476.475745][T13533] RAX: ffffffffffffffda RBX: 00007f82732ccee0 RCX: 00007f82748bbc47
[  476.475764][T13533] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c
[  476.475796][T13533] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000
[  476.475815][T13533] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0
[  476.475833][T13533] R13: 00007f82732ccea0 R14: 0000000000000000 R15: 0000000000000000
[  476.475856][T13533]  </TASK>
[  476.530947][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.884627][T13539] netlink: 'syz.4.2982': attribute type 3 has an invalid length.
[  478.203635][T13581] set_capacity_and_notify: 5 callbacks suppressed
[  478.203937][T13581] loop5: detected capacity change from 0 to 512
[  478.312432][T13581] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  478.402920][T13585] loop4: detected capacity change from 0 to 512
[  478.453176][T13585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.496621][T13581] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  478.514362][T13585] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  478.567607][T13585] tmpfs: Unknown parameter 'inode31'
[  478.595748][T13581] __quota_error: 6 callbacks suppressed
[  478.595891][T13581] Quota error (device loop5): write_blk: dquota write failed
[  478.602314][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  478.602725][    C0] EXT4-fs (loop5): initial error at time 1777771405: ext4_mb_generate_buddy:1317
[  478.603127][    C0] EXT4-fs (loop5): last error at time 1777771405: ext4_mb_generate_buddy:1317
[  478.643701][T13581] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  478.652853][T13581] Quota error (device loop5): write_blk: dquota write failed
[  478.660275][T13581] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  478.670176][T13581] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2994: Failed to acquire dquot type 1
[  478.682024][T13581] loop5: lost filesystem error report for type 5 error -28
[  478.682317][T13581] EXT4-fs (loop5): 1 truncate cleaned up
[  478.695951][T13581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.712988][   T28] audit: type=1400 audit(1777771405.862:4390): avc:  denied  { write } for  pid=13584 comm="syz.4.2996" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  478.790760][T13581] EXT4-fs error (device loop5): __ext4_remount:6837: comm syz.5.2994: Abort forced by user
[  478.801409][T13581] EXT4-fs (loop5): Remounting filesystem read-only
[  478.808021][T13581] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  478.877263][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.025748][T13596] netlink: 'syz.6.2999': attribute type 21 has an invalid length.
[  479.242595][   T28] audit: type=1326 audit(1777771406.392:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.5.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  479.271050][   T28] audit: type=1326 audit(1777771406.402:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.5.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  479.296558][   T28] audit: type=1326 audit(1777771406.402:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.5.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  479.322121][   T28] audit: type=1326 audit(1777771406.402:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.5.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  479.357381][T13611] loop5: detected capacity change from 0 to 1024
[  479.372366][T13611] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  479.406866][T13611] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  479.425487][T13611] EXT4-fs (loop5): orphan cleanup on readonly fs
[  479.432981][   T28] audit: type=1326 audit(1777771406.402:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.5.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82748bcdd9 code=0x7ffc0000
[  479.461780][T13611] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.3002: Freeing blocks not in datazone - block = 0, count = 4096
[  479.501401][T13611] loop5: lost filesystem error report for type 5 error -117
[  479.503052][T13611] EXT4-fs (loop5): 1 orphan inode deleted
[  479.550323][T13611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  479.657849][T13614] usb usb5: usbfs: process 13614 (syz.2.3003) did not claim interface 0 before use
[  479.685887][T13614] __nla_validate_parse: 101 callbacks suppressed
[  479.685905][T13614] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3003'.
[  479.705995][T13001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.708250][T13615] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 16: comm syz.5.3002: path /589/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  479.792921][T13619] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3004'.
[  479.841163][T13567] syz.0.2983 (13567) used greatest stack depth: 6864 bytes left
[  480.308574][T13642] FAULT_INJECTION: forcing a failure.
[  480.308574][T13642] name failslab, interval 1, probability 0, space 0, times 0
[  480.321291][T13642] CPU: 0 UID: 0 PID: 13642 Comm: syz.2.3010 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  480.321387][T13642] Tainted: [W]=WARN
[  480.321396][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  480.321489][T13642] Call Trace:
[  480.321496][T13642]  <TASK>
[  480.321504][T13642]  __dump_stack+0x1d/0x30
[  480.321537][T13642]  dump_stack_lvl+0x95/0xd0
[  480.321638][T13642]  dump_stack+0x15/0x1b
[  480.321747][T13642]  should_fail_ex+0x263/0x280
[  480.321786][T13642]  should_failslab+0x8c/0xb0
[  480.321818][T13642]  __kvmalloc_node_noprof+0x155/0x640
[  480.321840][T13642]  ? xt_alloc_entry_offsets+0x4d/0x60
[  480.322006][T13642]  ? __account_obj_stock+0x3ba/0x5f0
[  480.322032][T13642]  xt_alloc_entry_offsets+0x4d/0x60
[  480.322066][T13642]  translate_table+0xa8/0x10d0
[  480.322095][T13642]  ? __memcg_slab_post_alloc_hook+0x34f/0x7d0
[  480.322133][T13642]  ? should_fail_ex+0xd9/0x280
[  480.322170][T13642]  ? _copy_from_user+0x89/0xb0
[  480.322287][T13642]  do_ipt_set_ctl+0x6d0/0x8e0
[  480.322315][T13642]  ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40
[  480.322351][T13642]  ? irqentry_exit+0x7d/0x5b0
[  480.322383][T13642]  nf_setsockopt+0x199/0x1b0
[  480.322481][T13642]  ip_setsockopt+0x102/0x110
[  480.322505][T13642]  raw_setsockopt+0xbd/0x150
[  480.322573][T13642]  sock_common_setsockopt+0x69/0x80
[  480.322615][T13642]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  480.322708][T13642]  __sys_setsockopt+0x184/0x200
[  480.322731][T13642]  __x64_sys_setsockopt+0x64/0x80
[  480.322791][T13642]  x64_sys_call+0x2327/0x3020
[  480.322839][T13642]  do_syscall_64+0x12c/0x3b0
[  480.322867][T13642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.322926][T13642] RIP: 0033:0x7fd9adafcdd9
[  480.322947][T13642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.323017][T13642] RSP: 002b:00007fd9ac50d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  480.323038][T13642] RAX: ffffffffffffffda RBX: 00007fd9add76180 RCX: 00007fd9adafcdd9
[  480.323083][T13642] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007
[  480.323100][T13642] RBP: 00007fd9ac50d090 R08: 0000000000000308 R09: 0000000000000000
[  480.323193][T13642] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[  480.323211][T13642] R13: 00007fd9add76218 R14: 00007fd9add76180 R15: 00007ffdb034f628
[  480.323274][T13642]  </TASK>
[  480.338679][T13639] loop6: detected capacity change from 0 to 1024
[  480.880676][ T4131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.944121][T13639] EXT4-fs (loop6): unable to read superblock
[  481.024246][T13648] FAULT_INJECTION: forcing a failure.
[  481.024246][T13648] name failslab, interval 1, probability 0, space 0, times 0
[  481.064357][T13648] CPU: 0 UID: 0 PID: 13648 Comm: syz.4.3014 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  481.064412][T13648] Tainted: [W]=WARN
[  481.064422][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  481.064440][T13648] Call Trace:
[  481.064448][T13648]  <TASK>
[  481.064459][T13648]  __dump_stack+0x1d/0x30
[  481.064492][T13648]  dump_stack_lvl+0x95/0xd0
[  481.064582][T13648]  dump_stack+0x15/0x1b
[  481.064605][T13648]  should_fail_ex+0x263/0x280
[  481.064644][T13648]  should_failslab+0x8c/0xb0
[  481.064686][T13648]  __kmalloc_noprof+0xb8/0x4d0
[  481.064746][T13648]  ? nla_strdup+0x78/0xc0
[  481.064788][T13648]  nla_strdup+0x78/0xc0
[  481.064833][T13648]  nf_tables_newtable+0x3ba/0xea0
[  481.064882][T13648]  nfnetlink_rcv+0xc15/0x1720
[  481.064942][T13648]  netlink_unicast+0x5a8/0x680
[  481.065019][T13648]  netlink_sendmsg+0x5c8/0x6f0
[  481.065082][T13648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  481.065114][T13648]  ____sys_sendmsg+0x563/0x5b0
[  481.065150][T13648]  ___sys_sendmsg+0x195/0x1e0
[  481.065196][T13648]  __x64_sys_sendmsg+0xd4/0x160
[  481.065305][T13648]  x64_sys_call+0x194c/0x3020
[  481.065349][T13648]  do_syscall_64+0x12c/0x3b0
[  481.065384][T13648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.065415][T13648] RIP: 0033:0x7f47123fcdd9
[  481.065436][T13648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.065462][T13648] RSP: 002b:00007f4710e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.065544][T13648] RAX: ffffffffffffffda RBX: 00007f4712675fa0 RCX: 00007f47123fcdd9
[  481.065564][T13648] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003
[  481.065583][T13648] RBP: 00007f4710e4f090 R08: 0000000000000000 R09: 0000000000000000
[  481.065613][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.065626][T13648] R13: 00007f4712676038 R14: 00007f4712675fa0 R15: 00007ffde867f8f8
[  481.065646][T13648]  </TASK>
[  481.337228][T13650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.345874][T13650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.467685][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.496232][T13650] tmpfs: Bad value for 'mpol'
[  481.514190][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.558699][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.589612][T13650] loop5: detected capacity change from 0 to 512
[  481.642931][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.643482][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.646046][T13650] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  481.667883][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.668545][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  481.669088][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'.
[  482.262352][T13666] loop2: detected capacity change from 0 to 1024
[  482.289826][T13666] EXT4-fs (loop2): unable to read superblock
[  482.315355][T13668] loop4: detected capacity change from 0 to 128
[  482.364652][T13668] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  482.433742][T13668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  482.448685][T13668] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3018: checksumming directory block 0
[  482.474714][T13673] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  482.506058][T13673] hsr_slave_1 (unregistering): left promiscuous mode
[  482.568764][T13001] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  482.889112][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.931145][ T2979] ==================================================================
[  482.939329][ T2979] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current
[  482.947716][ T2979] 
[  482.950081][ T2979] write to 0xffff888103cf76a0 of 8 bytes by task 13059 on cpu 0:
[  482.957839][ T2979]  inode_set_ctime_current+0x5f2/0x8c0
[  482.963377][ T2979]  simple_unlink+0x2d/0x80
[  482.967873][ T2979]  shmem_unlink+0x12d/0x140
[  482.972441][ T2979]  vfs_unlink+0x1c7/0x490
[  482.976822][ T2979]  filename_unlinkat+0x1e2/0x410
[  482.981822][ T2979]  __se_sys_unlink+0x2b/0xe0
[  482.984110][T13656] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.986476][ T2979]  __x64_sys_unlink+0x1f/0x30
[  482.998241][ T2979]  x64_sys_call+0x2eb6/0x3020
[  483.002976][ T2979]  do_syscall_64+0x12c/0x3b0
[  483.007642][ T2979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.013582][ T2979] 
[  483.014165][T13656] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.015971][ T2979] read to 0xffff888103cf76a0 of 8 bytes by task 2979 on cpu 1:
[  483.015996][ T2979]  atime_needs_update+0x2ef/0x3e0
[  483.035869][ T2979]  touch_atime+0x4a/0x330
[  483.040254][ T2979]  do_readlinkat+0x137/0x2f0
[  483.043581][T13656] bridge_slave_0: entered allmulticast mode
[  483.044896][ T2979]  __x64_sys_readlink+0x47/0x60
[  483.055777][ T2979]  x64_sys_call+0x2b51/0x3020
[  483.060506][ T2979]  do_syscall_64+0x12c/0x3b0
[  483.065158][ T2979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.071098][ T2979] 
[  483.073393][T13656] bridge_slave_0: entered promiscuous mode
[  483.073472][ T2979] value changed: 0x0000000069f6a391 -> 0x0000000069f6a392
[  483.086439][ T2979] 
[  483.088795][ T2979] Reported by Kernel Concurrency Sanitizer on:
[  483.094981][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  483.105445][ T2979] Tainted: [W]=WARN
[  483.109276][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.119443][ T2979] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  483.132336][T13656] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.203923][T13656] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.223979][T13656] bridge_slave_1: entered allmulticast mode
[  483.230728][T13656] bridge_slave_1: entered promiscuous mode
[  483.257442][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.339236][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.402963][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.584839][   T12] bridge_slave_1: left allmulticast mode
[  483.591295][   T12] bridge_slave_1: left promiscuous mode
[  483.597964][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.609140][   T12] bridge_slave_0: left allmulticast mode
[  483.621284][   T12] bridge_slave_0: left promiscuous mode
[  483.628281][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.638751][   T12] pimreg: left allmulticast mode
[  483.700053][   T28] kauditd_printk_skb: 342 callbacks suppressed
[  483.700073][   T28] audit: type=1400 audit(1777771410.842:4738): avc:  denied  { write } for  pid=13703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  483.751679][   T28] audit: type=1400 audit(1777771410.902:4739): avc:  denied  { write } for  pid=13714 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  483.794112][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.805414][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.815874][   T12] bond0 (unregistering): Released all slaves
[  483.824457][   T12] bond1 (unregistering): (slave veth3): Releasing active interface
[  483.833503][   T12] bond1 (unregistering): Released all slaves
[  483.842821][   T12] bond2 (unregistering): (slave veth5): Releasing active interface
[  483.850852][   T12] vlan2: entered promiscuous mode
[  483.857462][   T12] bond2 (unregistering): (slave vlan2): Releasing active interface
[  483.866817][   T12] bond2 (unregistering): Released all slaves
[  483.876471][   T12] bond3 (unregistering): Released all slaves
[  483.885853][   T12] bond4 (unregistering): (slave veth9): Releasing backup interface
[  483.895089][   T12] bond4 (unregistering): Released all slaves
[  483.905387][   T12] bond5 (unregistering): (slave veth11): Releasing backup interface
[  483.914740][   T12] bond5 (unregistering): Released all slaves
[  483.923667][   T12] bond6 (unregistering): Released all slaves
[  483.932612][   T12] bond7 (unregistering): Released all slaves
[  483.942613][   T12] bond8 (unregistering): (slave veth13): Releasing active interface
[  483.952028][   T12] bond8 (unregistering): Released all slaves
[  483.961173][   T12] bond9 (unregistering): Released all slaves
[  483.969752][   T12] bond10 (unregistering): Released all slaves
[  483.978822][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5
[  484.033882][   T12] hsr_slave_0: left promiscuous mode
[  484.039635][   T12] hsr_slave_1: left promiscuous mode
[  484.047493][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.055115][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.062881][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.070332][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.081134][   T12] veth0_macvtap: left promiscuous mode
[  484.086896][   T12] veth1_vlan: left promiscuous mode
[  484.092432][   T12] veth0_vlan: left promiscuous mode
[  484.109402][   T28] audit: type=1400 audit(1777771411.252:4740): avc:  denied  { write } for  pid=13717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.157138][   T28] audit: type=1400 audit(1777771411.302:4741): avc:  denied  { write } for  pid=13728 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.212030][   T12] team0 (unregistering): Port device team_slave_1 removed
[  484.222339][   T12] team0 (unregistering): Port device team_slave_0 removed
[  484.257919][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6
[  484.336835][   T28] audit: type=1400 audit(1777771411.482:4742): avc:  denied  { write } for  pid=13731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.373088][   T28] audit: type=1400 audit(1777771411.522:4743): avc:  denied  { write } for  pid=13742 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.406331][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7
[  484.490271][   T28] audit: type=1400 audit(1777771411.632:4744): avc:  denied  { write } for  pid=13745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.523663][   T28] audit: type=1400 audit(1777771411.672:4745): avc:  denied  { write } for  pid=13756 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.550487][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.561497][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.573339][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8
[  484.604484][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.614996][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.667609][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.677996][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.713908][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.724528][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.867739][   T28] audit: type=1400 audit(1777771412.012:4746): avc:  denied  { write } for  pid=13764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.902187][   T28] audit: type=1400 audit(1777771412.052:4747): avc:  denied  { write } for  pid=13775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  484.938762][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9
[  485.022255][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.064601][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.079240][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10
[  485.115265][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.164560][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.210418][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11
[  485.240687][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.294450][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.335627][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.367213][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12
[  485.394850][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.472491][   T12] bridge_slave_1: left allmulticast mode
[  485.479267][   T12] bridge_slave_1: left promiscuous mode
[  485.485526][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.493703][   T12] bridge_slave_0: left allmulticast mode
[  485.499443][   T12] bridge_slave_0: left promiscuous mode
[  485.505764][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.515417][   T12] bridge0: port 4(dummy0) entered disabled state
[  485.522777][   T12] ip6gretap0: left allmulticast mode
[  485.528121][   T12] ip6gretap0: left promiscuous mode
[  485.533989][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[  485.543675][   T12] bridge_slave_1: left allmulticast mode
[  485.549418][   T12] bridge_slave_1: left promiscuous mode
[  485.555544][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.563622][   T12] bridge_slave_0: left allmulticast mode
[  485.569326][   T12] bridge_slave_0: left promiscuous mode
[  485.575656][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.585317][   T12] bridge0: port 3(dummy0) entered disabled state
[  485.593327][   T12] bridge_slave_1: left allmulticast mode
[  485.599049][   T12] bridge_slave_1: left promiscuous mode
[  485.604999][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.613173][   T12] bridge_slave_0: left allmulticast mode
[  485.618902][   T12] bridge_slave_0: left promiscuous mode
[  485.625847][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.635293][   T12] bridge_slave_1: left allmulticast mode
[  485.640983][   T12] bridge_slave_1: left promiscuous mode
[  485.646796][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.654789][   T12] bridge_slave_0: left allmulticast mode
[  485.660523][   T12] bridge_slave_0: left promiscuous mode
[  485.666463][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.675245][   T12] bridge_slave_1: left allmulticast mode
[  485.680943][   T12] bridge_slave_1: left promiscuous mode
[  485.686872][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.694832][   T12] bridge_slave_0: left allmulticast mode
[  485.700542][   T12] bridge_slave_0: left promiscuous mode
[  485.706454][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.864367][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.875120][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.886474][   T12] bond0 (unregistering): Released all slaves
[  485.895191][   T12] bond1 (unregistering): (slave veth3): Releasing active interface
[  485.904414][   T12] bond1 (unregistering): Released all slaves
[  485.914099][   T12] bond2 (unregistering): (slave veth5): Releasing active interface
[  485.923552][   T12] bond2 (unregistering): Released all slaves
[  485.933005][   T12] bond3 (unregistering): Released all slaves
[  485.942745][   T12] bond4 (unregistering): (slave veth7): Releasing active interface
[  485.952334][   T12] bond4 (unregistering): Released all slaves
[  485.961719][   T12] bond5 (unregistering): Released all slaves
[  485.971039][   T12] bond6 (unregistering): Released all slaves
[  485.980250][   T12] bond7 (unregistering): Released all slaves
[  485.989712][   T12] bond8 (unregistering): Released all slaves
[  485.999733][   T12] bond9 (unregistering): (slave veth17): Releasing backup interface
[  486.008855][   T12] bond9 (unregistering): Released all slaves
[  486.017695][   T12] bond10 (unregistering): Released all slaves
[  486.027119][   T12] bond11 (unregistering): Released all slaves
[  486.036024][   T12] bond12 (unregistering): Released all slaves
[  486.045402][   T12] bond13 (unregistering): Released all slaves
[  486.054670][   T12] bond14 (unregistering): Released all slaves
[  486.163710][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.173908][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.183924][   T12] bond0 (unregistering): Released all slaves
[  486.192520][   T12] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  486.201240][   T12] bond1 (unregistering): Released all slaves
[  486.210853][   T12] bond2 (unregistering): (slave veth3): Releasing active interface
[  486.219615][   T12] bond2 (unregistering): Released all slaves
[  486.228986][   T12] bond3 (unregistering): (slave lo): Releasing backup interface
[  486.237094][   T12] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  486.248872][   T12] bond3 (unregistering): Released all slaves
[  486.258105][   T12] bond4 (unregistering): (slave veth5): Releasing backup interface
[  486.267673][   T12] bond4 (unregistering): Released all slaves
[  486.276963][   T12] bond5 (unregistering): Released all slaves
[  486.286160][   T12] bond6 (unregistering): Released all slaves
[  486.295177][   T12] bond7 (unregistering): Released all slaves
[  486.304100][   T12] bond8 (unregistering): Released all slaves
[  486.313167][   T12] bond9 (unregistering): Released all slaves
[  486.321963][   T12] bond10 (unregistering): Released all slaves
[  486.331067][   T12] bond11 (unregistering): Released all slaves
[  486.365587][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.375815][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.385479][   T12] bond0 (unregistering): Released all slaves
[  486.463979][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.474023][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.483914][   T12] bond0 (unregistering): Released all slaves
[  486.553819][   T12] bond0 (unregistering): Released all slaves
[  486.570072][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13
[  486.612710][   T12] IPVS: stopping backup sync thread 12175 ...
[  486.721749][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14
[  486.754756][   T12] hsr_slave_0: left promiscuous mode
[  486.760865][   T12] hsr_slave_1: left promiscuous mode
[  486.766722][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.774207][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.783299][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.790755][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.801759][   T12] hsr_slave_0: left promiscuous mode
[  486.807630][   T12] hsr_slave_1: left promiscuous mode
[  486.814126][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.822068][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.832370][   T12] hsr_slave_0: left promiscuous mode
[  486.838225][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.845823][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.853823][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.861575][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.872163][   T12] hsr_slave_0: left promiscuous mode
[  486.878089][   T12] hsr_slave_1: left promiscuous mode
[  486.884154][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.891812][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.899541][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.908120][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.926148][   T12] veth0_macvtap: left promiscuous mode
[  486.931838][   T12] veth1_vlan: left promiscuous mode
[  486.937097][   T12] veth0_vlan: left promiscuous mode
[  486.943492][   T12] veth1_macvtap: left promiscuous mode
[  486.949063][   T12] veth0_macvtap: left promiscuous mode
[  486.954906][   T12] veth1_vlan: left promiscuous mode
[  486.960289][   T12] veth0_vlan: left promiscuous mode
[  486.967028][   T12] veth1_macvtap: left promiscuous mode
[  486.972694][   T12] veth0_macvtap: left promiscuous mode
[  486.978264][   T12] veth1_vlan: left promiscuous mode
[  486.983779][   T12] veth0_vlan: left promiscuous mode
[  487.145106][   T12] team0 (unregistering): Port device team_slave_1 removed
[  487.155178][   T12] team0 (unregistering): Port device team_slave_0 removed
[  487.199744][   T12] pim6reg2 (unregistering): left allmulticast mode
[  487.237214][   T12] team0 (unregistering): Port device 
2
6±˙ţ€ removed
[  487.247307][   T12] team0 (unregistering): Port device team_slave_0 removed
[  487.265013][ T9293] smc: removing ib device syz1
[  487.313311][   T12] team0 (unregistering): Port device team_slave_1 removed
[  487.323760][   T12] team0 (unregistering): Port device team_slave_0 removed
[  487.389245][   T12] team0 (unregistering): Port device team_slave_1 removed
[  487.399274][   T12] team0 (unregistering): Port device team_slave_0 removed
[  487.456746][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15
[  487.587332][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16
[  487.700296][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17
[  487.814765][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18
[  487.939564][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19
[  488.056037][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20
[  488.183825][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21
[  488.297114][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22
[  488.408810][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23
[  488.483800][   T12] IPVS: stop unused estimator thread 0...
[  488.489754][   T12] IPVS: stop unused estimator thread 0...
[  488.496223][   T12] IPVS: stop unused estimator thread 0...
[  488.545774][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24