last executing test programs:

3m3.296693077s ago: executing program 1 (id=146):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe)

3m3.296370997s ago: executing program 1 (id=147):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe)

3m3.262378618s ago: executing program 1 (id=148):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe)

3m3.235612919s ago: executing program 1 (id=149):
r0 = socket$packet(0x11, 0x3, 0x300)
dup3(r0, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@setneightbl={0x24, 0x43, 0x21dd8154769435ff, 0x70bd2d, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0xe, 0x1, 'ip6erspan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f0000000340)="3f0300000000000000007fba320f3adcddf88607bf06001e", 0x18, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x2, 0x6, @multicast}, 0x14)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffff9c, &(0x7f0000000400)='./mnt/events/netlink/netlink_extack/enable\x00', 0x1, 0x0)
r4 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0)
write(r3, &(0x7f0000000500)='1', 0x1)
read(r0, &(0x7f0000000240)=""/25, 0x19)

3m3.19365868s ago: executing program 1 (id=150):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3m2.78051692s ago: executing program 1 (id=151):
r0 = memfd_secret(0x80000)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8)
r1 = socket(0x1, 0x5, 0x0)
close(r1)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000380)="eb6a556500000000842d63d039f2fafa20ad040000000000005ba2a4986375285fc8b1c78a714dcebfb0fbfe7163bb942d75b3d3ec5a90ac5718f2b687409115d51e018afdc8764c9ebca548553d89913582714eb800977865d1deca7e2892a08eab805b09f8acb39e39f301637a5b541af170d3b5352aae7e0282965f58e2a3b42fafe02f5d1c3327bee6c7a53d925da66d9438399d66", 0x97}], 0x1, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)={0x6000000c})
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0xc000001d})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r0}, 0xa, &(0x7f00000000c0)=[0x3, 0x5bf, 0x5, 0xfffffffffffffffd, 0x800, 0x401, 0x4, 0x10001, 0x400, 0x3], 0x3, 0xd, 0x1})
r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r4, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, @echo_reply={0xe0}}}}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000840)={&(0x7f00000001c0)=0x1, 0xec, &(0x7f0000000880), &(0x7f0000000800)})
setns(0xc9, 0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00')
write$vga_arbiter(r5, &(0x7f0000000280)=@unlock_all, 0xb)

3m2.78023992s ago: executing program 32 (id=151):
r0 = memfd_secret(0x80000)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8)
r1 = socket(0x1, 0x5, 0x0)
close(r1)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000380)="eb6a556500000000842d63d039f2fafa20ad040000000000005ba2a4986375285fc8b1c78a714dcebfb0fbfe7163bb942d75b3d3ec5a90ac5718f2b687409115d51e018afdc8764c9ebca548553d89913582714eb800977865d1deca7e2892a08eab805b09f8acb39e39f301637a5b541af170d3b5352aae7e0282965f58e2a3b42fafe02f5d1c3327bee6c7a53d925da66d9438399d66", 0x97}], 0x1, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)={0x6000000c})
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0xc000001d})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r0}, 0xa, &(0x7f00000000c0)=[0x3, 0x5bf, 0x5, 0xfffffffffffffffd, 0x800, 0x401, 0x4, 0x10001, 0x400, 0x3], 0x3, 0xd, 0x1})
r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r4, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, @echo_reply={0xe0}}}}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000840)={&(0x7f00000001c0)=0x1, 0xec, &(0x7f0000000880), &(0x7f0000000800)})
setns(0xc9, 0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00')
write$vga_arbiter(r5, &(0x7f0000000280)=@unlock_all, 0xb)

2m53.260982766s ago: executing program 5 (id=251):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe)

2m53.260645366s ago: executing program 5 (id=252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0xff81, {0x0, 0x0, 0x0, 0x0, 0xa043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

2m53.185272588s ago: executing program 5 (id=253):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f23000000ff", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)

2m53.183498608s ago: executing program 5 (id=255):
r0 = socket$packet(0x11, 0x3, 0x300)
dup3(r0, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@setneightbl={0x24, 0x43, 0x21dd8154769435ff, 0x70bd2d, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0xe, 0x1, 'ip6erspan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f0000000340)="3f0300000000000000007fba320f3adcddf88607bf06001e", 0x18, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x2, 0x6, @multicast}, 0x14)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r3 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0)
read(r0, &(0x7f0000000240)=""/25, 0x19)

2m52.976648883s ago: executing program 5 (id=257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (fail_nth: 6)

2m50.765142768s ago: executing program 5 (id=277):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8c1, &(0x7f0000000040), 0x6, 0x632, &(0x7f00000000c0)="$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")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000ac0)={{'\x00', 0x3}, {0x8}, 0x9, 0x0, 0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)="284765dfda2426f49525946dc9f8c9be410bca8dbe329239d36eb0c467e997ec7dfeba8f6a4c729966e27f28fcafddf6960fbdfd88e02e00c884740b1f3d94cb1347a5cf1c0eeb601006766a1361d585abecd4a273d84ebfca4c872effdcf88315e649348dfa70178605acb8d671aab31a153a34d390f363cb629feb07c0b2ac5fd523beb144bc0381", 0x89, 0x0, &(0x7f0000000980)={0x2, 0x6c, {0x1, 0xc, 0x49, "42056fd7d00dc151ee3d531af94b29650c67018ba29536a595d2c4c260907ddd8d72dc6c490bac72431d9273c9401c6d753ca20437ec5e341d58d0fe434b4337dda1d3aaf654ac7ca5", 0x16, "5afa9836b9bba18b172cb585df0072d94e4cc9e8c35a"}, 0xab, "4124e4d05ab88a9798907f45dcb4441a71bc5e076ecfea6f080ebefb24937bda7292dac95248d9e87c389682dc5b522063ba92df8603ae52fab86cab9be36717d8efcf7c305874540e396c09a717acfea44180b0ba6798207af915d4b4e5031888ed6c1a69473964a97c09b1569a1495454d0e1b4f38c9ff082f5534a3ce1bd1d69dd73d3739c7fb5fb5163b7c73fe842fd75dc2f8d0edc0cd24548eafe9bd7a68c52fc2507927338d25f7"}, 0x123})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_io_uring_setup(0x74f9, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, 0x0, 0x1)
io_uring_enter(r6, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60)
mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r7 = io_uring_setup(0x30d2, &(0x7f0000000300)={0x0, 0xbffffffb, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000b40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002900000000dbdf25010000000800030107000000080004000400000005000500030000000500060001000000d1bdbd8ddbb5a035e9bd7927c380c54ea4152175e559533c91b2a0597ee4eaedbd09a43d0cf071d355577859ec0cd3a275c659f9d2c74ba835a1e6159441d878542925d4bf75b9f970d3e2399e020fd1f7d7054d1082b132647842c2143b0d497e16cb3097f77ed856f5d3f8d521cbba855a5e152d3e62f80c2b201ec4d090ed67c8eb2a500c5e2f8630f6d38b289071830dd6331ad7e0bd5903fcabe8dc91fdfbac1461b08edca62da145c8f26164a15477df47eebee98d66f1c641b1a189aa3c231071a41ab9eff80f920cd18b30fb0c0f055e8a7d45f9df0ab91fa1f68e8c9777b090d356ef9147eefb7da4ff2174be0fa14441e42fd0bca00bbda0e4e638dadeaa5a07fdc1ae84426770a8f0efd5087ab1dcf2251fb05565c7ced4fd02371dd2186d22544b2e30d23a9d7e9622772a8ca53cdcfb488a1b5a62452835a77d435e9fee4bbb71bc999e0091266fad75e7718b6043ef4fa803915bc5e90f064becb969e889ef9e2c252a2f2d3793f881eb258aa7aabbf834ac62f7262553f7d66242a9a1eaa6f15f83bbd0523ae4ca4a678fea2ffe416e7cdf426ae3002579d6bc76cd7567aa8a7758dec32322234482c85ce65766e346d29c622519b8619a0c9f41c9186ec72924193a247d89d43c8dc0bfc6239ebff3f5df6d04a40f167a04921ad70cba980e50a05117b99467c1cc2bf17c0ae338ff11d4ae8bbbb6bcd6b11ce294cef921639a7de3e4a6741eac663caaade0e5edd5a9f377b891786afc4d9568e74988d85327cc4ceb50e159cbaf043de37eb820d270e31874e4093e3d3f023a8e2cf65bd917f020ded6dd6711d8c6b1cc81bf60aebf75ba05e8190342dc2ce2a770c48e5de598579bb05fcad0a357a59394dc38169c03"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)

2m50.764627228s ago: executing program 33 (id=277):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8c1, &(0x7f0000000040), 0x6, 0x632, &(0x7f00000000c0)="$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")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000ac0)={{'\x00', 0x3}, {0x8}, 0x9, 0x0, 0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)="284765dfda2426f49525946dc9f8c9be410bca8dbe329239d36eb0c467e997ec7dfeba8f6a4c729966e27f28fcafddf6960fbdfd88e02e00c884740b1f3d94cb1347a5cf1c0eeb601006766a1361d585abecd4a273d84ebfca4c872effdcf88315e649348dfa70178605acb8d671aab31a153a34d390f363cb629feb07c0b2ac5fd523beb144bc0381", 0x89, 0x0, &(0x7f0000000980)={0x2, 0x6c, {0x1, 0xc, 0x49, "42056fd7d00dc151ee3d531af94b29650c67018ba29536a595d2c4c260907ddd8d72dc6c490bac72431d9273c9401c6d753ca20437ec5e341d58d0fe434b4337dda1d3aaf654ac7ca5", 0x16, "5afa9836b9bba18b172cb585df0072d94e4cc9e8c35a"}, 0xab, "4124e4d05ab88a9798907f45dcb4441a71bc5e076ecfea6f080ebefb24937bda7292dac95248d9e87c389682dc5b522063ba92df8603ae52fab86cab9be36717d8efcf7c305874540e396c09a717acfea44180b0ba6798207af915d4b4e5031888ed6c1a69473964a97c09b1569a1495454d0e1b4f38c9ff082f5534a3ce1bd1d69dd73d3739c7fb5fb5163b7c73fe842fd75dc2f8d0edc0cd24548eafe9bd7a68c52fc2507927338d25f7"}, 0x123})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_io_uring_setup(0x74f9, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, 0x0, 0x1)
io_uring_enter(r6, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60)
mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r7 = io_uring_setup(0x30d2, &(0x7f0000000300)={0x0, 0xbffffffb, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000b40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)

2m34.480187812s ago: executing program 4 (id=537):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
read$snapshot(r0, &(0x7f0000000300)=""/4096, 0x1000)
r1 = memfd_secret(0x80000)
unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000010000000500000a38000000090a010400000000000000000a000004080014"], 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
fcntl$lock(r5, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8)
syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380))
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0xfffffffa, 0x6, 0x0, 'queue0\x00', 0x5})
writev(r9, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m34.173374449s ago: executing program 4 (id=538):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)

2m34.158775299s ago: executing program 4 (id=540):
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x2}, 0x11edc9, 0x81224, 0xfffffff9, 0x9, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000012c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680))
sync_file_range(0xffffffffffffffff, 0xee1, 0x7ff, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

2m33.983696024s ago: executing program 4 (id=543):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@init_itable_val={'init_itable', 0x3d, 0x208e}}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700), 0x24, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='\"ocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8bf8ff00000000b70800000f0000007b8af0ff00000000bfa10000000000000701000000feffffbfa4000000000000070400000cfeffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'})
r3 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r3, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000})
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

2m33.851922507s ago: executing program 4 (id=545):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
lsm_get_self_attr(0x68, 0x0, &(0x7f0000000240), 0x0)

2m33.701084251s ago: executing program 4 (id=550):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x100000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setuid(0xee01)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0x7, 0x9, 0x10000, r0, 0xffff, '\x00', r2, r0, 0x2, 0x1, 0x3, 0xc, @void, @value, @value=r0}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r6=>0xffffffffffffffff])
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48)
keyctl$chown(0x4, r5, 0xffffffffffffffff, r6)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r7, 0x65426c5ed9174461, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xf}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xcf}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x10)

2m33.691399611s ago: executing program 34 (id=550):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x100000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setuid(0xee01)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0x7, 0x9, 0x10000, r0, 0xffff, '\x00', r2, r0, 0x2, 0x1, 0x3, 0xc, @void, @value, @value=r0}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r6=>0xffffffffffffffff])
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48)
keyctl$chown(0x4, r5, 0xffffffffffffffff, r6)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r7, 0x65426c5ed9174461, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xf}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xcf}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x10)

2m5.959622318s ago: executing program 2 (id=887):
fallocate(0xffffffffffffffff, 0x2, 0x0, 0x5)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x1, 0x92, 0x7fff, 0xfffffe00, 0x2a5, 0x7fffffff, 0x8, 0x6, 0x8}})
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)

2m5.89975631s ago: executing program 2 (id=890):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x11)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x24004045)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4932, 0x4)
io_uring_enter(0xffffffffffffffff, 0x5e99, 0x57b7, 0x14, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x82)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x7c9e, &(0x7f0000000040)={0x0, 0xc8a0, 0x20000, 0xfffffffe, 0xc2})
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x39)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4008000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x270, 0x270, 0x270, 0x190, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/140, 0x8c)

2m5.805592362s ago: executing program 2 (id=894):
r0 = syz_open_dev$loop(&(0x7f00000099c0), 0x8, 0x0)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000009a00))
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0xc}], 0x1)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892)
syz_open_dev$sg(0x0, 0x0, 0xa01)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:* w\n)'], 0xa)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x100, 0x20, 0xfffffffffffff}, &(0x7f0000000340)=0x18)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010000000000fb2570250a80800000000000000000000808000100ac141425"], 0x2c}}, 0x0)
flistxattr(r1, &(0x7f00000001c0)=""/166, 0xa6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x61}, {0x6, 0x0, 0xfd}]})

2m5.663352106s ago: executing program 2 (id=898):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101041, 0xf0)
madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x18)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140)=0x1, 0xc4ffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0xf)
ioctl(r1, 0xc138fd09, &(0x7f00000003c0)="0400000000000000000000006e01")
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x80fe, @local, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41)
io_uring_setup(0x2e3a, 0x0)
syz_clone(0x4000000, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5b592, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1001a8, 0x0, 0xfffffffc, 0x4, 0x5, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40080c0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x50}, 0x840)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20)
recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/12, 0xc}], 0x1}, 0x40000141)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)

2m5.384540733s ago: executing program 2 (id=905):
r0 = memfd_secret(0x80000)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x4, 0x8)
r1 = socket(0x1, 0x5, 0x0)
close(r1)
pipe2(&(0x7f0000000000), 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r0}, 0xa, &(0x7f00000000c0)=[0x3, 0x5bf, 0x5, 0xfffffffffffffffd, 0x800, 0x401, 0x4, 0x10001, 0x400, 0x3], 0x3, 0xd, 0x1})
r3 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0xa, r3, &(0x7f0000000040)='keyring\x00', 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, @echo_reply={0xe0}}}}}, 0x0)

2m5.302823205s ago: executing program 2 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

2m5.255390426s ago: executing program 35 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

50.768114842s ago: executing program 7 (id=2102):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1b, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x9b, &(0x7f0000000140)=""/155, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xb, 0x4, 0xffff5709}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x5, 0x6}, {0x3, 0x4, 0x7}, {0x4, 0x1, 0xf}, {0x0, 0x4, 0x10, 0x8}, {0x5, 0x5, 0xd, 0x3}, {0x4, 0x1, 0xb, 0x3}], 0x10, 0x401}, 0x94) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)=<r1=>0x0)
getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=<r2=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000580)=0xc)
fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {}, [{0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x0, r3}, {0x2, 0x4, 0xee00}, {0x2, 0x2, r5}], {0x4, 0x3}, [{0x8, 0x2, 0xee00}], {0x10, 0x6}, {0x20, 0x1}}, 0x54, 0x0) (async)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000700)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000740)=0x2c)
getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0xe}, {0xf, 0xe}, {0xffe0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}}, 0x48800) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x9, <r9=>0x0}, 0x8) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x401, '\x00', r7, r6, 0x1, 0x1, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x29, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x9, 0xb, 0x3, 0x7, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0x6, 0x1, 0x8, 0xc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ldst={0x1, 0x1, 0x0, 0x1, 0xa, 0x80, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0xf30, 0x0, 0x0, 0x41100, 0x20, '\x00', r8, @fallback=0x38, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0x5, 0x3, 0x4}, 0x10, r9, r0, 0x7, &(0x7f0000000c40)=[r10], &(0x7f0000000c80)=[{0x5, 0x4, 0xb, 0xb}, {0x3, 0x5, 0x6, 0x9}, {0x3, 0x2, 0xd, 0x9}, {0x4, 0x5, 0x3, 0x7}, {0x5, 0x5, 0x5, 0x7}, {0x5, 0x1, 0x7, 0x4}, {0x1, 0x2, 0x9}], 0x10, 0x8}, 0x94) (async)
r11 = fsmount(r6, 0x1, 0x70)
sendmsg$nl_route(r11, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@getrule={0x14, 0x22, 0x4, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x810) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000ec0)) (async)
r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0xd6000, 0x120, 0x1a}, 0x18)
fchownat(r12, &(0x7f0000000f80)='./file0\x00', r5, r4, 0x1000) (async)
ioctl$NILFS_IOCTL_GET_VINFO(r6, 0xc0186e86, &(0x7f0000001040)={&(0x7f0000000fc0)=[{0x400, 0x3, 0xc, 0x2}, {0x9, 0x40, 0xffff, 0x6}, {0xffffffffffffffff, 0x0, 0x9, 0x6}], 0x3, 0x20, 0x6, 0x4})
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000001080), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffff00, 0x0, 'veth0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x78}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x3a]}}, @common=@socket0={{0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xc, 0x4, 0x2}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "37d5", 0x1}}, @common=@ah={{0x30}, {[0x642, 0x5], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x3, 0x9, [0x22, 0xb, 0x13, 0x3d, 0xf, 0x2e, 0x2f, 0x36, 0x8, 0x8, 0x29, 0x4, 0x9, 0x2b, 0x2e, 0x35], 0x2, 0x5, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @multicast1, 0x0, 0xffffffff, 'geneve0\x00', 'bridge0\x00', {}, {0xff}, 0x4, 0x2, 0xe}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2}}, @common=@icmp={{0x28}, {0xf, "f027"}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xf7, 0x462, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) (async)
mlockall(0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@getqdisc={0x28, 0x26, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff3}, {0x4, 0x5}, {0x2, 0xa}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x90) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x1411, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0xe}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4014) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r11) (async)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r11, 0x1e, &(0x7f0000001740)={r10, 0x2, 0x7, 0x7, 0x1}, 0x1)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001780)={0x4}, 0x8) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffeffffffff, 0x2, &(0x7f00000017c0)) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000001800), r13)

50.680824614s ago: executing program 7 (id=2104):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x129c40)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)

50.508588488s ago: executing program 7 (id=2110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3a00, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

50.380922941s ago: executing program 7 (id=2114):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=0,size=0'])
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffff"], 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) (async)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
socket(0x10, 0x803, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffb, &(0x7f0000001cc0)=""/4091, 0x41100, 0x5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffb, &(0x7f0000001cc0)=""/4091, 0x41100, 0x5}, 0x94)
sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

49.874619514s ago: executing program 7 (id=2127):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

48.105199098s ago: executing program 7 (id=2150):
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
futex_waitv(&(0x7f00000010c0)=[{0x4, &(0x7f0000000540)=0x8001, 0x82}, {0x6b9f, &(0x7f0000000580)=0xfffffffffffffffe, 0x2}, {0x586, &(0x7f00000005c0)=0xf2, 0x2}, {0x180000000000, &(0x7f0000000680)=0xf, 0x82}, {0x5, &(0x7f00000006c0)=0x7fffffffffffffff, 0x2}, {0x7, &(0x7f0000000700)=0x6, 0x82}, {0xfff, &(0x7f0000000740)=0x800, 0x2}, {0xe17, &(0x7f0000000780), 0x2}, {0x2, &(0x7f00000007c0)=0x2, 0x82}, {0xe8, &(0x7f0000000800)=0x6, 0x82}, {0xa37, &(0x7f0000000840)=0xca9a3b00000000, 0xc86602dec16a9774}, {0x800, &(0x7f0000000880)=0x3, 0x80}, {0xfffffffffffffffb, &(0x7f00000008c0)=0x3, 0x82}, {0x5, &(0x7f0000000940)=0x1, 0x2}, {0xe152, &(0x7f0000000980)=0x80, 0x82}, {0x6, &(0x7f00000009c0)=0x6, 0x2}, {0x7fffffffffffffff, &(0x7f0000000a00), 0x82}, {0x3ff, &(0x7f0000000a40)=0x8790, 0x82}, {0x8, &(0x7f0000000a80)=0x4, 0x2}, {0x19, &(0x7f0000000ac0)=0x10001, 0x2}, {0x8, &(0x7f0000000b00)=0x9c, 0x2}, {0x80000000, &(0x7f0000000b40)=0x12, 0x2}, {0x0, &(0x7f0000000b80)=0x3, 0x2}, {0xfff, &(0x7f0000000bc0)=0xffffffff, 0x82}, {0x8, &(0x7f0000000c00)=0xe22d, 0x82}, {0xffff000000000000, 0x0, 0x82}, {0xff4, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x401, 0x0, 0x82}, {0xffff, 0x0, 0x82}, {0x4f, &(0x7f0000001080)=0x4, 0x2}], 0x1f, 0x0, &(0x7f0000001500)={0x77359400}, 0x0)

48.100021558s ago: executing program 36 (id=2150):
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
futex_waitv(&(0x7f00000010c0)=[{0x4, &(0x7f0000000540)=0x8001, 0x82}, {0x6b9f, &(0x7f0000000580)=0xfffffffffffffffe, 0x2}, {0x586, &(0x7f00000005c0)=0xf2, 0x2}, {0x180000000000, &(0x7f0000000680)=0xf, 0x82}, {0x5, &(0x7f00000006c0)=0x7fffffffffffffff, 0x2}, {0x7, &(0x7f0000000700)=0x6, 0x82}, {0xfff, &(0x7f0000000740)=0x800, 0x2}, {0xe17, &(0x7f0000000780), 0x2}, {0x2, &(0x7f00000007c0)=0x2, 0x82}, {0xe8, &(0x7f0000000800)=0x6, 0x82}, {0xa37, &(0x7f0000000840)=0xca9a3b00000000, 0xc86602dec16a9774}, {0x800, &(0x7f0000000880)=0x3, 0x80}, {0xfffffffffffffffb, &(0x7f00000008c0)=0x3, 0x82}, {0x5, &(0x7f0000000940)=0x1, 0x2}, {0xe152, &(0x7f0000000980)=0x80, 0x82}, {0x6, &(0x7f00000009c0)=0x6, 0x2}, {0x7fffffffffffffff, &(0x7f0000000a00), 0x82}, {0x3ff, &(0x7f0000000a40)=0x8790, 0x82}, {0x8, &(0x7f0000000a80)=0x4, 0x2}, {0x19, &(0x7f0000000ac0)=0x10001, 0x2}, {0x8, &(0x7f0000000b00)=0x9c, 0x2}, {0x80000000, &(0x7f0000000b40)=0x12, 0x2}, {0x0, &(0x7f0000000b80)=0x3, 0x2}, {0xfff, &(0x7f0000000bc0)=0xffffffff, 0x82}, {0x8, &(0x7f0000000c00)=0xe22d, 0x82}, {0xffff000000000000, 0x0, 0x82}, {0xff4, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x401, 0x0, 0x82}, {0xffff, 0x0, 0x82}, {0x4f, &(0x7f0000001080)=0x4, 0x2}], 0x1f, 0x0, &(0x7f0000001500)={0x77359400}, 0x0)

1.62052416s ago: executing program 3 (id=2884):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

1.493728823s ago: executing program 3 (id=2886):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@access_client}, {@cache_none}]}})
write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8)

1.399078615s ago: executing program 9 (id=2887):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040), 0x8)
sendmmsg$sock(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000)

1.340500407s ago: executing program 9 (id=2888):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setns(0xc9, 0x0) (async)
r3 = syz_open_procfs(0x0, 0x0)
name_to_handle_at(r3, 0x0, 0x0, 0x0, 0x600) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0xc}, 0x1080, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
syz_io_uring_setup(0x1d10, &(0x7f0000000640)={0x0, 0x5288, 0x400, 0x1, 0x2a6}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000240), &(0x7f0000000600)) (async)
r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x2000000, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r5, 0x9) (async)
syz_io_uring_complete(r4, r5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f00000000c0)={0xa}, 0x1c) (async)
syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0e86dd600101000064110000000000000000000000000000000000ff0200000000000000000001ffaaaaaa00"], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) (async)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000011000100000000000000d0dd03e835b3308ddbd161862a14a4000000000000", @ANYRES32=0x0, @ANYBLOB="23da0000000004001400350076657468305f766c616e000000000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000340))

1.339303567s ago: executing program 3 (id=2891):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
setns(0xc9, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x4)
pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x9, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.312301248s ago: executing program 9 (id=2892):
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9c960000, 0x1, 0x3, 0xa, 0x1, 0xfffe}, 0x20)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xb830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setns(0xc9, 0x0)
r4 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x101701)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0xec, 0x8, 0x0})
socket$packet(0x11, 0x3, 0x300)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8080)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000180)={{0xe6, 0x9}, 0x0, 0x0, 0x3, {0x0, 0x2}, 0x4f, 0xffffffff})

1.312007477s ago: executing program 6 (id=2894):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfRno=', @ANYRESHEX=r1])

1.269118769s ago: executing program 3 (id=2895):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="4005000000000000000062e819fb0d33cfdaf1eebd5ce0cde2866c6733f1d525e0668db633d5b9f2834b6f5012948a6771d717d25cbcd05677d3a861e5ba3e82d3e7760a308b4e3116b4d5a6e6c4fcf23158f3c5237d501b9daf0bcd87793f2441a79f06555a543b07c0d9b6086bc3ee1196ac3e367a60f4cffab190b9bced3777c1dc7554c41ff4600766698560004d721340c572a2e70b32ad2f86280af143aca1225219ce2bd475f503928b33c282032f191da7b7fbdd9795fc3391ef6b00242fc2b2e0f44720505f5b9ba3ea199cfeae078dc8723b2d3075be25a3e8d17fdfb0b0660731a48d3cc31903146cbd1de4cc7cfbc90180c8df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x3)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$inet_sctp(0x2, 0x5, 0x84)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xffffffffffffeffd, 0x102, 0xf, 0x5, 0x1, 0x10f5}, 0x0, &(0x7f0000000400)={0x28, 0xffffffffffffffff, 0x5b, 0x8000000000000081, 0x1, 0x4, 0x100000001, 0xffffffffffffffff}, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x94000, 0x0)
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000240))
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5b8, 0x1, @perf_bp={0x0, 0x1}, 0x10c4e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r4 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb})
io_uring_enter(r4, 0x100000, 0x2, 0xf, 0x0, 0x0)
accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x80000)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x4000}], 0x400000000000172, 0x4000000)

1.268796659s ago: executing program 6 (id=2896):
unshare(0x22020600)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb0100180000000000000050000000500000000600000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000200000d0000000002000000030000000400000001000000005f2e21"], 0x0, 0x6e}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
unshare(0x20020000)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000440)={[{@utf8no}, {@numtail}, {@numtail}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@shortname_win95}, {@shortname_win95}, {@fat=@nocase}, {@rodir}, {@fat=@errors_continue}, {@utf8}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_winnt}, {@uni_xlate}]}, 0x1, 0x284, &(0x7f0000000700)="$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")
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="010727bd7000fdf7ffff67000000080001006700000008001500", @ANYRES32=0x0, @ANYBLOB="0800c300"], 0x9c}, 0x1, 0x0, 0x0, 0x4015}, 0x20040000)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x7}, &(0x7f0000000500)=0x8)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x804800, &(0x7f0000002500)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xf9, 0x121c, &(0x7f0000003740)="$eJzs3E1rXFUYB/AnY94azYtaW9uFHnAjLi5NFq4ECZKCZECpzaIVhFtzo0OuMyV3CIyI1ZVbP4drd4LfIBs/g7tsuuxCvNI7nXaiU0PFZor+fou5D/ecP+ccGAbOcM89fuf7L/b3qmwv70drZiZatyPSvRQpWjHy2vbweuPm9ma7vXUtpaub19ffTimtvP7zx18tRMR8/Ljy00IcrX1yfHfj16MLR5eOf7/+eadKnSp1e/2Up1u9Xj+/Va6k3U61n6X0YVnkVZE63ao4GGsv0t5bETFIeXd3een2QVFVKe8O0n4xSP1e6h8MUv5Z3ummLMvS8lLwWHOnd9n54V5d1xF1PRfzUdd1fS6W4vl4IZZjJb6JiBfjpXg5zscrcSEuxqtxqel1FtMHAAAAAAAAAAAAAAAAAACA/4+/O/+/GmvO/wMAAAAAAAAAAAAAAAAAAMAZ+OjGze3NdnvrWkqLEeV3hzuHO8PrsH3t/kcZRVyJ1fgtmtP/Q8P66vvtrSupsRbflnce5O8c7jzX5DdH+fXmdQIP8rNN2yi/Psynk/mFWLqf34tOk9+I1Tg/efyNifnFePONsXwWq/HLp9GLMnabsR/lv15P6b0P5sbyF+ciLjf9AAAA4L8gSw9N3L9n2ePah/mH++vT/x/40/58Ni7PTnftRFSDL/fzVlkcNEU5Khb/cuf0Yj6eoPNYEf8o9SwUEXfrplg42dR6SoO2YupLHitmno1pKP6d4lycvDPtXybOwqOvwbRnAgAAAAAAAAAAwJN4ys8VzsaEJ8venc5SAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwVAAAAP//jNzCTg==")
mount$9p_fd(0x0, &(0x7f00000022c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x101010, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000040)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={<r5=>0x0, @rand_addr, @multicast2}, &(0x7f0000000140)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', r5, 0x2f, 0x6, 0x7f, 0x1, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x10, 0x495b, 0x3}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000009e80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000009f00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.046532304s ago: executing program 6 (id=2898):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xac4c}, {{0x18, 0x1, 0x1, 0x2000, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0xa, 0x6}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}, @generic={0x45, 0x0, 0x0, 0x2, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

885.293008ms ago: executing program 6 (id=2899):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040), 0x8)
sendmmsg$sock(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000)

609.935955ms ago: executing program 6 (id=2900):
syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x14b280)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1c080, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x8, 0xfffffffe, 0x3, 0x2f, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
unshare(0x20000400)
syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, 0x0, 0x80fe)
socket$kcm(0x21, 0x2, 0xa)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
syz_emit_ethernet(0x2bb, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x168)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22000, 0xc6b5897ef189faf9)
vmsplice(r4, &(0x7f0000000200), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000400)=ANY=[@ANYBLOB="478c61a6df25e9bcb805ad770e9a337c32d86f1c87fe69f37b4d7024aaedc9c1452c06ffc0e53ef47674c77200d200347fc5432822c4b4d922789a20f82a086af80a46e634e9422fe47bdf3619be1597e63209a6fb7a589a935b7eee5a377828e83b4a12e3f058d0bc17f9f337f9b3085e531438ebe210b5321a866f4a44abe192fe2654be2cb92490f48e19d02d2dfc9e66fb8819"], 0x3, 0x53f, &(0x7f0000001240)="$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")
socket$nl_generic(0x10, 0x3, 0x10)

482.106338ms ago: executing program 8 (id=2907):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x9}, 0x50)

429.075909ms ago: executing program 9 (id=2908):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
openat$cgroup_int(r1, 0x0, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'syzkaller1\x00', 0x600})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})

424.954479ms ago: executing program 8 (id=2909):
mkdir(0x0, 0x1ff)
r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x4005, 0x0, 0x7)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005080)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000005180)={0x0, 0x0, &(0x7f0000005140)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x24000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r2, &(0x7f0000000400)='onf\n', 0x4)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, <r5=>0x0}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r5, 0xfffffffffffffff3, 0x6, 0x1})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@val={r5}, @max}})

390.28128ms ago: executing program 3 (id=2910):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040), 0x8)
sendmmsg$sock(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000)

337.046212ms ago: executing program 8 (id=2911):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e22, 0xffffffff, @private1}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x8, 0x7f02ae, 0x160, 0x200, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x14}, [0xffffffff, 0x0, 0x0, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_team\x00', {}, {0xff}, 0x3c, 0x6, 0x0, 0x40}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {}, '\x00', {0xff}, 0xc, 0x12}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x7, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000c0000000000000000000000000000000000000000800000ba000000000000000000004000000000000000000000000000000000000000000000000025bd700000000000020002fe000000000000000008001f0004000000480003006465666c61746500"], 0x14c}}, 0x6010)

336.549181ms ago: executing program 3 (id=2912):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10c002, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000ffffff3f2d0008000400000018370000030000000000000000000000b7080000000000007b8af8ff00000000b7080000010001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000bf3a15547a38366b2978552a72cfc016534a1700989d", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018270000", @ANYRES32, @ANYBLOB="0000000008000000852000000300000018", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186900000d0000000000"], 0x0, 0xacc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000003}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x40, &(0x7f0000000100)={0xb, 0xff, 0x94d, 0x6, 0x8, 0x8000000000000001, 0x3, 0x6}, &(0x7f0000000240)={0x95cd, 0x4f9, 0x8, 0x9, 0x1, 0xb573, 0x7, 0xcb}, 0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={[0x75b3]}, 0x8})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))

335.991112ms ago: executing program 8 (id=2913):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x35, 0x2}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f00000002c0)=""/126, 0x45, 0x7e, 0x1, 0x4, 0x10000}, 0x28) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, &(0x7f00000003c0)='&*]@[\x00', 0x100, &(0x7f0000000400)={@_ha_fsid={[0xffff, 0x9]}, {0x7, 0xfffb, 0x24000000, 0x101}}, 0x6, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xd})
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x9, 0x18}, 0xc) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) (async)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b4d, 0x0, 0x0, 0x0, 0xb7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x7, 0x0, 0x5, 0x3ff, 0xb1be}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x43, &(0x7f00000001c0)=""/67, 0x41000, 0x12, '\x00', 0x0, @fallback=0x38, r1, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0xa, &(0x7f0000000700)=[0xffffffffffffffff, r3, r4, r5, r6, r7], &(0x7f0000000740)=[{0x4, 0x4, 0xa, 0x8}, {0x1, 0x1, 0xa, 0x4}, {0x2, 0x2, 0x2, 0x5}, {0x1, 0x1, 0xd, 0xc}, {0x3, 0x1, 0x10, 0xc}, {0x3, 0x2, 0x8, 0xb}, {0x1, 0x4, 0x7, 0x7}, {0x4, 0x4, 0x2, 0x4}, {0x5, 0x3, 0x7}, {0x5, 0x4, 0x0, 0x1}], 0x10, 0x4}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x62040, 0x0)
connect$unix(r2, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000980)={0x0, 0x101}, &(0x7f00000009c0)=0x8)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000001a00)={&(0x7f0000000a00)=""/4096, 0x1000}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0x98, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xb79}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) (async)
mq_timedsend(r5, &(0x7f0000001bc0), 0x0, 0x2, &(0x7f0000001c00)={0x0, 0x3938700}) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001d00)={'sit0\x00', &(0x7f0000001c40)={'erspan0\x00', <r11=>0x0, 0x8000, 0x700, 0x5, 0x7, {{0x1b, 0x4, 0x2, 0x3d, 0x6c, 0x66, 0x0, 0xd, 0x29, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xf9, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd397}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x4}]}, @end, @rr={0x7, 0x7, 0x5f, [@broadcast]}, @noop, @generic={0xcc, 0x4, "bf5d"}, @generic={0x83, 0xf, "a4fda845831aa26bf9672e7885"}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0xf, [{@loopback}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @ra={0x94, 0x4}]}}}}})
bind$xdp(r10, &(0x7f0000001d40)={0x2c, 0x9, r11, 0x23, r4}, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f00000030c0)={{'\x00', 0x3}, {}, 0xb4, 0x0, 0x0, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)="80121a932dd07527089cea501b254f38b054791b1ba7664a7483d0868484de661cdbc8233d0bbbe1280785dc42edc65130c24a0ea829bb9bac270ab263a0d744662802916a702e9ebf8ff5a0a9841b9313b447a329776d24c25ba4dc0087f11aa21573b0a6a1e488223fca8ca8eb5c4b32fc8dd072eac727c1969317856979e966b54dfabe0effc188ad24744566414e563cde1e9980550b44ad60f1f5eba92769410498e917094204c677eb90f0ee7d8f9d6d5aac869e1b9f0254da029445f97485a1effe6694fbed30f852655f888cc6bac04f6c6df616fa927b1bf615f237a3333429656df99ddb3b4ee82d2cfa15cc0e920bb23f326eeda4f413b95c7a9109d50081e335c302d2577928cb753a7b13eb023d823bf48cd7c1b184cb544f83b79c", 0x122, 0x0, &(0x7f0000001f40)={0x2, 0x10cd, {0x1, 0xc, 0xc0, "83c7ce6b2f5205fee14c50d4ff403cda440e2c7b588ffec6ad5955d3a9b091136da21e2657851975e428249d27d3a93caf00ae8f8c9b13be9850226028ac1398a2917c0c3443bb9de5f760766e6ccb34dd59ab16eab76652a7121f4d4bfc96947dbcd1f23c22290adf294636cef3342b65b49b9341cf574f53220f9425efb324dc178f3443456a701d88ac5a91c2dac25746132c66832810465b1cee9e1c1e80830f559a0654a3ea639ae0a33d2d0ca0ebd83dd68001f3862ee838d5803ff6cd", 0x1000, "baed8a9dc160a4409fe6e08aa84504b70701f2ab1818022c1c13c668d2fd1d16da7145ae848ea2758f963f6ad4bca937b4ba874f1bbf62a076596723909ad278f99b4004665ed1e0934a2cfb56f851d8041f4fc8364af425db80ff2a10b5b2d079aad4e74435ff65f17cd4caf2e59fb1728e1b91052b8f7855f5124fdc4627ff1cd3dec44b6838b36ccac773219768291501eb9a60966508356b324f94d3b9ba9c99dd3ce8289db6bb4809e6a8bd9e302072ca8088520c7094b7646db2c420065d20afd5e30b96f74b870149b10fc9b81816255ee87fe4ce2e4d3e1ae51a8de3effe89b1b5249d16cd06b6c5ddb4149a94be13efba58385e59efa2feb6b9c55f1ea317cf5730644c82b92b8b83a42d5656a597b10702653c29b7ef228e6fbcf048f7f06f3bb6865dd9a3b2e207d551f8186eb63e22092f9273f62b3b5705b5fb9c13421416d57fb20de44f7d1d2316ed6f0f8e78a89992fa460044c9d692463a05311a649544dc00d81ab26e18b5aac68ad52466f11a3581492740d79c4a5ec77de8c897a4f02dcdfa90ea9f269ef7abca7022627ce812a5633d4e7033a45e37954553f09942e3b6dc34ac6e2ad8e1e635f428db029682f38964f99afa155fbd5677f7e3f56d7b310ebc8b0ea962c4ce95e9bbc3947b5cb957733314e254a046c54c5ae0fbcd7745459cba0a4ec37438fad9b6f0045c37bc6419034c595b71e68dd0e03dfa99827f9528e2d7291b6e60f260736e1eab5274e1a8a9dfb05fbbbc8a99eb0222248b1196bb7acae5e5b6cf1daf7a187f8211a24c77bfd0638be4a7921ec2592886a41035b02337dc42def2d21c15359b44beb8878e23454b8284d0dbfaad50d84cd932e0268aec0edb4a4d3bf8dd327d9871f9149f83856b36cb8437cf83a9f4938fc51789911494468213820538e3560691a42662b47a39f916f1470b7588c04dc9a5f09038a568847d6356e40d8a3a8e68be36dc5fbc24dda95b9009db6d1001fb746f5e2eec7f9ac7d24b7208fc0e85e5d026210b6854d162e0a174ae072ccc2fc9841fe654ab4a7db647b0e6bb7761d6adb077ec4edd087d11d2d7159f19a213f2056e00ac0af88b91585751699006091637f995959b4a22cb81a235567ab4a29dfbe2f25aee7a18d3d3b0f7d38207f3ba5fd5d55fe572c9a5cea661303c1d98dfa9023d9d8577267865a60e7cb261e4fdffd8afd9f1a1a1fc96e9eb6d6500914172b31aa6ea79d9da7572acb4523e8903e9cf49195ccbcb93452b6718e803f54b9cc6818b5bbd2ee4f3ee0da6b2242603bb42c5e81949421e27c41a4eb9d6b89f8875dfd29d4fe68601d6831e2252480fa634590f38afbe83947049a2ce178e40d9e94a7871cfa33330b570cc874682459baf35cb36de6245ba1309aced3c52e06110c032064c7c2c51c4d62bf03f729206d28f19f90a8213fb9ba07ffd5b17b2e25ce51727bfeeb305fab217359b959c56fe08fac269b5e2084f3a47d60b3817d2c2083ff85f18b7b53d66c9d1d66df9112ff7d4af8fc0de1f2e91f3a1f94c385619df242359abc47e8597658d73dafdf8ac4e97f9f65db44946e3081535e07925e2afd9f55f02945c0a580a18b87472e91b92cb06a53664746174cfd9de5020bf639a2eff129ae842bf43e79afaa642c35c97e4174064c002b548362c56345cb4df7aa12af83c143b3cfab593778f402eabbb2b54221fc280ae265c6afc842836312168ea82fcfa7b71a3c63b4010a3df5d6eb6ae3c54db03b45e6460170c99ce2cc4ca11b9f2e44af3f760b37fe17942158bf92b1d3dc437c64d9678b9e563233f78f89e766dd8f80925db0e66194d8f42190af4d01b7fbce167c318310f05fa85eb8894893c0054104b49ccbcdc5e38de2a5c105a3fba2c6344929601a0f218f784a31e2d45078e06e9095477a7fdaf4367bd2ca06b7e9b9324b007a065df6bf859588f8587b60b9aaf740f1f4c1773ba784a23172b83379161d3beba557054db7680451e7909146c34f6d6cd98aff594c37fa1c9b7698fa3f07f0533da4f4501f91d5c3db8ca661131fa971153343463b96b43ccf4d3fd27aa5fb524b801f34852a5a42dfc95342c63799af3ff6ef87f4b7d34b5154125e2898cca308bad6a61e8ca73dc2047c9105a1189871ac7dc9314de1453d719a86441b1376c1e69ef21e7294912a33e9bbbe46fe9c0c98b987c4eb0a75cf9024941acf3f29ca7f336daba8ad998044b342caeef0a9b76abb430502267f7cff7145ebd39851f9c3d6ff91031a98d86907f038e35d20894a6c5a8117dada14040a22f86e7646c2a8a5a955a8f7d1a5370784eab594c9c3dbcde74f31bc24567900546e2867f48361eda7bf970aa3bcfe0c09d5b33aa2cb4669f4caf250f05fc9937a65fd6f02305efc9d5b8e6d94d8d36ee26087df3df31d2fc9498f314b9f102104a1a4730788a7916e43caecb456050dd5631c2172a97a11d8614584bda9170f6a9fb3c57eb14bfd192ae4a90ce9e570169ca248670734f090145ff0ad89d23fc11468767bee3cea756353fd650671356a319d529c6ad4d15aa4d3c4b69d424edc2174f6b6de900bdb9e53932a4567473ec08e73403408650a59069c72d73070093910f06163544d779fb62db5adb19ea0cbe70b86699de53faf33b4ee652be57cc9a07eeb76bb7e63da0aff31b793849c80a944d7eb9b9cc73a04f5f98991052e012c48a5ca13842c9fd88a5ff46bca0518faf425ba66ffd05d809cae9f6fc440430f1344a1fcd5e24efce52550d8b9f21afb44d9821b5323193e48644cb29ca12d6101e59be9ccb56ec28789b6ffd9dc0be2a667c90fe348e2f5fc6f6c897e23e2af07d6d9aec7d93075977c4e3a6dc2ba0d209ef9a09549512501348382dfbf1e8cf5760c0b850031fa13dc3a204352e0cde98bbf2183260c2780bca24653b0002cffae2c8a1956750f16a47fe0851503bb2436bdbe17f083719ef48e67c57fd78d217c0b0aae8396f0445e8753d185ba41b9621de11d8ec570fb5b373847e2cbdf5ddd7d088003b233c4df225ed7a3c3c83c8b842033435ed480ced1dc27af5bcfd31f471f09487fe79e864e4ce3d01cf1c5f0107566993ec657f74f65b1a5d8a15cede9915680d368196517a75ffd33902fac8f1e4756fa19d6f9395b0bb2608142078227c4b8dc011ffdab54478766c23ad5b159d11bf71af6de02b75437f463e729d9b6a7a2dffd99b96d788353d72d41d32d43a382cb8175f745e1b4c3c0190f60fdf64df0c7beb9da17e2754046fdcae8833bd4ce8f6335b2fc5b34f4f763c57233409fc6e0f8ebd6c1b02bc6cc31af99184e527aac09bcbfcb8f4b24d8c939d572aad732e52c7e88da0e7e52122fe438b0fb9ab2e387adde30b724f5fe30cd97af085680e2c2d601dc6ca279801e7bc8a24e6334d776ea5211712af918ba8f0b1b800bd196e20ec636291ae82dcf000717bc29525f0c5a75c6be561ce10d6339546ded064f5c7bf5b8ee067d9ce427c68bdec105b488568e90fd24299da28ba657fd721161f95b8e8ccdf78c6ba5592d931eeefebdd20a999ea08248a3af77f4f9357670f4717aeb49cccc6d22e889a190c986f5237c9c391921b8d662fa61e3cff325e28fa0b6c6c00fd3cfcf04f2817c5119572f1023068ca493a2b148d356d25ff1339106ecfcb2c62730e79dcb8e72169982bced5848504fd41e65d4187947e01782e033860afa2951f5220968338607f42857e661021bb9bd9cef07a5f03435fbccbcf763d7fe741a05c3d7bc7cc9222e52b8638f8848301ca2a67fbc9842bba4d833ee2b6a42a6862eb44cf13cc933808f4335d69d2dfb98e2754f4b0b11b63fb052a36ad1c99844006e9a7f811a71fcb2773ab7a32e00d0c25cfac194cf0bd28339895778dd68a0e7e1ca3e1fd69b30c0f5f2b83d6ab46d434c3ec4a04cac675ee64c5848e672809f4a79af886a6fceb5374c78ca50fb72a50e8fd67332f75a5a6d4ce1a3e0792eec669296e0f2075a200c5699e021cbb24441010c74b93109f5683f1dce5ac42bfa64ec1e94a0a37be85e97e4efb4070e2b94cec7954519b979705696c5c0e3a3bb3ba7a735bcfb72d304563acbecaefd121e316a6629c408cbd711c078f480f9f48aa9f0292c19048b3fe2ba6023237901699949efcd58e91f5b944a414863f6e8e44618d4d6a53640e1f0ade6e99dcb6ef7ee1263e7a06665abc1ceb09bac5dab126977fc06ac791347f0719b98ee9e32412c321e8960f2df755d3c941fd08a50d0d8b373e32230aa0a13db78e9f861c9a260d549afd27cd7b304c8ee5675ac9b124c45dc5c760eb66b40c21f073c9f61acada2f3f647661e01b33221a857790f993646524203fd0ee2b3db72a10492cc9ef238eede7428cc1967d526ae19481df9aa2eaf93983fb7c762d8ac7edd1cdfa9ecd117da27146059c9833ebc707421042e60586ecc1eecf60c8fbff789ba06a59d9b7738e2edf273cb2cfacbc07ebc1700c2e6b7332b27dc0a185d1d8823ab4d6df0c2892d4c95921cdf7d365a6450af3527cbf656dba5fcb3ecaa912c825cccfccf60b4ee281684680b98103b92fd686011a87bebc8ce5c0cc3da6a59393cb2b859bc31f279261abbd8701fb2f45219fda8fb30b7c3bb42f4e584c43c8320d09d61063f880a7498258e2e1f70171606a3adae7d2051c01d8991e6e9ef6821ea6d5757829c266159c6129bb74b4d0e0c1c2ecd75e309dd48c96660327929d60a5acb155e148726883a3ca8eb41fc7496cd120f8a1f352ecec1953feb1b6c945cbe5a7b5bfaf726041fabbf1eff7c575949753b77a8dc5bbcc283d42a2f2572b0da91934fb9167c29d7b06039167620993c8e9d7e9302ea490dab4ec68e04cfcd23757c17b1388356f9d87311498298876c02a1760505ab2d870c93843475f91f76ca6cd5bfd05bfc9379ad8e34d7be0464328c5c27c13c7cbf33e8471d5da12ed2c63b7c74a7afe01c85b86b644dc3e6b2d185c5368db918d51bfba398b46deb63ed764429c71f4f8d462df8bb256776e96247ab65c8fc65461c67bbeadf1ef42907954ee3960d81dc4a3d93379a7a8b62695e040bbf7e61cb61bb7a457d8e2a4e2ab82e78b27f3a855d7630bcda0aaecddeae479ece814a63b316a14d0b9ed57c16b1d1f6e6e82387bffbb587a68ee0a28ab6e15aa16266c63eb2fbbe611904fc4d6b82ddb6ee0eeef43c3ba33ebea8f73cd3974cc7f93ff55a5174cbe30512d22b6d01976f2c522e3459681e9c0e69fbd309045768fff63f9657503e192c755873dcd89a655f64b0b5b903f8657a178fcf2928f49cc6688c536137384b8d5b9fdb7b7f3a1a34f799ba0fb8b5d964a1e1b97d7e97ac83a9f86993408f0f9b31e7756aa311dc1fc5e842425607e96393032fe3dd2fdfc3d32c27d74a7b17e264464a2725d37c5d6460de2ca34ed8477f05c1837107b1e21a55b6a486dc745d22d51eab508d21ca2a3a4b816e7e97878bd3396b6ff223f574100a11b2b3edaa980fd40e36420366a6c891d296c8531232831a93d223b6f471c57e99db1da980ec380a1d4317bc0b288961e5fe48bc7d2533b9b34e8cbb0fa7655f26b555793919740c9ae82e6340336cae45a3613079d224d1b57c36b62dede76e1f64c4a2f8bcc4672ef40b7d7d1f91eeb546cc956265ea93eb75b4e61221f884dfe8397b1654b9231ee24f60c6ae18fc8c87ad58e4c9da3d5a0e72146342a2d8708dcd759698276dd12ea72b037d727b8adcc31796f73488fb6fa8bd0996d28bd676cc0"}, 0x8d, "a6d700593ad8bdc674cc9b61c22392c56a6c2965ef71ff90c98592549f0e0071a35414e0818b791fe901e1218d4a05b00046ae3d1de363aaf3635ef2a22dc82fb69498d9537116382ba4e02dcd82b54940a478f63ff4e78acb3304dbd75d7473b4a186977682148d0bc0301c1759834f355961e18f2861dd69a34dc2b7bd6e6bb5ffbe82c010bf58504eb9fe38"}, 0x1166}) (async)
chdir(&(0x7f0000003140)='./file0\x00') (async)
bpf$MAP_CREATE(0x0, &(0x7f0000003180)=@bloom_filter={0x1e, 0xffff, 0xfffff937, 0xffff, 0x245, r6, 0x4, '\x00', r11, r5, 0x2, 0x5}, 0x50)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003240), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x44, r12, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x44) (async)
umount2(&(0x7f0000003380)='./file0\x00', 0x0) (async)
sendmsg$key(r5, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x2, 0x5, 0xa9, 0x3, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x20000050) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003480)={0x80, <r13=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000034c0)=r13, 0x4)
socket$kcm(0x29, 0x2, 0x0) (async)
fcntl$setown(r1, 0x8, 0x0)

297.763673ms ago: executing program 8 (id=2915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4a2f, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e25, @empty}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x1, 0x2, 0x2})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

236.663654ms ago: executing program 0 (id=2917):
r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
openat(r0, 0x0, 0xc0402, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRES8, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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")
io_uring_enter(r2, 0x2219, 0x4be2, 0x16, 0x0, 0x0)

180.827656ms ago: executing program 6 (id=2918):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
syz_emit_ethernet(0x50, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{}]}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x3e, 0x2, 0x0, 0x0, "c03be93bb48ab35a1752b36a56f17ed28f52ba8607cd67cf8507f57c9da7719aa08fa3271bc70970d973b28488c9832e788adc8427d3eb8299dcc296f4206a83"}}}}, &(0x7f0000000240)={0x0, 0x4, [0xb6b, 0x5d4, 0x86c, 0x230]})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@access_client}, {@cache_none}]}})

98.085998ms ago: executing program 0 (id=2919):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000800000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a0000000000000000000000050000000500000008"], 0x100}}, 0x0)

63.876879ms ago: executing program 0 (id=2920):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r0, &(0x7f00000000c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x80, {0x0, 0xfb}, {}, @result={0x0, 0x2}}], 0x1c)

62.496769ms ago: executing program 9 (id=2921):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x4000)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00')
read$eventfd(r3, &(0x7f0000000080), 0x8)
preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1, 0xff, 0xfffffda5)
sendmsg$AUDIT_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbfc, {0x20, 0x1, 0x2, 0x0, 0x5, 0xa, 0x200, 0xef, 0x0, 0x2, 0x4}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000804)
mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r1, 0x0)
pipe2(&(0x7f0000000200)={<r4=>0x0, <r5=>0x0}, 0x0)
write(r5, &(0x7f0000000210)="01", 0x1)
read(r4, &(0x7f0000000000)=""/8, 0x8)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

40.259069ms ago: executing program 0 (id=2922):
fallocate(0xffffffffffffffff, 0x2, 0x0, 0x5)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0})
getdents64(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)

39.661139ms ago: executing program 0 (id=2923):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040), 0x8)
sendmmsg$sock(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="dce4c739", 0x4}], 0x1, &(0x7f00000022c0)}}], 0x1, 0x20000000)

6.55388ms ago: executing program 8 (id=2924):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10808, &(0x7f0000001200)={[{@quota}, {@delalloc}, {@journal_async_commit}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x516, &(0x7f0000001340)="$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")
socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10808, &(0x7f0000001200)={[{@quota}, {@delalloc}, {@journal_async_commit}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x516, &(0x7f0000001340)="$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") (async)

337.05µs ago: executing program 9 (id=2925):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x274, &(0x7f00000005c0)="$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")
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xd2c, 0x19d}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28)
recvmsg(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000007c0)=""/84, 0x54}], 0x1}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=2934):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$igmp(0x2, 0x3, 0x2)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x42)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x1c, 0xfffe, 0x0, 0x3e8, 0x0})
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0xfd, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600003400000020fc0290780000001ce0000300070314000306907800fa000c45f4fff600650005010400030a0101020a01010114231120551a009e4a5c034d2889a01fcda05b712e50b502c4195c150abc3d79eb5bfd9684bc90ad7091588d381a72ab0893d8e30d33882423e87f59e3b1bb66c7638d09067b3368fb2fb6e2b8200759e8b45c6475fe65fad20e497978c84622aee2082f4683af1f57976b855ef38be83ca57755c98bab667c8feb81fa6aa0cb1a3fc617c1ebd759ed2d098f537a5f386ec3964d"], 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d04200526c41efcd3a4a42200", 0x7, 0x1, 0x85}, 0x3c)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = fsopen(&(0x7f0000000140)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0xf}, 0x1128c8, 0x1224, 0x0, 0x5, 0xfffffffffffffff9, 0x420001, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0x10, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pread64(r4, 0x0, 0x0, 0x131)
r5 = fsmount(r3, 0x0, 0x86)
fchdir(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x32, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x42}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x24004045)
io_uring_setup(0x695e, &(0x7f0000000040)={0x0, 0x10b905, 0x8000, 0x1, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES64=r0], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x6b32, 0x7721, 0x96, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

kernel console output (not intermixed with test programs):

   67.693106][ T3359] tipc: Node number set to 10005162
[   67.699164][ T4644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.821081][ T4655] SELinux: security_context_str_to_sid (~) failed with errno=-22
[   68.047079][ T4684] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   68.162824][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.219378][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.252841][ T4504] bridge_slave_0: entered allmulticast mode
[   68.285297][ T4504] bridge_slave_0: entered promiscuous mode
[   68.328443][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6
[   68.356657][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.365473][ T4709] Cannot find del_set index 4 as target
[   68.387783][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.399085][ T4647] loop3: detected capacity change from 0 to 8192
[   68.427155][ T4504] bridge_slave_1: entered allmulticast mode
[   68.433997][ T4647] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew'
[   68.473055][ T4504] bridge_slave_1: entered promiscuous mode
[   68.516397][ T4710] SELinux:  Context  is not valid (left unmapped).
[   68.576720][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.622865][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.724257][ T4504] team0: Port device team_slave_0 added
[   68.730569][ T4737] netlink: 'syz.0.318': attribute type 3 has an invalid length.
[   68.762403][ T4504] team0: Port device team_slave_1 added
[   68.834450][ T4746] netlink: 268 bytes leftover after parsing attributes in process `syz.0.320'.
[   68.853725][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.888802][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.943307][ T4756] netlink: 92 bytes leftover after parsing attributes in process `syz.0.323'.
[   68.998827][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.041612][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.054826][   T28] kauditd_printk_skb: 301 callbacks suppressed
[   69.054835][   T28] audit: type=1400 audit(1786140294.491:873): avc:  denied  { block_suspend } for  pid=4761 comm="syz.2.326" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   69.104879][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.180988][ T4769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'.
[   69.190026][   T28] audit: type=1400 audit(1786140294.521:874): avc:  denied  { ioctl } for  pid=4761 comm="syz.2.326" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9437 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   69.221409][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.361172][ T4778] veth1_to_bond: entered allmulticast mode
[   69.382418][ T4778] veth1_to_bond: entered promiscuous mode
[   69.414164][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[   69.483953][ T4504] hsr_slave_0: entered promiscuous mode
[   69.515540][ T4504] hsr_slave_1: entered promiscuous mode
[   69.550255][ T4504] debugfs: 'hsr0' already exists in 'hsr'
[   69.580461][ T4504] Cannot create hsr debugfs directory
[   69.600385][   T28] audit: type=1400 audit(1786140295.031:875): avc:  denied  { write } for  pid=4788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.659148][ T4778] veth1_to_bond (unregistering): left allmulticast mode
[   69.679585][ T4778] veth1_to_bond (unregistering): left promiscuous mode
[   69.727621][ T4778] bond0: (slave bond_slave_1): Releasing backup interface
[   69.742791][   T28] audit: type=1400 audit(1786140295.141:876): avc:  denied  { write } for  pid=4804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.907683][   T28] audit: type=1400 audit(1786140295.291:877): avc:  denied  { create } for  pid=4808 comm="syz.3.337" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   70.030066][   T28] audit: type=1400 audit(1786140295.291:878): avc:  denied  { write } for  pid=4808 comm="syz.3.337" name="file2" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   70.103462][ T4834] loop3: detected capacity change from 0 to 512
[   70.117053][ T4504] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   70.165460][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.185452][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.210059][   T28] audit: type=1400 audit(1786140295.291:879): avc:  denied  { open } for  pid=4808 comm="syz.3.337" path="/71/file2" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   70.238000][ T4504] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   70.283671][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.292883][ T4834] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.309486][ T4850] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   70.340249][ T4504] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   70.360732][   T28] audit: type=1400 audit(1786140295.291:880): avc:  denied  { ioctl } for  pid=4808 comm="syz.3.337" path="/71/file2" dev="tmpfs" ino=408 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   70.396144][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.439252][ T4504] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   70.449270][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.469118][ T3455] tipc: Subscription rejected, illegal request
[   70.491395][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.536831][   T28] audit: type=1400 audit(1786140295.491:881): avc:  denied  { write } for  pid=4829 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   70.620822][ T4867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4867 comm=syz.0.352
[   70.645746][ T4875] loop4: detected capacity change from 0 to 512
[   70.660977][   T28] audit: type=1400 audit(1786140295.521:882): avc:  denied  { unlink } for  pid=3299 comm="syz-executor" name="file2" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   70.753917][ T4875] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[   70.814163][ T4875] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[   70.832424][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.862321][ T4875] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[   70.862378][ T4875] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[   70.862462][ T4875] FAT-fs (loop4): error, corrupted file size (i_pos 53, 8960)
[   70.894353][ T4504] 8021q: adding VLAN 0 to HW filter on device team0
[   70.907408][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.907430][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.909709][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.909729][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.992160][ T4893] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.358' sets config #0
[   70.992273][ T4893] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.358' sets config #1
[   71.198664][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7
[   71.306047][ T4916] loop2: detected capacity change from 0 to 8192
[   71.306278][ T4916] vfat: Unknown parameter ''
[   71.329945][ T4924] syz.3.364 (4924) used greatest stack depth: 9744 bytes left
[   71.364981][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.569782][ T4941] netlink: 6 bytes leftover after parsing attributes in process `syz.2.367'.
[   71.680580][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[   71.698722][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8
[   71.768850][ T4965] loop2: detected capacity change from 0 to 2048
[   71.802450][ T4504] veth0_vlan: entered promiscuous mode
[   71.824745][ T4965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.844893][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.860607][ T4504] veth1_vlan: entered promiscuous mode
[   71.872812][ T4965] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.900375][ T4504] veth0_macvtap: entered promiscuous mode
[   71.914449][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.926256][ T4504] veth1_macvtap: entered promiscuous mode
[   71.972203][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.989489][ T4972] program syz.0.370 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.000015][ T4979] loop4: detected capacity change from 0 to 512
[   72.015560][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.036847][ T4979] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.371: Unrecognised inode hash code 255
[   72.094162][ T4979] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.371: Corrupt directory, running e2fsck is recommended
[   72.107185][ T3455] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.131685][ T3455] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.171951][   T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.194402][   T68] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set
[   72.197640][ T4985] random: crng reseeded on system resumption
[   72.228871][   T68] EXT4-fs (loop2): Remounting filesystem read-only
[   72.239570][ T4979] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   72.251330][   T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.271751][ T3455] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   72.300796][ T4979] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.371: corrupted in-inode xattr: invalid ea_ino
[   72.336607][ T3293] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.362723][ T4979] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.362872][ T4979] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.371: couldn't read orphan inode 15 (err -117)
[   72.372192][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   72.372205][    C0] EXT4-fs (loop4): initial error at time 1786140297: ext4_iget_extra_inode:5180: inode 15
[   72.372221][    C0] EXT4-fs (loop4): last error at time 1786140297: ext4_iget_extra_inode:5180: inode 15
[   72.417023][ T4992] loop6: detected capacity change from 0 to 1024
[   72.435554][ T4992] ext4: Bad value for 'barrier'
[   72.459584][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[   72.510199][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   72.543867][ T4997] netlink: 'syz.2.372': attribute type 12 has an invalid length.
[   72.571818][ T4979] loop4: lost filesystem error report for type 5 error -117
[   72.572320][ T4979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.623919][ T5003] loop6: detected capacity change from 0 to 512
[   72.656674][ T4997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=4997 comm=syz.2.372
[   72.684013][ T5003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.699164][ T4979] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.371: Unrecognised inode hash code 255
[   72.722462][ T5001] netlink: 26 bytes leftover after parsing attributes in process `syz.2.372'.
[   72.731624][ T5003] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   72.744034][ T4979] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.371: Corrupt directory, running e2fsck is recommended
[   72.761086][ T4997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'.
[   72.783683][ T4998] loop3: detected capacity change from 0 to 8192
[   72.837661][ T4504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.863163][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.886231][ T4979] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.371: Unrecognised inode hash code 255
[   72.916008][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.978400][ T4979] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.371: Corrupt directory, running e2fsck is recommended
[   73.039047][ T5027] tmpfs: Bad value for 'mpol'
[   73.046855][ T4979] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 4: comm syz.4.371: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0
[   73.256308][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.305624][ T5040] loop2: detected capacity change from 0 to 512
[   73.348277][ T5040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   73.393437][ T5040] EXT4-fs (loop2): 1 truncate cleaned up
[   73.412034][ T5040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.443668][ T5040] FAULT_INJECTION: forcing a failure.
[   73.443668][ T5040] name failslab, interval 1, probability 0, space 0, times 0
[   73.499521][ T5040] CPU: 0 UID: 0 PID: 5040 Comm: syz.2.390 Not tainted syzkaller #0 PREEMPT(lazy) 
[   73.499539][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   73.499547][ T5040] Call Trace:
[   73.499551][ T5040]  <TASK>
[   73.499556][ T5040]  __dump_stack+0x1d/0x30
[   73.499570][ T5040]  dump_stack_lvl+0x95/0xd0
[   73.499581][ T5040]  dump_stack+0x15/0x1b
[   73.499598][ T5040]  should_fail_ex+0x25e/0x270
[   73.499614][ T5040]  ? __get_vm_area_node+0x106/0x1d0
[   73.499628][ T5040]  should_failslab+0x8c/0xb0
[   73.499640][ T5040]  __kmalloc_cache_node_noprof+0x81/0x3e0
[   73.499667][ T5040]  ? __get_vm_area_node+0x106/0x1d0
[   73.499681][ T5040]  __get_vm_area_node+0x106/0x1d0
[   73.499694][ T5040]  __vmalloc_node_range_noprof+0x266/0x11e0
[   73.499707][ T5040]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   73.499801][ T5040]  ? ktime_get+0x212/0x240
[   73.499812][ T5040]  ? avc_has_perm_noaudit+0xa3/0x120
[   73.499827][ T5040]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   73.499905][ T5040]  __vmalloc_noprof+0xa4/0xf0
[   73.499939][ T5040]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   73.499954][ T5040]  bpf_prog_alloc_no_stats+0x47/0x390
[   73.499973][ T5040]  ? bpf_prog_alloc+0x2a/0x150
[   73.500031][ T5040]  bpf_prog_alloc+0x3c/0x150
[   73.500046][ T5040]  bpf_prog_load+0x54b/0x1100
[   73.500062][ T5040]  ? avc_has_perm_noaudit+0xa3/0x120
[   73.500095][ T5040]  ? vfs_write+0x810/0x990
[   73.500105][ T5040]  __sys_bpf+0xbae/0xc30
[   73.500121][ T5040]  ? vfs_write+0x810/0x990
[   73.500131][ T5040]  ? vfs_write+0x810/0x990
[   73.500215][ T5040]  __x64_sys_bpf+0x69/0x80
[   73.500230][ T5040]  x64_sys_call+0x10cb/0x3020
[   73.500288][ T5040]  do_syscall_64+0x136/0x3c0
[   73.500305][ T5040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.500316][ T5040] RIP: 0033:0x7f76e89ae0d9
[   73.500327][ T5040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.500404][ T5040] RSP: 002b:00007f76e7407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.500415][ T5040] RAX: ffffffffffffffda RBX: 00007f76e8c35fa0 RCX: 00007f76e89ae0d9
[   73.500448][ T5040] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[   73.500455][ T5040] RBP: 00007f76e7407090 R08: 0000000000000000 R09: 0000000000000000
[   73.500462][ T5040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.500469][ T5040] R13: 00007f76e8c36038 R14: 00007f76e8c35fa0 R15: 00007ffd900e2be8
[   73.500511][ T5040]  </TASK>
[   73.789891][ T5060] FAULT_INJECTION: forcing a failure.
[   73.789891][ T5060] name failslab, interval 1, probability 0, space 0, times 0
[   73.821805][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(lazy) 
[   73.821823][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   73.821829][ T5060] Call Trace:
[   73.821833][ T5060]  <TASK>
[   73.821891][ T5060]  __dump_stack+0x1d/0x30
[   73.821980][ T5060]  dump_stack_lvl+0x95/0xd0
[   73.821991][ T5060]  dump_stack+0x15/0x1b
[   73.822001][ T5060]  should_fail_ex+0x25e/0x270
[   73.822017][ T5060]  ? __get_vm_area_node+0x106/0x1d0
[   73.822070][ T5060]  should_failslab+0x8c/0xb0
[   73.822083][ T5060]  __kmalloc_cache_node_noprof+0x81/0x3e0
[   73.822096][ T5060]  ? __get_vm_area_node+0x106/0x1d0
[   73.822164][ T5060]  __get_vm_area_node+0x106/0x1d0
[   73.822178][ T5060]  __vmalloc_node_range_noprof+0x266/0x11e0
[   73.822269][ T5060]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   73.822338][ T5060]  ? avc_has_perm_noaudit+0xa3/0x120
[   73.822354][ T5060]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   73.822368][ T5060]  __vmalloc_noprof+0xa4/0xf0
[   73.822381][ T5060]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   73.822438][ T5060]  bpf_prog_alloc_no_stats+0x47/0x390
[   73.822515][ T5060]  ? bpf_prog_alloc+0x2a/0x150
[   73.822529][ T5060]  bpf_prog_alloc+0x3c/0x150
[   73.822592][ T5060]  bpf_prog_load+0x54b/0x1100
[   73.822608][ T5060]  ? avc_has_perm_noaudit+0xa3/0x120
[   73.822623][ T5060]  ? vfs_write+0x810/0x990
[   73.822634][ T5060]  __sys_bpf+0xbae/0xc30
[   73.822676][ T5060]  ? vfs_write+0x810/0x990
[   73.822686][ T5060]  ? vfs_write+0x810/0x990
[   73.822700][ T5060]  __x64_sys_bpf+0x69/0x80
[   73.822804][ T5060]  x64_sys_call+0x10cb/0x3020
[   73.822816][ T5060]  do_syscall_64+0x136/0x3c0
[   73.822882][ T5060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.822897][ T5060] RIP: 0033:0x7f3a5848e0d9
[   73.822906][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.822941][ T5060] RSP: 002b:00007f3a56ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.822956][ T5060] RAX: ffffffffffffffda RBX: 00007f3a58715fa0 RCX: 00007f3a5848e0d9
[   73.822963][ T5060] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[   73.822973][ T5060] RBP: 00007f3a56ee7090 R08: 0000000000000000 R09: 0000000000000000
[   73.822983][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.822991][ T5060] R13: 00007f3a58716038 R14: 00007f3a58715fa0 R15: 00007ffe8896e5d8
[   73.823066][ T5060]  </TASK>
[   73.824750][ T5060] syz.4.396: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[   74.064584][   T28] kauditd_printk_skb: 128 callbacks suppressed
[   74.064593][   T28] audit: type=1326 audit(1786140299.501:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5012 comm="syz.0.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feef28ae90e code=0x7ffc0000
[   74.149209][ T3293] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.169296][   T28] audit: type=1326 audit(1786140299.601:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5012 comm="syz.0.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[   74.289655][ T5077] __nla_validate_parse: 1 callbacks suppressed
[   74.289664][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.402'.
[   74.317633][ T5060] ,cpuset=/,mems_allowed=0
[   74.348319][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(lazy) 
[   74.348337][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.348343][ T5060] Call Trace:
[   74.348347][ T5060]  <TASK>
[   74.348426][ T5060]  __dump_stack+0x1d/0x30
[   74.348441][ T5060]  dump_stack_lvl+0x95/0xd0
[   74.348452][ T5060]  dump_stack+0x15/0x1b
[   74.348464][ T5060]  warn_alloc+0x145/0x1c0
[   74.348480][ T5060]  __vmalloc_node_range_noprof+0x28b/0x11e0
[   74.348520][ T5060]  ? avc_has_perm_noaudit+0xa3/0x120
[   74.348536][ T5060]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   74.348551][ T5060]  __vmalloc_noprof+0xa4/0xf0
[   74.348586][ T5060]  ? bpf_prog_alloc_no_stats+0x47/0x390
[   74.348601][ T5060]  bpf_prog_alloc_no_stats+0x47/0x390
[   74.348635][ T5060]  ? bpf_prog_alloc+0x2a/0x150
[   74.348650][ T5060]  bpf_prog_alloc+0x3c/0x150
[   74.348664][ T5060]  bpf_prog_load+0x54b/0x1100
[   74.348746][ T5060]  ? avc_has_perm_noaudit+0xa3/0x120
[   74.348823][ T5060]  ? vfs_write+0x810/0x990
[   74.348834][ T5060]  __sys_bpf+0xbae/0xc30
[   74.348877][ T5060]  ? vfs_write+0x810/0x990
[   74.348887][ T5060]  ? vfs_write+0x810/0x990
[   74.348942][ T5060]  __x64_sys_bpf+0x69/0x80
[   74.348957][ T5060]  x64_sys_call+0x10cb/0x3020
[   74.348969][ T5060]  do_syscall_64+0x136/0x3c0
[   74.349042][ T5060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.349118][ T5060] RIP: 0033:0x7f3a5848e0d9
[   74.349196][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.349207][ T5060] RSP: 002b:00007f3a56ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   74.349218][ T5060] RAX: ffffffffffffffda RBX: 00007f3a58715fa0 RCX: 00007f3a5848e0d9
[   74.349292][ T5060] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005
[   74.349299][ T5060] RBP: 00007f3a56ee7090 R08: 0000000000000000 R09: 0000000000000000
[   74.349307][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.349313][ T5060] R13: 00007f3a58716038 R14: 00007f3a58715fa0 R15: 00007ffe8896e5d8
[   74.349356][ T5060]  </TASK>
[   74.349391][ T5060] Mem-Info:
[   74.587582][   T28] audit: type=1400 audit(1786140300.001:1013): avc:  denied  { setopt } for  pid=5084 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   74.633181][ T5092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'.
[   74.643660][ T5092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'.
[   74.656162][ T5092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'.
[   74.682068][   T28] audit: type=1400 audit(1786140300.111:1014): avc:  denied  { name_connect } for  pid=5091 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   74.703213][ T5092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'.
[   74.729953][   T28] audit: type=1400 audit(1786140300.121:1015): avc:  denied  { shutdown } for  pid=5091 comm="syz.3.408" lport=45238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.753954][   T28] audit: type=1400 audit(1786140300.191:1016): avc:  denied  { create } for  pid=5094 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   74.787133][ T5090] loop2: detected capacity change from 0 to 128
[   74.888746][ T5090] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.902079][ T5090] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   75.176396][   T28] audit: type=1400 audit(1786140300.611:1017): avc:  denied  { ioctl } for  pid=5094 comm="syz.3.409" path="socket:[10736]" dev="sockfs" ino=10736 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   75.205660][ T5060] active_anon:12315 inactive_anon:2 isolated_anon:0
[   75.205660][ T5060]  active_file:0 inactive_file:11487 isolated_file:0
[   75.205660][ T5060]  unevictable:0 dirty:270 writeback:0
[   75.205660][ T5060]  slab_reclaimable:3234 slab_unreclaimable:48162
[   75.205660][ T5060]  mapped:33515 shmem:4441 pagetables:1324
[   75.205660][ T5060]  sec_pagetables:0 bounce:0
[   75.205660][ T5060]  kernel_misc_reclaimable:0
[   75.205660][ T5060]  free:1862981 free_pcp:2480 free_cma:0
[   75.252775][   T28] audit: type=1400 audit(1786140300.691:1018): avc:  denied  { write } for  pid=5089 comm="syz.2.407" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.279916][   T28] audit: type=1400 audit(1786140300.711:1019): avc:  denied  { ioctl } for  pid=5089 comm="syz.2.407" path="/69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop2" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   75.328479][ T5060] Node 0 active_anon:49260kB inactive_anon:8kB active_file:0kB inactive_file:45948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134060kB dirty:1080kB writeback:0kB shmem:17764kB kernel_stack:3968kB pagetables:5296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   75.359569][ T5060] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   75.398346][ T3293] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   75.558190][ T5107] FAULT_INJECTION: forcing a failure.
[   75.558190][ T5107] name failslab, interval 1, probability 0, space 0, times 0
[   75.572061][ T5060] lowmem_reserve[]: 0 2878 7857 7857
[   75.577470][ T5060] Node 0 DMA32 free:2947512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947616kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:104kB free_cma:0kB
[   75.612501][ T5108] xt_ecn: cannot match TCP bits for non-tcp packets
[   75.620364][ T5108] netlink: 'syz.6.412': attribute type 10 has an invalid length.
[   75.665151][ T5108] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.674242][ T5108] team0: Port device netdevsim2 added
[   75.682640][ T5108] netlink: 'syz.6.412': attribute type 10 has an invalid length.
[   75.693205][ T5108] team0: Port device netdevsim2 removed
[   75.700315][ T5108] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   75.709628][ T5108] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[   75.736888][ T5107] CPU: 0 UID: 0 PID: 5107 Comm: syz.2.411 Not tainted syzkaller #0 PREEMPT(lazy) 
[   75.736996][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.737010][ T5107] Call Trace:
[   75.737014][ T5107]  <TASK>
[   75.737018][ T5107]  __dump_stack+0x1d/0x30
[   75.737082][ T5107]  dump_stack_lvl+0x95/0xd0
[   75.737104][ T5107]  dump_stack+0x15/0x1b
[   75.737114][ T5107]  should_fail_ex+0x25e/0x270
[   75.737150][ T5107]  should_failslab+0x8c/0xb0
[   75.737711][ T5107]  __kmalloc_noprof+0xd4/0x4a0
[   75.737749][ T5107]  ? bpf_test_init+0x86/0x130
[   75.737765][ T5107]  ? bpf_test_init+0x86/0x130
[   75.737808][ T5107]  ? __rcu_read_unlock+0x4e/0x70
[   75.737823][ T5107]  bpf_test_init+0x86/0x130
[   75.737836][ T5107]  bpf_prog_test_run_skb+0x271/0x11b0
[   75.737850][ T5107]  ? _parse_integer_limit+0x177/0x1a0
[   75.738032][ T5107]  ? __rcu_read_unlock+0x4e/0x70
[   75.738046][ T5107]  ? __fget_files+0x184/0x1c0
[   75.738072][ T5107]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   75.738126][ T5107]  bpf_prog_test_run+0x208/0x340
[   75.738145][ T5107]  __sys_bpf+0x8da/0xc30
[   75.738161][ T5107]  ? vfs_write+0x810/0x990
[   75.738179][ T5107]  __x64_sys_bpf+0x69/0x80
[   75.738194][ T5107]  x64_sys_call+0x10cb/0x3020
[   75.738357][ T5107]  do_syscall_64+0x136/0x3c0
[   75.738380][ T5107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.738460][ T5107] RIP: 0033:0x7f76e89ae0d9
[   75.738471][ T5107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.738484][ T5107] RSP: 002b:00007f76e7407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   75.738815][ T5107] RAX: ffffffffffffffda RBX: 00007f76e8c35fa0 RCX: 00007f76e89ae0d9
[   75.738873][ T5107] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[   75.738880][ T5107] RBP: 00007f76e7407090 R08: 0000000000000000 R09: 0000000000000000
[   75.738902][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.738910][ T5107] R13: 00007f76e8c36038 R14: 00007f76e8c35fa0 R15: 00007ffd900e2be8
[   75.738924][ T5107]  </TASK>
[   75.948592][ T5060] lowmem_reserve[]: 0 0 4978 4978
[   75.954450][ T5060] Node 0 Normal free:4472440kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48976kB inactive_anon:8kB active_file:0kB inactive_file:45908kB unevictable:0kB writepending:1192kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:26200kB local_pcp:26200kB free_cma:0kB
[   75.991062][ T5060] lowmem_reserve[]: 0 0 0 0
[   75.995710][ T5060] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   76.008472][ T5060] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 2*256kB (M) 2*512kB (M) 4*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2947512kB
[   76.024827][ T5060] Node 0 Normal: 194*4kB (UME) 16*8kB (UM) 3*16kB (UM) 4*32kB (UM) 3*64kB (UME) 5*128kB (UE) 5*256kB (UME) 5*512kB (UE) 4*1024kB (UM) 7*2048kB (UME) 1086*4096kB (UM) = 4472440kB
[   76.043289][ T5060] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[   76.052769][ T5060] 15907 total pagecache pages
[   76.057891][ T5060] 2 pages in swap cache
[   76.062280][ T5060] Free swap  = 124988kB
[   76.066514][ T5060] Total swap = 124996kB
[   76.070703][ T5060] 2097051 pages RAM
[   76.074586][ T5060] 0 pages HighMem/MovableOnly
[   76.079495][ T5060] 81748 pages reserved
[   76.168495][ T5120] x_tables: ip6_tables: string.1 match: invalid size 160 (kernel) != (user) 4304
[   76.207196][ T5124] geneve2: entered promiscuous mode
[   76.229943][ T5124] geneve2: entered allmulticast mode
[   76.237090][   T28] audit: type=1400 audit(1786140301.671:1020): avc:  denied  { connect } for  pid=5126 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   76.303635][ T5131] loop4: detected capacity change from 0 to 512
[   76.433233][ T5131] loop4: detected capacity change from 0 to 1024
[   76.471354][ T5143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.426'.
[   76.508893][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   76.538952][ T5143] x_tables: duplicate entry at hook 4
[   76.551284][ T5131] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.602091][ T5131] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.423: lblock 3 mapped to illegal pblock 3 (length 2)
[   76.684993][ T5131] EXT4-fs (loop4): Remounting filesystem read-only
[   76.736404][ T5161] loop6: detected capacity change from 0 to 736
[   76.755991][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'.
[   76.782270][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   76.826055][   T11] IPVS: starting estimator thread 0...
[   76.832633][ T5161] netlink: 20 bytes leftover after parsing attributes in process `syz.6.432'.
[   76.872798][ T5168] SELinux:  policydb version 0 does not match my version range 15-35
[   76.917111][ T5168] SELinux: failed to load policy
[   76.930608][ T5167] IPVS: using max 4272 ests per chain, 213600 per kthread
[   76.964346][ T5175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'.
[   76.999727][   T30] tipc: Subscription rejected, illegal request
[   77.122264][ T5182] netlink: 'syz.6.438': attribute type 3 has an invalid length.
[   77.130078][ T5182] netlink: 132 bytes leftover after parsing attributes in process `syz.6.438'.
[   77.173289][ T5189] scsi_dev_info_list_add_str: bad dev info string '&eìŠuÛÐá4æt¨X\ßæ6~À' '' ''
[   77.186402][ T5190] usb usb7: check_ctrlrecip: process 5190 (syz.4.442) requesting ep 01 but needs 81
[   77.204901][ T5192] loop6: detected capacity change from 0 to 128
[   77.238284][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   77.262286][ T5190] usb usb7: usbfs: process 5190 (syz.4.442) did not claim interface 0 before use
[   77.276823][ T5192] FAT-fs (loop6): Filesystem has been set read-only
[   77.297744][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   77.361430][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   77.435245][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   77.494993][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   77.595228][   T30] tipc: Subscription rejected, illegal request
[   77.616890][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   78.608289][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   78.667286][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   78.698077][ T5231] loop4: detected capacity change from 0 to 164
[   78.717100][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   78.729610][ T5231] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[   78.754470][ T5234] veth0_macvtap: left promiscuous mode
[   78.784570][ T5234] macvtap0: entered allmulticast mode
[   78.791522][ T5192] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[   78.866615][ T5242] Cannot find add_set index 4 as target
[   79.102412][   T28] kauditd_printk_skb: 23 callbacks suppressed
[   79.102421][   T28] audit: type=1400 audit(1786140304.541:1044): avc:  denied  { watch } for  pid=5253 comm="syz.0.467" path="/72" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   79.266615][   T28] audit: type=1400 audit(1786140304.701:1045): avc:  denied  { read } for  pid=5269 comm="syz.6.471" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   79.403663][   T28] audit: type=1400 audit(1786140304.701:1046): avc:  denied  { open } for  pid=5269 comm="syz.6.471" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   79.519908][   T28] audit: type=1400 audit(1786140304.731:1047): avc:  denied  { ioctl } for  pid=5269 comm="syz.6.471" path="/dev/usbmon2" dev="devtmpfs" ino=148 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   79.641816][ T5296] printk: legacy console [ttyS0] disabled
[  197.642622][T11161] printk: legacy console [ttyS0] enabled
[  197.701910][T11154] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.804287][T11154] ext4 filesystem being mounted at /398/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.060445][T11178] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  198.080290][ T3292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.108121][T11178] iwpm_mapping_info_cb: Unable to parse nlmsg
[  198.252848][T11189] loop8: detected capacity change from 0 to 2048
[  198.281017][T11189] Alternate GPT is invalid, using primary GPT.
[  198.302099][T11189]  loop8: p1 p2 p3
[  198.314638][T11189] loop8: partition table partially beyond EOD, truncated
[  198.922195][T11198] loop9: detected capacity change from 0 to 512
[  198.988045][T11198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.069018][T11206] netlink: 'syz.3.2293': attribute type 1 has an invalid length.
[  199.081618][T11198] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  199.129174][T11210] netlink: 'syz.0.2294': attribute type 1 has an invalid length.
[  199.141495][T11198] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2289: corrupted inode contents
[  199.193358][T11198] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #2: comm syz.9.2289: mark_inode_dirty error
[  199.272869][T11198] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2289: corrupted inode contents
[  199.347422][   T28] audit: type=1400 audit(1786141192.819:3534): avc:  denied  { write } for  pid=11194 comm="syz.9.2289" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  199.372890][T11223] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2289: corrupted inode contents
[  199.433205][T11223] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #2: comm syz.9.2289: mark_inode_dirty error
[  199.495543][T11223] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #2: comm syz.9.2289: corrupted inode contents
[  199.510837][T11233] FAULT_INJECTION: forcing a failure.
[  199.510837][T11233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.548035][T11223] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.2289: mark_inode_dirty error
[  199.564117][   T28] audit: type=1400 audit(1786141193.039:3535): avc:  denied  { create } for  pid=11220 comm="syz.3.2299" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1
[  199.589310][T11233] CPU: 0 UID: 0 PID: 11233 Comm: syz.0.2301 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  199.589329][T11233] Tainted: [W]=WARN
[  199.589333][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  199.589340][T11233] Call Trace:
[  199.589344][T11233]  <TASK>
[  199.589350][T11233]  __dump_stack+0x1d/0x30
[  199.589420][T11233]  dump_stack_lvl+0x95/0xd0
[  199.589431][T11233]  dump_stack+0x15/0x1b
[  199.589441][T11233]  should_fail_ex+0x25e/0x270
[  199.589456][T11233]  should_fail+0xb/0x20
[  199.589474][T11233]  should_fail_usercopy+0x1a/0x20
[  199.589490][T11233]  _copy_to_user+0x20/0xa0
[  199.589501][T11233]  simple_read_from_buffer+0xb5/0x130
[  199.589516][T11233]  proc_fail_nth_read+0x10e/0x150
[  199.589587][T11233]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.589679][T11233]  vfs_read+0x18e/0x7c0
[  199.589690][T11233]  ? __rcu_read_unlock+0x4e/0x70
[  199.589704][T11233]  ? __fget_files+0x184/0x1c0
[  199.589717][T11233]  ? mutex_lock+0x57/0x90
[  199.589730][T11233]  ksys_read+0xdc/0x1a0
[  199.589771][T11233]  __x64_sys_read+0x40/0x50
[  199.589781][T11233]  x64_sys_call+0x2886/0x3020
[  199.589854][T11233]  do_syscall_64+0x136/0x3c0
[  199.589912][T11233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.589924][T11233] RIP: 0033:0x7feef28ae90e
[  199.589934][T11233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  199.589969][T11233] RSP: 002b:00007feef1346fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  199.589981][T11233] RAX: ffffffffffffffda RBX: 00007feef13476c0 RCX: 00007feef28ae90e
[  199.589989][T11233] RDX: 000000000000000f RSI: 00007feef13470a0 RDI: 0000000000000004
[  199.589996][T11233] RBP: 00007feef1347090 R08: 0000000000000000 R09: 0000000000000000
[  199.590003][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  199.590010][T11233] R13: 00007feef2b76038 R14: 00007feef2b75fa0 R15: 00007ffe3fdcad28
[  199.590092][T11233]  </TASK>
[  200.101794][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.216089][T11247] __nla_validate_parse: 5 callbacks suppressed
[  200.216107][T11247] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2304'.
[  200.232290][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'.
[  200.276554][T11251] netlink: 'syz.3.2307': attribute type 1 has an invalid length.
[  200.320357][T11251] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.2307'.
[  200.377457][T11254] loop0: detected capacity change from 0 to 1024
[  200.434880][T11254] EXT4-fs: Ignoring removed orlov option
[  200.492207][T11254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.529652][T11273] loop3: detected capacity change from 0 to 512
[  200.561961][T11273] EXT4-fs: test_dummy_encryption option not supported
[  200.607142][T11273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2311'.
[  200.631626][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.713649][T11281] loop0: detected capacity change from 0 to 1024
[  200.750687][T11283] loop3: detected capacity change from 0 to 512
[  200.761854][T11281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.794311][T11283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.813757][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  200.813822][   T28] audit: type=1400 audit(1786141194.289:3537): avc:  denied  { write } for  pid=11280 comm="syz.0.2313" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  200.864117][T11283] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.876200][T11281] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  200.920995][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.937624][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.221442][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2320'.
[  201.293580][T11307] loop0: detected capacity change from 0 to 164
[  201.316528][   T28] audit: type=1400 audit(1786141194.789:3538): avc:  denied  { write } for  pid=11297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.344547][T11307] iso9660: Unknown parameter ''
[  201.445786][T11317] loop8: detected capacity change from 0 to 1024
[  201.476361][   T28] audit: type=1400 audit(1786141194.919:3539): avc:  denied  { write } for  pid=11321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.520884][T11317] EXT4-fs: inline encryption not supported
[  201.580497][T11326] bridge0: entered allmulticast mode
[  201.603065][T11323] loop9: detected capacity change from 0 to 1024
[  201.613382][T11317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  201.635324][T11326] bridge_slave_1: left allmulticast mode
[  201.650496][T11323] EXT4-fs: inline encryption not supported
[  201.671325][T11326] bridge_slave_1: left promiscuous mode
[  201.681968][T11317] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.708455][T11326] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.734049][T11323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  201.760072][T11326] bridge_slave_0: left allmulticast mode
[  201.766722][T11317] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2322: bg 0: block 112: padding at end of block bitmap is not set
[  201.791162][T11326] bridge_slave_0: left promiscuous mode
[  201.800233][T11323] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.816878][T11326] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.852688][   T28] audit: type=1400 audit(1786141195.329:3540): avc:  denied  { write } for  pid=11330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.884380][T11323] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2323: bg 0: block 112: padding at end of block bitmap is not set
[  202.006878][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  202.037764][   T28] audit: type=1400 audit(1786141195.459:3541): avc:  denied  { write } for  pid=11347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.124136][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  202.182939][T11363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  202.189499][T11363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.280506][T11363] vhci_hcd vhci_hcd.0: Device attached
[  202.326835][T11379] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  202.333378][T11379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.357933][T11381] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  202.377593][T11385] netlink: 'syz.8.2332': attribute type 1 has an invalid length.
[  202.385523][T11385] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.2332'.
[  202.417474][T11381] SELinux: failed to load policy
[  202.427168][T11379] vhci_hcd vhci_hcd.0: Device attached
[  202.436281][   T28] audit: type=1400 audit(1786141195.909:3542): avc:  denied  { write } for  pid=11358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  202.468500][T11392] SELinux:  policydb magic number 0x4fa0ad2c does not match expected magic number 0xf97cff8c
[  202.496234][T11363] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5)
[  202.502751][T11363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.520066][ T3976] usb 7-1: new high-speed USB device number 2 using vhci_hcd
[  202.535148][T11369] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  202.570608][   T28] audit: type=1326 audit(1786141195.999:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.9.2328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  202.599261][T11394] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11)
[  202.605895][T11394] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.623690][T11392] SELinux: failed to load policy
[  202.660269][T11379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  202.721155][T11363] vhci_hcd vhci_hcd.0: Device attached
[  202.737969][   T28] audit: type=1326 audit(1786141195.999:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.9.2328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  202.781602][T11394] vhci_hcd vhci_hcd.0: Device attached
[  202.832493][T11363] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(10)
[  202.839189][T11363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  202.898875][   T28] audit: type=1326 audit(1786141196.009:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.9.2328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  202.934102][T11363] vhci_hcd vhci_hcd.0: Device attached
[  202.963632][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2340'.
[  202.973152][T11379] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(13)
[  202.979727][T11379] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  203.026172][T11379] vhci_hcd vhci_hcd.0: Device attached
[  203.048226][   T28] audit: type=1326 audit(1786141196.009:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.9.2328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  203.084692][T11380] vhci_hcd: connection closed
[  203.085136][ T6053] vhci_hcd vhci_hcd.3: stop threads
[  203.096392][T11396] vhci_hcd: connection closed
[  203.096519][T11364] vhci_hcd: connection reset by peer
[  203.107700][T11417] vhci_hcd: connection closed
[  203.108012][T11425] vhci_hcd: connection closed
[  203.112841][T11395] vhci_hcd: connection closed
[  203.131136][ T6053] vhci_hcd vhci_hcd.3: release socket
[  203.203788][ T6053] vhci_hcd vhci_hcd.3: disconnect device
[  203.234063][ T6053] vhci_hcd vhci_hcd.3: stop threads
[  203.275567][ T6053] vhci_hcd vhci_hcd.3: release socket
[  203.304861][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'.
[  203.318089][ T6053] vhci_hcd vhci_hcd.3: disconnect device
[  203.351999][ T6053] vhci_hcd vhci_hcd.3: stop threads
[  203.388959][ T6053] vhci_hcd vhci_hcd.3: release socket
[  203.401817][T11453] loop8: detected capacity change from 0 to 512
[  203.427665][ T6053] vhci_hcd vhci_hcd.3: disconnect device
[  203.463774][T11453] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  203.476534][ T6053] vhci_hcd vhci_hcd.3: stop threads
[  203.503910][ T6053] vhci_hcd vhci_hcd.3: release socket
[  203.531111][T11453] EXT4-fs (loop8): 1 truncate cleaned up
[  203.543122][ T6053] vhci_hcd vhci_hcd.3: disconnect device
[  203.567986][T11453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.583727][ T6053] vhci_hcd vhci_hcd.3: stop threads
[  203.629372][ T6053] vhci_hcd vhci_hcd.3: release socket
[  203.667876][T11468] netlink: 'syz.0.2345': attribute type 1 has an invalid length.
[  203.684111][ T6053] vhci_hcd vhci_hcd.3: disconnect device
[  203.724250][ T6053] vhci_hcd vhci_hcd.3: stop threads
[  203.740878][T11468] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.2345'.
[  203.764504][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.780383][ T6053] vhci_hcd vhci_hcd.3: release socket
[  203.813133][ T6053] vhci_hcd vhci_hcd.3: disconnect device
[  203.952594][T11477] loop9: detected capacity change from 0 to 1024
[  204.035613][T11477] EXT4-fs: inline encryption not supported
[  204.121350][T11477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  204.146049][T11503] loop8: detected capacity change from 0 to 1024
[  204.203448][T11520] atomic_op ffff88811b9e6528 conn xmit_atomic 0000000000000000
[  204.213277][T11477] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.297891][T11477] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2349: bg 0: block 112: padding at end of block bitmap is not set
[  204.373556][T11534] netlink: 'syz.0.2360': attribute type 1 has an invalid length.
[  204.403043][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2362'.
[  204.479429][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  204.496812][T11545] FAULT_INJECTION: forcing a failure.
[  204.496812][T11545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.610161][T11558] FAULT_INJECTION: forcing a failure.
[  204.610161][T11558] name failslab, interval 1, probability 0, space 0, times 0
[  204.658163][T11560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=11560 comm=syz.0.2368
[  204.699345][T11545] CPU: 0 UID: 0 PID: 11545 Comm: syz.3.2363 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  204.699365][T11545] Tainted: [W]=WARN
[  204.699369][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  204.699376][T11545] Call Trace:
[  204.699379][T11545]  <TASK>
[  204.699384][T11545]  __dump_stack+0x1d/0x30
[  204.699398][T11545]  dump_stack_lvl+0x95/0xd0
[  204.699479][T11545]  dump_stack+0x15/0x1b
[  204.699489][T11545]  should_fail_ex+0x25e/0x270
[  204.699568][T11545]  should_fail+0xb/0x20
[  204.699581][T11545]  should_fail_usercopy+0x1a/0x20
[  204.699646][T11545]  _copy_from_user+0x1c/0xb0
[  204.699665][T11545]  kstrtouint_from_user+0x69/0xf0
[  204.699680][T11545]  ? 0xffffffff81000000
[  204.699702][T11545]  ? avc_policy_seqno+0x15/0x30
[  204.699715][T11545]  proc_fail_nth_write+0x50/0x160
[  204.699727][T11545]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  204.699739][T11545]  vfs_write+0x252/0x990
[  204.699750][T11545]  ? __fget_files+0x184/0x1c0
[  204.699782][T11545]  ? mutex_lock+0x57/0x90
[  204.699795][T11545]  ksys_write+0xdc/0x1a0
[  204.699815][T11545]  __x64_sys_write+0x40/0x50
[  204.699826][T11545]  x64_sys_call+0x27e1/0x3020
[  204.699886][T11545]  do_syscall_64+0x136/0x3c0
[  204.700046][T11545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.700076][T11545] RIP: 0033:0x7feae5ffe90e
[  204.700085][T11545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  204.700095][T11545] RSP: 002b:00007feae4a96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  204.700107][T11545] RAX: ffffffffffffffda RBX: 00007feae4a976c0 RCX: 00007feae5ffe90e
[  204.700199][T11545] RDX: 0000000000000001 RSI: 00007feae4a970a0 RDI: 0000000000000006
[  204.700206][T11545] RBP: 00007feae4a97090 R08: 0000000000000000 R09: 0000000000000000
[  204.700213][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.700280][T11545] R13: 00007feae62c6038 R14: 00007feae62c5fa0 R15: 00007fff3a13be68
[  204.700291][T11545]  </TASK>
[  204.706601][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.8.2367 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  204.706693][T11558] Tainted: [W]=WARN
[  204.706809][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  204.706816][T11558] Call Trace:
[  204.706820][T11558]  <TASK>
[  204.706826][T11558]  __dump_stack+0x1d/0x30
[  204.706840][T11558]  dump_stack_lvl+0x95/0xd0
[  204.706851][T11558]  dump_stack+0x15/0x1b
[  204.706934][T11558]  should_fail_ex+0x25e/0x270
[  204.706950][T11558]  ? nf_ct_tmpl_alloc+0x6b/0x140
[  204.706967][T11558]  should_failslab+0x8c/0xb0
[  204.706980][T11558]  __kmalloc_cache_noprof+0x7b/0x3d0
[  204.707073][T11558]  ? nf_ct_tmpl_alloc+0x6b/0x140
[  204.707127][T11558]  nf_ct_tmpl_alloc+0x6b/0x140
[  204.707148][T11558]  nft_ct_set_init+0x254/0x7b0
[  204.707163][T11558]  nf_tables_newrule+0xedf/0x16d0
[  204.707184][T11558]  nfnetlink_rcv+0xbf7/0x1740
[  204.707219][T11558]  netlink_unicast+0x5a7/0x680
[  204.707246][T11558]  netlink_sendmsg+0x5be/0x6f0
[  204.707295][T11558]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.707309][T11558]  ____sys_sendmsg+0x532/0x580
[  204.707322][T11558]  ___sys_sendmsg+0x195/0x1e0
[  204.707410][T11558]  __x64_sys_sendmsg+0xd4/0x160
[  204.707422][T11558]  x64_sys_call+0x194c/0x3020
[  204.707434][T11558]  do_syscall_64+0x136/0x3c0
[  204.707451][T11558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.707492][T11558] RIP: 0033:0x7f04e45de0d9
[  204.707501][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.707512][T11558] RSP: 002b:00007f04e3037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.707524][T11558] RAX: ffffffffffffffda RBX: 00007f04e4865fa0 RCX: 00007f04e45de0d9
[  204.707532][T11558] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003
[  204.707539][T11558] RBP: 00007f04e3037090 R08: 0000000000000000 R09: 0000000000000000
[  204.707546][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.707589][T11558] R13: 00007f04e4866038 R14: 00007f04e4865fa0 R15: 00007ffe81f156c8
[  204.707600][T11558]  </TASK>
[  205.330719][T11578] syzkaller0: entered promiscuous mode
[  205.339787][T11589] netlink: 'syz.8.2375': attribute type 1 has an invalid length.
[  205.353773][T11578] syzkaller0: entered allmulticast mode
[  205.379828][T11589] __nla_validate_parse: 2 callbacks suppressed
[  205.379849][T11589] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.2375'.
[  205.442415][T11587] loop3: detected capacity change from 0 to 512
[  205.510987][T11597] netlink: 'syz.8.2377': attribute type 13 has an invalid length.
[  205.524408][T11587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.721901][T11602] xt_ecn: cannot match TCP bits for non-tcp packets
[  205.803696][T11587] EXT4-fs (loop3): 1 truncate cleaned up
[  205.817390][T11587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.841177][T11614] x_tables: duplicate entry at hook 3
[  205.888949][   T28] kauditd_printk_skb: 77 callbacks suppressed
[  205.888959][   T28] audit: type=1400 audit(1786141199.359:3624): avc:  denied  { write } for  pid=11610 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  205.951766][T11583] EXT4-fs error (device loop3): __ext4_iget:5533: inode #12: block 2: comm syz.3.2371: invalid block
[  205.967262][T11623] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2383'.
[  206.155563][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.194563][   T28] audit: type=1326 audit(1786141199.669:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  206.325282][   T28] audit: type=1326 audit(1786141199.669:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  206.378594][T11645] netlink: 'syz.3.2387': attribute type 1 has an invalid length.
[  206.505470][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2392'.
[  206.524597][T11645] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.2387'.
[  206.535027][   T28] audit: type=1326 audit(1786141199.669:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  206.650029][T11668] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2396'.
[  206.697154][   T28] audit: type=1326 audit(1786141199.669:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  206.740188][T11668] vlan2: entered allmulticast mode
[  206.770380][T11668] gretap0: entered allmulticast mode
[  206.879908][   T28] audit: type=1326 audit(1786141199.669:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  206.921507][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2401'.
[  206.948538][T11690] loop3: detected capacity change from 0 to 1024
[  206.976951][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2401'.
[  207.023378][T11689] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  207.061665][   T28] audit: type=1326 audit(1786141199.669:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  207.113971][T11689] iwpm_mapping_info_cb: Unable to parse nlmsg
[  207.123423][T11690] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.2399: iget: bad i_size value: -360287970189638630
[  207.202512][   T28] audit: type=1326 audit(1786141199.669:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  207.263864][T11690] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  207.268724][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  207.284299][    C0] EXT4-fs (loop3): initial error at time 1786141200: ext4_orphan_get:1399: inode 13
[  207.293698][    C0] EXT4-fs (loop3): last error at time 1786141200: ext4_orphan_get:1399: inode 13
[  207.311791][T11690] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2399: couldn't read orphan inode 13 (err -117)
[  207.360328][   T28] audit: type=1326 audit(1786141199.699:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11634 comm="syz.0.2389" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  207.420910][T11690] loop3: lost filesystem error report for type 5 error -117
[  207.423827][T11690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.451852][T11720] netlink: 'syz.6.2409': attribute type 1 has an invalid length.
[  207.466957][T11717] net_ratelimit: 2 callbacks suppressed
[  207.466968][T11717] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  207.485873][T11720] netlink: 101600 bytes leftover after parsing attributes in process `syz.6.2409'.
[  207.502578][   T28] audit: type=1400 audit(1786141200.079:3633): avc:  denied  { write } for  pid=11665 comm="syz.6.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  207.528204][T11723] loop8: detected capacity change from 0 to 128
[  207.569608][T11723] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  207.598477][T11726] Cannot find add_set index 4 as target
[  207.621682][T11723] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  207.667455][ T3976] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  207.705816][T11733] loop9: detected capacity change from 0 to 2048
[  207.740910][T11733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.822877][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.835228][ T7014] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  207.862894][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'.
[  207.875173][T11746] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2418'.
[  207.895392][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.062098][T11765] netlink: 'syz.6.2423': attribute type 1 has an invalid length.
[  208.225539][T11783] loop9: detected capacity change from 0 to 128
[  208.286149][T11783] IPVS: length: 24 != 156842099832
[  208.437686][T11788] bond2: left promiscuous mode
[  208.485475][T11801] loop8: detected capacity change from 0 to 512
[  208.512159][T11801] ext4: Unknown parameter 'subj_type'
[  208.661377][T11798] loop8: detected capacity change from 0 to 512
[  208.677423][T11798] ext4: Unknown parameter 'smackfshat'
[  209.741779][T11816] loop9: detected capacity change from 0 to 1024
[  209.771027][T11816] EXT4-fs: inline encryption not supported
[  209.812483][T11816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  209.835341][T11816] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.888916][T11816] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2437: bg 0: block 112: padding at end of block bitmap is not set
[  209.966382][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  210.176145][T11853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11853 comm=syz.6.2451
[  210.419078][T11860] x_tables: unsorted entry at hook 3
[  210.463513][T11865] __nla_validate_parse: 7 callbacks suppressed
[  210.463523][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2456'.
[  210.509711][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2456'.
[  210.557109][T11866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11866 comm=syz.0.2456
[  210.605598][T11869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11869 comm=syz.0.2456
[  210.649179][T11876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11876 comm=syz.3.2457
[  210.722910][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2461'.
[  210.778203][T11888] SET target dimension over the limit!
[  210.975995][T11899] netlink: 'syz.6.2467': attribute type 1 has an invalid length.
[  211.012496][T11899] netlink: 101600 bytes leftover after parsing attributes in process `syz.6.2467'.
[  211.388447][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  211.388456][   T28] audit: type=1400 audit(1786141204.859:3643): avc:  denied  { mount } for  pid=11913 comm="syz.8.2473" name="/" dev="hugetlbfs" ino=33854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  211.442080][T11916] x_tables: unsorted entry at hook 3
[  211.559297][T11924] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  211.697875][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'.
[  211.771073][T11940] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  211.783062][T11938] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2484'.
[  211.915501][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2489'.
[  211.932276][T11947] loop8: detected capacity change from 0 to 512
[  211.969231][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2489'.
[  211.995256][T11947] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  212.007700][T11953] loop0: detected capacity change from 0 to 1024
[  212.043064][T11953] EXT4-fs: Ignoring removed bh option
[  212.053075][T11947] EXT4-fs (loop8): 1 truncate cleaned up
[  212.089816][T11947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.114393][T11953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.161430][T11947] EXT4-fs (loop8): shut down requested (2)
[  212.174178][   T28] audit: type=1400 audit(1786141205.649:3644): avc:  denied  { write } for  pid=11952 comm="syz.0.2490" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  212.219654][T11966] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2487: Invalid block bitmap block 3 in block_group 0
[  212.246546][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.300425][T11966] EXT4-fs (loop8): Remounting filesystem read-only
[  212.322260][   T28] audit: type=1400 audit(1786141205.699:3645): avc:  denied  { write } for  pid=11946 comm="syz.8.2487" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  212.428444][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.465540][T11981] loop0: detected capacity change from 0 to 512
[  212.484264][T11981] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.497055][   T28] audit: type=1326 audit(1786141205.919:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  212.575375][T11981] EXT4-fs (loop0): orphan cleanup on readonly fs
[  212.611152][T11981] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  212.656661][T11989] loop9: detected capacity change from 0 to 1024
[  212.666141][T11981] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2496: invalid indirect mapped block 1819239214 (level 1)
[  212.685572][   T28] audit: type=1326 audit(1786141205.919:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  212.715243][T11989] EXT4-fs: inline encryption not supported
[  212.745664][T11981] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  212.745792][T11981] EXT4-fs (loop0): Remounting filesystem read-only
[  212.754958][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  212.754971][    C0] EXT4-fs (loop0): initial error at time 1786141206: ext4_free_branches:1023: inode 13
[  212.754987][    C0] EXT4-fs (loop0): last error at time 1786141206: ext4_free_branches:1023: inode 13
[  212.818379][T12003] netlink: 'syz.8.2504': attribute type 11 has an invalid length.
[  212.826627][   T28] audit: type=1326 audit(1786141205.919:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  212.870187][T11989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  212.888244][T12008] netlink: 'syz.8.2505': attribute type 1 has an invalid length.
[  212.896567][   T28] audit: type=1326 audit(1786141205.919:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  212.927029][T11989] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.937977][T11981] EXT4-fs (loop0): 1 truncate cleaned up
[  212.943807][T12008] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.2505'.
[  212.953754][T11981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.975226][T11989] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2480: bg 0: block 112: padding at end of block bitmap is not set
[  213.001007][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2506'.
[  213.010869][T11981] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.020034][   T28] audit: type=1326 audit(1786141205.919:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  213.049896][T12011] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  213.078869][T12011] iwpm_mapping_info_cb: Unable to parse nlmsg
[  213.095717][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  213.147620][   T28] audit: type=1326 audit(1786141205.919:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  213.237120][T12027] loop0: detected capacity change from 0 to 256
[  213.297235][T12030] loop8: detected capacity change from 0 to 256
[  213.314216][   T28] audit: type=1326 audit(1786141205.919:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.3.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae603e0d9 code=0x7ffc0000
[  213.371657][T12032] syzkaller0: entered promiscuous mode
[  213.401525][T12032] syzkaller0: entered allmulticast mode
[  213.571860][T12044] loop9: detected capacity change from 0 to 1024
[  213.607258][T12044] EXT4-fs: Ignoring removed nomblk_io_submit option
[  213.665396][T12049] netlink: 'syz.0.2517': attribute type 1 has an invalid length.
[  213.686905][T12044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  213.797568][T12058] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  213.810384][T12044] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  213.842130][T12062] loop8: detected capacity change from 0 to 128
[  213.852449][T12063] EXT4-fs: Ignoring removed bh option
[  213.866326][T12058] iwpm_mapping_info_cb: Unable to parse nlmsg
[  213.876949][T12055] loop3: detected capacity change from 0 to 1024
[  213.883617][T12063] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  213.898433][T12062] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.925406][T12055] EXT4-fs: inline encryption not supported
[  213.983558][T12062] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.029471][T12055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  214.085395][ T7014] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  214.098551][T12055] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.145584][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.173798][T12055] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2519: bg 0: block 112: padding at end of block bitmap is not set
[  214.196746][T12086] loop0: detected capacity change from 0 to 256
[  214.281518][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  214.361871][   T11] IPVS: starting estimator thread 0...
[  214.367651][T12090] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  214.469964][T12094] IPVS: using max 4272 ests per chain, 213600 per kthread
[  214.547672][T12103] loop3: detected capacity change from 0 to 512
[  214.588026][T12103] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 65535
[  214.787001][T12116] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2535: corrupted in-inode xattr: invalid ea_ino
[  214.868387][T12116] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  214.868494][T12116] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2535: couldn't read orphan inode 15 (err -117)
[  214.877672][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  214.877682][    C0] EXT4-fs (loop8): initial error at time 1786141208: ext4_iget_extra_inode:5180: inode 15
[  214.877698][    C0] EXT4-fs (loop8): last error at time 1786141208: ext4_iget_extra_inode:5180: inode 15
[  214.935133][T12125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.943422][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.972569][T12127] EXT4-fs: Ignoring removed bh option
[  215.001423][T12127] EXT4-fs: Ignoring removed nobh option
[  215.007047][T12121] EXT4-fs: inline encryption not supported
[  215.045839][T12127] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  215.066696][T12129] netlink: 'syz.6.2542': attribute type 2 has an invalid length.
[  215.110196][T12127] EXT4-fs (loop9): can't mount with journal_async_commit, fs mounted w/o journal
[  215.128630][T12121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  215.141288][T12133] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41)
[  215.193036][T12116] loop8: lost filesystem error report for type 5 error -117
[  215.193435][T12116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.232660][T12121] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.281182][T12121] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2539: bg 0: block 112: padding at end of block bitmap is not set
[  215.378247][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  215.408975][T12140] EXT4-fs: Ignoring removed orlov option
[  215.445417][T12140] EXT4-fs warning (device loop0): read_mmp_block:110: Error -117 while reading MMP block 64
[  215.514948][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.576514][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.598574][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.711970][T12147] iso9660: Unknown parameter 'GŒa¦ß%鼸­wš3|2Øo‡þió{Mp$ªíÉÁE'
[  215.915072][T12167] 9p: Bad value for 'rfdno'
[  217.206171][T12180] set_capacity_and_notify: 6 callbacks suppressed
[  217.206189][T12180] loop8: detected capacity change from 0 to 1024
[  217.276813][T12185] netlink: 'syz.3.2559': attribute type 1 has an invalid length.
[  217.312602][T12180] EXT4-fs: inline encryption not supported
[  217.322996][T12185] __nla_validate_parse: 6 callbacks suppressed
[  217.323020][T12185] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.2559'.
[  217.346155][T12183] loop9: detected capacity change from 0 to 256
[  217.400849][T12180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  217.461637][T12187] loop0: detected capacity change from 0 to 8192
[  217.483047][T12180] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.509954][T12187] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew'
[  217.526507][T12192] loop3: detected capacity change from 0 to 1024
[  217.569441][T12180] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2557: bg 0: block 112: padding at end of block bitmap is not set
[  217.596309][T12192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  217.683824][T12192] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.762454][T12192] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2560: bg 0: block 112: padding at end of block bitmap is not set
[  217.776942][   T28] kauditd_printk_skb: 160 callbacks suppressed
[  217.776952][   T28] audit: type=1400 audit(1786141211.239:3813): avc:  denied  { write } for  pid=12191 comm="syz.3.2560" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  217.843859][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  217.883983][T12192] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.2560: lblock 3 mapped to illegal pblock 3 (length 1)
[  217.918595][   T28] audit: type=1326 audit(1786141211.329:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.017265][T12222] loop0: detected capacity change from 0 to 512
[  218.036623][T12192] EXT4-fs error (device loop3): ext4_ext_remove_space:2969: inode #15: comm syz.3.2560: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  218.076994][T12222] EXT4-fs: Ignoring removed nomblk_io_submit option
[  218.107175][T12229] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  218.121444][   T28] audit: type=1326 audit(1786141211.329:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.169384][   T28] audit: type=1326 audit(1786141211.339:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.197235][T12222] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.2565: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 256(4), depth 0(0)
[  218.198333][   T28] audit: type=1326 audit(1786141211.339:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.241381][T12222] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  218.243467][T12222] EXT4-fs (loop0): Remounting filesystem read-only
[  218.252648][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  218.252670][    C1] EXT4-fs (loop0): initial error at time 1786141211: ext4_ext_check_inode:521: inode 2
[  218.252700][    C1] EXT4-fs (loop0): last error at time 1786141211: ext4_ext_check_inode:521: inode 2
[  218.264411][   T28] audit: type=1326 audit(1786141211.339:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.285143][T12222] EXT4-fs (loop0): get root inode failed
[  218.310531][   T28] audit: type=1326 audit(1786141211.339:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.316878][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  218.341636][   T28] audit: type=1326 audit(1786141211.339:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.384027][T12222] EXT4-fs (loop0): mount failed
[  218.389437][   T28] audit: type=1326 audit(1786141211.339:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.433448][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2571'.
[  218.442637][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2571'.
[  218.465233][T12239] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  218.494434][   T28] audit: type=1326 audit(1786141211.339:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.9.2563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  218.506912][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.530366][T12239] iwpm_mapping_info_cb: Unable to parse nlmsg
[  218.570960][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.586003][T12239] Process accounting paused
[  218.640004][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2575'.
[  218.753206][T12243] loop3: detected capacity change from 0 to 164
[  218.771839][T12243] iso9660: Unknown parameter 'GŒa¦ß%鼸­wš3|2Øo‡þió{Mp$ªíÉÁE'
[  218.862727][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2585'.
[  218.878181][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2586'.
[  218.889607][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2586'.
[  218.898508][T12278] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  218.908351][T12278] iwpm_mapping_info_cb: Unable to parse nlmsg
[  218.974873][T12282] FAULT_INJECTION: forcing a failure.
[  218.974873][T12282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.030208][T12282] CPU: 1 UID: 0 PID: 12282 Comm: syz.9.2588 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  219.030238][T12282] Tainted: [W]=WARN
[  219.030316][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.030326][T12282] Call Trace:
[  219.030332][T12282]  <TASK>
[  219.030339][T12282]  __dump_stack+0x1d/0x30
[  219.030359][T12282]  dump_stack_lvl+0x95/0xd0
[  219.030377][T12282]  dump_stack+0x15/0x1b
[  219.030394][T12282]  should_fail_ex+0x25e/0x270
[  219.030459][T12282]  should_fail+0xb/0x20
[  219.030480][T12282]  should_fail_usercopy+0x1a/0x20
[  219.030556][T12282]  strncpy_from_user+0x27/0x250
[  219.030582][T12282]  __se_sys_memfd_create+0x20f/0x3b0
[  219.030674][T12282]  __x64_sys_memfd_create+0x31/0x40
[  219.030704][T12282]  x64_sys_call+0x1f22/0x3020
[  219.030800][T12282]  do_syscall_64+0x136/0x3c0
[  219.030827][T12282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.030922][T12282] RIP: 0033:0x7f0e69cbe0d9
[  219.030939][T12282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.030997][T12282] RSP: 002b:00007f0e68716e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  219.031086][T12282] RAX: ffffffffffffffda RBX: 0000000000000511 RCX: 00007f0e69cbe0d9
[  219.031101][T12282] RDX: 00007f0e68716ee0 RSI: 0000000000000000 RDI: 00007f0e69d55204
[  219.031114][T12282] RBP: 0000200000000640 R08: 00000000ffffffff R09: 0000000000000000
[  219.031127][T12282] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000017c0
[  219.031138][T12282] R13: 00007f0e68716ee0 R14: 00007f0e68716ea0 R15: 00002000000001c0
[  219.031155][T12282]  </TASK>
[  219.242491][T12298] loop0: detected capacity change from 0 to 128
[  219.256994][T12298] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  219.274141][T12298] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  219.438461][T12320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2595'.
[  219.486381][ T5984] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  219.616008][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2599'.
[  219.632494][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2599'.
[  219.642675][T12338] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  219.672307][T12338] iwpm_mapping_info_cb: Unable to parse nlmsg
[  219.718368][T12345] loop8: detected capacity change from 0 to 512
[  219.745160][T12345] EXT4-fs (loop8): orphan cleanup on readonly fs
[  219.753388][T12345] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  219.770174][T12345] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  219.777615][T12345] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #14: comm syz.8.2603: invalid orphan symlink nlink 1
[  219.789952][T12345] loop8: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  219.798653][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  219.814337][    C1] EXT4-fs (loop8): last error at time 1786141213: ext4_orphan_get:1399: inode 14
[  219.825668][T12345] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2603: couldn't read orphan inode 14 (err -117)
[  219.844672][T12345] loop8: lost filesystem error report for type 5 error -117
[  219.847816][T12345] EXT4-fs (loop8): 1 truncate cleaned up
[  219.851550][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.868095][T12345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  219.872388][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.900221][T12345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.912012][T12364] loop3: detected capacity change from 0 to 512
[  219.939990][T12364] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  220.003530][T12373] loop0: detected capacity change from 0 to 512
[  220.018306][T12373] EXT4-fs: Ignoring removed nobh option
[  220.041658][T12373] EXT4-fs (loop0): 1 orphan inode deleted
[  220.049687][T12373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.083796][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.139978][T12387] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  220.150477][T12387] iwpm_mapping_info_cb: Unable to parse nlmsg
[  220.199277][T12389] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  220.207395][T12389] vhci_hcd vhci_hcd.4: default hub control req: 1f13 v0004 i0003 l0
[  220.806615][T12434] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  220.899236][T12434] iwpm_mapping_info_cb: Unable to parse nlmsg
[  221.136594][T12445] netlink: 'syz.8.2633': attribute type 5 has an invalid length.
[  221.203405][T12426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.490330][T12479] FAULT_INJECTION: forcing a failure.
[  221.490330][T12479] name failslab, interval 1, probability 0, space 0, times 0
[  221.518749][T12479] CPU: 0 UID: 0 PID: 12479 Comm: syz.9.2644 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  221.518785][T12479] Tainted: [W]=WARN
[  221.518792][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.518843][T12479] Call Trace:
[  221.518850][T12479]  <TASK>
[  221.518857][T12479]  __dump_stack+0x1d/0x30
[  221.518924][T12479]  dump_stack_lvl+0x95/0xd0
[  221.518946][T12479]  dump_stack+0x15/0x1b
[  221.518964][T12479]  should_fail_ex+0x25e/0x270
[  221.519007][T12479]  should_failslab+0x8c/0xb0
[  221.519030][T12479]  kmem_cache_alloc_noprof+0x7f/0x3c0
[  221.519061][T12479]  ? do_getname+0x2e/0x1c0
[  221.519082][T12479]  ? do_getname+0x2e/0x1c0
[  221.519142][T12479]  ? vfs_write+0x848/0x990
[  221.519161][T12479]  do_getname+0x2e/0x1c0
[  221.519184][T12479]  getname_flags+0x1d/0x30
[  221.519207][T12479]  do_sys_openat2+0x6c/0x130
[  221.519263][T12479]  __x64_sys_openat+0xf2/0x120
[  221.519286][T12479]  x64_sys_call+0x1e39/0x3020
[  221.519308][T12479]  do_syscall_64+0x136/0x3c0
[  221.519349][T12479]  ? arch_exit_to_user_mode_prepare+0x88/0xa0
[  221.519425][T12479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.519500][T12479] RIP: 0033:0x7f0e69c7e90e
[  221.519515][T12479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  221.519534][T12479] RSP: 002b:00007f0e68716ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  221.519551][T12479] RAX: ffffffffffffffda RBX: 00007f0e687176c0 RCX: 00007f0e69c7e90e
[  221.519592][T12479] RDX: 0000000000000002 RSI: 00007f0e68716f90 RDI: ffffffffffffff9c
[  221.519632][T12479] RBP: 00007f0e68717090 R08: 0000000000000000 R09: 0000000000000000
[  221.519646][T12479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.519659][T12479] R13: 00007f0e69f46038 R14: 00007f0e69f45fa0 R15: 00007ffdc8b27628
[  221.519679][T12479]  </TASK>
[  221.803703][  T866] kernel write not supported for file /223/attr/exec (pid: 866 comm: kworker/1:2)
[  221.958282][T12507] syzkaller0: entered promiscuous mode
[  221.964542][T12507] syzkaller0: entered allmulticast mode
[  222.204674][T12523] syzkaller0: entered promiscuous mode
[  222.211109][T12523] syzkaller0: entered allmulticast mode
[  222.339499][T12535] __nla_validate_parse: 5 callbacks suppressed
[  222.339514][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.355056][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.364224][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.381527][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.391168][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.400205][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.424861][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.434007][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.443225][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2664'.
[  222.520868][T12547] netlink: 'syz.9.2668': attribute type 1 has an invalid length.
[  222.534445][T12547] bond1: option mode: invalid value (7)
[  222.541822][T12547] bond1 (unregistering): Released all slaves
[  222.696360][T12555] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27673 sclass=netlink_xfrm_socket pid=12555 comm=syz.0.2671
[  222.716948][T12558] netlink: 'syz.9.2672': attribute type 1 has an invalid length.
[  222.724919][T12558] netlink: 101600 bytes leftover after parsing attributes in process `syz.9.2672'.
[  222.846693][T12569] team0 (unregistering): Port device team_slave_0 removed
[  222.856010][T12569] team0 (unregistering): Port device team_slave_1 removed
[  222.903902][T12571] tipc: Started in network mode
[  222.909007][T12571] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  222.916216][T12571] tipc: Enabled bearer <eth:ipvlan0>, priority 18
[  222.950687][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  222.950699][   T28] audit: type=1326 audit(1786141216.429:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  222.982696][   T28] audit: type=1326 audit(1786141216.429:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.008384][   T28] audit: type=1326 audit(1786141216.429:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.040306][   T28] audit: type=1326 audit(1786141216.429:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.065891][   T28] audit: type=1326 audit(1786141216.429:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.068074][T12583] set_capacity_and_notify: 2 callbacks suppressed
[  223.068088][T12583] loop8: detected capacity change from 0 to 512
[  223.091481][   T28] audit: type=1326 audit(1786141216.429:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.091522][   T28] audit: type=1326 audit(1786141216.429:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.155338][   T28] audit: type=1326 audit(1786141216.429:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.162484][T12583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.181219][   T28] audit: type=1326 audit(1786141216.429:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.194021][T12583] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.229463][   T28] audit: type=1326 audit(1786141216.429:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.9.2679" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0e69cbe0d9 code=0x7ffc0000
[  223.271325][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.403583][T12609] sctp: [Deprecated]: syz.8.2691 (pid 12609) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.403583][T12609] Use struct sctp_sack_info instead
[  223.597725][T12620] loop0: detected capacity change from 0 to 1024
[  223.615872][T12620] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  223.627557][T12620] EXT4-fs (loop0): too many log groups per flexible block group
[  223.635632][T12620] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  223.642821][T12620] EXT4-fs (loop0): mount failed
[  223.731077][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.739605][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.748058][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.756753][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.765544][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.800291][T12634] xt_hashlimit: size too large, truncated to 1048576
[  223.928683][ T3395] tipc: Node number set to 10136234
[  223.944928][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.955341][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.427369][T12650] loop3: detected capacity change from 0 to 512
[  224.436681][T12650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  224.454026][T12650] EXT4-fs (loop3): 1 truncate cleaned up
[  224.465725][T12650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.500195][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.575007][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.585383][T12632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.632092][T12669] netlink: 'syz.0.2710': attribute type 1 has an invalid length.
[  224.946175][T12698] loop0: detected capacity change from 0 to 512
[  224.980304][T12698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.993078][T12698] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.109011][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.232644][T12704] syzkaller0: entered promiscuous mode
[  225.239889][T12704] syzkaller0: entered allmulticast mode
[  225.604262][T12727] loop8: detected capacity change from 0 to 164
[  225.626276][T12727] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  225.911979][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.946572][T12749] netlink: 'syz.8.2737': attribute type 26 has an invalid length.
[  226.104899][T12758] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  226.823243][T12791] loop0: detected capacity change from 0 to 256
[  226.935832][T12798] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  227.089931][T12820] FAULT_INJECTION: forcing a failure.
[  227.089931][T12820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.100665][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.104355][T12820] CPU: 0 UID: 0 PID: 12820 Comm: syz.0.2762 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  227.104387][T12820] Tainted: [W]=WARN
[  227.104443][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.104455][T12820] Call Trace:
[  227.104463][T12820]  <TASK>
[  227.104471][T12820]  __dump_stack+0x1d/0x30
[  227.104498][T12820]  dump_stack_lvl+0x95/0xd0
[  227.104524][T12820]  dump_stack+0x15/0x1b
[  227.104541][T12820]  should_fail_ex+0x25e/0x270
[  227.104567][T12820]  should_fail+0xb/0x20
[  227.104590][T12820]  should_fail_usercopy+0x1a/0x20
[  227.104649][T12820]  _copy_to_user+0x20/0xa0
[  227.104669][T12820]  simple_read_from_buffer+0xb5/0x130
[  227.104695][T12820]  proc_fail_nth_read+0x10e/0x150
[  227.104757][T12820]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  227.104778][T12820]  vfs_read+0x18e/0x7c0
[  227.104808][T12820]  ? __rcu_read_unlock+0x4e/0x70
[  227.104830][T12820]  ? __fget_files+0x184/0x1c0
[  227.104874][T12820]  ? mutex_lock+0x57/0x90
[  227.104895][T12820]  ksys_read+0xdc/0x1a0
[  227.104914][T12820]  __x64_sys_read+0x40/0x50
[  227.104931][T12820]  x64_sys_call+0x2886/0x3020
[  227.104953][T12820]  do_syscall_64+0x136/0x3c0
[  227.105055][T12820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.105075][T12820] RIP: 0033:0x7feef28ae90e
[  227.105091][T12820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  227.105108][T12820] RSP: 002b:00007feef1346fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  227.105161][T12820] RAX: ffffffffffffffda RBX: 00007feef13476c0 RCX: 00007feef28ae90e
[  227.105174][T12820] RDX: 000000000000000f RSI: 00007feef13470a0 RDI: 0000000000000004
[  227.105186][T12820] RBP: 00007feef1347090 R08: 0000000000000000 R09: 0000000000000000
[  227.105199][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.105210][T12820] R13: 00007feef2b76038 R14: 00007feef2b75fa0 R15: 00007ffe3fdcad28
[  227.105283][T12820]  </TASK>
[  227.357383][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.422859][T12837] loop8: detected capacity change from 0 to 736
[  227.430942][T12837] iso9660: Unknown parameter 'nojoìiet'
[  227.456999][T12841] loop0: detected capacity change from 0 to 512
[  227.515322][T12841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.527921][T12841] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.581550][T12851] ip6t_srh: unknown srh invflags 4000
[  227.593800][T12851] __nla_validate_parse: 10 callbacks suppressed
[  227.593825][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2774'.
[  227.639651][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.779785][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.790733][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.191147][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.197619][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.204323][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.210691][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.217076][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.223499][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.229833][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.236160][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.242603][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.261071][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.267691][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.274141][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.280598][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.286910][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.293298][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.299945][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.306421][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.312790][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.319217][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.325507][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.331983][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.338268][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.344705][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.351021][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.357397][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.363971][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.370903][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.377213][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.384018][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.398936][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.406267][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.412900][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.419390][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.425965][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.432563][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.439278][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.445824][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.452436][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.465331][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.471950][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.478853][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.485324][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.491979][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.495379][T12879] netlink: 'syz.8.2783': attribute type 17 has an invalid length.
[  228.498478][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.506496][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2783'.
[  228.512974][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.527714][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.534287][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.540734][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.547285][T12874] ieee802154 phy1 wpan1: encryption failed: -22
[  228.621713][T12883] IPv6: NLM_F_REPLACE set, but no existing node found!
[  228.736909][T12897] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2793'.
[  228.757370][T12889] netlink: 'syz.0.2790': attribute type 1 has an invalid length.
[  228.777590][T12889] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.2790'.
[  228.821144][T12900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.864041][T12900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.959820][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.968660][T12901] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2792'.
[  228.982693][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.269998][T12904] loop0: detected capacity change from 0 to 164
[  229.303756][T12904] iso9660: Unknown parameter 'GŒa¦ß%鼸­wš3|2Øo‡þió{Mp$ªíÉÁE'
[  229.573294][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2799'.
[  229.574100][T12910] loop8: detected capacity change from 0 to 256
[  229.587920][T12917] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2798'.
[  229.594903][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2799'.
[  229.610333][T12915] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  229.621339][T12915] iwpm_mapping_info_cb: Unable to parse nlmsg
[  229.707991][T12926] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2802'.
[  229.717548][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2802'.
[  229.728091][T12928] netlink: 'syz.6.2803': attribute type 4 has an invalid length.
[  229.742196][T12926] xt_ecn: cannot match TCP bits for non-tcp packets
[  229.756698][T12920] syzkaller0: entered promiscuous mode
[  229.771737][T12920] syzkaller0: entered allmulticast mode
[  229.817693][T12935] netlink: 'syz.9.2806': attribute type 5 has an invalid length.
[  229.934073][T12945] loop3: detected capacity change from 0 to 256
[  229.942667][T12945] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  230.014149][T12946] loop9: detected capacity change from 0 to 1024
[  230.026967][T12946] EXT4-fs: inline encryption not supported
[  230.065392][T12946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  230.079085][T12946] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.133141][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.141952][T12961] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  230.187374][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.239407][T12964] sg_write: data in/out 808511294/136 bytes for SCSI command 0x0-- guessing data in;
[  230.239407][T12964]    program syz.8.2814 not setting count and/or reply_len properly
[  230.260710][   T28] kauditd_printk_skb: 454 callbacks suppressed
[  230.260725][   T28] audit: type=1400 audit(1786141223.739:4318): avc:  denied  { setopt } for  pid=12963 comm="syz.8.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  230.286591][   T28] audit: type=1400 audit(1786141223.759:4319): avc:  denied  { write } for  pid=12963 comm="syz.8.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  230.316627][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  230.814985][T12984] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.831715][T12984] netlink: 'syz.0.2820': attribute type 15 has an invalid length.
[  230.850534][T12984] netlink: 'syz.0.2820': attribute type 7 has an invalid length.
[  230.857763][T12986] netlink: 'syz.8.2822': attribute type 1 has an invalid length.
[  231.015810][T12989] loop8: detected capacity change from 0 to 1024
[  231.024069][T12989] EXT4-fs: inline encryption not supported
[  231.050399][T12989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  231.062826][T12989] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.108372][T12988] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2823: bg 0: block 112: padding at end of block bitmap is not set
[  231.272575][T12999] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  231.287845][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  231.301184][T12999] loop9: detected capacity change from 0 to 1024
[  231.505337][T12999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.628079][T13011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.678735][T13011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.678889][T13015] 
@0Ù: renamed from bond_slave_1 (while UP)
[  231.687010][   T28] audit: type=1400 audit(1786141225.149:4320): avc:  denied  { write } for  pid=12998 comm="syz.9.2825" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  231.718871][T13011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.069458][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.113323][T13003] loop8: detected capacity change from 0 to 1024
[  232.150819][T13003] EXT4-fs: inline encryption not supported
[  232.213238][T13003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  232.233580][T13003] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.248175][T13032] loop9: detected capacity change from 0 to 256
[  232.272072][T13003] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2826: bg 0: block 112: padding at end of block bitmap is not set
[  232.398671][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  232.602233][T13044] syzkaller0: entered promiscuous mode
[  232.609434][T13044] syzkaller0: entered allmulticast mode
[  232.729629][T13042] loop8: detected capacity change from 0 to 4096
[  232.747892][T13042] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.772716][   T28] audit: type=1400 audit(1786141226.239:4321): avc:  denied  { write } for  pid=13041 comm="syz.8.2836" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  232.818171][   T28] audit: type=1326 audit(1786141226.289:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e45de0d9 code=0x7ffc0000
[  232.844491][   T28] audit: type=1326 audit(1786141226.299:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e45de0d9 code=0x7ffc0000
[  232.870365][   T28] audit: type=1326 audit(1786141226.299:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e45de0d9 code=0x7ffc0000
[  232.896121][   T28] audit: type=1326 audit(1786141226.299:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f04e45de0d9 code=0x7ffc0000
[  232.935942][   T28] audit: type=1326 audit(1786141226.349:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f04e459e90e code=0x7ffc0000
[  232.962439][   T28] audit: type=1326 audit(1786141226.379:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f04e459e90e code=0x7ffc0000
[  232.993479][T13064] loop0: detected capacity change from 0 to 256
[  233.177815][T13082] __nla_validate_parse: 2 callbacks suppressed
[  233.177830][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2848'.
[  233.203217][T13082] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2848'.
[  233.337139][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.415251][T13084] EXT4-fs: Ignoring removed bh option
[  233.467419][T13084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  233.650043][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  233.760313][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  233.779749][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  233.799000][T13112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.814773][T13112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.819529][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  233.830986][T13112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.867562][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.875951][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.884662][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.893262][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.904064][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  233.955274][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  233.978675][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  234.051749][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  234.070034][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2857'.
[  234.125137][T13133] netlink: 'syz.6.2863': attribute type 1 has an invalid length.
[  234.281717][T13149] set_capacity_and_notify: 2 callbacks suppressed
[  234.281773][T13149] loop9: detected capacity change from 0 to 512
[  234.326632][T13149] EXT4-fs error (device loop9): __ext4_iget:5533: inode #11: block 1: comm syz.9.2868: invalid block
[  234.360033][T13149] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  234.360210][T13149] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2868: couldn't read orphan inode 11 (err -117)
[  234.369402][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  234.369419][    C1] EXT4-fs (loop9): initial error at time 1786141227: __ext4_iget:5533: inode 11: block 1
[  234.369460][    C1] EXT4-fs (loop9): last error at time 1786141227: __ext4_iget:5533: inode 11: block 1
[  234.440270][T13135] loop8: detected capacity change from 0 to 256
[  234.492538][T13149] loop9: lost filesystem error report for type 5 error -117
[  234.493117][T13149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.672411][T13172] loop0: detected capacity change from 0 to 512
[  234.689740][T13172] ext4: Unknown parameter 'fowner>00000000000000000255'
[  234.761241][T13177] loop0: detected capacity change from 0 to 1024
[  234.767869][T13177] EXT4-fs: Ignoring removed orlov option
[  234.781679][T13177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.806645][T13177] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.988778][T13193] loop3: detected capacity change from 0 to 1024
[  234.997220][T13193] EXT4-fs: Ignoring removed oldalloc option
[  235.033517][T13193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.125052][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.151809][T10693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.422364][T13232] 9pnet_fd: Insufficient options for proto=fd
[  235.450979][T13234] sctp: [Deprecated]: syz.6.2896 (pid 13234) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.450979][T13234] Use struct sctp_sack_info instead
[  235.991764][T13253] loop8: detected capacity change from 0 to 2048
[  236.009107][T13255] loop0: detected capacity change from 0 to 256
[  236.014485][T13253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  236.016000][T13255] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.067421][ T7014] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  236.147105][T13260] type: 3952590631 invalid
[  236.214691][   T28] kauditd_printk_skb: 101 callbacks suppressed
[  236.214703][   T28] audit: type=1400 audit(1786141229.689:4429): avc:  denied  { read } for  pid=13265 comm="syz.8.2906" path="socket:[38451]" dev="sockfs" ino=38451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  236.451238][T13271] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.461847][T13271] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.485083][T13271] bridge0: entered allmulticast mode
[  236.570666][T13294] loop0: detected capacity change from 0 to 256
[  236.614706][T13295] syzkaller1: entered promiscuous mode
[  236.621461][T13295] syzkaller1: entered allmulticast mode
[  236.722952][T13315] loop8: detected capacity change from 0 to 512
[  236.733012][T13315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  236.749113][T13315] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal
[  236.754804][T13319] loop9: detected capacity change from 0 to 256
[  236.766241][T13319] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.781649][T13318] vhci_hcd vhci_hcd.2: invalid port number 254
[  236.790562][T13318] vhci_hcd vhci_hcd.2: invalid port number 254
[  236.804539][ T5984] ==================================================================
[  236.812655][ T5984] BUG: KCSAN: data-race in touch_atime / touch_atime
[  236.819355][ T5984] 
[  236.821674][ T5984] write to 0xffff88811cfbc0f0 of 4 bytes by task 6035 on cpu 1:
[  236.829301][ T5984]  touch_atime+0x1cb/0x300
[  236.833735][ T5984]  shmem_file_read_iter+0x3ed/0x4b0
[  236.838941][ T5984]  lo_rw_aio+0x6a9/0x760
[  236.843184][ T5984]  loop_process_work+0x567/0xac0
[  236.848126][ T5984]  loop_rootcg_workfn+0x22/0x30
[  236.852990][ T5984]  process_scheduled_works+0x4d4/0x9a0
[  236.858453][ T5984]  worker_thread+0x569/0x750
[  236.863053][ T5984]  kthread+0x221/0x270
[  236.867123][ T5984]  ret_from_fork+0x146/0x330
[  236.871720][ T5984]  ret_from_fork_asm+0x1a/0x30
[  236.876499][ T5984] 
[  236.878832][ T5984] read to 0xffff88811cfbc0f0 of 4 bytes by task 5984 on cpu 0:
[  236.885584][T13318] dvmrp1: entered allmulticast mode
[  236.886371][ T5984]  touch_atime+0x162/0x300
[  236.886398][ T5984]  shmem_file_read_iter+0x3ed/0x4b0
[  236.886425][ T5984]  lo_rw_aio+0x6a9/0x760
[  236.886447][ T5984]  loop_process_work+0x567/0xac0
[  236.886469][ T5984]  loop_workfn+0x31/0x40
[  236.886491][ T5984]  process_scheduled_works+0x4d4/0x9a0
[  236.886516][ T5984]  worker_thread+0x569/0x750
[  236.886539][ T5984]  kthread+0x221/0x270
[  236.886553][ T5984]  ret_from_fork+0x146/0x330
[  236.886578][ T5984]  ret_from_fork_asm+0x1a/0x30
[  236.886601][ T5984] 
[  236.886606][ T5984] value changed: 0x10af6488 -> 0x1125e2c3
[  236.886618][ T5984] 
[  236.886622][ T5984] Reported by Kernel Concurrency Sanitizer on:
[  236.886637][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: kworker/u8:209 Tainted: G        W           syzkaller #0 PREEMPT(lazy) 
[  236.886669][ T5984] Tainted: [W]=WARN
[  236.886676][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  236.886690][ T5984] Workqueue: loop8 loop_workfn
[  236.886711][ T5984] ==================================================================
[  236.908905][T13321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  236.929456][   T28] audit: type=1326 audit(1786141230.399:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.0.2934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  236.931259][T13321] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal
[  236.946118][   T28] audit: type=1326 audit(1786141230.409:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13317 comm="syz.0.2934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef28ee0d9 code=0x7ffc0000
[  237.067047][   T28] audit: type=1400 audit(1786141230.539:4432): avc:  denied  { setattr } for  pid=13317 comm="syz.0.2934" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  237.218989][T13326] dvmrp1: left allmulticast mode