last executing test programs:

4.808104397s ago: executing program 0 (id=665):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000001740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x1, 0x2004c804)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x84, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0xd5, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe)
shutdown(r0, 0x1)
socket(0x10, 0x803, 0x0)
readv(r0, &(0x7f0000001940)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000006c0))

4.734885255s ago: executing program 1 (id=666):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40895)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000))
io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2})
r2 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x8, 0xe0, &(0x7f0000000240)={0x80, 0xa, 0xfffa, 0x4360}, 0x8, 0x6, 0x1, 0x0, 0x1001, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f0000000000))
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000370400"/19, @ANYRES32=r5, @ANYBLOB="83040100011402002000128008000100736974"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000201030000000000000000000a0000090c001b80"], 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2000003}, 0x50)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x6, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfff9, 0x0, 0xfff, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)

4.663407682s ago: executing program 0 (id=667):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x8010, r5, 0x4a350000)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async)
fchdir(0xffffffffffffffff) (async, rerun: 64)
r6 = getpid() (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = getpid() (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000400)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r0, 0x0, r0}, 0x10)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async)
r12 = socket$rxrpc(0x21, 0x2, 0xa) (async)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=<r13=>0x0, &(0x7f0000000200)=<r14=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r13, r14, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})

4.59437975s ago: executing program 0 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4580, 0x3, 0x800000, 0x2, 0x63d, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0))
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x100)
lstat(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setresgid(0x0, 0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000008c0)={{0x1, 0x0, r4, r5, 0x0, 0x50, 0x8}, 0xffffffff, 0x7b2a62e3, 0x8000000000000001, 0x26c, r0, r0})
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1210852, &(0x7f0000000140)=ANY=[], 0x5, 0x23b, &(0x7f0000000580)="$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")
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
r8 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
ftruncate(r8, 0x2007ffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r8, r8, 0x0, 0x800000009)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000180))

4.455343655s ago: executing program 1 (id=672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000f5ffffff00000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006140000"], 0x50}}, 0x20044084)
close(r0)

4.093586082s ago: executing program 1 (id=675):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4580, 0x3, 0x800000, 0x2, 0x63d, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
lstat(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r8, 0xffffffffffffffff, 0x0)
setresgid(0x0, r8, 0x0)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000008c0)={{0x1, r4, r5, r6, r8, 0x50, 0x8}, 0xffffffff, 0x7b2a62e3, 0x8000000000000001, 0x26c, r0, r0})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1210852, &(0x7f0000000140)=ANY=[], 0x5, 0x23b, &(0x7f0000000580)="$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")
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
r10 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
ftruncate(r10, 0x2007ffc)

2.680294733s ago: executing program 4 (id=678):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = syz_io_uring_setup(0x1eb5, &(0x7f0000000200)={0x0, 0x100000, 0x1, 0x1, 0x19f}, &(0x7f0000000080), &(0x7f0000000040))
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x2, 0x8, 0xff, 0x1e2}, {0x62a7, 0x8, 0x80, 0x9}, {0x6, 0x2, 0x7f, 0x1dc6}, {0xe4, 0x7, 0x5, 0x3800000}, {0xf, 0x0, 0xca, 0xfffffff9}, {0x6, 0x6, 0x4, 0x3}, {0x7, 0x4e, 0x0, 0x9}]})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
r2 = eventfd2(0x3fe, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0)=r2, 0x1)

1.897541995s ago: executing program 2 (id=679):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001780)="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", 0x1bd}, {&(0x7f0000001300)="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", 0x1b2}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000015c0)="177188b7282c32d735bee7b4dfa9d0028a56d21b0fa9c05930147cd2a8b5f73149939ec1eff53f8726147babb7210558208a4f3a8ac5cea498e3dab5d16b05ab41665f00e6ea3778118ff980d96ca382d73f204ada3ae6ee3eb100d007006ca5a9cdcd357576a896b6b55bf1e8348f18a3d81384a8afc4aae95cc109525727e54d0951602d7dee7f0886b5142f4b428603c8ff2ac2ff0fbbfd7b838b353048d9f4c90de475d89ffa8c7fca47bab63288626b8f9eaa060000000000000022ebdbd3c24c83632eccfa542baada0000000000000000e330cf9e3c54269a420a498ce7c8c92fe00a586600d0bfe63259461c47eec8144f55ae3362bdf45ba293e4c128c31388b3da8755fb7491b9d5ea6c28ebdb3189d4d0a77de44d938b83dfce8fdd5bb8da609a386d3dd98f7705b47a01ab800e7ea3b063232f5f7a992e152bb62c9484f0b1c45cfe24769a673dc048a2fcffabb0e4adf9336427f72fe50b6285a97f9d0f49bab6218bc7dd2dcf55411460281c511866fb323f5ba870dea66b59dc97e900b029ddc0eb1be1f8f09ca2c076b667cc4396725de1d5f4c81f204ca09166e9dff28fbf8a1d7716460db457832c6b322725b2", 0xffffffffffffff88, 0x0, 0x0, 0xfffffffffffffd20)

1.368503532s ago: executing program 0 (id=680):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xf00a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, &(0x7f0000000300)})
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x1, 0x1fd, 0x1, 0x1}, 0x1c)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xe, 0x2, 0x85, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

1.368066021s ago: executing program 2 (id=681):
set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

1.295408559s ago: executing program 3 (id=682):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1e, 0x5, 0xee, &(0x7f0000003c40)="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"})
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180))
bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
timerfd_create(0x3, 0x80800)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r6 = gettid()
process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c)
connect$inet6(r5, &(0x7f0000001dc0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7ff}, 0x1c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = creat(&(0x7f0000000140)='./file0\x00', 0x104)
recvmsg$kcm(r8, &(0x7f0000000640)={&(0x7f0000000180), 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000680)=""/137, 0x89}], 0x4}, 0x2000)
write$binfmt_script(r7, &(0x7f0000000480), 0x4)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x40f00}, 0x94)

1.294734318s ago: executing program 4 (id=683):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40895)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000))
io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2})
r2 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x8, 0xe0, &(0x7f0000000240)={0x80, 0xa, 0xfffa, 0x4360}, 0x8, 0x6, 0x1, 0x0, 0x1001, 0x101, 0x0})
ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f0000000000))
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000370400"/19, @ANYRES32=r5, @ANYBLOB="83040100011402002000128008000100736974"], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000201030000000000000000000a0000090c001b80"], 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2000003}, 0x50)
r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x6, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfff9, 0x0, 0xfff, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)

1.260278803s ago: executing program 2 (id=684):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c002e0000000000000000000c001e00a00000000000000008001b00fbff", @ANYRES32=0x0, @ANYBLOB="1b977fb90ad7d848ed6f5b11aed3da209288af47fdfa3a7bf2421f8bd2f4c1292debb8c3e237b956225d9cc0ad91357e7bf499c40842b17c0d95c9d237e3c4b334d82f4c07b1291a2f6ba5937bcd9cb5ddcf3c6969c76fbab8ac40810036501895c5da8d351c9ae220b026855fb2841d51bde26ef4d4e9f55e229451bb707d544257bbae4c5e81e49afe417a20cd01547a16a5bdd774cfc2b783838c232bc23b5f49b1030106"], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000080)=@ethtool_gfeatures})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

1.158188455s ago: executing program 1 (id=685):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000380)={<r0=>0xffffffffffffffff, &(0x7f00000001c0)='[{%\x02,}\x00', 0x2000, &(0x7f0000000200)={@align=0x6, {0x7, 0x7, 0xfffffff7, 0xfe2}}, 0x5, &(0x7f0000000240), &(0x7f0000000340)=0xce8})
r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000400))
r2 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x519800)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000180)='vxcan1\x00', 0x7)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0x40485404, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = gettid()
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x80, 0x9, 0x3, 0xff, 0x0, 0xc3, 0x404, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100000000, 0x9}, 0x1000, 0x9967, 0x2, 0x7, 0x1, 0x5, 0x3ff, 0x0, 0x2cd, 0x0, 0x4}, r6, 0x0, 0xffffffffffffffff, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2})
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r8=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r8}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x1, 0x1, 0x1}, 0x27, 0x1, 0x0, 0x0, "c8e3f6461d1a4557"}, 0x10}, 0x1, 0x0, 0x0, 0x20000015}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

906.64067ms ago: executing program 2 (id=686):
r0 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

893.380118ms ago: executing program 3 (id=687):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10, 0x0)
getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r6, 0x6)
write$vga_arbiter(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000045000000c504fb8a0f0300000058899c80f64fbbea15c9cb2e7b1fecbc4acf1070e9d8d23aa2ba0c747c2c8aea243a78e5cb46", @ANYRES8=r6, @ANYRESOCT=r2], 0x51)
io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xb460}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x56, &(0x7f00000003c0)={@remote, @remote, @void, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x24, 0x3, 0x0, 0x0, "5cf5c8df7fa41e83a08c5e48904ce17a8bbe3e8f98243bfd54f56db510869cb4e44b76d078bcb7cfbb5a26425560c1e7147c3764e25ba39638731976b576905b"}}}}, 0x0)

872.702074ms ago: executing program 4 (id=688):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@lazytime}, {@i_version}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1228000, 0x0, 0x3, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')

775.487807ms ago: executing program 2 (id=689):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000040)=0x101)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x1, 0x9, 0x23, 0x0, 0x0, 0xffffa, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0)
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
r5 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000300)=0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x110, 0x6affffff, 0x3403000b, 0x1e8, 0x7, 0x1e8, 0x230, 0x230, 0x1e8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', {0xff}}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000198001"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0xfc08a37cf3073d0f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r7, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x40}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x81)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8090)
r9 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40088a01, &(0x7f0000000000))
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)

755.046023ms ago: executing program 3 (id=690):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000d7a65b785420dc9d004b9617d986dbf06e8420ab06a33b1060207c821da83b14eb7bc8f5382da663d5ef28fa44c6ed0c62194b1ca60a4ae1a0ec95d07f56a688c31061e3ced596c61c3c8a4733221dbf46757418b1b398f5942b7ca7210c979b54538e09dfe72d85cc074e123bd27e56471704d4089d39689ddff8a957acb009dbfece9a2a2c8176f198458f30107ad4ab74a7c9f6eebe6d9041ff39a0a31644eb1ef95fb7a6"], 0x34}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000140))
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000080)='configfs\x00', 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x10001000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x75a8}]}, 0x34}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)

677.94625ms ago: executing program 4 (id=691):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000140000000b00000008000000010000060400000002000000ff07000000005f61005f2e2e5f3000"], &(0x7f0000000580)=""/249, 0x37, 0xf9, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettaction={0x50, 0x32, 0x20, 0x70bd35, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r3, &(0x7f00000000c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xf, 0x1, 0x0, 0x10, 0x6, 0x2, 0x5, 0x5}}]}}]}, 0x44}}, 0x24040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff})
bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0)
accept4$packet(r9, 0x0, 0x0, 0x0)
pwritev(r9, &(0x7f0000000500)=[{&(0x7f0000000440)="cf65c194", 0x4}], 0x1, 0x1, 0x200)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r10, 0x0, &(0x7f0000000000)=""/31}, 0x20)

599.447526ms ago: executing program 3 (id=692):
syz_emit_ethernet(0x15, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x2, 0x8, 0xf3}}}}, 0x0)

546.506857ms ago: executing program 3 (id=693):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xecff, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

453.83282ms ago: executing program 4 (id=694):
r0 = socket(0x22, 0x4, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0)

453.3783ms ago: executing program 4 (id=695):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000d7a65b785420dc9d004b9617d986dbf06e8420ab06a33b1060207c821da83b14eb7bc8f5382da663d5ef28fa44c6ed0c62194b1ca60a4ae1a0ec95d07f56a688c31061e3ced596c61c3c8a4733221dbf46757418b1b398f5942b7ca7210c979b54538e09dfe72d85cc074e123bd27e56471704d4089d39689ddff8a957acb009dbfece9a2a2c8176f198458f30107ad4ab74a7c9f6eebe6d9041ff39a0a31644eb1ef95fb7a6"], 0x34}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000140))
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000080)='configfs\x00', 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x10001000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x75a8}]}, 0x34}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000800000002000000b935000008000000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000010000000e00"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="54940000005db900000000000000000000000000ea900b8411208b6f8f7c42d17788bf1c32faece581582b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)

372.968166ms ago: executing program 0 (id=696):
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x82c5, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6d}, @ib={0x1b, 0x7, 0x2, {"7b6d167893a8635d96efd85e91e04b8e"}, 0x1, 0x1, 0xfffffffffffffffa}}}, 0x118)
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (fail_nth: 6)

371.758446ms ago: executing program 2 (id=697):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c002e0000000000000000000c001e00a00000000000000008001b00fbff", @ANYRES32=0x0, @ANYBLOB="1b977fb90ad7d848ed6f5b11aed3da209288af47fdfa3a7bf2421f8bd2f4c1292debb8c3e237b956225d9cc0ad91357e7bf499c40842b17c0d95c9d237e3c4b334d82f4c07b1291a2f6ba5937bcd9cb5ddcf3c6969c76fbab8ac40810036501895c5da8d351c9ae220b026855fb2841d51bde26ef4d4e9f55e229451bb707d544257bbae4c5e81e49afe417a20cd01547a16a5bdd774cfc2b783838c232bc23b5f49b1030106"], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000080)=@ethtool_gfeatures})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

346.965971ms ago: executing program 3 (id=698):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4580, 0x3, 0x800000, 0x2, 0x63d, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f00000007c0), 0x100)
lstat(0x0, &(0x7f0000000840))
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r5, 0xffffffffffffffff, 0x0)
setresgid(0x0, r5, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x18, 0x1, 0x0, 0x17, 0x0, 0x0, 0x10, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @in6=@mcast1, @in6=@mcast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf68}}]}, 0xb8}}, 0x20000000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1210852, &(0x7f0000000140)=ANY=[], 0x5, 0x23b, &(0x7f0000000580)="$eJzs2s9rHGUYB/Bn0pTUlHRX/EUL4ose1MvQ5OyhQVsRA4p2hSpIp2aiS8bdsLMEVsTmVK/+CZ7FozdBevQSEP8CD95yybEHcaTZNN1KihZkN9jP5zIPPPOF9+UdXp7D7L32zeebG3W+UQxjLsti7lLsxJ0s2jEX9+zEqy9f+/n59699+Pbq2trl91K6snp1eSWldO6Fnz768vsXbw/PfvDDuR8XYrf98d7+yu+7z+6e3/vz6mfdOnXr1OsPU5Fu9PvD4kZVpvVuvZmn9G5VFnWZur26HDzQ36j6W1ujVPTWlxa3BmVdp6I3SpvlKA37aTgYpeLTottLeZ6npcXgX3jzYY3Od3eaJvab09ejaZonvo2zt2Ppt2hF9mTKnrqUPXM9e24nO7/fNK3prpgpcf6Pt4lL/UxE9fV2Z7szfo77b/wS3aiijIvRij/i7mdyaFxfeWvt8sV0oB23qpuH+ZunO6cO8qsbh/nlaEX7+PzyOJ8m89udhViczK9EK54+Pr9ybP5MvPLSRD6PVvz6SfSjivW4m72f/2o5pdffWUtxayEi7uUvHLwHAPB/k6cj7Qfnp/H8lucP64/zR/PVP8+Hf5vP5uPC/Gz3TkQ9+mKzqKpyoDgq5uNELOO/LE45bsWjFTO+mJiK+4c+65UAAAAAAAAAAADwKKbxO+Gs9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxsfwUAAP//ss/QHg==")
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
r7 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
ftruncate(r7, 0x2007ffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r7, r7, 0x0, 0x800000009)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000180))

346.133351ms ago: executing program 1 (id=699):
r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070500004c0001000f75000000000000bf54000000000000070400000400f9ff2d4401000000000095000000000000000500000000000000950007000000000001722fabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6155cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe74d599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f71b7eb70c174d885232e522aad0f13b0e5b43d837d040f813d0115387e36f092d9aaafe7afc637d3d107451f4854613cfd43ac63ad6141ddb0311b8c96fef49af414e49be7c23b2e8eb686fbcdd2dab4cbdb02e30e4e1a6c25b2791facac56e4c5dc036c8d80e5c7c206d24603be75850927e02fd4eea168681498d1170478408c43bb90d9df3964b64fee41745f6785419ac8de8788398e3653f34970988866043136ada4771bf8d96eeb0f565d626a3e9089"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) (async)
r2 = dup3(r1, r0, 0x80000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
pipe(&(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
tee(r4, 0xffffffffffffffff, 0xf3a, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x10}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async)
set_tid_address(0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
renameat2(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getdents64(r5, &(0x7f0000000080)=""/21, 0x15) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}}, 0x80)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x8, 0x0, 0x0) (async)
r10 = io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0xb67e, 0x40, 0x8001002, 0x23f})
close_range(r10, 0xffffffffffffffff, 0x0) (async)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) (async)
socket$key(0xf, 0x3, 0x2)

23.230405ms ago: executing program 1 (id=700):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x3, 0x7}]}, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = getpid()
r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @cgroup_sysctl=0x12, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e139", &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8)
r9 = socket(0x10, 0x80003, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x1, 0x4000}, 0xc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2c, 0x10000, 0x2, 0x261}, &(0x7f0000000100), &(0x7f0000000140))

0s ago: executing program 0 (id=701):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

kernel console output (not intermixed with test programs):

400 audit(1773016092.768:182): avc:  denied  { bind } for  pid=3710 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.296315][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   40.342968][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   40.352226][   T28] audit: type=1400 audit(1773016092.778:183): avc:  denied  { listen } for  pid=3710 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   40.474944][   T28] audit: type=1400 audit(1773016092.778:184): avc:  denied  { mount } for  pid=3710 comm="syz.3.53" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   40.507136][ T3732] bridge1: entered promiscuous mode
[   40.512539][ T3732] bridge1: entered allmulticast mode
[   40.948891][ T3741] loop4: detected capacity change from 0 to 512
[   40.958661][ T3742] loop0: detected capacity change from 0 to 256
[   41.470699][   T28] audit: type=1400 audit(1773016092.778:185): avc:  denied  { create } for  pid=3709 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   41.490189][   T28] audit: type=1400 audit(1773016092.788:186): avc:  denied  { bpf } for  pid=3710 comm="syz.3.53" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   42.407302][   T28] audit: type=1400 audit(1773016092.788:187): avc:  denied  { perfmon } for  pid=3710 comm="syz.3.53" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   43.479480][ T3741] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4.
[   43.515724][ T3742] FAT-fs (loop0): Directory bread(block 64) failed
[   43.522279][ T3742] FAT-fs (loop0): Directory bread(block 65) failed
[   43.579864][ T3742] FAT-fs (loop0): Directory bread(block 66) failed
[   43.586489][ T3742] FAT-fs (loop0): Directory bread(block 67) failed
[   43.593132][ T3742] FAT-fs (loop0): Directory bread(block 68) failed
[   43.599629][ T3742] FAT-fs (loop0): Directory bread(block 69) failed
[   43.606277][ T3742] FAT-fs (loop0): Directory bread(block 70) failed
[   43.612819][ T3742] FAT-fs (loop0): Directory bread(block 71) failed
[   43.619390][ T3742] FAT-fs (loop0): Directory bread(block 72) failed
[   43.626245][ T3742] FAT-fs (loop0): Directory bread(block 73) failed
[   43.674309][ T3757] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   43.707376][ T3768] loop2: detected capacity change from 0 to 512
[   43.714083][ T3757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=541 sclass=netlink_route_socket pid=3757 comm=syz.3.65
[   43.740694][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.755199][ T3768] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.891029][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.713534][ T3793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'.
[   45.722668][ T3793] veth1_to_team: entered promiscuous mode
[   45.733177][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   45.772375][ T3780] loop0: detected capacity change from 0 to 256
[   45.793538][ T3780] FAT-fs (loop0): Directory bread(block 64) failed
[   45.800775][ T3780] FAT-fs (loop0): Directory bread(block 65) failed
[   45.807494][ T3780] FAT-fs (loop0): Directory bread(block 66) failed
[   45.817162][ T3780] FAT-fs (loop0): Directory bread(block 67) failed
[   45.824820][ T3780] FAT-fs (loop0): Directory bread(block 68) failed
[   45.831387][ T3780] FAT-fs (loop0): Directory bread(block 69) failed
[   45.855888][ T3780] FAT-fs (loop0): Directory bread(block 70) failed
[   45.938476][ T3780] FAT-fs (loop0): Directory bread(block 71) failed
[   45.958565][ T3780] FAT-fs (loop0): Directory bread(block 72) failed
[   45.968625][ T3780] FAT-fs (loop0): Directory bread(block 73) failed
[   45.987682][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'.
[   46.000688][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'.
[   46.092262][ T3805] loop1: detected capacity change from 0 to 512
[   46.129301][ T3797] bridge2: entered promiscuous mode
[   46.135164][ T3797] bridge2: entered allmulticast mode
[   46.788385][ T3811] loop4: detected capacity change from 0 to 512
[   47.711227][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   47.711251][   T28] audit: type=1400 audit(1773016100.478:218): avc:  denied  { name_connect } for  pid=3812 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   47.779135][ T3813] loop2: detected capacity change from 0 to 128
[   47.806578][ T3811] EXT4-fs (loop4): 1 orphan inode deleted
[   47.813176][ T3811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.968184][ T3811] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.001318][   T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   48.059472][ T3813] msdos: Unknown parameter 'checj'
[   48.146689][   T50] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1
[   48.173979][   T28] audit: type=1400 audit(1773016100.538:219): avc:  denied  { accept } for  pid=3812 comm="syz.2.78" lport=57198 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.220511][   T28] audit: type=1400 audit(1773016100.538:220): avc:  denied  { write } for  pid=3812 comm="syz.2.78" lport=57198 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   48.271206][ T3830] SELinux: failed to load policy
[   48.288207][   T28] audit: type=1400 audit(1773016100.538:221): avc:  denied  { setopt } for  pid=3812 comm="syz.2.78" lport=57198 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   48.325611][   T28] audit: type=1400 audit(1773016100.558:222): avc:  denied  { setopt } for  pid=3812 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.345712][   T28] audit: type=1400 audit(1773016101.048:223): avc:  denied  { load_policy } for  pid=3829 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   48.366110][   T28] audit: type=1400 audit(1773016101.078:224): avc:  denied  { execute } for  pid=3829 comm="syz.2.82" path="/13/cpu.stat" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   48.398998][ T3832] loop1: detected capacity change from 0 to 512
[   48.476326][ T3832] EXT4-fs (loop1): 1 orphan inode deleted
[   48.483003][ T3832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.497377][ T3832] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.170628][   T41] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   49.193721][   T41] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1
[   49.260053][ T3856] netlink: 212 bytes leftover after parsing attributes in process `syz.2.83'.
[   49.518572][ T3866] syz.2.84 uses obsolete (PF_INET,SOCK_PACKET)
[   49.526187][   T28] audit: type=1400 audit(1773016102.318:225): avc:  denied  { read } for  pid=3865 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   49.678403][ T3867] loop2: detected capacity change from 0 to 512
[   49.690025][ T3867] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   49.690358][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.701550][ T3867] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[   49.720775][ T3867] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.84: Corrupt directory, running e2fsck is recommended
[   49.735165][ T3867] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   49.743598][ T3867] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.84: corrupted in-inode xattr: invalid ea_ino
[   49.756743][ T3867] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.757356][ T3867] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.84: couldn't read orphan inode 15 (err -117)
[   49.766492][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   49.766509][    C1] EXT4-fs (loop2): initial error at time 1773016102: ext4_iget_extra_inode:5025: inode 15
[   49.766534][    C1] EXT4-fs (loop2): last error at time 1773016102: ext4_iget_extra_inode:5025: inode 15
[   49.804421][ T3867] loop2: lost filesystem error report for type 5 error -117
[   49.804996][ T3867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.857604][ T3867] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   49.860964][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.102982][ T3880] netlink: 104 bytes leftover after parsing attributes in process `syz.2.84'.
[   50.923991][ T3889] loop0: detected capacity change from 0 to 512
[   50.940457][ T3889] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   52.478098][ T3889] syz.0.90 (3889) used greatest stack depth: 9352 bytes left
[   52.555409][ T3496] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   52.593021][ T3496] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   52.685479][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.698359][ T3907] loop4: detected capacity change from 0 to 128
[   52.740434][ T3906] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   52.755455][ T3909] sctp: [Deprecated]: syz.2.96 (pid 3909) Use of int in max_burst socket option deprecated.
[   52.755455][ T3909] Use struct sctp_assoc_value instead
[   52.787213][ T3906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'.
[   54.340426][ T3927] loop0: detected capacity change from 0 to 512
[   55.407300][ T3927] EXT4-fs (loop0): 1 orphan inode deleted
[   55.413558][ T3927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.426145][   T50] __quota_error: 116 callbacks suppressed
[   55.426156][   T50] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   55.442339][ T3927] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.516482][   T50] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1
[   55.942793][   T28] audit: type=1326 audit(1773016108.488:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   55.984831][   T28] audit: type=1326 audit(1773016108.488:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   56.889478][   T28] audit: type=1326 audit(1773016108.488:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   56.972866][   T28] audit: type=1326 audit(1773016108.488:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   57.051433][   T28] audit: type=1326 audit(1773016108.488:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   57.132297][   T28] audit: type=1326 audit(1773016108.488:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   57.210839][   T28] audit: type=1326 audit(1773016108.488:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   57.289819][   T28] audit: type=1326 audit(1773016108.488:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   57.405029][   T28] audit: type=1326 audit(1773016108.488:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1b31c799 code=0x7ffc0000
[   57.529703][ T3936] loop2: detected capacity change from 0 to 512
[   57.546573][ T3936] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   58.363734][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.671479][ T3954] loop1: detected capacity change from 0 to 512
[   58.684577][ T3954] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   58.780566][ T3956] loop2: detected capacity change from 0 to 256
[   58.814558][ T3957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.107'.
[   58.874585][ T3956] FAT-fs (loop2): Directory bread(block 64) failed
[   58.915733][ T3956] FAT-fs (loop2): Directory bread(block 65) failed
[   58.944795][ T3960] syzkaller1: entered promiscuous mode
[   58.950339][ T3960] syzkaller1: entered allmulticast mode
[   58.986657][ T3956] FAT-fs (loop2): Directory bread(block 66) failed
[   59.035135][ T3956] FAT-fs (loop2): Directory bread(block 67) failed
[   59.076070][ T3956] FAT-fs (loop2): Directory bread(block 68) failed
[   59.129869][ T3956] FAT-fs (loop2): Directory bread(block 69) failed
[   59.192409][ T3956] FAT-fs (loop2): Directory bread(block 70) failed
[   59.535676][ T3956] FAT-fs (loop2): Directory bread(block 71) failed
[   59.542244][ T3956] FAT-fs (loop2): Directory bread(block 72) failed
[   59.551127][ T3956] FAT-fs (loop2): Directory bread(block 73) failed
[   59.683774][ T3956] mmap: syz.2.105 (3956): VmData 167604224 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   60.149277][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'.
[   60.162572][ T3973] bond1: option mode: unable to set because the bond device has slaves
[   60.737129][ T3979] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   60.751709][ T3979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.112'.
[   60.779008][   T28] kauditd_printk_skb: 249 callbacks suppressed
[   60.779018][   T28] audit: type=1400 audit(1773016113.568:597): avc:  denied  { ioctl } for  pid=3983 comm="syz.4.115" path="socket:[5914]" dev="sockfs" ino=5914 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   60.818857][ T3984] netlink: 76 bytes leftover after parsing attributes in process `syz.4.115'.
[   60.954682][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   60.963602][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   60.994921][ T3994] bridge2: entered promiscuous mode
[   61.000177][ T3994] bridge2: entered allmulticast mode
[   61.092923][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   61.693636][ T4003] loop0: detected capacity change from 0 to 512
[   61.824384][ T4003] EXT4-fs (loop0): 1 orphan inode deleted
[   61.830640][ T4003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.843603][ T3977] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   61.854542][ T4003] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.910556][ T3977] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1
[   61.949410][   T28] audit: type=1400 audit(1773016114.728:598): avc:  denied  { setopt } for  pid=4010 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.060918][   T28] audit: type=1400 audit(1773016114.738:599): avc:  denied  { write } for  pid=4010 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.128940][   T28] audit: type=1400 audit(1773016114.768:600): avc:  denied  { read } for  pid=4010 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.190205][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.190899][   T28] audit: type=1400 audit(1773016114.878:601): avc:  denied  { bind } for  pid=4016 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   62.219306][   T28] audit: type=1400 audit(1773016114.878:602): avc:  denied  { bind } for  pid=4016 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.238721][   T28] audit: type=1400 audit(1773016114.878:603): avc:  denied  { name_bind } for  pid=4016 comm="syz.2.124" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   62.270275][   T28] audit: type=1400 audit(1773016114.878:604): avc:  denied  { node_bind } for  pid=4016 comm="syz.2.124" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   62.322676][   T28] audit: type=1400 audit(1773016114.878:605): avc:  denied  { connect } for  pid=4016 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.378798][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[   62.383940][ T4013] SELinux: failed to load policy
[   62.392506][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[   62.459996][ T4039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'.
[   62.469301][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'.
[   62.482197][ T4034] bridge2: entered promiscuous mode
[   62.540709][ T4034] bridge2: entered allmulticast mode
[   62.551043][ T4043] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   62.571952][ T4040] bridge3: entered promiscuous mode
[   62.578955][ T4040] bridge3: entered allmulticast mode
[   62.750806][ T4058] bridge2: entered promiscuous mode
[   62.766284][ T4058] bridge2: entered allmulticast mode
[   62.966865][ T4063] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   63.069814][ T3496] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   63.082532][ T3496] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   63.181121][ T4078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.212571][ T4078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.713415][ T4093] loop2: detected capacity change from 0 to 256
[   63.732550][ T4093] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   63.842179][ T4093] netlink: 'syz.2.145': attribute type 39 has an invalid length.
[   64.017796][ T4107] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 8200)
[   64.081966][ T4107] FAT-fs (loop2): Filesystem has been set read-only
[   64.157839][ T4135] loop1: detected capacity change from 0 to 128
[   64.175120][ T4136] loop3: detected capacity change from 0 to 512
[   64.252050][ T4144] syz.1.159: attempt to access beyond end of device
[   64.252050][ T4144] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128
[   64.332509][ T4152] syz.1.159: attempt to access beyond end of device
[   64.332509][ T4152] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128
[   64.413772][ T4135] __nla_validate_parse: 8 callbacks suppressed
[   64.413788][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   64.477146][ T4134] syz.1.159: attempt to access beyond end of device
[   64.477146][ T4134] loop1: rw=8390657, sector=154, nr_sectors = 2 limit=128
[   64.492199][ T4134] Buffer I/O error on dev loop1, logical block 77, lost async page write
[   64.713615][ T4192] netlink: 'syz.1.167': attribute type 4 has an invalid length.
[   64.723641][ T4192] loop1: detected capacity change from 0 to 128
[   64.731834][ T4192] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   64.751938][ T4192] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.786169][ T4192] EXT4-fs (loop1): Online defrag not supported for non-extent files
[   65.006162][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   65.358533][ T4264] loop1: detected capacity change from 0 to 128
[   65.658170][ T4270] pimreg3: entered allmulticast mode
[   65.819441][   T28] kauditd_printk_skb: 25 callbacks suppressed
[   65.819484][   T28] audit: type=1400 audit(1773016118.608:631): avc:  denied  { connect } for  pid=4275 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   65.872376][   T28] audit: type=1400 audit(1773016118.638:632): avc:  denied  { accept } for  pid=4275 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.265890][   T28] audit: type=1400 audit(1773016118.638:633): avc:  denied  { write } for  pid=4275 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.442529][ T4290] loop0: detected capacity change from 0 to 1024
[   66.459260][   T28] audit: type=1400 audit(1773016118.688:634): avc:  denied  { read } for  pid=4275 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   66.531900][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.632346][   T28] audit: type=1400 audit(1773016119.138:635): avc:  denied  { read write } for  pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   66.721152][ T4290] capability: warning: `syz.0.177' uses 32-bit capabilities (legacy support in use)
[   66.799337][ T4290] program syz.0.177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.834570][   T28] audit: type=1400 audit(1773016119.138:636): avc:  denied  { open } for  pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   66.997793][   T28] audit: type=1400 audit(1773016119.138:637): avc:  denied  { ioctl } for  pid=3314 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   67.088840][   T28] audit: type=1400 audit(1773016119.278:638): avc:  denied  { mounton } for  pid=4288 comm="syz.0.177" path="/44/file1" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   67.104209][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.111301][   T28] audit: type=1400 audit(1773016119.388:639): avc:  denied  { open } for  pid=4297 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   67.194902][   T28] audit: type=1400 audit(1773016119.418:640): avc:  denied  { perfmon } for  pid=4297 comm="syz.2.178" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   67.285530][ T4325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.184'.
[   67.375197][ T4359] loop1: detected capacity change from 0 to 512
[   67.415638][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.459050][ T4359] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.505190][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.826894][ T4415] loop1: detected capacity change from 0 to 128
[   68.346913][ T4435] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   68.442391][ T4435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.201'.
[   68.647897][ T4451] capability: warning: `syz.0.207' uses deprecated v2 capabilities in a way that may be insecure
[   68.820006][ T4459] loop3: detected capacity change from 0 to 512
[   68.826999][ T4459] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   68.877495][ T4462] loop4: detected capacity change from 0 to 256
[   68.893268][ T4462] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   68.941465][ T4462] netlink: 'syz.4.211': attribute type 39 has an invalid length.
[   69.066475][ T4471] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200)
[   69.094395][ T4471] FAT-fs (loop4): Filesystem has been set read-only
[   69.289299][ T4461] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2057)
[   69.650844][ T4501] loop4: detected capacity change from 0 to 128
[   71.815089][   T28] kauditd_printk_skb: 740 callbacks suppressed
[   71.815112][   T28] audit: type=1400 audit(1773016124.608:1381): avc:  denied  { map } for  pid=4526 comm="syz.3.223" path="/proc/140/numa_maps" dev="proc" ino=7663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   71.878614][ T1033] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   71.937402][ T1033] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   72.094745][   T28] audit: type=1400 audit(1773016124.638:1382): avc:  denied  { read write } for  pid=4526 comm="syz.3.223" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.118396][   T28] audit: type=1400 audit(1773016124.638:1383): avc:  denied  { open } for  pid=4526 comm="syz.3.223" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   72.155497][ T3354] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   72.163689][   T28] audit: type=1400 audit(1773016124.948:1384): avc:  denied  { ioctl } for  pid=4532 comm="syz.4.222" path="/dev/hidraw0" dev="devtmpfs" ino=660 ioctlcmd=0x4806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   72.426439][ T4549] loop0: detected capacity change from 0 to 128
[   72.446679][ T4546] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   72.485024][ T4546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.225'.
[   72.771975][ T3354] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   72.861589][ T4556] fido_id[4556]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   73.218371][   T28] audit: type=1400 audit(1773016126.008:1385): avc:  denied  { create } for  pid=4565 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   73.252275][   T28] audit: type=1400 audit(1773016126.028:1386): avc:  denied  { getopt } for  pid=4565 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   73.275140][ T4566] loop1: detected capacity change from 0 to 512
[   73.373722][ T4566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.400603][ T4579] netlink: 'syz.2.228': attribute type 4 has an invalid length.
[   73.420809][ T4566] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.450111][   T28] audit: type=1400 audit(1773016126.228:1387): avc:  denied  { write } for  pid=4577 comm="syz.2.228" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   73.621052][   T28] audit: type=1400 audit(1773016126.288:1388): avc:  denied  { read write } for  pid=4565 comm="syz.1.226" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   73.645028][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.978967][ T4591] loop2: detected capacity change from 0 to 512
[   74.028796][ T4591] EXT4-fs (loop2): 1 orphan inode deleted
[   74.035013][ T4591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.048020][ T4591] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.059782][ T4237] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   74.080658][   T28] audit: type=1400 audit(1773016126.288:1389): avc:  denied  { ioctl open } for  pid=4565 comm="syz.1.226" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   74.137409][ T4237] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 1
[   74.304238][ T4613] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   74.470720][ T4613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.236'.
[   74.710260][ T4628] loop3: detected capacity change from 0 to 1764
[   74.746818][ T3401] IPVS: starting estimator thread 0...
[   74.778071][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.702940][ T4632] IPVS: using max 2352 ests per chain, 117600 per kthread
[   77.333858][ T4644] loop1: detected capacity change from 0 to 128
[   78.074666][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[   78.084916][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[   78.340884][   T28] kauditd_printk_skb: 5 callbacks suppressed
[   78.340962][   T28] audit: type=1400 audit(1773016131.128:1395): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   78.788357][   T28] audit: type=1400 audit(1773016131.578:1396): avc:  denied  { create } for  pid=4653 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   79.441710][ T4654] bridge3: entered promiscuous mode
[   79.453454][ T4654] bridge3: entered allmulticast mode
[   79.642592][   T28] audit: type=1326 audit(1773016132.428:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[   79.723803][   T28] audit: type=1326 audit(1773016132.458:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[   79.822821][   T28] audit: type=1326 audit(1773016132.458:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[   79.854187][   T35] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   79.867347][   T35] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   79.910031][   T28] audit: type=1326 audit(1773016132.458:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[   79.955769][ T4706] loop3: detected capacity change from 0 to 1024
[   79.975365][ T4706] audit: audit_backlog=65 > audit_backlog_limit=64
[   79.993686][   T28] audit: type=1326 audit(1773016132.458:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4683 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[   80.028607][ T4706] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[   80.036875][ T4706] audit: backlog limit exceeded
[   80.041975][ T4706] EXT4-fs: inline encryption not supported
[   80.065802][ T4706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.084008][ T4706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.095909][ T4685] loop4: detected capacity change from 0 to 1024
[   80.124995][ T4685] EXT4-fs: Ignoring removed mblk_io_submit option
[   80.133658][ T4706] SELinux:  Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped).
[   80.139100][ T4685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   80.161124][ T4685] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   80.187837][ T4721] loop0: detected capacity change from 0 to 128
[   80.206119][ T4685] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   80.258189][ T4725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'.
[   80.379270][ T4685] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   80.392780][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   80.408502][    C1] EXT4-fs (loop4): initial error at time 1773016133: ext4_ext_check_inode:521: inode 11
[   80.418273][    C1] EXT4-fs (loop4): last error at time 1773016133: ext4_ext_check_inode:521: inode 11
[   80.441558][ T4685] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.248: couldn't read orphan inode 11 (err -117)
[   80.472980][ T4685] loop4: lost filesystem error report for type 5 error -117
[   80.474575][ T4685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.844854][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.178378][ T4754] netlink: 124 bytes leftover after parsing attributes in process `syz.2.257'.
[   82.102295][ T4774] loop3: detected capacity change from 0 to 128
[   83.113004][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   83.135807][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   83.216156][ T4780] bridge4: entered promiscuous mode
[   83.311497][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'.
[   83.423021][ T4780] bridge4: entered allmulticast mode
[   84.086602][ T4773] syz.3.260 (4773) used greatest stack depth: 9256 bytes left
[   84.095989][ T4798] loop1: detected capacity change from 0 to 128
[   84.192888][ T4792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'.
[   84.513303][ T4792] bridge2: entered promiscuous mode
[   84.518639][ T4792] bridge2: entered allmulticast mode
[   85.437063][ T4816] loop3: detected capacity change from 0 to 128
[   85.563702][ T4825] vhci_hcd vhci_hcd.4: default hub control req: 0309 v0023 i0000 l0
[   85.582890][   T28] kauditd_printk_skb: 162 callbacks suppressed
[   85.582903][   T28] audit: type=1400 audit(1773016138.328:1564): avc:  denied  { watch } for  pid=4820 comm="syz.1.267" path="/45" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   85.843265][ T4829] loop4: detected capacity change from 0 to 512
[   85.874859][ T4829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   85.902782][   T28] audit: type=1400 audit(1773016138.328:1565): avc:  denied  { watch_reads } for  pid=4820 comm="syz.1.267" path="/45" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   85.940341][ T4828] loop1: detected capacity change from 0 to 512
[   85.967309][ T4829] EXT4-fs (loop4): 1 truncate cleaned up
[   85.973920][ T4829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.006197][   T28] audit: type=1400 audit(1773016138.328:1566): avc:  denied  { name_bind } for  pid=4824 comm="syz.4.268" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   86.066282][ T4828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.114948][   T28] audit: type=1400 audit(1773016138.828:1567): avc:  denied  { add_name } for  pid=4824 comm="syz.4.268" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   86.145345][ T4828] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.252867][   T28] audit: type=1400 audit(1773016138.828:1568): avc:  denied  { create } for  pid=4824 comm="syz.4.268" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.336432][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.360733][   T28] audit: type=1400 audit(1773016138.838:1569): avc:  denied  { read write open } for  pid=4824 comm="syz.4.268" path="/62/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   86.432198][   T28] audit: type=1400 audit(1773016138.998:1570): avc:  denied  { read write } for  pid=4827 comm="syz.1.269" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.497056][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.512879][   T28] audit: type=1400 audit(1773016138.998:1571): avc:  denied  { open } for  pid=4827 comm="syz.1.269" path="/46/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   86.562785][   T28] audit: type=1400 audit(1773016139.018:1572): avc:  denied  { setopt } for  pid=4827 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   86.773401][ T4855] FAULT_INJECTION: forcing a failure.
[   86.773401][ T4855] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   86.802845][ T4855] CPU: 0 UID: 0 PID: 4855 Comm: syz.4.270 Not tainted syzkaller #0 PREEMPT(full) 
[   86.802882][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   86.802895][ T4855] Call Trace:
[   86.802928][ T4855]  <TASK>
[   86.802936][ T4855]  __dump_stack+0x1d/0x30
[   86.802959][ T4855]  dump_stack_lvl+0x95/0xd0
[   86.802978][ T4855]  dump_stack+0x15/0x1b
[   86.803067][ T4855]  should_fail_ex+0x263/0x280
[   86.803087][ T4855]  should_fail+0xb/0x20
[   86.803177][ T4855]  should_fail_usercopy+0x1a/0x20
[   86.803197][ T4855]  _copy_to_user+0x20/0xa0
[   86.803220][ T4855]  simple_read_from_buffer+0xb5/0x130
[   86.803238][ T4855]  proc_fail_nth_read+0x10e/0x150
[   86.803281][ T4855]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   86.803303][ T4855]  vfs_read+0x1ab/0x7f0
[   86.803327][ T4855]  ? __rcu_read_unlock+0x4e/0x70
[   86.803425][ T4855]  ? __fget_files+0x184/0x1c0
[   86.803458][ T4855]  ? mutex_lock+0x57/0x90
[   86.803480][ T4855]  ksys_read+0xdc/0x1a0
[   86.803516][ T4855]  __x64_sys_read+0x40/0x50
[   86.803629][ T4855]  x64_sys_call+0x2886/0x3020
[   86.803720][ T4855]  do_syscall_64+0x12c/0x370
[   86.803738][ T4855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.803801][ T4855] RIP: 0033:0x7f8b3b3fcfce
[   86.803820][ T4855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   86.803838][ T4855] RSP: 002b:00007f8b39e96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   86.803855][ T4855] RAX: ffffffffffffffda RBX: 00007f8b39e976c0 RCX: 00007f8b3b3fcfce
[   86.803866][ T4855] RDX: 000000000000000f RSI: 00007f8b39e970a0 RDI: 0000000000000003
[   86.803927][ T4855] RBP: 00007f8b39e97090 R08: 0000000000000000 R09: 0000000000000000
[   86.803938][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   86.803948][ T4855] R13: 00007f8b3b6b6038 R14: 00007f8b3b6b5fa0 R15: 00007ffd9a865f98
[   86.803964][ T4855]  </TASK>
[   87.054619][ T4866] netlink: 132 bytes leftover after parsing attributes in process `syz.4.275'.
[   87.064709][ T4868] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   87.080092][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'.
[   87.121395][ T4868] EXT4-fs (loop1): unable to read superblock
[   87.171493][   T28] audit: type=1400 audit(1773016139.938:1573): avc:  denied  { getopt } for  pid=4872 comm="syz.2.276" lport=56775 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   87.275980][ T4869] loop3: detected capacity change from 0 to 512
[   87.396991][ T4869] EXT4-fs: Ignoring removed nobh option
[   87.566899][ T4869] EXT4-fs (loop3): orphan cleanup on readonly fs
[   87.597929][ T4869] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.274: EA inode hash validation failed
[   87.612232][ T4869] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   87.627081][ T4869] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.274: corrupted inode contents
[   87.643835][ T4869] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   87.647729][ T4869] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.274: mark_inode_dirty error
[   87.652777][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   87.670745][ T4869] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   87.674897][    C0] EXT4-fs (loop3): initial error at time 1773016140: ext4_do_update_inode:5569: inode 15
[   87.674939][    C0] EXT4-fs (loop3): last error at time 1773016140: ext4_do_update_inode:5569: inode 15
[   87.738756][ T4869] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.274: corrupted inode contents
[   87.781562][ T4869] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   87.798288][ T4869] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.274: mark_inode_dirty error
[   87.905629][ T4869] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   87.913548][ T4869] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.274: mark inode dirty (error -117)
[   87.962170][ T4869] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   87.965021][ T4869] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117)
[   88.102431][ T4869] EXT4-fs (loop3): 1 orphan inode deleted
[   88.159615][ T4869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   88.326453][ T4899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'.
[   88.510241][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.288762][ T4920] loop3: detected capacity change from 0 to 512
[   90.134942][ T4920] EXT4-fs (loop3): 1 orphan inode deleted
[   90.141056][ T4920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.153727][ T4920] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.225956][ T4244] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 1
[   90.310351][ T4929] loop2: detected capacity change from 0 to 512
[   90.351916][ T4929] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   90.394577][ T4929] EXT4-fs (loop2): 1 truncate cleaned up
[   90.400625][ T4929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.457512][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.697593][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'.
[   90.797955][ T4969] loop4: detected capacity change from 0 to 512
[   90.820326][ T4969] EXT4-fs: Ignoring removed nobh option
[   90.889507][ T4969] EXT4-fs (loop4): orphan cleanup on readonly fs
[   90.906680][ T4977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.918641][ T4969] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.292: EA inode hash validation failed
[   90.955851][ T4969] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.292: corrupted inode contents
[   90.969770][ T4969] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   90.971161][ T4969] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.292: mark_inode_dirty error
[   90.981377][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   90.981440][    C1] EXT4-fs (loop4): initial error at time 1773016143: ext4_do_update_inode:5569: inode 15
[   90.981694][    C1] EXT4-fs (loop4): last error at time 1773016143: ext4_do_update_inode:5569: inode 15
[   91.027493][ T4969] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.047048][ T4969] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.292: corrupted inode contents
[   91.104624][ T4969] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.106581][ T4969] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.292: mark_inode_dirty error
[   91.155744][ T4977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.166292][ T4969] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.167138][ T4969] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.292: mark inode dirty (error -117)
[   91.202157][ T4989] netlink: 136 bytes leftover after parsing attributes in process `syz.1.294'.
[   91.226622][ T4969] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   91.255959][ T4969] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117)
[   91.313856][ T4969] EXT4-fs (loop4): 1 orphan inode deleted
[   91.332937][ T4969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   91.408994][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.449497][ T5002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.292'.
[   91.476934][ T4977] .`: (slave netdevsim1): Releasing backup interface
[   91.493465][ T4977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.519299][ T4977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.563954][ T4244] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.584155][ T4244] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.623798][ T4226] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.640899][ T4233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.673625][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.947330][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'.
[   92.299140][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   92.299215][   T28] audit: type=1400 audit(1773016145.088:1587): avc:  denied  { setopt } for  pid=5052 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   92.434771][   T28] audit: type=1400 audit(1773016145.218:1588): avc:  denied  { write } for  pid=5075 comm="syz.4.312" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   92.535318][   T28] audit: type=1400 audit(1773016145.288:1589): avc:  denied  { append } for  pid=5078 comm="syz.4.313" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   92.625369][   T28] audit: type=1400 audit(1773016145.408:1590): avc:  denied  { mounton } for  pid=5090 comm="syz.4.317" path="/proc/242/task" dev="proc" ino=8332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   92.749478][ T5100] loop2: detected capacity change from 0 to 1024
[   92.806962][ T5100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.852016][   T28] audit: type=1400 audit(1773016145.638:1591): avc:  denied  { read } for  pid=5099 comm="syz.2.320" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   92.886516][   T28] audit: type=1400 audit(1773016145.668:1592): avc:  denied  { name_connect } for  pid=5099 comm="syz.2.320" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   92.916288][   T28] audit: type=1400 audit(1773016145.678:1593): avc:  denied  { getopt } for  pid=5099 comm="syz.2.320" laddr=::ffff:127.0.0.1 lport=50872 faddr=::ffff:127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   93.093153][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.196102][ T5127] loop1: detected capacity change from 0 to 128
[   93.444289][   T28] audit: type=1400 audit(1773016146.238:1594): avc:  denied  { bind } for  pid=5099 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   93.499082][ T5131] loop0: detected capacity change from 0 to 1764
[   93.668576][   T28] audit: type=1400 audit(1773016146.238:1595): avc:  denied  { name_bind } for  pid=5099 comm="syz.2.320" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   93.901468][   T28] audit: type=1400 audit(1773016146.238:1596): avc:  denied  { node_bind } for  pid=5099 comm="syz.2.320" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   94.186843][ T5164] loop7: detected capacity change from 0 to 7
[   94.204418][ T5164] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.237653][ T5164] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.256130][ T5164]  loop7: unable to read partition table
[   94.269715][ T5168] loop0: detected capacity change from 0 to 512
[   94.282340][ T5171] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   94.283759][ T5171] 
@0Ùÿÿ: renamed from bond_slave_1 (while UP)
[   94.393672][ T5168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   94.433165][ T5168] EXT4-fs (loop0): 1 truncate cleaned up
[   94.449783][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.462975][ T5164] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~�¾SêjÌ–ã¢P@½?ã•X) failed (rc=-5)
[   94.483845][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.505250][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.542887][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.581158][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.621511][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.657029][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.693555][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.721836][ T3825] Buffer I/O error on dev loop7, logical block 0, async page read
[   94.748496][ T5185] netlink: 'syz.3.334': attribute type 1 has an invalid length.
[   94.771902][ T5185] netlink: 76 bytes leftover after parsing attributes in process `syz.3.334'.
[   94.968181][ T5200] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   94.974743][ T5200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   95.003099][ T5200] vhci_hcd vhci_hcd.0: Device attached
[   95.107283][ T5200] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5)
[   95.113885][ T5200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   95.131484][ T5212] loop4: detected capacity change from 0 to 512
[   95.183080][ T5212] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   95.208296][ T5207] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8)
[   95.214817][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   95.309764][ T5215] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11)
[   95.316423][ T5215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   95.371982][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.382876][   T23] usb 7-1: new low-speed USB device number 2 using vhci_hcd
[   95.421243][ T5200] vhci_hcd vhci_hcd.0: Device attached
[   95.434514][ T5228] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   95.437262][ T5207] vhci_hcd vhci_hcd.0: Device attached
[   95.448304][ T5215] vhci_hcd vhci_hcd.0: Device attached
[   95.485159][ T5234] loop4: detected capacity change from 0 to 512
[   95.491679][ T5200] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(10)
[   95.491963][ T5234] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   95.498355][ T5200] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   95.507370][ T5200] vhci_hcd vhci_hcd.0: Device attached
[   95.543507][ T5239] loop0: detected capacity change from 0 to 512
[   95.550661][ T5239] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.567616][ T5207] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(17)
[   95.574281][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   95.584115][ T5136] Bluetooth: hci0: command 0x1003 tx timeout
[   95.590325][ T4571] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   95.629358][ T5239] EXT4-fs (loop0): 1 truncate cleaned up
[   95.701005][ T5207] vhci_hcd vhci_hcd.0: Device attached
[   95.713182][ T5239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.788668][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.859266][ T5200] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19)
[   95.865877][ T5200] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   95.874990][ T5200] vhci_hcd vhci_hcd.0: Device attached
[   95.883196][ T5266] vhci_hcd: connection closed
[   95.885546][ T5241] vhci_hcd: connection closed
[   95.890507][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   95.905939][ T4226] vhci_hcd vhci_hcd.3: release socket
[   95.942704][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   95.960168][ T5271] loop1: detected capacity change from 0 to 128
[   96.094612][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   96.151463][ T5235] vhci_hcd: connection closed
[   96.159160][ T4226] vhci_hcd vhci_hcd.3: release socket
[   96.173508][ T5208] vhci_hcd: connection closed
[   96.185664][ T5201] vhci_hcd: connection reset by peer
[   96.196977][ T5204] vhci_hcd: connection closed
[   96.197126][ T5216] vhci_hcd: connection closed
[   96.302154][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   96.385695][    T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   96.417959][    T9] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   96.463097][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   96.512305][ T4226] vhci_hcd vhci_hcd.3: release socket
[   96.563583][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   96.657867][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   96.670229][ T4226] vhci_hcd vhci_hcd.3: release socket
[   96.701731][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   96.720351][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.490764][ T5304] loop2: detected capacity change from 0 to 512
[   97.512935][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   97.520591][ T4226] vhci_hcd vhci_hcd.3: release socket
[   97.582072][ T5304] EXT4-fs (loop2): 1 orphan inode deleted
[   97.588406][ T5304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.602027][ T5304] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.619119][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   97.746763][ T5311] loop3: detected capacity change from 0 to 4096
[   97.753765][ T4231] __quota_error: 7 callbacks suppressed
[   97.753777][ T4231] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   97.793753][ T5311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.814829][ T5323] SELinux: failed to load policy
[   97.819818][   T28] audit: type=1400 audit(1773016150.608:1604): avc:  denied  { load_policy } for  pid=5322 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   97.843201][ T5311] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.357: corrupted inode contents
[   97.856285][ T5311] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.357: mark_inode_dirty error
[   97.869177][ T5311] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.357: corrupted inode contents
[   97.883362][ T5311] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.357: mark_inode_dirty error
[   97.894890][ T5311] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.357: corrupted inode contents
[   97.909665][ T5311] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.357: mark_inode_dirty error
[   98.056892][ T5311] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.357: corrupted inode contents
[   98.070830][ T5311] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.357: mark_inode_dirty error
[   98.082223][ T5311] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem
[   98.143288][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   98.148565][ T4226] vhci_hcd vhci_hcd.3: release socket
[   98.183444][ T5323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.352'.
[   98.195237][ T4231] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1
[   98.226364][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   98.244732][   T28] audit: type=1400 audit(1773016150.718:1605): avc:  denied  { mounton } for  pid=5310 comm="syz.3.357" path="/73/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.273495][ T4226] vhci_hcd vhci_hcd.3: stop threads
[   98.286417][ T4226] vhci_hcd vhci_hcd.3: release socket
[   98.302179][ T4226] vhci_hcd vhci_hcd.3: disconnect device
[   98.313908][   T28] audit: type=1400 audit(1773016150.968:1606): avc:  denied  { mount } for  pid=5322 comm="syz.0.352" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   98.655437][ T5339] loop1: detected capacity change from 0 to 128
[   98.723619][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.846358][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.887557][   T28] audit: type=1400 audit(1773016151.668:1607): avc:  denied  { read } for  pid=5351 comm="syz.3.358" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   98.940535][   T28] audit: type=1400 audit(1773016151.668:1608): avc:  denied  { open } for  pid=5351 comm="syz.3.358" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  100.371344][ T5380] loop0: detected capacity change from 0 to 128
[  100.454602][   T23] usb 7-1: enqueue for inactive port 0
[  100.460274][   T23] usb 7-1: enqueue for inactive port 0
[  100.627816][   T23] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  100.636254][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'.
[  100.789105][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'.
[  100.873876][ T5394] bridge5: entered promiscuous mode
[  100.911364][ T5394] bridge5: entered allmulticast mode
[  101.019152][ T5405] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  101.087338][ T5410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.368'.
[  101.130573][ T5412] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  101.173492][ T5412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'.
[  102.065360][ T5428] loop0: detected capacity change from 0 to 512
[  103.054006][ T5428] EXT4-fs (loop0): 1 orphan inode deleted
[  103.060032][ T5428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.072930][ T5428] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.090201][ T4226] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  103.105786][ T4226] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 1
[  103.296004][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.446196][   T28] audit: type=1400 audit(1773016156.238:1609): avc:  denied  { getopt } for  pid=5443 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  103.566056][    T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  103.673946][    T9] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  103.697665][ T5445] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  103.854964][ T5445] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  103.877270][ T5445] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  104.122699][ T5471] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  104.162426][   T28] audit: type=1400 audit(1773016156.948:1610): avc:  denied  { ioctl } for  pid=5508 comm="syz.2.380" path="socket:[9287]" dev="sockfs" ino=9287 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  104.183685][ T5471] bond1 (unregistering): Released all slaves
[  104.202855][   T28] audit: type=1400 audit(1773016156.988:1611): avc:  denied  { ioctl } for  pid=5508 comm="syz.2.380" path="socket:[9288]" dev="sockfs" ino=9288 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.211633][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[  104.228182][   T28] audit: type=1400 audit(1773016156.988:1612): avc:  denied  { create } for  pid=5508 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  104.257056][   T28] audit: type=1400 audit(1773016156.988:1613): avc:  denied  { getopt } for  pid=5508 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  104.291669][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[  104.362335][ T5544] bridge3: entered promiscuous mode
[  104.371615][ T5544] bridge3: entered allmulticast mode
[  104.486117][ T5557] loop2: detected capacity change from 0 to 128
[  104.669671][ T5561] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  104.705821][ T5564] netlink: 132 bytes leftover after parsing attributes in process `syz.3.382'.
[  104.984598][ T3392] usb usb8-port1: attempt power cycle
[  105.006471][ T5570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.383'.
[  105.226032][ T5576] loop3: detected capacity change from 0 to 512
[  105.257818][ T5576] EXT4-fs: inline encryption not supported
[  105.286349][ T5576] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  105.323163][ T5576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002]
[  105.342859][ T5576] System zones: 1-12
[  105.355160][ T5576] EXT4-fs (loop3): orphan cleanup on readonly fs
[  105.372793][   T28] audit: type=1400 audit(1773016158.158:1614): avc:  denied  { mount } for  pid=5579 comm="syz.0.386" name="/" dev="hugetlbfs" ino=9330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  105.402862][ T5576] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.385: bad orphan inode 267
[  105.433091][ T5576] loop3: lost filesystem error report for type 5 error -117
[  105.442781][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  105.456919][    C0] EXT4-fs (loop3): initial error at time 1773016158: ext4_orphan_get:1417
[  105.465923][    C0] EXT4-fs (loop3): last error at time 1773016158: ext4_orphan_get:1417
[  105.479120][ T5576] EXT4-fs (loop3): Remounting filesystem read-only
[  105.493287][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  105.543460][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  105.720073][ T5588] loop4: detected capacity change from 0 to 256
[  105.980783][ T5594] loop3: detected capacity change from 0 to 128
[  106.102997][ T5588] FAT-fs (loop4): Directory bread(block 64) failed
[  106.146466][   T28] audit: type=1400 audit(1773016158.938:1615): avc:  denied  { ioctl } for  pid=5599 comm="syz.2.389" path="socket:[9349]" dev="sockfs" ino=9349 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  106.171535][ T5601] syzkaller0: entered promiscuous mode
[  106.212713][ T5588] FAT-fs (loop4): Directory bread(block 65) failed
[  106.233516][ T5601] syzkaller0: entered allmulticast mode
[  106.260052][ T5580] loop0: detected capacity change from 0 to 512
[  106.267998][ T5588] FAT-fs (loop4): Directory bread(block 66) failed
[  106.280740][ T5604] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  106.341448][ T5588] FAT-fs (loop4): Directory bread(block 67) failed
[  106.355134][ T5580] EXT4-fs: Ignoring removed nomblk_io_submit option
[  106.432426][ T5588] FAT-fs (loop4): Directory bread(block 68) failed
[  106.466664][ T5580] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.386: iget: bad extended attribute block 262144
[  106.494555][ T5588] FAT-fs (loop4): Directory bread(block 69) failed
[  106.545789][ T5588] FAT-fs (loop4): Directory bread(block 70) failed
[  106.720142][ T5580] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  106.721232][ T5580] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.386: couldn't read orphan inode 15 (err -117)
[  106.730614][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  106.730640][    C0] EXT4-fs (loop0): initial error at time 1773016159: ext4_orphan_get:1391: inode 15
[  106.730724][    C0] EXT4-fs (loop0): last error at time 1773016159: ext4_orphan_get:1391: inode 15
[  106.788069][ T5588] FAT-fs (loop4): Directory bread(block 71) failed
[  106.794951][ T5588] FAT-fs (loop4): Directory bread(block 72) failed
[  106.801567][ T5588] FAT-fs (loop4): Directory bread(block 73) failed
[  106.802877][ T5580] loop0: lost filesystem error report for type 5 error -117
[  106.827135][ T5613] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  106.873869][ T5580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.893085][ T5613] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  106.901758][ T5613] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  106.903095][ T3392] usb usb8-port1: unable to enumerate USB device
[  106.941642][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'.
[  106.966795][   T28] audit: type=1400 audit(1773016159.758:1616): avc:  denied  { mount } for  pid=5579 comm="syz.0.386" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  107.035910][ T5580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.232474][ T5627] loop2: detected capacity change from 0 to 8192
[  107.240067][ T1033] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  107.255851][ T1033] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  107.602991][   T28] audit: type=1400 audit(1773016160.378:1617): avc:  denied  { name_bind } for  pid=5648 comm="syz.0.395" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  107.646270][ T5655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.396'.
[  107.798078][ T5649] process 'syz.0.395' launched './file0' with NULL argv: empty string added
[  109.746002][ T5675] loop1: detected capacity change from 0 to 128
[  109.886317][ T5679] loop0: detected capacity change from 0 to 128
[  111.061375][ T5691] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  111.075891][ T5691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.401'.
[  112.222686][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  112.222701][   T28] audit: type=1400 audit(1773016164.998:1622): avc:  denied  { create } for  pid=5728 comm="syz.4.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  112.252986][   T28] audit: type=1400 audit(1773016165.038:1623): avc:  denied  { ioctl } for  pid=5728 comm="syz.4.407" path="socket:[9466]" dev="sockfs" ino=9466 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  112.335278][   T28] audit: type=1400 audit(1773016165.128:1624): avc:  denied  { accept } for  pid=5738 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  112.374062][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'.
[  112.392908][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'.
[  112.413888][ T5746] bridge3: entered promiscuous mode
[  112.419191][ T5746] bridge3: entered allmulticast mode
[  112.653731][   T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  112.661872][   T23] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  112.745967][ T5771] loop1: detected capacity change from 0 to 128
[  113.596926][ T5781] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.633597][ T5783] loop0: detected capacity change from 0 to 512
[  113.647649][ T5781] bond1: (slave lo): Enslaving as an active interface with an up link
[  113.686753][ T5783] EXT4-fs: Ignoring removed orlov option
[  113.696114][ T5781] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  113.696805][ T5783] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[  113.759001][ T5829] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  113.783792][ T5828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.418'.
[  113.816946][   T28] audit: type=1400 audit(1773016166.608:1625): avc:  denied  { bind } for  pid=5780 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  114.210315][ T5868] loop4: detected capacity change from 0 to 128
[  114.464711][   T28] audit: type=1400 audit(1773016167.248:1626): avc:  denied  { create } for  pid=5899 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  114.554593][ T5912] random: crng reseeded on system resumption
[  114.568815][   T28] audit: type=1400 audit(1773016167.348:1627): avc:  denied  { write } for  pid=5910 comm="syz.1.425" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  114.576558][ T5912] Restarting kernel threads ...
[  114.643171][ T5912] Done restarting kernel threads.
[  114.650581][   T28] audit: type=1400 audit(1773016167.348:1628): avc:  denied  { open } for  pid=5910 comm="syz.1.425" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  114.732947][   T28] audit: type=1400 audit(1773016167.358:1629): avc:  denied  { ioctl } for  pid=5910 comm="syz.1.425" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  114.838161][   T28] audit: type=1400 audit(1773016167.628:1630): avc:  denied  { unlink } for  pid=3309 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  114.900986][ T5783] loop0: detected capacity change from 0 to 512
[  114.952246][ T5927] syzkaller0: entered promiscuous mode
[  114.961243][ T5927] syzkaller0: entered allmulticast mode
[  115.037540][ T5783] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  115.037845][   T28] audit: type=1400 audit(1773016167.768:1631): avc:  denied  { create } for  pid=5926 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  115.081470][ T5783] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.417: iget: bad i_size value: 12154757448730
[  115.128735][ T5783] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  115.132770][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  115.148520][    C1] EXT4-fs (loop0): initial error at time 1773016167: ext4_orphan_get:1391: inode 13
[  115.157947][    C1] EXT4-fs (loop0): last error at time 1773016167: ext4_orphan_get:1391: inode 13
[  115.190587][ T5783] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.417: couldn't read orphan inode 13 (err -117)
[  115.227157][ T5783] loop0: lost filesystem error report for type 5 error -117
[  115.233036][ T5783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.371918][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'.
[  115.393320][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.416091][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'.
[  115.470948][ T5950] loop2: detected capacity change from 0 to 512
[  115.599871][ T5950] EXT4-fs (loop2): 1 orphan inode deleted
[  115.623440][ T4244] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 1
[  115.646861][ T5957] bridge3: entered promiscuous mode
[  115.652989][ T5957] bridge3: entered allmulticast mode
[  115.671053][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.686999][ T5973] loop0: detected capacity change from 0 to 128
[  115.710693][ T4244] loop2: lost filesystem error report for type 5 error -117
[  115.718891][ T5950] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.140130][ T5981] loop3: detected capacity change from 0 to 512
[  116.284169][ T5981] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  116.519929][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[  116.601589][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[  116.816617][ T5987] bridge4: entered promiscuous mode
[  116.845092][ T5987] bridge4: entered allmulticast mode
[  117.230014][ T6005] loop0: detected capacity change from 0 to 1024
[  117.242300][ T6010] loop3: detected capacity change from 0 to 256
[  117.256543][ T6005] EXT4-fs: Ignoring removed oldalloc option
[  117.257114][ T6011] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  117.263503][ T6005] EXT4-fs: Ignoring removed bh option
[  117.350050][ T6005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.454400][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  117.454417][   T28] audit: type=1400 audit(1773016170.248:1637): avc:  denied  { ioctl } for  pid=6003 comm="syz.0.438" path="/90/file1/bus" dev="loop0" ino=18 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  117.561868][ T6005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.438'.
[  117.642726][   T28] audit: type=1400 audit(1773016170.428:1638): avc:  denied  { bind } for  pid=6030 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  117.795601][ T6043] netlink: 56 bytes leftover after parsing attributes in process `syz.3.446'.
[  117.864262][ T6045] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  117.899740][ T6045] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  117.973481][ T6045] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0
[  118.065063][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.363599][ T6063] loop1: detected capacity change from 0 to 128
[  119.186260][   T28] audit: type=1400 audit(1773016171.978:1639): avc:  denied  { shutdown } for  pid=6075 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  119.436860][ T6087] FAULT_INJECTION: forcing a failure.
[  119.436860][ T6087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.480597][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT(full) 
[  119.480621][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  119.480636][ T6087] Call Trace:
[  119.480642][ T6087]  <TASK>
[  119.480650][ T6087]  __dump_stack+0x1d/0x30
[  119.480688][ T6087]  dump_stack_lvl+0x95/0xd0
[  119.480710][ T6087]  dump_stack+0x15/0x1b
[  119.480732][ T6087]  should_fail_ex+0x263/0x280
[  119.480824][ T6087]  should_fail+0xb/0x20
[  119.480845][ T6087]  should_fail_usercopy+0x1a/0x20
[  119.480867][ T6087]  _copy_to_user+0x20/0xa0
[  119.480890][ T6087]  simple_read_from_buffer+0xb5/0x130
[  119.480985][ T6087]  proc_fail_nth_read+0x10e/0x150
[  119.481009][ T6087]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  119.481102][ T6087]  vfs_read+0x1ab/0x7f0
[  119.481127][ T6087]  ? __rcu_read_unlock+0x4e/0x70
[  119.481144][ T6087]  ? __fget_files+0x184/0x1c0
[  119.481180][ T6087]  ? mutex_lock+0x57/0x90
[  119.481208][ T6087]  ksys_read+0xdc/0x1a0
[  119.481239][ T6087]  __x64_sys_read+0x40/0x50
[  119.481285][ T6087]  x64_sys_call+0x2886/0x3020
[  119.481321][ T6087]  do_syscall_64+0x12c/0x370
[  119.481341][ T6087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.481367][ T6087] RIP: 0033:0x7f7c7501cfce
[  119.481384][ T6087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  119.481443][ T6087] RSP: 002b:00007f7c73aaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  119.481461][ T6087] RAX: ffffffffffffffda RBX: 00007f7c73aaf6c0 RCX: 00007f7c7501cfce
[  119.481475][ T6087] RDX: 000000000000000f RSI: 00007f7c73aaf0a0 RDI: 0000000000000004
[  119.481488][ T6087] RBP: 00007f7c73aaf090 R08: 0000000000000000 R09: 0000000000000000
[  119.481526][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.481539][ T6087] R13: 00007f7c752d6038 R14: 00007f7c752d5fa0 R15: 00007ffe8e268338
[  119.481554][ T6087]  </TASK>
[  120.106103][ T3825] udevd[3825]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  120.116771][ T6090] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  120.227462][ T6098] sch_fq: defrate 4294967295 ignored.
[  120.253687][ T6098] netlink: 14 bytes leftover after parsing attributes in process `syz.1.458'.
[  120.523617][ T6118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.462'.
[  120.534236][   T28] audit: type=1400 audit(1773016173.308:1640): avc:  denied  { read write } for  pid=6108 comm="syz.3.460" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  120.854108][   T28] audit: type=1400 audit(1773016173.308:1641): avc:  denied  { open } for  pid=6108 comm="syz.3.460" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  120.954187][   T28] audit: type=1400 audit(1773016173.428:1642): avc:  denied  { write } for  pid=6108 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  120.977568][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  120.986909][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  120.996569][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  121.006279][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  121.015355][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  121.279779][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.289213][ T6138] FAULT_INJECTION: forcing a failure.
[  121.289213][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.303940][   T28] audit: type=1400 audit(1773016174.078:1643): avc:  denied  { shutdown } for  pid=6137 comm="syz.3.468" lport=35132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  121.353870][   T28] audit: type=1400 audit(1773016174.128:1644): avc:  denied  { connect } for  pid=6145 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  121.382867][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) 
[  121.383008][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.383020][ T6138] Call Trace:
[  121.383027][ T6138]  <TASK>
[  121.383035][ T6138]  __dump_stack+0x1d/0x30
[  121.383060][ T6138]  dump_stack_lvl+0x95/0xd0
[  121.383132][ T6138]  dump_stack+0x15/0x1b
[  121.383160][ T6138]  should_fail_ex+0x263/0x280
[  121.383181][ T6138]  should_fail+0xb/0x20
[  121.383245][ T6138]  should_fail_usercopy+0x1a/0x20
[  121.383269][ T6138]  _copy_to_user+0x20/0xa0
[  121.383295][ T6138]  simple_read_from_buffer+0xb5/0x130
[  121.383317][ T6138]  proc_fail_nth_read+0x10e/0x150
[  121.383422][ T6138]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  121.383525][ T6138]  vfs_read+0x1ab/0x7f0
[  121.383576][ T6138]  ? __rcu_read_unlock+0x4e/0x70
[  121.383594][ T6138]  ? __fget_files+0x184/0x1c0
[  121.383641][ T6138]  ? mutex_lock+0x57/0x90
[  121.383684][ T6138]  ksys_read+0xdc/0x1a0
[  121.383708][ T6138]  __x64_sys_read+0x40/0x50
[  121.383724][ T6138]  x64_sys_call+0x2886/0x3020
[  121.383749][ T6138]  do_syscall_64+0x12c/0x370
[  121.383778][ T6138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.383843][ T6138] RIP: 0033:0x7f7c7501cfce
[  121.383858][ T6138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  121.383873][ T6138] RSP: 002b:00007f7c73aaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  121.383898][ T6138] RAX: ffffffffffffffda RBX: 00007f7c73aaf6c0 RCX: 00007f7c7501cfce
[  121.383913][ T6138] RDX: 000000000000000f RSI: 00007f7c73aaf0a0 RDI: 0000000000000004
[  121.383927][ T6138] RBP: 00007f7c73aaf090 R08: 0000000000000000 R09: 0000000000000000
[  121.383937][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.383949][ T6138] R13: 00007f7c752d6038 R14: 00007f7c752d5fa0 R15: 00007ffe8e268338
[  121.383965][ T6138]  </TASK>
[  121.603917][ T6163] loop1: detected capacity change from 0 to 2048
[  121.621520][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.827165][   T28] audit: type=1400 audit(1773016174.608:1645): avc:  denied  { mounton } for  pid=6162 comm="syz.1.474" path="/82/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  121.851668][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.024488][   T28] audit: type=1400 audit(1773016174.758:1646): avc:  denied  { block_suspend } for  pid=6178 comm="syz.1.476" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  122.078371][ T6188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'.
[  122.089102][ T6194] loop1: detected capacity change from 0 to 256
[  122.121230][ T6194] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.355302][ T6194] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200)
[  122.374443][ T6194] FAT-fs (loop1): Filesystem has been set read-only
[  122.540874][ T6206] loop4: detected capacity change from 0 to 512
[  122.865363][ T6200] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2057)
[  122.894487][ T6206] EXT4-fs (loop4): 1 orphan inode deleted
[  122.907906][ T6206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.920703][ T4231] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  122.930823][ T4231] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1
[  122.951035][ T4231] loop4: lost filesystem error report for type 5 error -117
[  122.951614][ T6206] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.986009][ T6216] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  123.012096][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'.
[  123.039065][ T6216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.481'.
[  123.128348][ T6227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.485'.
[  123.204313][   T28] audit: type=1400 audit(1773016175.998:1647): avc:  denied  { listen } for  pid=6232 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.249470][   T28] audit: type=1400 audit(1773016175.998:1648): avc:  denied  { accept } for  pid=6232 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.319230][   T28] audit: type=1400 audit(1773016176.108:1649): avc:  denied  { accept } for  pid=6232 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  123.513032][   T28] audit: type=1326 audit(1773016176.298:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  123.580382][   T28] audit: type=1326 audit(1773016176.298:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  123.633470][   T28] audit: type=1326 audit(1773016176.298:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  123.685682][   T28] audit: type=1326 audit(1773016176.298:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  123.731576][   T28] audit: type=1326 audit(1773016176.298:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  123.777236][   T28] audit: type=1326 audit(1773016176.308:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6257 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  123.864391][ T6270] loop1: detected capacity change from 0 to 164
[  123.871922][ T6270] Unable to read rock-ridge attributes
[  123.878775][ T6270] Unable to read rock-ridge attributes
[  124.845952][ T6293] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  124.852492][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  124.883572][ T6293] vhci_hcd vhci_hcd.0: Device attached
[  124.894697][ T6293] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5)
[  124.901218][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  124.953786][ T6293] vhci_hcd vhci_hcd.0: Device attached
[  124.972958][ T6298] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8)
[  124.978814][ T6302] loop2: detected capacity change from 0 to 128
[  124.979741][ T6298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  125.002925][ T6298] vhci_hcd vhci_hcd.0: Device attached
[  125.014384][ T6302] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.022877][ T6293] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(7)
[  125.032870][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  125.041128][ T6302] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.051470][ T6293] vhci_hcd vhci_hcd.0: Device attached
[  125.065272][ T6298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  125.088429][ T6293] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(11)
[  125.095049][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  125.104727][ T6293] vhci_hcd vhci_hcd.0: Device attached
[  125.134322][ T6293] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15)
[  125.140964][ T6293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  125.172900][ T6293] vhci_hcd vhci_hcd.0: Device attached
[  125.204007][ T6299] vhci_hcd: connection closed
[  125.204176][ T6305] vhci_hcd: connection closed
[  125.235257][ T4229] vhci_hcd vhci_hcd.0: stop threads
[  125.251567][ T6296] vhci_hcd: connection closed
[  125.251687][ T6310] vhci_hcd: connection closed
[  125.256992][ T6294] vhci_hcd: connection closed
[  125.262954][ T4229] vhci_hcd vhci_hcd.0: release socket
[  125.271588][ T6315] vhci_hcd: connection closed
[  125.284623][ T4229] vhci_hcd vhci_hcd.0: disconnect device
[  125.337173][ T4229] vhci_hcd vhci_hcd.0: stop threads
[  125.342463][ T4229] vhci_hcd vhci_hcd.0: release socket
[  125.369898][ T4229] vhci_hcd vhci_hcd.0: disconnect device
[  125.400329][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.470601][ T4229] vhci_hcd vhci_hcd.0: stop threads
[  125.499688][ T4229] vhci_hcd vhci_hcd.0: release socket
[  125.537896][ T4229] vhci_hcd vhci_hcd.0: disconnect device
[  125.586590][ T4229] vhci_hcd vhci_hcd.0: stop threads
[  125.641279][ T4229] vhci_hcd vhci_hcd.0: release socket
[  125.689260][ T4229] vhci_hcd vhci_hcd.0: disconnect device
[  125.731847][ T4229] vhci_hcd vhci_hcd.0: stop threads
[  125.767994][ T4229] vhci_hcd vhci_hcd.0: release socket
[  125.831277][ T4229] vhci_hcd vhci_hcd.0: disconnect device
[  126.002414][ T4229] vhci_hcd vhci_hcd.0: stop threads
[  126.007771][ T4229] vhci_hcd vhci_hcd.0: release socket
[  126.033879][ T4229] vhci_hcd vhci_hcd.0: disconnect device
[  126.064568][ T6344] loop0: detected capacity change from 0 to 128
[  126.865134][ T6356] netlink: 277 bytes leftover after parsing attributes in process `syz.2.506'.
[  126.910948][ T6356] hub 8-0:1.0: USB hub found
[  126.915714][ T6356] hub 8-0:1.0: 8 ports detected
[  126.929784][ T6356] netlink: 'syz.2.506': attribute type 10 has an invalid length.
[  126.946181][ T6356] macvlan1: entered allmulticast mode
[  126.953866][ T6356] veth1_vlan: entered allmulticast mode
[  126.963780][ T6356] team0: Port device macvlan1 added
[  127.800782][ T6381] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  127.810662][ T6381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'.
[  127.830239][ T6381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.514'.
[  127.915646][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.018752][ T6395] loop4: detected capacity change from 0 to 256
[  128.047601][ T6395] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.061326][ T6392] netlink: 'syz.3.518': attribute type 27 has an invalid length.
[  128.114191][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[  128.140051][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.147342][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.152354][ T6398] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200)
[  128.163357][ T6398] FAT-fs (loop4): Filesystem has been set read-only
[  128.188732][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  128.188745][   T28] audit: type=1326 audit(1773016180.978:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6391 comm="syz.3.518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c7505c799 code=0x0
[  128.232651][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.242320][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.269662][ T6392] bridge1: left promiscuous mode
[  128.274818][ T6392] bridge1: left allmulticast mode
[  128.280015][ T6392] bridge2: left promiscuous mode
[  128.285415][ T6392] bridge2: left allmulticast mode
[  128.291267][ T6392] bridge3: left promiscuous mode
[  128.296649][ T6392] bridge3: left allmulticast mode
[  128.299025][ T6398] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2057)
[  128.301987][ T6392] bridge4: left promiscuous mode
[  128.314301][ T6392] bridge4: left allmulticast mode
[  128.319936][ T4233] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.342739][ T4233] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.353528][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'.
[  128.357647][ T4233] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.367213][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'.
[  128.371754][ T4233] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.400183][ T6402] bridge4: entered promiscuous mode
[  128.407529][ T6402] bridge4: entered allmulticast mode
[  128.512230][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  128.521952][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  128.549124][ T6418] bridge5: entered promiscuous mode
[  128.556356][ T6418] bridge5: entered allmulticast mode
[  128.602271][ T6427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.524'.
[  128.660601][ T6428] loop4: detected capacity change from 0 to 128
[  129.064954][ T6438] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  129.086069][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.527'.
[  129.100184][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'.
[  129.323603][   T23] usb usb8-port1: attempt power cycle
[  129.498649][ T6441] loop1: detected capacity change from 0 to 512
[  130.271185][ T6458] loop4: detected capacity change from 0 to 128
[  130.435239][ T6441] EXT4-fs (loop1): 1 orphan inode deleted
[  130.453233][ T4229] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  130.454603][ T6441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.472957][ T4229] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 1
[  130.500078][ T6441] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.529496][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'.
[  130.541789][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'.
[  130.607809][ T6481] bridge4: entered promiscuous mode
[  130.622831][ T6481] bridge4: entered allmulticast mode
[  131.203069][   T23] usb usb8-port1: unable to enumerate USB device
[  131.469715][ T6528] loop4: detected capacity change from 0 to 128
[  133.087031][   T28] audit: type=1400 audit(1773016185.878:1682): avc:  denied  { append } for  pid=6542 comm="syz.2.544" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  133.147800][ T6543] loop2: detected capacity change from 0 to 4096
[  133.162834][   T28] audit: type=1400 audit(1773016185.908:1683): avc:  denied  { cpu } for  pid=6542 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  133.260263][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.294260][ T6543] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.367882][   T28] audit: type=1400 audit(1773016186.158:1684): avc:  denied  { setopt } for  pid=6542 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  133.502804][   T28] audit: type=1400 audit(1773016186.288:1685): avc:  denied  { bind } for  pid=6566 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  133.562390][ T6574] loop4: detected capacity change from 0 to 512
[  133.569637][ T6574] EXT4-fs: test_dummy_encryption option not supported
[  133.598071][ T6579] __nla_validate_parse: 1 callbacks suppressed
[  133.598084][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[  133.607718][ T6583] loop4: detected capacity change from 0 to 512
[  133.645231][ T6583] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  133.662303][ T6583] EXT4-fs (loop4): 1 truncate cleaned up
[  133.668751][ T6583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.673368][ T6570] FAULT_INJECTION: forcing a failure.
[  133.673368][ T6570] name failslab, interval 1, probability 0, space 0, times 0
[  133.694856][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(full) 
[  133.694884][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  133.694893][ T6570] Call Trace:
[  133.694899][ T6570]  <TASK>
[  133.694907][ T6570]  __dump_stack+0x1d/0x30
[  133.694936][ T6570]  dump_stack_lvl+0x95/0xd0
[  133.694956][ T6570]  dump_stack+0x15/0x1b
[  133.695054][ T6570]  should_fail_ex+0x263/0x280
[  133.695073][ T6570]  should_failslab+0x8c/0xb0
[  133.695092][ T6570]  __kmalloc_noprof+0xb8/0x4e0
[  133.695165][ T6570]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[  133.695230][ T6570]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[  133.695250][ T6570]  genl_family_rcv_msg_doit+0x4b/0x1f0
[  133.695283][ T6570]  ? selinux_capable+0x31/0x40
[  133.695306][ T6570]  ? security_capable+0x7b/0x90
[  133.695325][ T6570]  ? ns_capable+0x7c/0xb0
[  133.695343][ T6570]  genl_rcv_msg+0x432/0x470
[  133.695383][ T6570]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  133.695414][ T6570]  netlink_rcv_skb+0x123/0x220
[  133.695481][ T6570]  ? __pfx_genl_rcv_msg+0x10/0x10
[  133.695504][ T6570]  genl_rcv+0x28/0x40
[  133.695521][ T6570]  netlink_unicast+0x5c0/0x690
[  133.695556][ T6570]  netlink_sendmsg+0x5c8/0x6f0
[  133.695641][ T6570]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.695711][ T6570]  ____sys_sendmsg+0x563/0x5b0
[  133.695798][ T6570]  ___sys_sendmsg+0x195/0x1e0
[  133.695838][ T6570]  __x64_sys_sendmsg+0xd4/0x160
[  133.695869][ T6570]  x64_sys_call+0x194c/0x3020
[  133.695892][ T6570]  do_syscall_64+0x12c/0x370
[  133.695954][ T6570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.695973][ T6570] RIP: 0033:0x7f7c7505c799
[  133.695990][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.696007][ T6570] RSP: 002b:00007f7c73aaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.696075][ T6570] RAX: ffffffffffffffda RBX: 00007f7c752d5fa0 RCX: 00007f7c7505c799
[  133.696090][ T6570] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a
[  133.696103][ T6570] RBP: 00007f7c73aaf090 R08: 0000000000000000 R09: 0000000000000000
[  133.696185][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.696195][ T6570] R13: 00007f7c752d6038 R14: 00007f7c752d5fa0 R15: 00007ffe8e268338
[  133.696215][ T6570]  </TASK>
[  133.954907][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.986327][ T6594] loop4: detected capacity change from 0 to 512
[  133.987877][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.022435][ T6594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.089438][ T6594] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.144723][ T1033] usb usb8-port1: attempt power cycle
[  134.172139][   T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  134.253958][ T6619] loop2: detected capacity change from 0 to 128
[  134.599308][   T28] audit: type=1400 audit(1773016187.388:1686): avc:  denied  { bind } for  pid=6592 comm="syz.4.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  134.906984][ T6594] kthread_run failed with err -4
[  134.956739][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.145627][   T10] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  135.175600][ T6627] fido_id[6627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  135.206739][ T6635] loop4: detected capacity change from 0 to 1024
[  135.263937][ T6635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.330946][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.416488][ T6648] FAULT_INJECTION: forcing a failure.
[  135.416488][ T6648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.439905][   T28] audit: type=1400 audit(1773016188.228:1687): avc:  denied  { kexec_image_load } for  pid=6649 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  135.470645][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.1.562 Not tainted syzkaller #0 PREEMPT(full) 
[  135.470668][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  135.470677][ T6648] Call Trace:
[  135.470683][ T6648]  <TASK>
[  135.470691][ T6648]  __dump_stack+0x1d/0x30
[  135.470781][ T6648]  dump_stack_lvl+0x95/0xd0
[  135.470922][ T6648]  dump_stack+0x15/0x1b
[  135.470969][ T6648]  should_fail_ex+0x263/0x280
[  135.471019][ T6648]  should_fail+0xb/0x20
[  135.471043][ T6648]  should_fail_usercopy+0x1a/0x20
[  135.471063][ T6648]  _copy_from_user+0x1c/0xb0
[  135.471087][ T6648]  __copy_msghdr+0x244/0x300
[  135.471223][ T6648]  ___sys_sendmsg+0x10c/0x1e0
[  135.471249][ T6648]  ? path_openat+0x1b01/0x2050
[  135.471299][ T6648]  __sys_sendmmsg+0x185/0x320
[  135.471326][ T6648]  __x64_sys_sendmmsg+0x57/0x70
[  135.471429][ T6648]  x64_sys_call+0x27aa/0x3020
[  135.471530][ T6648]  do_syscall_64+0x12c/0x370
[  135.471552][ T6648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.471574][ T6648] RIP: 0033:0x7f64b4f0c799
[  135.471631][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.471670][ T6648] RSP: 002b:00007f64b395f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  135.471693][ T6648] RAX: ffffffffffffffda RBX: 00007f64b5185fa0 RCX: 00007f64b4f0c799
[  135.471704][ T6648] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003
[  135.471716][ T6648] RBP: 00007f64b395f090 R08: 0000000000000000 R09: 0000000000000000
[  135.471726][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.471740][ T6648] R13: 00007f64b5186038 R14: 00007f64b5185fa0 R15: 00007fff86d44e98
[  135.471812][ T6648]  </TASK>
[  135.650410][ T6650] kexec: Could not allocate control_code_buffer
[  135.707272][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[  135.816169][ T6673] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  135.824166][   T23] IPVS: starting estimator thread 0...
[  135.942824][ T6677] IPVS: using max 2448 ests per chain, 122400 per kthread
[  136.063000][ T6663] netlink: 9 bytes leftover after parsing attributes in process `syz.3.567'.
[  136.081006][ T6693] random: crng reseeded on system resumption
[  136.081036][   T28] audit: type=1400 audit(1773016188.868:1688): avc:  denied  { append } for  pid=6692 comm="syz.1.573" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  136.117657][ T6663] gretap0: entered promiscuous mode
[  136.298088][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  136.325904][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  136.375322][ T6706] bridge6: entered promiscuous mode
[  136.384401][ T6706] bridge6: entered allmulticast mode
[  136.811326][ T6735] loop2: detected capacity change from 0 to 128
[  137.035699][ T6743] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  137.103290][ T6744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.582'.
[  137.146693][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.582'.
[  137.333050][ T1033] usb usb8-port1: unable to enumerate USB device
[  137.537853][ T1033] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  137.555909][ T1033] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  137.824425][ T6768] loop1: detected capacity change from 0 to 256
[  137.864808][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  137.911484][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  137.961555][ T6771] bridge4: entered promiscuous mode
[  137.977896][ T6771] bridge4: entered allmulticast mode
[  138.315829][ T6715] lo speed is unknown, defaulting to 1000
[  138.321598][ T6715] lo speed is unknown, defaulting to 1000
[  138.327623][ T6715] lo speed is unknown, defaulting to 1000
[  138.333700][ T6715] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  138.341048][ T6715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  138.351238][ T6715] lo speed is unknown, defaulting to 1000
[  138.357329][ T6715] lo speed is unknown, defaulting to 1000
[  138.366177][ T6715] lo speed is unknown, defaulting to 1000
[  138.372465][ T6715] lo speed is unknown, defaulting to 1000
[  138.419073][ T6802] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  138.427940][ T6715] lo speed is unknown, defaulting to 1000
[  138.478237][ T6802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'.
[  138.489838][ T3521] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  138.499037][ T3521] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  139.930394][ T6860] __nla_validate_parse: 1 callbacks suppressed
[  139.930496][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  139.967621][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[  139.993835][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[  140.041270][ T6862] bridge7: entered promiscuous mode
[  140.073850][ T6862] bridge7: entered allmulticast mode
[  140.090533][ T6869] loop0: detected capacity change from 0 to 512
[  140.119885][ T6869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.171215][ T6869] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  140.211379][ T6869] EXT4-fs (loop0): 1 truncate cleaned up
[  140.229661][ T6869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.580823][ T6892] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  140.595089][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.609'.
[  140.615804][ T6895] loop1: detected capacity change from 0 to 1024
[  140.636075][ T6895] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002]
[  140.643563][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'.
[  140.644323][ T6895] System zones: 0-1, 3-36
[  140.683470][ T6895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.706687][   T28] audit: type=1326 audit(1773016193.488:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  140.746516][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.612'.
[  140.786713][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.919079][   T28] audit: type=1326 audit(1773016193.488:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  140.942697][   T28] audit: type=1326 audit(1773016193.488:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  140.970046][   T28] audit: type=1326 audit(1773016193.488:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  140.994513][   T28] audit: type=1326 audit(1773016193.498:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  141.018152][   T28] audit: type=1326 audit(1773016193.498:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  141.049544][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.206291][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  141.302194][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  141.343522][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'.
[  141.399754][ T6936] bridge5: entered promiscuous mode
[  141.427599][ T6936] bridge5: entered allmulticast mode
[  141.470794][   T28] audit: type=1326 audit(1773016193.498:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  141.495484][   T28] audit: type=1326 audit(1773016193.498:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7c7505c799 code=0x7ffc0000
[  141.519019][   T28] audit: type=1326 audit(1773016193.498:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c7505c502 code=0x7ffc0000
[  141.633046][   T28] audit: type=1326 audit(1773016193.498:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c7505c502 code=0x7ffc0000
[  141.804409][ T6982] loop1: detected capacity change from 0 to 256
[  144.183437][ T7063] tmpfs: Bad value for 'mpol'
[  144.192425][ T7063] netlink: 168 bytes leftover after parsing attributes in process `syz.4.644'.
[  144.220481][ T7059] loop2: detected capacity change from 0 to 1764
[  144.269426][ T7068] pimreg: entered allmulticast mode
[  144.290853][ T7065] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  144.318568][ T7074] pimreg: left allmulticast mode
[  144.469899][ T7081] bridge5: entered promiscuous mode
[  144.482882][ T7081] bridge5: entered allmulticast mode
[  144.586275][ T7097] loop4: detected capacity change from 0 to 128
[  144.785863][ T7118] loop2: detected capacity change from 0 to 1024
[  144.817208][ T7118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.142672][ T7118] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.655: Allocating blocks 497-513 which overlap fs metadata
[  146.262580][   T28] kauditd_printk_skb: 386 callbacks suppressed
[  146.262594][   T28] audit: type=1326 audit(1773016199.048:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  147.243549][   T28] audit: type=1326 audit(1773016199.048:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.4.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  148.362195][ T7160] __nla_validate_parse: 5 callbacks suppressed
[  148.362251][ T7160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.664'.
[  148.561739][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.764174][ T7180] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  148.810137][ T7180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.666'.
[  148.844484][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.666'.
[  149.053593][ T7219] loop0: detected capacity change from 0 to 128
[  149.212827][ T7218] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  149.229941][ T7218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.674'.
[  149.247648][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.674'.
[  149.324889][ T7227] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.673'.
[  150.729930][   T28] audit: type=1326 audit(1773016203.518:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  151.263534][ T7230] loop1: detected capacity change from 0 to 128
[  151.461522][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'.
[  151.706583][   T28] audit: type=1326 audit(1773016203.518:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  151.730380][   T28] audit: type=1326 audit(1773016203.518:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b3b43c502 code=0x7ffc0000
[  151.838912][   T28] audit: type=1326 audit(1773016204.248:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b3b43c502 code=0x7ffc0000
[  151.865874][   T28] audit: type=1326 audit(1773016204.248:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  151.889288][   T28] audit: type=1326 audit(1773016204.248:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  151.913610][   T28] audit: type=1326 audit(1773016204.248:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  151.937259][   T28] audit: type=1400 audit(1773016204.248:2094): avc:  denied  { ioctl } for  pid=7237 comm="syz.4.678" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11058 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  151.963026][   T28] audit: type=1326 audit(1773016204.248:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  151.987730][   T28] audit: type=1326 audit(1773016204.248:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  152.031972][   T28] audit: type=1326 audit(1773016204.248:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b3b43c799 code=0x7ffc0000
[  152.249778][ T7262] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  152.278678][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  152.328409][ T7262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.683'.
[  152.370893][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'.
[  152.400246][ T7265] bridge6: entered promiscuous mode
[  152.405524][ T7265] bridge6: entered allmulticast mode
[  152.531319][ T7292] loop4: detected capacity change from 0 to 512
[  152.548271][ T7292] EXT4-fs: Ignoring removed i_version option
[  152.585055][ T7292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.603323][ T7298] usb usb9: usbfs: process 7298 (syz.2.689) did not claim interface 0 before use
[  152.611170][ T7292] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.643631][ T7303] netlink: 'syz.3.690': attribute type 27 has an invalid length.
[  152.661602][ T7303] gretap0: left promiscuous mode
[  152.679911][ T7303] bridge5: left promiscuous mode
[  152.680822][ T7298] loop2: detected capacity change from 0 to 512
[  152.702961][ T7298] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.708820][ T7303] bridge5: left allmulticast mode
[  152.718735][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.772369][ T7298] EXT4-fs (loop2): 1 truncate cleaned up
[  152.808000][ T7298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.027647][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.044425][ T7324] FAULT_INJECTION: forcing a failure.
[  153.044425][ T7324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.083114][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full) 
[  153.083157][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  153.083169][ T7324] Call Trace:
[  153.083175][ T7324]  <TASK>
[  153.083183][ T7324]  __dump_stack+0x1d/0x30
[  153.083218][ T7324]  dump_stack_lvl+0x95/0xd0
[  153.083241][ T7324]  dump_stack+0x15/0x1b
[  153.083262][ T7324]  should_fail_ex+0x263/0x280
[  153.083352][ T7324]  should_fail+0xb/0x20
[  153.083371][ T7324]  should_fail_usercopy+0x1a/0x20
[  153.083395][ T7324]  strncpy_from_user+0x27/0x250
[  153.083472][ T7324]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  153.083495][ T7324]  do_getname+0x59/0x1c0
[  153.083531][ T7324]  __se_sys_symlinkat+0x32/0x1b0
[  153.083550][ T7324]  __x64_sys_symlinkat+0x43/0x50
[  153.083567][ T7324]  x64_sys_call+0x2b7d/0x3020
[  153.083589][ T7324]  do_syscall_64+0x12c/0x370
[  153.083644][ T7324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.083661][ T7324] RIP: 0033:0x7f2447e3c799
[  153.083678][ T7324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.083694][ T7324] RSP: 002b:00007f244688f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  153.083774][ T7324] RAX: ffffffffffffffda RBX: 00007f24480b5fa0 RCX: 00007f2447e3c799
[  153.083788][ T7324] RDX: 0000200000003040 RSI: ffffffffffffff9c RDI: 0000200000002040
[  153.083852][ T7324] RBP: 00007f244688f090 R08: 0000000000000000 R09: 0000000000000000
[  153.083866][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.083878][ T7324] R13: 00007f24480b6038 R14: 00007f24480b5fa0 R15: 00007ffd7c89d2c8
[  153.083895][ T7324]  </TASK>
[  153.304832][ T7339] netlink: 'syz.4.695': attribute type 27 has an invalid length.
[  153.323766][ T7346] loop1: detected capacity change from 0 to 256
[  153.370001][ T7346] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.386742][ T7349] __nla_validate_parse: 4 callbacks suppressed
[  153.386757][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'.
[  153.406377][ T7338] ==================================================================
[  153.407882][ T7346] netlink: 'syz.1.700': attribute type 39 has an invalid length.
[  153.414473][ T7338] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run
[  153.414498][ T7338] 
[  153.414504][ T7338] write to 0xffff88810a44e3c8 of 8 bytes by task 7347 on cpu 0:
[  153.414521][ T7338]  cpu_map_kthread_run+0x4fe/0x1680
[  153.414541][ T7338]  kthread+0x22a/0x280
[  153.414561][ T7338]  ret_from_fork+0x150/0x360
[  153.414592][ T7338]  ret_from_fork_asm+0x1a/0x30
[  153.414619][ T7338] 
[  153.414624][ T7338] read to 0xffff88810a44e3c8 of 8 bytes by task 7338 on cpu 1:
[  153.414640][ T7338]  bq_flush_to_queue+0x124/0x360
[  153.414659][ T7338]  cpu_map_enqueue+0x1ad/0x1c0
[  153.414678][ T7338]  xdp_do_redirect_frame+0x27b/0x580
[  153.414717][ T7338]  bpf_test_run_xdp_live+0xac3/0x1360
[  153.414746][ T7338]  bpf_prog_test_run_xdp+0x57b/0xa10
[  153.414779][ T7338]  bpf_prog_test_run+0x204/0x340
[  153.414800][ T7338]  __sys_bpf+0x52e/0x7e0
[  153.414820][ T7338]  __x64_sys_bpf+0x41/0x50
[  153.414852][ T7338]  x64_sys_call+0x10cb/0x3020
[  153.414891][ T7338]  do_syscall_64+0x12c/0x370
[  153.414911][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.414933][ T7338] 
[  153.414938][ T7338] value changed: 0xffff888137dd6070 -> 0x0000000000000000
[  153.414951][ T7338] 
[  153.414955][ T7338] Reported by Kernel Concurrency Sanitizer on:
[  153.414966][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.2.697 Not tainted syzkaller #0 PREEMPT(full) 
[  153.414989][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  153.415003][ T7338] ==================================================================
[  153.641507][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.648837][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.695585][ T7358] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200)
[  153.720372][ T7358] FAT-fs (loop1): Filesystem has been set read-only
[  153.844546][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.872615][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.923967][ T7339] bridge1: left promiscuous mode
[  153.929003][ T7339] bridge1: left allmulticast mode
[  153.944580][ T7339] bridge2: left promiscuous mode
[  153.949529][ T7339] bridge2: left allmulticast mode
[  153.972998][ T7339] bridge3: left promiscuous mode
[  153.978062][ T7339] bridge3: left allmulticast mode
[  153.988235][ T7339] bridge4: left promiscuous mode
[  153.998253][ T7339] bridge4: left allmulticast mode
[  154.008426][ T7339] bridge5: left promiscuous mode
[  154.018502][ T7339] bridge5: left allmulticast mode
[  154.057744][ T4244] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.071704][ T4244] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.090852][ T4244] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.110207][ T4244] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.289288][ T7358] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2057)
[  162.213942][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog