last executing test programs:

2m16.419766078s ago: executing program 3 (id=218):
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r0, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xd}, 0x10c0e9, 0x0, 0x0, 0x3, 0x6, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10)
sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0)

2m15.946438143s ago: executing program 3 (id=221):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x3ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x5}, 0x8040, 0x400000, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="97376df105446986dfa34f933a4cd1eed41cfb33983bd482c2d97c33be72ece56368fde93681a0061054bb30397453e9e235567aac87c7b2dd67c8c250bd7ffc1554e985601321f2830fb6bbe6580595bd76bda8495bf7fee1e0526708cf463390e294941e9ba8bfbfd9b5906a05614f28b50075524dff324063da0cbfab3b63f6a0c4486d3a8de64d", 0x89, 0x2000c880, &(0x7f0000000380)={0x11, 0xc, r2, 0x1, 0x4, 0x6, @local}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES32], 0x1b0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0)

2m14.690419507s ago: executing program 3 (id=231):
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x12, 0x0, 0x0, @multicast2=0xe0000001}}}}}, 0x0)

2m14.501926169s ago: executing program 3 (id=232):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)})
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==")
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="c40000001900010000000000000000007f000001000000000000000000000000000000000000000000000000000023fdffffffffffffff000a000000870000001beb54006d0d851e72cf1a5efeb75e3bd33496370b3c5520f2e195278b4b069fb779f44598990dbf152ef602d2a2019bc274a2ed37138255a13ecbdac849217bad0d5820678c6df62c21e763377e91bc57b82b425f03bb89", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005b07350004000000"], 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r4 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xfbW\xb4\xea\x03\x98\t\xaf\xa7\x05\xa2,R\xd7?\xa6\x830@\xf3\xa5\x13\xd9\v\xbe\x05\xe6\x00\b3\x9f\x89>\x11\xf0\xd3\xa0\x99\xef\xe4\xb3\xc5\xc3AK\x7f\xe2\xa6]\x9a\xadyr\xaf <\xd5\xe1\xfa,N\x8a\x03\xe7s\xef\x96\xfc\x8c\xe4\xd2', 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1})
mq_timedreceive(r4, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x3ed7, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r5, &(0x7f0000000240)=""/4096, 0x1000)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
socket(0x80000000000000a, 0x2, 0x0)

2m13.578082168s ago: executing program 3 (id=241):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x2032, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
mlockall(0x7)
recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x2a, 0x2, 0x0)
syncfs(r3)
connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}, 0x3a)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
unshare(0x2c020400)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d0e, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000)

2m12.823184597s ago: executing program 3 (id=245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x54}}, 0x0)

2m12.720009178s ago: executing program 32 (id=245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x54}}, 0x0)

9.100556422s ago: executing program 0 (id=1158):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x55, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000780)={0x10, 0x39, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x10}, {&(0x7f0000000c40)={0x10, 0x41, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x8880}, 0x4840)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
syz_clone(0x1000000, &(0x7f0000000180)="953cca8deadcdf8f63d4965d9f9f3c3d49b476181b4112018206bfd117d40cf2ec441b569e2aa130b1109a998cf93b84228bd59e8088a94b15ef09dca1133f4ebd6127799573c655f91f41a2800a616378d1913961ff36069b2d00958c556d8efe9ae408b06bd2bf1390ecac3880b9c6cda84b3c9ebc6a75d9872d3dcd52d1364354a971f9b6818d89f153d0ebe8572c38e2ead17b2fd712a67f626c44b0c57aea0d4152359a986b32a3323f5501820c9b5cacc6b1a0450402f0df8ccf8080b077aca69bd9e9c8cab313c1f5e2895e3f7354269d1769262ef1f13895ec4512d578", 0xe1, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="fcfd934f6499f551c7722ce55b7b4db25791527451631ce07ee42378c1dc137fe5393a9c16f0789cd381b2ff311247bc2b6f62ab2bf7a47fe02125fb9b7720d47e3c78a552de48d5721655bc0bfb6675a66537b741eb716c73b8df00b64f4744408abd7eb85c292d482567b060fb9f")
getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100))
syz_emit_ethernet(0xf3, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xbd, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0xc, 0xff, @loopback={0x4000000}, @local, [], "13a2f012fc8fd62192aa41e7e75b96f5f4d2299afe419cba81dd391efc44088f002128418b430dc5763f9abd7f6514420c5c85dbc01eca5b40cae78dabdd340d152f3cea69f0aa7ea6ad708748ac3bc7cb0b9c06ea399dbc244707c40552fc3e802f8f92e2bc2ff1ad6088f9950e80fbed3742ca5d9021bd5cb4bc0ff11fd1a832f88f6837afbceebcbbb0faba"}}}}}}}, 0x0)

7.934266504s ago: executing program 0 (id=1166):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

7.299017691s ago: executing program 0 (id=1174):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7", 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x400}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0xfffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0xdc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) (fail_nth: 1)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, &(0x7f0000000080))

7.271938822s ago: executing program 4 (id=1175):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

7.186784583s ago: executing program 4 (id=1176):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x55, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000780)={0x10, 0x39, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x10}, {&(0x7f0000000c40)={0x10, 0x41, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x8880}, 0x4840)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
syz_clone(0x1000000, &(0x7f0000000180)="953cca8deadcdf8f63d4965d9f9f3c3d49b476181b4112018206bfd117d40cf2ec441b569e2aa130b1109a998cf93b84228bd59e8088a94b15ef09dca1133f4ebd6127799573c655f91f41a2800a616378d1913961ff36069b2d00958c556d8efe9ae408b06bd2bf1390ecac3880b9c6cda84b3c9ebc6a75d9872d3dcd52d1364354a971f9b6818d89f153d0ebe8572c38e2ead17b2fd712a67f626c44b0c57aea0d4152359a986b32a3323f5501820c9b5cacc6b1a0450402f0df8ccf8080b077aca69bd9e9c8cab313c1f5e2895e3f7354269d1769262ef1f13895ec4512d578", 0xe1, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="fcfd934f6499f551c7722ce55b7b4db25791527451631ce07ee42378c1dc137fe5393a9c16f0789cd381b2ff311247bc2b6f62ab2bf7a47fe02125fb9b7720d47e3c78a552de48d5721655bc0bfb6675a66537b741eb716c73b8df00b64f4744408abd7eb85c292d482567b060fb9f")
getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100))
syz_emit_ethernet(0xf3, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xbd, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0xc, 0xff, @loopback={0x4000000}, @local, [], "13a2f012fc8fd62192aa41e7e75b96f5f4d2299afe419cba81dd391efc44088f002128418b430dc5763f9abd7f6514420c5c85dbc01eca5b40cae78dabdd340d152f3cea69f0aa7ea6ad708748ac3bc7cb0b9c06ea399dbc244707c40552fc3e802f8f92e2bc2ff1ad6088f9950e80fbed3742ca5d9021bd5cb4bc0ff11fd1a832f88f6837afbceebcbbb0faba"}}}}}}}, 0x0)

6.107491824s ago: executing program 5 (id=1178):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
r2 = syz_io_uring_setup(0x1267, &(0x7f00000000c0)={0x0, 0xaf43, 0x40, 0x3, 0x388}, &(0x7f0000000480), &(0x7f00000016c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0xd4}, 0xfffffe07)
mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0)
r3 = semget$private(0x0, 0x3, 0x235)
semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000000200)=""/58)
mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000050)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.057598115s ago: executing program 5 (id=1179):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

5.959751676s ago: executing program 5 (id=1180):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030001001000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xee, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$tty1(0xc, 0x4, 0x1)
set_mempolicy(0x4005, 0x0, 0x9)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0xa41, &(0x7f0000000700)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@noload}, {@bsdgroups}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x487, &(0x7f0000000340)="$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")
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
set_mempolicy(0x3, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000011, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil)
eventfd(0xfffffffc)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180))
syz_io_uring_setup(0x49a, &(0x7f0000000fc0)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0), &(0x7f0000000000))

5.350317602s ago: executing program 4 (id=1183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="080005"], 0x164}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
pipe(0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0xd9ac, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
set_tid_address(0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
fsync(0xffffffffffffffff)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
io_submit(r5, 0x1, &(0x7f0000001300)=[0x0])
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="01002dbd7000fedbdf2505000000080003000200000008000200030005", @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
write$UHID_INPUT(r6, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006)

5.319245152s ago: executing program 1 (id=1184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xfc40)
r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a})
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (fail_nth: 1)

5.309047863s ago: executing program 0 (id=1185):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

5.082451855s ago: executing program 1 (id=1186):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

5.011949066s ago: executing program 2 (id=1188):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0bc6000000006111500000000000850000009d0900009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000b2508000300030000000800030004000000000003000300"/40], 0x28}, 0x1, 0x0, 0x0, 0x48085}, 0x2000c844)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))

4.993876666s ago: executing program 1 (id=1189):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
r2 = syz_io_uring_setup(0x1267, &(0x7f00000000c0)={0x0, 0xaf43, 0x40, 0x3, 0x388}, &(0x7f0000000480), &(0x7f00000016c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0xd4}, 0xfffffe07)
mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0)
r3 = semget$private(0x0, 0x3, 0x235)
semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000000200)=""/58)
mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x9d, 0x88, 0x8000, 0xd})
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000050)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.892345327s ago: executing program 1 (id=1190):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x1597]}, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

4.739562219s ago: executing program 0 (id=1191):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x55, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00')
sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000780)={0x10, 0x39, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x10}, {&(0x7f0000000c40)={0x10, 0x41, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x8880}, 0x4840)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

4.674308439s ago: executing program 4 (id=1192):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7", 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x400}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0xfffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0xdc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=")
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, &(0x7f0000000080))
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8316, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff)

3.728638s ago: executing program 5 (id=1193):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x119f, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x455e, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}})
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3.032910607s ago: executing program 1 (id=1194):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7", 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x400}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0xfffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0xdc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") (fail_nth: 1)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, &(0x7f0000000080))
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8316, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff)

1.610479112s ago: executing program 2 (id=1195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

1.608357023s ago: executing program 2 (id=1196):
r0 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.438619894s ago: executing program 4 (id=1197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9, 0x0, 0x0, 0xf00}, {}, {0x3}, {}, {}, {0x0, 0x4}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x4000050)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xa2d700ad}]}}}]}, 0x38}}, 0x0)

1.057498588s ago: executing program 2 (id=1198):
r0 = socket$inet6(0xa, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (fail_nth: 1)

801.698701ms ago: executing program 5 (id=1199):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYRES64=r0], 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

486.001095ms ago: executing program 2 (id=1200):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0)
r2 = syz_io_uring_setup(0x1267, &(0x7f00000000c0)={0x0, 0xaf43, 0x40, 0x3, 0x388}, &(0x7f0000000480), &(0x7f00000016c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0xd4}, 0xfffffe07)
mq_timedsend(r1, &(0x7f0000000600)='m', 0x1, 0x6, 0x0)
r3 = semget$private(0x0, 0x3, 0x235)
semctl$GETZCNT(r3, 0x2, 0xf, &(0x7f0000000200)=""/58)
mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x9d, 0x88, 0x8000, 0xd})
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000050)
socket$nl_netfilter(0x10, 0x3, 0xc)

412.740055ms ago: executing program 1 (id=1201):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@noinit_itable}, {@acl}, {@bsdgroups}]}, 0x0, 0x48a, &(0x7f0000000200)="$eJzs28FvVNUaAPDv3nam8B6P9vF4KohaJSaNxpYWVBZuNJgYg9FEF7is7UAIAzW0GkEixRhXJoZE18al0b/AnTEx6srErStXhoQoG8BVzb1z7zAdpi3QaafQ3y+ZO+fMPdNzvp577j1zz0wAm9ZwtkkitkXEbxEx2MguLjDceLp25dzU9SvnppJYWHj9zyQvd/XKuamyaPm+fxeZkTQi/SgpKlls9szZE5P1eu10kR+bO/n22OyZs0+9e3LyWO1Y7dTEwYMH9o8/+8zE012JM4vr6u4PZvbseunNi69MHbn41k/fZO3dVuxvjaNbhrPA/1rIte97vNuV9dh/8u1Avk36e9wYbllfRGTdVcnH/2D0xY3OG4wXP+xp44A1lV2bBpbePb8A3MOSuNWSlZZzBnD3Ky/02eff8rEO044N4/LzjQ9AWdzXikdjT3+kRZlK8/Nt9w1HxJH5v7/IHrFG9yEAAFp9MvX54WoMxPvXv345m3sMNvekcV/+/Hu+3R6V5p7/RsSOiPhfROyMiP9H5GXvj4gHVtmem+c/6aVV/sllZfO/54q1rcXzv3L2F0N9RS6bAw5FJTl6vF7bl/9PIkaiMpDlx5ep47tDv3661L7W+V/2yOov54JFOy71t92gm56cm2zpjlW5fCFid3+n+JPmSkASEbsiYvft/entZeL4E1/tWarQyvEvowvrTAtfZuHNZ/HPR1v8paR1fTLLLF6fHNsS9dq+sfKouNnPv3z82lL1ryr+Lrhcazy39H97kaGkdb12trv13+Hxn1aTN/J15mqx5vje5Nzc6fGIanI4z1eLsvnrEzfeW+bL8tnxP7K38/jfUbwni//BiMgO4oci4uGIeKRo+6MR8VhE7F0mxh9fWDn+SHvU/xcipjue/5rHf1v/336i78QP3y5V/3A+iFfq/wN5aqR4JT//raBTc7Ka2hu4mv8dAAAA3C3S/DvwSTraTKfp6GjjO/w7419pfWZ27smjM++cmm58V34oKml5p2uweY+0XhtP5ot0JTkU9dpEXvbG/dL9xX3jz/q25vnRqZn6dA/jBhrjvNP4z/zR1+vWAWtsa8dXJ6rr3hCgB9rX0dPFPwE+/2o4GcC9yu+1YfNaYfyn69UOYP25/sPm1Wn8n2/LWwuAe5PrP2xedzj+3ReAu136fa9bAPSQ+T9sSqv5Xf8aJrbcRuHqBmlz1xLtnZJulIZliYgykW6I9kisUaLXZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+CcAAP//IkvZ1w==")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x6, 0x20014, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f2d300e6d6020400", [0x8, 0x4]}) (fail_nth: 1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

408.688325ms ago: executing program 5 (id=1202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="080005"], 0x164}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
r3 = dup3(r2, 0xffffffffffffffff, 0x80000)
pipe(0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0xd9ac, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0})
set_tid_address(0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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")
fsync(0xffffffffffffffff)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
io_submit(r5, 0x1, &(0x7f0000001300)=[0x0])
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="01002dbd7000fedbdf2505000000080003000200000008000200030005", @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
write$UHID_INPUT(r6, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006)

355.294546ms ago: executing program 0 (id=1203):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4")
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x1597]}, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

313.894417ms ago: executing program 4 (id=1204):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fdatasync(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001640)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000012028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
semtimedop(0x0, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
semget$private(0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000200, 0xe4ca, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4190}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x421647, 0x160)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@noload}, {@noinit_itable}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r2 = open(0x0, 0x0, 0x33)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x400000000000000)

0s ago: executing program 2 (id=1205):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800)
signalfd4(r0, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x8})
signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) (async)
signalfd4(r0, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x4, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
epoll_create(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x8}) (async)

kernel console output (not intermixed with test programs):

18/2026
[  146.592239][ T6228] Call Trace:
[  146.592246][ T6228]  <TASK>
[  146.592253][ T6228]  __dump_stack+0x1d/0x30
[  146.592346][ T6228]  dump_stack_lvl+0x95/0xd0
[  146.592434][ T6228]  dump_stack+0x15/0x1b
[  146.592458][ T6228]  should_fail_ex+0x263/0x280
[  146.592486][ T6228]  should_fail+0xb/0x20
[  146.592557][ T6228]  should_fail_usercopy+0x1a/0x20
[  146.592587][ T6228]  _copy_from_user+0x1c/0xb0
[  146.592694][ T6228]  xsk_setsockopt+0x308/0x640
[  146.592800][ T6228]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.592888][ T6228]  __sys_setsockopt+0x184/0x200
[  146.592920][ T6228]  __x64_sys_setsockopt+0x64/0x80
[  146.592962][ T6228]  x64_sys_call+0x2327/0x3020
[  146.592986][ T6228]  do_syscall_64+0x12c/0x3b0
[  146.593022][ T6228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.593112][ T6228] RIP: 0033:0x7f96b64ecdd9
[  146.593128][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.593149][ T6228] RSP: 002b:00007f96b4f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  146.593176][ T6228] RAX: ffffffffffffffda RBX: 00007f96b6765fa0 RCX: 00007f96b64ecdd9
[  146.593194][ T6228] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[  146.593225][ T6228] RBP: 00007f96b4f47090 R08: 0000000000000020 R09: 0000000000000000
[  146.593241][ T6228] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  146.593266][ T6228] R13: 00007f96b6766038 R14: 00007f96b6765fa0 R15: 00007ffed3741c28
[  146.593347][ T6228]  </TASK>
[  147.051463][ T6242] loop1: detected capacity change from 0 to 512
[  147.236975][ T6243] loop5: detected capacity change from 0 to 512
[  148.116894][ T1038] IPVS: starting estimator thread 0...
[  148.247875][ T6240] atomic_op ffff88814a9bf128 conn xmit_atomic 0000000000000000
[  148.266810][ T6243] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.794: corrupted xattr block 95: invalid header
[  148.282038][ T6243] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  148.284281][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  148.301301][    C0] EXT4-fs (loop5): initial error at time 1778537988: ext4_expand_extra_isize_ea:2810: inode 11
[  148.312759][    C0] EXT4-fs (loop5): last error at time 1778537988: ext4_expand_extra_isize_ea:2810: inode 11
[  148.324611][ T6243] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.794: bg 0: block 7: invalid block bitmap
[  148.337502][ T6243] loop5: lost filesystem error report for type 5 error -117
[  148.345678][ T6243] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  148.363396][ T6243] loop5: lost filesystem error report for type 5 error -117
[  148.442414][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.466427][ T6243] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.794: corrupted xattr block 95: invalid header
[  148.480854][ T6243] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  148.482123][ T6243] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117)
[  148.502786][ T6243] EXT4-fs (loop5): 1 orphan inode deleted
[  148.519108][ T6243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.820863][ T6248] IPVS: using max 2208 ests per chain, 110400 per kthread
[  148.863450][ T6242] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.896771][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  148.969716][   T28] audit: type=1400 audit(1778537988.936:1131): avc:  denied  { write } for  pid=6241 comm="syz.1.798" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  149.120651][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.191281][ T6277] SET target dimension over the limit!
[  149.300648][ T6264] loop2: detected capacity change from 0 to 512
[  149.320327][   T28] audit: type=1400 audit(1778537989.286:1132): avc:  denied  { getopt } for  pid=6274 comm="syz.4.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  149.380533][   T28] audit: type=1400 audit(1778537989.286:1133): avc:  denied  { ioctl } for  pid=6274 comm="syz.4.805" path="socket:[16699]" dev="sockfs" ino=16699 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  149.409671][ T6277] loop1: detected capacity change from 0 to 512
[  149.416352][ T6277] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  149.462008][ T6264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  149.483208][ T6264] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.800: invalid indirect mapped block 4294967295 (level 0)
[  149.505242][ T6264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  149.514268][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  149.529923][    C0] EXT4-fs (loop2): initial error at time 1778537989: ext4_free_branches:1023: inode 16
[  149.540155][    C0] EXT4-fs (loop2): last error at time 1778537989: ext4_free_branches:1023: inode 16
[  149.564696][ T6264] EXT4-fs (loop2): Remounting filesystem read-only
[  149.573596][ T6264] EXT4-fs (loop2): 1 orphan inode deleted
[  149.579980][ T6264] EXT4-fs (loop2): 1 truncate cleaned up
[  149.593842][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.635254][ T4340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.693596][   T28] audit: type=1400 audit(1778537989.656:1134): avc:  denied  { getopt } for  pid=6284 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  149.997358][ T6293] loop4: detected capacity change from 0 to 128
[  150.005576][ T6293] vfat: Unknown parameter 'ÿÿ'
[  150.336471][ T6304] loop1: detected capacity change from 0 to 512
[  150.356381][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.382314][ T6304] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.393475][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.419523][   T28] audit: type=1400 audit(1778537990.376:1135): avc:  denied  { write } for  pid=6302 comm="syz.1.814" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.476067][ T6309] loop5: detected capacity change from 0 to 1764
[  150.486372][ T6309] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  150.504895][ T6309] isofs_fill_super: get root inode failed
[  151.186494][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.203743][ T6319] loop2: detected capacity change from 0 to 256
[  151.356629][ T6321] loop0: detected capacity change from 0 to 512
[  151.377403][ T6321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.431572][ T6321] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.539177][   T28] audit: type=1400 audit(1778537991.506:1136): avc:  denied  { write } for  pid=6320 comm="syz.0.821" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  151.567045][ T6334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.825'.
[  151.628217][ T6340] FAULT_INJECTION: forcing a failure.
[  151.628217][ T6340] name failslab, interval 1, probability 0, space 0, times 0
[  151.640973][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.1.823 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  151.641068][ T6340] Tainted: [W]=WARN
[  151.641077][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  151.641091][ T6340] Call Trace:
[  151.641098][ T6340]  <TASK>
[  151.641107][ T6340]  __dump_stack+0x1d/0x30
[  151.641158][ T6340]  dump_stack_lvl+0x95/0xd0
[  151.641180][ T6340]  dump_stack+0x15/0x1b
[  151.641218][ T6340]  should_fail_ex+0x263/0x280
[  151.641286][ T6340]  ? alloc_pipe_info+0xad/0x340
[  151.641321][ T6340]  should_failslab+0x8c/0xb0
[  151.641353][ T6340]  __kmalloc_cache_noprof+0x5f/0x400
[  151.641440][ T6340]  alloc_pipe_info+0xad/0x340
[  151.641469][ T6340]  splice_direct_to_actor+0x591/0x670
[  151.641555][ T6340]  ? __file_has_perm+0x3d9/0x430
[  151.641584][ T6340]  ? __pfx_direct_splice_actor+0x10/0x10
[  151.641701][ T6340]  ? selinux_file_permission+0x2ef/0x320
[  151.641735][ T6340]  do_splice_direct+0x119/0x1a0
[  151.641774][ T6340]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  151.641875][ T6340]  do_sendfile+0x382/0x650
[  151.641996][ T6340]  __x64_sys_sendfile64+0x105/0x150
[  151.642034][ T6340]  x64_sys_call+0x2dc4/0x3020
[  151.642063][ T6340]  do_syscall_64+0x12c/0x3b0
[  151.642098][ T6340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.642171][ T6340] RIP: 0033:0x7f5f5fc7cdd9
[  151.642268][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.642286][ T6340] RSP: 002b:00007f5f5e695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  151.642321][ T6340] RAX: ffffffffffffffda RBX: 00007f5f5fef6180 RCX: 00007f5f5fc7cdd9
[  151.642340][ T6340] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008
[  151.642411][ T6340] RBP: 00007f5f5e695090 R08: 0000000000000000 R09: 0000000000000000
[  151.642423][ T6340] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001
[  151.642437][ T6340] R13: 00007f5f5fef6218 R14: 00007f5f5fef6180 R15: 00007ffe821c0fc8
[  151.642542][ T6340]  </TASK>
[  151.886456][ T6341] loop5: detected capacity change from 0 to 256
[  151.921265][ T6341] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.034059][ T1038] Process accounting resumed
[  152.050643][ T1038] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  152.074939][ T1038] FAT-fs (loop5): Filesystem has been set read-only
[  152.096915][   T28] audit: type=1400 audit(1778537991.986:1137): avc:  denied  { write } for  pid=6336 comm="syz.5.824" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  152.160475][   T28] audit: type=1400 audit(1778537991.996:1138): avc:  denied  { remount } for  pid=6336 comm="syz.5.824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  152.203661][ T6345] xt_hashlimit: size too large, truncated to 1048576
[  152.204029][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.221316][ T6344] netdevsim netdevsim4: Direct firmware load for   failed with error -2
[  152.653930][ T6355] FAULT_INJECTION: forcing a failure.
[  152.653930][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.849835][ T6362] atomic_op ffff88811b316d28 conn xmit_atomic 0000000000000000
[  152.897975][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.2.830 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  152.898067][ T6355] Tainted: [W]=WARN
[  152.898076][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  152.898090][ T6355] Call Trace:
[  152.898097][ T6355]  <TASK>
[  152.898170][ T6355]  __dump_stack+0x1d/0x30
[  152.898194][ T6355]  dump_stack_lvl+0x95/0xd0
[  152.898218][ T6355]  dump_stack+0x15/0x1b
[  152.898243][ T6355]  should_fail_ex+0x263/0x280
[  152.898278][ T6355]  should_fail+0xb/0x20
[  152.898342][ T6355]  should_fail_usercopy+0x1a/0x20
[  152.898382][ T6355]  _copy_from_user+0x1c/0xb0
[  152.898461][ T6355]  __sys_bpf+0x183/0x7e0
[  152.898622][ T6355]  __x64_sys_bpf+0x41/0x50
[  152.898651][ T6355]  x64_sys_call+0x10cb/0x3020
[  152.898676][ T6355]  do_syscall_64+0x12c/0x3b0
[  152.898794][ T6355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.898850][ T6355] RIP: 0033:0x7f121056cdd9
[  152.898866][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.898913][ T6355] RSP: 002b:00007f120efbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  152.898933][ T6355] RAX: ffffffffffffffda RBX: 00007f12107e5fa0 RCX: 00007f121056cdd9
[  152.898947][ T6355] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  152.898959][ T6355] RBP: 00007f120efbf090 R08: 0000000000000000 R09: 0000000000000000
[  152.898972][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.898987][ T6355] R13: 00007f12107e6038 R14: 00007f12107e5fa0 R15: 00007ffc0b32d978
[  152.899013][ T6355]  </TASK>
[  153.379301][ T6366] loop0: detected capacity change from 0 to 2048
[  153.419496][ T6366] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  153.555105][ T6373] loop2: detected capacity change from 0 to 512
[  153.670011][ T6373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  153.804833][ T6373] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.835: corrupted in-inode xattr: bad e_name length
[  153.858998][ T6385] atomic_op ffff8881189c1128 conn xmit_atomic 0000000000000000
[  154.488208][ T6373] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  154.490679][ T6373] EXT4-fs (loop2): get orphan inode failed
[  154.500780][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  154.500830][    C1] EXT4-fs (loop2): initial error at time 1778537994: ext4_iget_extra_inode:5128: inode 15
[  154.500898][    C1] EXT4-fs (loop2): last error at time 1778537994: ext4_iget_extra_inode:5128: inode 15
[  154.595403][ T6373] EXT4-fs (loop2): mount failed
[  155.291477][ T6408] loop1: detected capacity change from 0 to 512
[  155.310290][ T6408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.323078][ T6408] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.342795][   T28] audit: type=1400 audit(1778537995.306:1139): avc:  denied  { write } for  pid=6407 comm="syz.1.843" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  155.667552][   T28] audit: type=1400 audit(1778537995.336:1140): avc:  denied  { wake_alarm } for  pid=6405 comm="syz.5.842" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  155.720159][ T6419] xfrm0 speed is unknown, defaulting to 1000
[  155.779574][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  155.863124][ T6426] loop0: detected capacity change from 0 to 512
[  155.898355][ T6426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  155.939806][ T6426] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.849: invalid indirect mapped block 4294967295 (level 0)
[  155.963676][ T6426] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  155.964263][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  155.979944][    C0] EXT4-fs (loop0): initial error at time 1778537995: ext4_free_branches:1023: inode 16
[  155.989653][    C0] EXT4-fs (loop0): last error at time 1778537995: ext4_free_branches:1023: inode 16
[  156.002062][ T6426] EXT4-fs (loop0): Remounting filesystem read-only
[  156.018008][ T6426] EXT4-fs (loop0): 1 orphan inode deleted
[  156.033998][ T6426] EXT4-fs (loop0): 1 truncate cleaned up
[  156.043994][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.082411][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.105306][ T6430] loop1: detected capacity change from 0 to 256
[  156.659591][   T28] audit: type=1400 audit(1778537996.466:1141): avc:  denied  { mount } for  pid=6431 comm="syz.2.851" name="/" dev="rpc_pipefs" ino=17584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  157.429063][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.951981][ T6437] loop1: detected capacity change from 0 to 1764
[  158.112164][ T6452] FAULT_INJECTION: forcing a failure.
[  158.112164][ T6452] name failslab, interval 1, probability 0, space 0, times 0
[  158.125002][ T6452] CPU: 0 UID: 0 PID: 6452 Comm: syz.0.856 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  158.125048][ T6452] Tainted: [W]=WARN
[  158.125057][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  158.125071][ T6452] Call Trace:
[  158.125078][ T6452]  <TASK>
[  158.125087][ T6452]  __dump_stack+0x1d/0x30
[  158.125158][ T6452]  dump_stack_lvl+0x95/0xd0
[  158.125180][ T6452]  dump_stack+0x15/0x1b
[  158.125246][ T6452]  should_fail_ex+0x263/0x280
[  158.125274][ T6452]  ? __pfx_sock_alloc_inode+0x10/0x10
[  158.125309][ T6452]  should_failslab+0x8c/0xb0
[  158.125367][ T6452]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  158.125400][ T6452]  ? sock_alloc_inode+0x36/0xf0
[  158.125442][ T6452]  ? selinux_socket_create+0xfd/0x180
[  158.125505][ T6452]  ? __pfx_sock_alloc_inode+0x10/0x10
[  158.125537][ T6452]  sock_alloc_inode+0x36/0xf0
[  158.125645][ T6452]  alloc_inode+0x40/0x170
[  158.125717][ T6452]  __sock_create+0x120/0x580
[  158.125807][ T6452]  __sys_socketpair+0x16f/0x420
[  158.125856][ T6452]  ? ksys_write+0x194/0x1a0
[  158.125929][ T6452]  __x64_sys_socketpair+0x52/0x60
[  158.125971][ T6452]  x64_sys_call+0x2de5/0x3020
[  158.125996][ T6452]  do_syscall_64+0x12c/0x3b0
[  158.126043][ T6452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.126080][ T6452] RIP: 0033:0x7fd17602cdd9
[  158.126100][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.126124][ T6452] RSP: 002b:00007fd174a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  158.126248][ T6452] RAX: ffffffffffffffda RBX: 00007fd1762a6180 RCX: 00007fd17602cdd9
[  158.126265][ T6452] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e
[  158.126278][ T6452] RBP: 00007fd174a45090 R08: 0000000000000000 R09: 0000000000000000
[  158.126290][ T6452] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  158.126304][ T6452] R13: 00007fd1762a6218 R14: 00007fd1762a6180 R15: 00007ffd902fca98
[  158.126331][ T6452]  </TASK>
[  158.126457][ T6452] socket: no more sockets
[  158.372877][ T6437] iso9660: Corrupted directory entry in block 2 of inode 1920
[  158.419546][ T6461] loop0: detected capacity change from 0 to 512
[  158.475588][ T6463] loop5: detected capacity change from 0 to 512
[  158.503184][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.531747][ T6461] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.569269][ T6463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.593703][ T6463] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.597105][   T28] audit: type=1400 audit(1778537998.556:1142): avc:  denied  { write } for  pid=6460 comm="syz.0.861" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  158.665204][   T28] audit: type=1400 audit(1778537998.596:1143): avc:  denied  { write } for  pid=6462 comm="syz.5.860" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.020085][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.267102][ T4340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.369646][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'.
[  159.438403][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.868'.
[  159.597511][ T6469] loop4: detected capacity change from 0 to 1764
[  159.640190][ T6469] iso9660: Corrupted directory entry in block 2 of inode 1920
[  159.700176][ T6501] FAULT_INJECTION: forcing a failure.
[  159.700176][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.744382][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.2.873 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  159.744421][ T6501] Tainted: [W]=WARN
[  159.744430][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  159.744482][ T6501] Call Trace:
[  159.744490][ T6501]  <TASK>
[  159.744498][ T6501]  __dump_stack+0x1d/0x30
[  159.744525][ T6501]  dump_stack_lvl+0x95/0xd0
[  159.744551][ T6501]  dump_stack+0x15/0x1b
[  159.744639][ T6501]  should_fail_ex+0x263/0x280
[  159.744708][ T6501]  should_fail+0xb/0x20
[  159.744739][ T6501]  should_fail_usercopy+0x1a/0x20
[  159.744773][ T6501]  _copy_from_user+0x1c/0xb0
[  159.744830][ T6501]  ___sys_sendmsg+0xc1/0x1e0
[  159.744880][ T6501]  __x64_sys_sendmsg+0xd4/0x160
[  159.744908][ T6501]  x64_sys_call+0x194c/0x3020
[  159.745001][ T6501]  do_syscall_64+0x12c/0x3b0
[  159.745044][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.745066][ T6501] RIP: 0033:0x7f121056cdd9
[  159.745161][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.745243][ T6501] RSP: 002b:00007f120efbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.745269][ T6501] RAX: ffffffffffffffda RBX: 00007f12107e5fa0 RCX: 00007f121056cdd9
[  159.745288][ T6501] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  159.745395][ T6501] RBP: 00007f120efbf090 R08: 0000000000000000 R09: 0000000000000000
[  159.745412][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.745462][ T6501] R13: 00007f12107e6038 R14: 00007f12107e5fa0 R15: 00007ffc0b32d978
[  159.745522][ T6501]  </TASK>
[  159.979815][   T28] audit: type=1400 audit(1778537999.946:1144): avc:  denied  { connect } for  pid=6505 comm="syz.2.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  160.084074][ T6481] loop0: detected capacity change from 0 to 1764
[  160.107666][   T28] audit: type=1400 audit(1778537999.966:1145): avc:  denied  { write } for  pid=6505 comm="syz.2.875" laddr=127.0.0.1 lport=38559 faddr=127.0.0.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  160.170241][ T6481] iso9660: Corrupted directory entry in block 2 of inode 1920
[  160.200065][ T6513] loop4: detected capacity change from 0 to 512
[  160.321088][   T28] audit: type=1400 audit(1778538000.176:1146): avc:  denied  { ioctl } for  pid=6505 comm="syz.2.875" path="socket:[17072]" dev="sockfs" ino=17072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  160.347675][ T6513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.408421][ T6513] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.420762][ T6521] FAULT_INJECTION: forcing a failure.
[  160.420762][ T6521] name failslab, interval 1, probability 0, space 0, times 0
[  160.433470][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.1.877 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  160.433510][ T6521] Tainted: [W]=WARN
[  160.433519][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  160.433560][ T6521] Call Trace:
[  160.433567][ T6521]  <TASK>
[  160.433575][ T6521]  __dump_stack+0x1d/0x30
[  160.433604][ T6521]  dump_stack_lvl+0x95/0xd0
[  160.433632][ T6521]  dump_stack+0x15/0x1b
[  160.433656][ T6521]  should_fail_ex+0x263/0x280
[  160.433741][ T6521]  ? alloc_pipe_info+0xad/0x340
[  160.433829][ T6521]  should_failslab+0x8c/0xb0
[  160.433866][ T6521]  __kmalloc_cache_noprof+0x5f/0x400
[  160.433914][ T6521]  alloc_pipe_info+0xad/0x340
[  160.434005][ T6521]  splice_direct_to_actor+0x591/0x670
[  160.434046][ T6521]  ? __file_has_perm+0x3d9/0x430
[  160.434070][ T6521]  ? __pfx_direct_splice_actor+0x10/0x10
[  160.434183][ T6521]  ? selinux_file_permission+0x2ef/0x320
[  160.434216][ T6521]  do_splice_direct+0x119/0x1a0
[  160.434263][ T6521]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  160.434340][ T6521]  do_sendfile+0x382/0x650
[  160.434443][ T6521]  __x64_sys_sendfile64+0x105/0x150
[  160.434482][ T6521]  x64_sys_call+0x2dc4/0x3020
[  160.434506][ T6521]  do_syscall_64+0x12c/0x3b0
[  160.434600][ T6521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.434629][ T6521] RIP: 0033:0x7f5f5fc7cdd9
[  160.434647][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.434666][ T6521] RSP: 002b:00007f5f5e695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  160.434714][ T6521] RAX: ffffffffffffffda RBX: 00007f5f5fef6180 RCX: 00007f5f5fc7cdd9
[  160.434732][ T6521] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  160.434748][ T6521] RBP: 00007f5f5e695090 R08: 0000000000000000 R09: 0000000000000000
[  160.434764][ T6521] R10: 001000000000000a R11: 0000000000000246 R12: 0000000000000001
[  160.434781][ T6521] R13: 00007f5f5fef6218 R14: 00007f5f5fef6180 R15: 00007ffe821c0fc8
[  160.434828][ T6521]  </TASK>
[  160.712045][   T28] audit: type=1400 audit(1778538000.676:1147): avc:  denied  { write } for  pid=6512 comm="syz.4.876" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  160.966357][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.379006][ T6532] FAULT_INJECTION: forcing a failure.
[  161.379006][ T6532] name failslab, interval 1, probability 0, space 0, times 0
[  161.391805][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.1.881 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  161.391842][ T6532] Tainted: [W]=WARN
[  161.391848][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  161.391894][ T6532] Call Trace:
[  161.391901][ T6532]  <TASK>
[  161.391910][ T6532]  __dump_stack+0x1d/0x30
[  161.391941][ T6532]  dump_stack_lvl+0x95/0xd0
[  161.391969][ T6532]  dump_stack+0x15/0x1b
[  161.392060][ T6532]  should_fail_ex+0x263/0x280
[  161.392094][ T6532]  should_failslab+0x8c/0xb0
[  161.392202][ T6532]  __kmalloc_noprof+0xb8/0x4d0
[  161.392277][ T6532]  ? tls_get_rec+0x75/0x410
[  161.392310][ T6532]  tls_get_rec+0x75/0x410
[  161.392342][ T6532]  tls_sw_sendmsg+0x33c/0x1520
[  161.392443][ T6532]  ? path_openat+0x1b01/0x2050
[  161.392474][ T6532]  ? avc_has_perm+0x101/0x190
[  161.392517][ T6532]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  161.392638][ T6532]  ? __pfx_inet6_sendmsg+0x10/0x10
[  161.392679][ T6532]  inet6_sendmsg+0xc5/0xd0
[  161.392716][ T6532]  __sys_sendto+0x325/0x490
[  161.392748][ T6532]  __x64_sys_sendto+0x76/0x90
[  161.392812][ T6532]  x64_sys_call+0x2d35/0x3020
[  161.392853][ T6532]  do_syscall_64+0x12c/0x3b0
[  161.392889][ T6532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.392917][ T6532] RIP: 0033:0x7f5f5fc7cdd9
[  161.392932][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.392956][ T6532] RSP: 002b:00007f5f5e6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  161.393035][ T6532] RAX: ffffffffffffffda RBX: 00007f5f5fef5fa0 RCX: 00007f5f5fc7cdd9
[  161.393052][ T6532] RDX: 000000000000000f RSI: 0000200000000240 RDI: 0000000000000003
[  161.393068][ T6532] RBP: 00007f5f5e6d7090 R08: 0000000000000000 R09: 0000000000000000
[  161.393084][ T6532] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001
[  161.393099][ T6532] R13: 00007f5f5fef6038 R14: 00007f5f5fef5fa0 R15: 00007ffe821c0fc8
[  161.393118][ T6532]  </TASK>
[  161.658260][ T6537] netdevsim netdevsim1: Direct firmware load for   failed with error -2
[  161.830994][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  161.927953][   T28] audit: type=1400 audit(1778538001.896:1148): avc:  denied  { name_bind } for  pid=6534 comm="syz.0.880" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  162.108868][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[  162.425771][ T6554] loop5: detected capacity change from 0 to 1764
[  162.451916][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811a8b6600: rx timeout, send abort
[  162.462464][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a8b6600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  162.480459][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b7e7a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  162.515269][ T6548] iso9660: Corrupted directory entry in block 2 of inode 1920
[  162.690034][ T6560] loop1: detected capacity change from 0 to 512
[  162.732609][ T6556] bridge0: port 1(gretap0) entered blocking state
[  162.739397][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.747290][ T6556] bridge0: port 1(gretap0) entered disabled state
[  162.759934][ T6560] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.790816][   T28] audit: type=1400 audit(1778538002.756:1149): avc:  denied  { write } for  pid=6559 comm="syz.1.889" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  162.824295][ T6556] gretap0: entered allmulticast mode
[  162.893094][ T6569] loop4: detected capacity change from 0 to 256
[  162.918321][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.965343][ T6556] gretap0: entered promiscuous mode
[  162.999714][ T6575] loop1: detected capacity change from 0 to 256
[  163.004841][ T6556] bridge0: port 1(gretap0) entered blocking state
[  163.013717][ T6556] bridge0: port 1(gretap0) entered forwarding state
[  163.207973][ T6585] netdevsim netdevsim4: Direct firmware load for   failed with error -2
[  163.790212][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'.
[  163.837044][ T6603] FAULT_INJECTION: forcing a failure.
[  163.837044][ T6603] name failslab, interval 1, probability 0, space 0, times 0
[  163.860878][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.0.897 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  163.860928][ T6603] Tainted: [W]=WARN
[  163.860942][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  163.860956][ T6603] Call Trace:
[  163.860964][ T6603]  <TASK>
[  163.860973][ T6603]  __dump_stack+0x1d/0x30
[  163.861044][ T6603]  dump_stack_lvl+0x95/0xd0
[  163.861066][ T6603]  dump_stack+0x15/0x1b
[  163.861084][ T6603]  should_fail_ex+0x263/0x280
[  163.861120][ T6603]  ? __pfx_sock_alloc_inode+0x10/0x10
[  163.861215][ T6603]  should_failslab+0x8c/0xb0
[  163.861253][ T6603]  kmem_cache_alloc_lru_noprof+0x6c/0x400
[  163.861294][ T6603]  ? sock_alloc_inode+0x36/0xf0
[  163.861324][ T6603]  ? __pfx_sock_alloc_inode+0x10/0x10
[  163.861424][ T6603]  sock_alloc_inode+0x36/0xf0
[  163.861460][ T6603]  alloc_inode+0x40/0x170
[  163.861506][ T6603]  do_accept+0xa0/0x390
[  163.861538][ T6603]  ? _raw_spin_lock+0x52/0xa0
[  163.861609][ T6603]  __sys_accept4+0xbe/0x170
[  163.861766][ T6603]  __x64_sys_accept4+0x51/0x60
[  163.861877][ T6603]  x64_sys_call+0x48d/0x3020
[  163.861909][ T6603]  do_syscall_64+0x12c/0x3b0
[  163.861947][ T6603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.861983][ T6603] RIP: 0033:0x7fd17602cdd9
[  163.862030][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.862048][ T6603] RSP: 002b:00007fd174a45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  163.862068][ T6603] RAX: ffffffffffffffda RBX: 00007fd1762a6180 RCX: 00007fd17602cdd9
[  163.862082][ T6603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  163.862094][ T6603] RBP: 00007fd174a45090 R08: 0000000000000000 R09: 0000000000000000
[  163.862106][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.862187][ T6603] R13: 00007fd1762a6218 R14: 00007fd1762a6180 R15: 00007ffd902fca98
[  163.862211][ T6603]  </TASK>
[  164.209872][   T28] audit: type=1326 audit(1778538004.176:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.236638][   T28] audit: type=1326 audit(1778538004.176:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.277535][   T28] audit: type=1326 audit(1778538004.176:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.314042][ T6631] loop4: detected capacity change from 0 to 512
[  164.320638][   T28] audit: type=1326 audit(1778538004.176:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.320719][   T28] audit: type=1326 audit(1778538004.176:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.320777][   T28] audit: type=1326 audit(1778538004.176:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.405816][   T28] audit: type=1326 audit(1778538004.176:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.432123][   T28] audit: type=1326 audit(1778538004.176:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f5fc7cdd9 code=0x7ffc0000
[  164.467022][ T6631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.519911][ T6631] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.580235][ T6643] loop0: detected capacity change from 0 to 128
[  164.587193][ T6643] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  164.600014][ T6643] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  164.627630][ T6643] tmpfs: Bad value for 'mpol'
[  164.651594][ T4476] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  164.687344][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.712902][ T6646] loop0: detected capacity change from 0 to 512
[  164.747059][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.765353][ T6646] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.939951][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.415722][ T6672] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  165.431638][ T6641] loop1: detected capacity change from 0 to 1764
[  165.448652][ T6673] loop4: detected capacity change from 0 to 256
[  165.458506][ T6672] 8021q: adding VLAN 0 to HW filter on device bond14
[  165.495963][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  165.507696][ T6641] iso9660: Corrupted directory entry in block 2 of inode 1920
[  165.532482][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.917'.
[  165.627741][ T6684] loop4: detected capacity change from 0 to 256
[  165.675771][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  165.738348][ T6688] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  165.772067][ T6688] EXT4-fs (loop2): 1 truncate cleaned up
[  165.785279][ T6688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.154525][ T6713] bond15: entered promiscuous mode
[  166.168749][ T6713] 8021q: adding VLAN 0 to HW filter on device bond15
[  166.596634][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.693613][ T6722] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372)
[  166.762155][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'.
[  167.174628][ T6724] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  167.429278][ T6724] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.930: invalid indirect mapped block 4294967295 (level 0)
[  167.479450][ T6724] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  167.484282][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  167.499957][    C0] EXT4-fs (loop4): initial error at time 1778538007: ext4_free_branches:1023: inode 16
[  167.509679][    C0] EXT4-fs (loop4): last error at time 1778538007: ext4_free_branches:1023: inode 16
[  167.519462][ T6724] EXT4-fs (loop4): Remounting filesystem read-only
[  167.535108][ T6724] EXT4-fs (loop4): 1 orphan inode deleted
[  167.544440][ T6724] EXT4-fs (loop4): 1 truncate cleaned up
[  167.571717][ T6724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.929369][ T6739] FAULT_INJECTION: forcing a failure.
[  167.929369][ T6739] name failslab, interval 1, probability 0, space 0, times 0
[  167.942163][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.2.933 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  167.942213][ T6739] Tainted: [W]=WARN
[  167.942222][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  167.942294][ T6739] Call Trace:
[  167.942303][ T6739]  <TASK>
[  167.942313][ T6739]  __dump_stack+0x1d/0x30
[  167.942345][ T6739]  dump_stack_lvl+0x95/0xd0
[  167.942371][ T6739]  dump_stack+0x15/0x1b
[  167.942399][ T6739]  should_fail_ex+0x263/0x280
[  167.942428][ T6739]  should_failslab+0x8c/0xb0
[  167.942470][ T6739]  __kmalloc_noprof+0xb8/0x4d0
[  167.942584][ T6739]  ? tls_get_rec+0x75/0x410
[  167.942623][ T6739]  tls_get_rec+0x75/0x410
[  167.942666][ T6739]  tls_sw_sendmsg+0x33c/0x1520
[  167.942797][ T6739]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  167.942834][ T6739]  ? __pfx_inet6_sendmsg+0x10/0x10
[  167.942865][ T6739]  inet6_sendmsg+0xc5/0xd0
[  167.942990][ T6739]  __sys_sendto+0x325/0x490
[  167.943029][ T6739]  __x64_sys_sendto+0x76/0x90
[  167.943056][ T6739]  x64_sys_call+0x2d35/0x3020
[  167.943084][ T6739]  do_syscall_64+0x12c/0x3b0
[  167.943163][ T6739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.943185][ T6739] RIP: 0033:0x7f121056cdd9
[  167.943328][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.943346][ T6739] RSP: 002b:00007f120ef7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  167.943366][ T6739] RAX: ffffffffffffffda RBX: 00007f12107e6180 RCX: 00007f121056cdd9
[  167.943383][ T6739] RDX: ffffffffffffff69 RSI: 0000200000000240 RDI: 0000000000000003
[  167.943401][ T6739] RBP: 00007f120ef7d090 R08: 0000000000000000 R09: 0000000000000000
[  167.943418][ T6739] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001
[  167.943433][ T6739] R13: 00007f12107e6218 R14: 00007f12107e6180 R15: 00007ffc0b32d978
[  167.943474][ T6739]  </TASK>
[  168.424870][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.454755][ T6735] syz.0.928 (6735) used greatest stack depth: 8464 bytes left
[  168.536432][ T6741] set_capacity_and_notify: 3 callbacks suppressed
[  168.536965][ T6741] loop4: detected capacity change from 0 to 164
[  168.591167][ T6726] loop1: detected capacity change from 0 to 1764
[  168.621050][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'.
[  168.678147][ T6741] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82
[  168.695195][ T6726] iso9660: Corrupted directory entry in block 2 of inode 1920
[  168.835178][ T6741] loop4: detected capacity change from 0 to 1024
[  168.889815][ T6741] EXT4-fs (loop4): inodes count not valid: 8192 vs 32
[  168.960977][ T6755] FAULT_INJECTION: forcing a failure.
[  168.960977][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.999824][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.2.939 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  168.999864][ T6755] Tainted: [W]=WARN
[  168.999874][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  168.999890][ T6755] Call Trace:
[  168.999898][ T6755]  <TASK>
[  168.999907][ T6755]  __dump_stack+0x1d/0x30
[  168.999971][ T6755]  dump_stack_lvl+0x95/0xd0
[  168.999997][ T6755]  dump_stack+0x15/0x1b
[  169.000092][ T6755]  should_fail_ex+0x263/0x280
[  169.000128][ T6755]  should_fail+0xb/0x20
[  169.000160][ T6755]  should_fail_usercopy+0x1a/0x20
[  169.000238][ T6755]  _copy_from_user+0x1c/0xb0
[  169.000277][ T6755]  ___sys_sendmsg+0xc1/0x1e0
[  169.000375][ T6755]  __x64_sys_sendmsg+0xd4/0x160
[  169.000406][ T6755]  x64_sys_call+0x194c/0x3020
[  169.000491][ T6755]  do_syscall_64+0x12c/0x3b0
[  169.000526][ T6755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.000548][ T6755] RIP: 0033:0x7f121056cdd9
[  169.000596][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.000640][ T6755] RSP: 002b:00007f120efbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.000665][ T6755] RAX: ffffffffffffffda RBX: 00007f12107e5fa0 RCX: 00007f121056cdd9
[  169.000682][ T6755] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  169.000694][ T6755] RBP: 00007f120efbf090 R08: 0000000000000000 R09: 0000000000000000
[  169.000717][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.000732][ T6755] R13: 00007f12107e6038 R14: 00007f12107e5fa0 R15: 00007ffc0b32d978
[  169.000757][ T6755]  </TASK>
[  169.274459][ T6761] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.940'.
[  169.325040][ T6761] netlink: 'syz.1.940': attribute type 3 has an invalid length.
[  169.341808][ T6761] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.940'.
[  169.444978][ T6767] loop2: detected capacity change from 0 to 256
[  169.454330][ T6767] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372)
[  169.493789][ T6770] FAULT_INJECTION: forcing a failure.
[  169.493789][ T6770] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.524414][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.1.943 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  169.524453][ T6770] Tainted: [W]=WARN
[  169.524463][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  169.524478][ T6770] Call Trace:
[  169.524484][ T6770]  <TASK>
[  169.524491][ T6770]  __dump_stack+0x1d/0x30
[  169.524521][ T6770]  dump_stack_lvl+0x95/0xd0
[  169.524603][ T6770]  dump_stack+0x15/0x1b
[  169.524628][ T6770]  should_fail_ex+0x263/0x280
[  169.524664][ T6770]  should_fail+0xb/0x20
[  169.524697][ T6770]  should_fail_usercopy+0x1a/0x20
[  169.524740][ T6770]  _copy_from_user+0x1c/0xb0
[  169.524774][ T6770]  xsk_setsockopt+0x308/0x640
[  169.524859][ T6770]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.524895][ T6770]  __sys_setsockopt+0x184/0x200
[  169.524925][ T6770]  __x64_sys_setsockopt+0x64/0x80
[  169.524955][ T6770]  x64_sys_call+0x2327/0x3020
[  169.525055][ T6770]  do_syscall_64+0x12c/0x3b0
[  169.525104][ T6770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.525141][ T6770] RIP: 0033:0x7f5f5fc7cdd9
[  169.525181][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.525199][ T6770] RSP: 002b:00007f5f5e6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  169.525223][ T6770] RAX: ffffffffffffffda RBX: 00007f5f5fef6090 RCX: 00007f5f5fc7cdd9
[  169.525248][ T6770] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006
[  169.525262][ T6770] RBP: 00007f5f5e6b6090 R08: 0000000000000020 R09: 0000000000000000
[  169.525279][ T6770] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  169.525296][ T6770] R13: 00007f5f5fef6128 R14: 00007f5f5fef6090 R15: 00007ffe821c0fc8
[  169.525321][ T6770]  </TASK>
[  169.753721][ T6772] loop2: detected capacity change from 0 to 512
[  169.788605][   T28] kauditd_printk_skb: 134 callbacks suppressed
[  169.788622][   T28] audit: type=1400 audit(1778538009.756:1292): avc:  denied  { read } for  pid=6763 comm="syz.5.941" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  169.820220][ T6772] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  169.848020][ T6776] xfrm0 speed is unknown, defaulting to 1000
[  169.857043][ T6772] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  169.874249][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  169.880729][    C0] EXT4-fs (loop2): initial error at time 1778538009: mb_free_blocks:2049: inode 11: block 64
[  169.890974][    C0] EXT4-fs (loop2): last error at time 1778538009: mb_free_blocks:2049: inode 11: block 64
[  169.921014][ T6772] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.944: corrupted inode contents
[  169.943389][ T6772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  169.945587][ T6772] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.944: mark_inode_dirty error
[  169.984301][ T6772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  169.984629][ T6772] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.944: invalid indirect mapped block 1 (level 1)
[  170.018523][ T6772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  170.018696][ T6772] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.944: corrupted inode contents
[  170.064404][ T6772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  170.064601][ T6772] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  170.091736][ T6772] loop2: lost filesystem error report for type 5 error -117
[  170.091882][ T6772] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.944: corrupted inode contents
[  170.113903][ T6772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  170.114156][ T6772] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.944: mark_inode_dirty error
[  170.134702][ T6772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  170.134963][ T6772] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  170.159964][ T6772] loop2: lost filesystem error report for type 5 error -117
[  170.160192][ T6772] EXT4-fs (loop2): 1 truncate cleaned up
[  170.174520][ T6772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.206699][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'.
[  170.223970][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'.
[  170.267151][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.300600][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'.
[  170.396769][   T28] audit: type=1400 audit(1778538010.366:1293): avc:  denied  { associate } for  pid=6792 comm="syz.5.951" name="bus" dev="tmpfs" ino=676 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mail_spool_t:s0"
[  170.445575][ T6785] loop0: detected capacity change from 0 to 512
[  170.467109][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.515256][   T28] audit: type=1400 audit(1778538010.486:1294): avc:  denied  { rmdir } for  pid=4340 comm="syz-executor" name="bus" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:mail_spool_t:s0"
[  170.521959][ T6785] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.948: invalid indirect mapped block 4294967295 (level 0)
[  170.565685][ T6785] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  170.568057][ T6785] EXT4-fs (loop0): Remounting filesystem read-only
[  170.577518][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  170.577570][    C1] EXT4-fs (loop0): initial error at time 1778538010: ext4_free_branches:1023: inode 16
[  170.577699][    C1] EXT4-fs (loop0): last error at time 1778538010: ext4_free_branches:1023: inode 16
[  170.682717][ T6785] EXT4-fs (loop0): 1 orphan inode deleted
[  170.693742][ T6800] loop1: detected capacity change from 0 to 512
[  170.705815][ T6785] EXT4-fs (loop0): 1 truncate cleaned up
[  170.750913][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.790862][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.853034][ T6800] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.899493][   T28] audit: type=1400 audit(1778538010.866:1295): avc:  denied  { write } for  pid=6799 comm="syz.1.954" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  170.999688][ T6791] loop2: detected capacity change from 0 to 1764
[  171.042651][ T6791] iso9660: Corrupted directory entry in block 2 of inode 1920
[  171.051465][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.084718][ T6810] FAULT_INJECTION: forcing a failure.
[  171.084718][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.114324][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.956 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  171.114364][ T6810] Tainted: [W]=WARN
[  171.114371][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  171.114458][ T6810] Call Trace:
[  171.114465][ T6810]  <TASK>
[  171.114473][ T6810]  __dump_stack+0x1d/0x30
[  171.114499][ T6810]  dump_stack_lvl+0x95/0xd0
[  171.114520][ T6810]  dump_stack+0x15/0x1b
[  171.114540][ T6810]  should_fail_ex+0x263/0x280
[  171.114648][ T6810]  should_fail+0xb/0x20
[  171.114678][ T6810]  should_fail_usercopy+0x1a/0x20
[  171.114786][ T6810]  _copy_from_user+0x1c/0xb0
[  171.114842][ T6810]  perf_copy_attr+0x145/0x610
[  171.114895][ T6810]  ? get_pid_task+0x96/0xd0
[  171.114932][ T6810]  __se_sys_perf_event_open+0x67/0x1270
[  171.114961][ T6810]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  171.114993][ T6810]  ? vfs_write+0x86e/0x9f0
[  171.115092][ T6810]  ? __rcu_read_unlock+0x4e/0x70
[  171.115127][ T6810]  __x64_sys_perf_event_open+0x67/0x80
[  171.115166][ T6810]  x64_sys_call+0x2789/0x3020
[  171.115191][ T6810]  do_syscall_64+0x12c/0x3b0
[  171.115302][ T6810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.115325][ T6810] RIP: 0033:0x7f5f5fc7cdd9
[  171.115363][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.115425][ T6810] RSP: 002b:00007f5f5e6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  171.115451][ T6810] RAX: ffffffffffffffda RBX: 00007f5f5fef5fa0 RCX: 00007f5f5fc7cdd9
[  171.115531][ T6810] RDX: 0000004000000000 RSI: 0000000000000000 RDI: 0000200000000500
[  171.115544][ T6810] RBP: 00007f5f5e6d7090 R08: 0000000000000008 R09: 0000000000000000
[  171.115558][ T6810] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  171.115571][ T6810] R13: 00007f5f5fef6038 R14: 00007f5f5fef5fa0 R15: 00007ffe821c0fc8
[  171.115593][ T6810]  </TASK>
[  171.328492][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.407532][ T6811] xfrm0 speed is unknown, defaulting to 1000
[  171.511377][ T6819] xfrm0 speed is unknown, defaulting to 1000
[  171.558501][   T28] audit: type=1400 audit(1778538011.526:1296): avc:  denied  { listen } for  pid=6822 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  171.655826][ T6826] __nla_validate_parse: 1 callbacks suppressed
[  171.655861][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'.
[  171.805223][ T6836] FAULT_INJECTION: forcing a failure.
[  171.805223][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.819805][ T6836] CPU: 0 UID: 0 PID: 6836 Comm: syz.4.965 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  171.819909][ T6836] Tainted: [W]=WARN
[  171.819927][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  171.819944][ T6836] Call Trace:
[  171.819953][ T6836]  <TASK>
[  171.819963][ T6836]  __dump_stack+0x1d/0x30
[  171.820051][ T6836]  dump_stack_lvl+0x95/0xd0
[  171.820074][ T6836]  dump_stack+0x15/0x1b
[  171.820099][ T6836]  should_fail_ex+0x263/0x280
[  171.820138][ T6836]  should_fail+0xb/0x20
[  171.820246][ T6836]  should_fail_usercopy+0x1a/0x20
[  171.820351][ T6836]  _copy_from_user+0x1c/0xb0
[  171.820461][ T6836]  ___sys_sendmsg+0xc1/0x1e0
[  171.820551][ T6836]  __x64_sys_sendmsg+0xd4/0x160
[  171.820586][ T6836]  x64_sys_call+0x194c/0x3020
[  171.820618][ T6836]  do_syscall_64+0x12c/0x3b0
[  171.820726][ T6836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.820757][ T6836] RIP: 0033:0x7f141628cdd9
[  171.820776][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.820795][ T6836] RSP: 002b:00007f1414cdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.820814][ T6836] RAX: ffffffffffffffda RBX: 00007f1416505fa0 RCX: 00007f141628cdd9
[  171.820828][ T6836] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  171.820933][ T6836] RBP: 00007f1414cdf090 R08: 0000000000000000 R09: 0000000000000000
[  171.820981][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.820998][ T6836] R13: 00007f1416506038 R14: 00007f1416505fa0 R15: 00007ffdd856e748
[  171.821067][ T6836]  </TASK>
[  172.031335][ T6838] loop1: detected capacity change from 0 to 512
[  172.070791][ T6838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.123843][ T6838] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.181057][   T28] audit: type=1400 audit(1778538012.146:1297): avc:  denied  { write } for  pid=6837 comm="syz.1.966" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  172.308682][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.356427][ T6830] xfrm0 speed is unknown, defaulting to 1000
[  172.411186][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'.
[  173.388863][ T6883] loop1: detected capacity change from 0 to 512
[  173.398368][ T6883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.398466][ T6883] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.404434][   T28] audit: type=1400 audit(1778538013.366:1298): avc:  denied  { write } for  pid=6882 comm="syz.1.982" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  173.480430][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'.
[  173.502432][ T6881] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  173.539183][ T6881] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  173.556840][ T6881] team0: Port device netdevsim2 added
[  173.579579][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'.
[  173.589914][ T6881] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  173.610633][ T6881] team0: Port device netdevsim2 removed
[  173.621831][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.636658][ T6881] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  173.648807][ T6895] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  173.648807][ T6895] The task syz.4.986 (6895) triggered the difference, watch for misbehavior.
[  173.668021][ T6881] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[  173.689117][ T6895] loop4: detected capacity change from 0 to 512
[  173.704076][ T6895] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  173.714204][ T6895] EXT4-fs (loop4): 1 truncate cleaned up
[  173.720437][ T6895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.174711][ T6910] FAULT_INJECTION: forcing a failure.
[  174.174711][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.187946][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.0.991 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  174.187989][ T6910] Tainted: [W]=WARN
[  174.187998][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  174.188015][ T6910] Call Trace:
[  174.188092][ T6910]  <TASK>
[  174.188101][ T6910]  __dump_stack+0x1d/0x30
[  174.188127][ T6910]  dump_stack_lvl+0x95/0xd0
[  174.188165][ T6910]  dump_stack+0x15/0x1b
[  174.188191][ T6910]  should_fail_ex+0x263/0x280
[  174.188230][ T6910]  should_fail+0xb/0x20
[  174.188262][ T6910]  should_fail_usercopy+0x1a/0x20
[  174.188319][ T6910]  _copy_from_user+0x1c/0xb0
[  174.188360][ T6910]  ___sys_sendmsg+0xc1/0x1e0
[  174.188404][ T6910]  __x64_sys_sendmsg+0xd4/0x160
[  174.188555][ T6910]  x64_sys_call+0x194c/0x3020
[  174.188606][ T6910]  do_syscall_64+0x12c/0x3b0
[  174.188653][ T6910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.188677][ T6910] RIP: 0033:0x7fd17602cdd9
[  174.188699][ T6910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.188798][ T6910] RSP: 002b:00007fd174a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.188892][ T6910] RAX: ffffffffffffffda RBX: 00007fd1762a5fa0 RCX: 00007fd17602cdd9
[  174.188911][ T6910] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b
[  174.188929][ T6910] RBP: 00007fd174a87090 R08: 0000000000000000 R09: 0000000000000000
[  174.188946][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.189005][ T6910] R13: 00007fd1762a6038 R14: 00007fd1762a5fa0 R15: 00007ffd902fca98
[  174.189033][ T6910]  </TASK>
[  174.364113][ T6920] loop1: detected capacity change from 0 to 256
[  174.482779][ T6924] loop0: detected capacity change from 0 to 512
[  174.507244][ T6928] netdevsim netdevsim5: Direct firmware load for   failed with error -2
[  174.521416][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.538600][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.542099][ T6928] xt_hashlimit: size too large, truncated to 1048576
[  174.573850][ T6924] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.636063][   T28] audit: type=1400 audit(1778538014.596:1299): avc:  denied  { write } for  pid=6923 comm="syz.0.998" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  174.837829][ T6934] loop2: detected capacity change from 0 to 1764
[  174.870771][   T28] audit: type=1400 audit(1778538014.836:1300): avc:  denied  { ioctl } for  pid=6925 comm="syz.1.997" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  175.041176][ T6934] iso9660: Corrupted directory entry in block 2 of inode 1920
[  175.050761][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.578060][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'.
[  175.631508][ T6958] FAULT_INJECTION: forcing a failure.
[  175.631508][ T6958] name failslab, interval 1, probability 0, space 0, times 0
[  175.644300][ T6958] CPU: 0 UID: 0 PID: 6958 Comm: syz.0.1002 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  175.644392][ T6958] Tainted: [W]=WARN
[  175.644430][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  175.644447][ T6958] Call Trace:
[  175.644456][ T6958]  <TASK>
[  175.644465][ T6958]  __dump_stack+0x1d/0x30
[  175.644558][ T6958]  dump_stack_lvl+0x95/0xd0
[  175.644642][ T6958]  dump_stack+0x15/0x1b
[  175.644661][ T6958]  should_fail_ex+0x263/0x280
[  175.644705][ T6958]  should_failslab+0x8c/0xb0
[  175.644742][ T6958]  kmem_cache_alloc_noprof+0x66/0x3f0
[  175.644774][ T6958]  ? ioctx_alloc+0xe3/0x4c0
[  175.644878][ T6958]  ioctx_alloc+0xe3/0x4c0
[  175.644966][ T6958]  __se_sys_io_setup+0x6b/0x1b0
[  175.644989][ T6958]  __x64_sys_io_setup+0x31/0x40
[  175.645010][ T6958]  x64_sys_call+0x24f1/0x3020
[  175.645059][ T6958]  do_syscall_64+0x12c/0x3b0
[  175.645097][ T6958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.645120][ T6958] RIP: 0033:0x7fd17602cdd9
[  175.645135][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.645176][ T6958] RSP: 002b:00007fd174a45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  175.645196][ T6958] RAX: ffffffffffffffda RBX: 00007fd1762a6180 RCX: 00007fd17602cdd9
[  175.645214][ T6958] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000004005
[  175.645307][ T6958] RBP: 00007fd174a45090 R08: 0000000000000000 R09: 0000000000000000
[  175.645355][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.645371][ T6958] R13: 00007fd1762a6218 R14: 00007fd1762a6180 R15: 00007ffd902fca98
[  175.645396][ T6958]  </TASK>
[  175.984816][ T6960] loop4: detected capacity change from 0 to 256
[  176.139466][ T6964] IPv6: Can't replace route, no match found
[  176.189045][ T6957] loop1: detected capacity change from 0 to 512
[  176.223754][ T6957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  176.243121][ T6970] loop4: detected capacity change from 0 to 512
[  176.300301][ T6977] netdevsim netdevsim5: Direct firmware load for   failed with error -2
[  176.316010][ T6977] xt_hashlimit: size too large, truncated to 1048576
[  176.329105][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'.
[  176.349348][ T6970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.378792][ T6957] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1005: invalid indirect mapped block 4294967295 (level 0)
[  176.394752][ T6957] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  176.397585][ T6970] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.399766][ T6957] EXT4-fs (loop1): Remounting filesystem read-only
[  176.407253][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  176.407302][    C1] EXT4-fs (loop1): initial error at time 1778538016: ext4_free_branches:1023: inode 16
[  176.407571][    C1] EXT4-fs (loop1): last error at time 1778538016: ext4_free_branches:1023: inode 16
[  176.456540][   T28] audit: type=1400 audit(1778538016.406:1301): avc:  denied  { write } for  pid=6969 comm="syz.4.1012" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  176.463525][ T6957] EXT4-fs (loop1): 1 orphan inode deleted
[  176.498353][ T6984] loop2: detected capacity change from 0 to 512
[  176.504865][ T6957] EXT4-fs (loop1): 1 truncate cleaned up
[  176.518720][ T6984] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  176.534207][ T6984] EXT4-fs (loop2): 1 truncate cleaned up
[  176.538938][ T6957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.545284][ T6984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.594426][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.763830][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.145258][ T6990] loop4: detected capacity change from 0 to 1764
[  177.207912][ T6990] iso9660: Corrupted directory entry in block 2 of inode 1920
[  177.332691][ T7013] Cannot find add_set index 0 as target
[  177.428739][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.965227][ T7018] loop0: detected capacity change from 0 to 4096
[  178.022344][ T7018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.057264][ T7017] xt_hashlimit: size too large, truncated to 1048576
[  178.075800][ T7018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.410012][   T28] audit: type=1400 audit(1778538018.376:1302): avc:  denied  { shutdown } for  pid=7024 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  178.420446][ T7025] Cannot find add_set index 0 as target
[  178.596439][ T7030] netdevsim netdevsim2: Direct firmware load for   failed with error -2
[  178.625430][ T7023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.804765][ T7023] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.924703][   T28] audit: type=1400 audit(1778538018.856:1303): avc:  denied  { write } for  pid=7022 comm="syz.1.1027" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  178.964387][ T7034] set_capacity_and_notify: 2 callbacks suppressed
[  178.964408][ T7034] loop4: detected capacity change from 0 to 256
[  179.071492][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.098808][ T7030] xt_hashlimit: size too large, truncated to 1048576
[  179.165672][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'.
[  179.227994][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.237047][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'.
[  179.253002][   T28] audit: type=1400 audit(1778538019.216:1304): avc:  denied  { cmd } for  pid=7043 comm="syz.5.1034" path="socket:[20038]" dev="sockfs" ino=20038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  179.311602][ T7047] loop4: detected capacity change from 0 to 512
[  179.340714][ T7047] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  179.387136][ T7047] EXT4-fs (loop4): 1 truncate cleaned up
[  179.405627][ T7047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.484099][ T7054] loop0: detected capacity change from 0 to 512
[  179.513347][ T7054] ext4: Unknown parameter 'noacl'
[  180.570388][ T7058] loop2: detected capacity change from 0 to 1764
[  180.688391][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.736340][ T7058] iso9660: Corrupted directory entry in block 2 of inode 1920
[  180.745550][ T7067] FAULT_INJECTION: forcing a failure.
[  180.745550][ T7067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.813741][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.1.1041 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  180.813780][ T7067] Tainted: [W]=WARN
[  180.813789][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  180.813803][ T7067] Call Trace:
[  180.813835][ T7067]  <TASK>
[  180.813845][ T7067]  __dump_stack+0x1d/0x30
[  180.813875][ T7067]  dump_stack_lvl+0x95/0xd0
[  180.813899][ T7067]  dump_stack+0x15/0x1b
[  180.813989][ T7067]  should_fail_ex+0x263/0x280
[  180.814026][ T7067]  should_fail+0xb/0x20
[  180.814106][ T7067]  should_fail_usercopy+0x1a/0x20
[  180.814180][ T7067]  _copy_from_user+0x1c/0xb0
[  180.814220][ T7067]  ___sys_sendmsg+0xc1/0x1e0
[  180.814261][ T7067]  __x64_sys_sendmsg+0xd4/0x160
[  180.814326][ T7067]  x64_sys_call+0x194c/0x3020
[  180.814357][ T7067]  do_syscall_64+0x12c/0x3b0
[  180.814408][ T7067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.814435][ T7067] RIP: 0033:0x7f5f5fc7cdd9
[  180.814455][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.814506][ T7067] RSP: 002b:00007f5f5e6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.814527][ T7067] RAX: ffffffffffffffda RBX: 00007f5f5fef5fa0 RCX: 00007f5f5fc7cdd9
[  180.814542][ T7067] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  180.814559][ T7067] RBP: 00007f5f5e6d7090 R08: 0000000000000000 R09: 0000000000000000
[  180.814614][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.814626][ T7067] R13: 00007f5f5fef6038 R14: 00007f5f5fef5fa0 R15: 00007ffe821c0fc8
[  180.814652][ T7067]  </TASK>
[  181.153763][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'.
[  181.507843][ T7082] loop4: detected capacity change from 0 to 256
[  181.533638][ T7089] netdevsim netdevsim1: Direct firmware load for   failed with error -2
[  181.542325][   T28] audit: type=1400 audit(1778538021.496:1305): avc:  denied  { accept } for  pid=7084 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  181.598888][ T7089] xt_hashlimit: size too large, truncated to 1048576
[  181.610777][ T7082] FAT-fs (loop4): unable to read block(17179869180) for building NFS inode
[  181.639730][   T28] audit: type=1400 audit(1778538021.606:1306): avc:  denied  { write } for  pid=7093 comm="syz.2.1051" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  181.663732][ T7097] random: crng reseeded on system resumption
[  181.724471][   T28] audit: type=1400 audit(1778538021.636:1307): avc:  denied  { open } for  pid=7093 comm="syz.2.1051" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  181.760744][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1052'.
[  181.779345][ T7103] loop2: detected capacity change from 0 to 512
[  181.797724][ T7106] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  181.828288][ T7103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.842555][ T7103] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.857429][   T28] audit: type=1400 audit(1778538021.826:1308): avc:  denied  { write } for  pid=7101 comm="syz.2.1055" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  181.995965][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.080641][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1058'.
[  182.176615][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'.
[  182.551569][ T7102] loop0: detected capacity change from 0 to 1764
[  182.605145][ T7102] iso9660: Corrupted directory entry in block 2 of inode 1920
[  182.899915][ T7132] loop0: detected capacity change from 0 to 256
[  182.935432][ T7132] FAT-fs (loop0): unable to read block(17179869180) for building NFS inode
[  182.962088][   T28] audit: type=1400 audit(1778538022.926:1309): avc:  denied  { read append } for  pid=7135 comm="syz.4.1065" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  183.056763][   T28] audit: type=1400 audit(1778538022.926:1310): avc:  denied  { open } for  pid=7135 comm="syz.4.1065" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  183.067248][ T7139] loop4: detected capacity change from 0 to 512
[  183.133364][ T7139] EXT4-fs (loop4): 1 truncate cleaned up
[  183.135516][   T28] audit: type=1400 audit(1778538022.926:1311): avc:  denied  { ioctl } for  pid=7135 comm="syz.4.1065" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  183.146711][ T7139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.183182][ T7139] EXT4-fs (loop4): shut down requested (2)
[  183.225925][   T28] audit: type=1400 audit(1778538023.186:1312): avc:  denied  { map } for  pid=7137 comm="syz.4.1068" path="socket:[20202]" dev="sockfs" ino=20202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  183.256072][ T7148] netdevsim netdevsim2: Direct firmware load for   failed with error -2
[  183.268274][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  183.286882][ T7148] xt_hashlimit: size too large, truncated to 1048576
[  183.302878][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  183.332635][ T7155] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  183.357934][ T7155] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  183.357963][   T28] audit: type=1400 audit(1778538023.326:1313): avc:  denied  { write } for  pid=7137 comm="syz.4.1068" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  183.388922][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=13
[  183.420491][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  183.422310][   T28] audit: type=1400 audit(1778538023.356:1314): avc:  denied  { unlink } for  pid=7137 comm="syz.4.1068" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  183.453917][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[  183.493360][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=13
[  183.525859][ T7139] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  183.641687][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.760808][ T7170] loop4: detected capacity change from 0 to 256
[  183.782657][ T7170] FAT-fs (loop4): unable to read block(17179869180) for building NFS inode
[  183.836965][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.877421][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.914836][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1079'.
[  183.974625][ T7177] FAULT_INJECTION: forcing a failure.
[  183.974625][ T7177] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.016020][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.0.1080 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  184.016060][ T7177] Tainted: [W]=WARN
[  184.016067][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  184.016080][ T7177] Call Trace:
[  184.016087][ T7177]  <TASK>
[  184.016095][ T7177]  __dump_stack+0x1d/0x30
[  184.016219][ T7177]  dump_stack_lvl+0x95/0xd0
[  184.016297][ T7177]  dump_stack+0x15/0x1b
[  184.016318][ T7177]  should_fail_ex+0x263/0x280
[  184.016401][ T7177]  should_fail+0xb/0x20
[  184.016434][ T7177]  should_fail_usercopy+0x1a/0x20
[  184.016501][ T7177]  _copy_from_user+0x1c/0xb0
[  184.016582][ T7177]  ___sys_sendmsg+0xc1/0x1e0
[  184.016639][ T7177]  __x64_sys_sendmsg+0xd4/0x160
[  184.016669][ T7177]  x64_sys_call+0x194c/0x3020
[  184.016693][ T7177]  do_syscall_64+0x12c/0x3b0
[  184.016732][ T7177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.016881][ T7177] RIP: 0033:0x7fd17602cdd9
[  184.016898][ T7177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.017125][ T7177] RSP: 002b:00007fd174a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.017152][ T7177] RAX: ffffffffffffffda RBX: 00007fd1762a5fa0 RCX: 00007fd17602cdd9
[  184.017181][ T7177] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  184.017199][ T7177] RBP: 00007fd174a87090 R08: 0000000000000000 R09: 0000000000000000
[  184.017216][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.017232][ T7177] R13: 00007fd1762a6038 R14: 00007fd1762a5fa0 R15: 00007ffd902fca98
[  184.017257][ T7177]  </TASK>
[  184.291044][ T7182] FAULT_INJECTION: forcing a failure.
[  184.291044][ T7182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.304311][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.4.1078 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  184.304350][ T7182] Tainted: [W]=WARN
[  184.304359][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  184.304372][ T7182] Call Trace:
[  184.304397][ T7182]  <TASK>
[  184.304408][ T7182]  __dump_stack+0x1d/0x30
[  184.304438][ T7182]  dump_stack_lvl+0x95/0xd0
[  184.304465][ T7182]  dump_stack+0x15/0x1b
[  184.304484][ T7182]  should_fail_ex+0x263/0x280
[  184.304535][ T7182]  should_fail+0xb/0x20
[  184.304563][ T7182]  should_fail_usercopy+0x1a/0x20
[  184.304601][ T7182]  _copy_to_user+0x20/0xa0
[  184.304637][ T7182]  simple_read_from_buffer+0xb5/0x130
[  184.304740][ T7182]  proc_fail_nth_read+0x10e/0x150
[  184.304781][ T7182]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  184.304814][ T7182]  vfs_read+0x1ab/0x7f0
[  184.304865][ T7182]  ? __rcu_read_unlock+0x4e/0x70
[  184.304966][ T7182]  ? __fget_files+0x184/0x1c0
[  184.304987][ T7182]  ? mutex_lock+0x57/0x90
[  184.305050][ T7182]  ksys_read+0xdc/0x1a0
[  184.305086][ T7182]  __x64_sys_read+0x40/0x50
[  184.305176][ T7182]  x64_sys_call+0x2886/0x3020
[  184.305205][ T7182]  do_syscall_64+0x12c/0x3b0
[  184.305261][ T7182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.305289][ T7182] RIP: 0033:0x7f141624d60e
[  184.305308][ T7182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  184.305331][ T7182] RSP: 002b:00007f1414c9cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.305440][ T7182] RAX: ffffffffffffffda RBX: 00007f1414c9d6c0 RCX: 00007f141624d60e
[  184.305459][ T7182] RDX: 000000000000000f RSI: 00007f1414c9d0a0 RDI: 0000000000000006
[  184.305476][ T7182] RBP: 00007f1414c9d090 R08: 0000000000000000 R09: 0000000000000000
[  184.305494][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.305508][ T7182] R13: 00007f1416506218 R14: 00007f1416506180 R15: 00007ffdd856e748
[  184.305544][ T7182]  </TASK>
[  184.558203][ T7184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1082'.
[  184.748309][ T7184] gretap0: left allmulticast mode
[  184.758220][ T7184] gretap0: left promiscuous mode
[  184.768645][ T7184] bridge0: port 3(gretap0) entered disabled state
[  184.857643][ T7184] bridge_slave_0: left allmulticast mode
[  184.864882][ T7184] bridge_slave_0: left promiscuous mode
[  184.880986][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.890935][ T7184] bridge_slave_1: left allmulticast mode
[  184.896998][ T7184] bridge_slave_1: left promiscuous mode
[  184.902869][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.913455][ T7184] bond0: (slave bond_slave_0): Releasing backup interface
[  184.924900][ T7184] bond0: (slave bond_slave_1): Releasing backup interface
[  184.973196][ T7184] team0: Port device team_slave_0 removed
[  185.002817][ T7195] xt_hashlimit: size too large, truncated to 1048576
[  185.007871][ T7184] team0: Port device team_slave_1 removed
[  185.040372][ T7184] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.061528][ T7184] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.083965][ T7184] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.094867][ T7204] FAULT_INJECTION: forcing a failure.
[  185.094867][ T7204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.100233][ T7184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.119927][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.5.1088 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  185.120038][ T7204] Tainted: [W]=WARN
[  185.120048][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  185.120062][ T7204] Call Trace:
[  185.120068][ T7204]  <TASK>
[  185.120076][ T7204]  __dump_stack+0x1d/0x30
[  185.120100][ T7204]  dump_stack_lvl+0x95/0xd0
[  185.120159][ T7204]  dump_stack+0x15/0x1b
[  185.120184][ T7204]  should_fail_ex+0x263/0x280
[  185.120216][ T7204]  should_fail+0xb/0x20
[  185.120240][ T7204]  should_fail_usercopy+0x1a/0x20
[  185.120327][ T7204]  _copy_from_user+0x1c/0xb0
[  185.120368][ T7204]  ___sys_sendmsg+0xc1/0x1e0
[  185.120490][ T7204]  __x64_sys_sendmsg+0xd4/0x160
[  185.120574][ T7204]  x64_sys_call+0x194c/0x3020
[  185.120605][ T7204]  do_syscall_64+0x12c/0x3b0
[  185.120670][ T7204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.120699][ T7204] RIP: 0033:0x7f96b64ecdd9
[  185.120800][ T7204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.120845][ T7204] RSP: 002b:00007f96b4f47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.120866][ T7204] RAX: ffffffffffffffda RBX: 00007f96b6765fa0 RCX: 00007f96b64ecdd9
[  185.120883][ T7204] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  185.120900][ T7204] RBP: 00007f96b4f47090 R08: 0000000000000000 R09: 0000000000000000
[  185.120942][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.120972][ T7204] R13: 00007f96b6766038 R14: 00007f96b6765fa0 R15: 00007ffed3741c28
[  185.120993][ T7204]  </TASK>
[  185.368564][ T7207] loop2: detected capacity change from 0 to 256
[  185.405738][ T7184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.455893][ T7193] netdevsim netdevsim4: Direct firmware load for   failed with error -2
[  185.474668][ T7196] syzkaller0: entered promiscuous mode
[  185.480563][ T7196] syzkaller0: entered allmulticast mode
[  185.499953][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.509369][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.682087][ T7224] loop0: detected capacity change from 0 to 256
[  185.783561][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=7219 comm=syz.2.1092
[  186.243321][ T7242] FAULT_INJECTION: forcing a failure.
[  186.243321][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.256970][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.5.1100 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  186.257049][ T7242] Tainted: [W]=WARN
[  186.257084][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  186.257135][ T7242] Call Trace:
[  186.257144][ T7242]  <TASK>
[  186.257155][ T7242]  __dump_stack+0x1d/0x30
[  186.257187][ T7242]  dump_stack_lvl+0x95/0xd0
[  186.257215][ T7242]  dump_stack+0x15/0x1b
[  186.257297][ T7242]  should_fail_ex+0x263/0x280
[  186.257336][ T7242]  should_fail+0xb/0x20
[  186.257369][ T7242]  should_fail_usercopy+0x1a/0x20
[  186.257442][ T7242]  _copy_to_user+0x20/0xa0
[  186.257485][ T7242]  simple_read_from_buffer+0xb5/0x130
[  186.257535][ T7242]  proc_fail_nth_read+0x10e/0x150
[  186.257585][ T7242]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  186.257699][ T7242]  vfs_read+0x1ab/0x7f0
[  186.257735][ T7242]  ? __rcu_read_unlock+0x4e/0x70
[  186.257766][ T7242]  ? __fget_files+0x184/0x1c0
[  186.257792][ T7242]  ? mutex_lock+0x57/0x90
[  186.257822][ T7242]  ksys_read+0xdc/0x1a0
[  186.257860][ T7242]  __x64_sys_read+0x40/0x50
[  186.257957][ T7242]  x64_sys_call+0x2886/0x3020
[  186.257989][ T7242]  do_syscall_64+0x12c/0x3b0
[  186.258145][ T7242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.258170][ T7242] RIP: 0033:0x7f96b64ad60e
[  186.258252][ T7242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  186.258272][ T7242] RSP: 002b:00007f96b4f46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  186.258313][ T7242] RAX: ffffffffffffffda RBX: 00007f96b4f476c0 RCX: 00007f96b64ad60e
[  186.258327][ T7242] RDX: 000000000000000f RSI: 00007f96b4f470a0 RDI: 0000000000000004
[  186.258340][ T7242] RBP: 00007f96b4f47090 R08: 0000000000000000 R09: 0000000000000000
[  186.258352][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.258364][ T7242] R13: 00007f96b6766038 R14: 00007f96b6765fa0 R15: 00007ffed3741c28
[  186.258390][ T7242]  </TASK>
[  186.262131][ T7243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  186.465840][ T7243] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  186.517884][ T7247] loop0: detected capacity change from 0 to 256
[  186.652369][ T7252] netdevsim netdevsim0: Direct firmware load for   failed with error -2
[  186.727107][ T7252] xt_hashlimit: size too large, truncated to 1048576
[  187.301841][ T7232] loop4: detected capacity change from 0 to 1764
[  187.331799][ T7232] iso9660: Corrupted directory entry in block 2 of inode 1920
[  187.672455][ T7270] loop2: detected capacity change from 0 to 128
[  188.494591][ T7280] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  188.501350][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  188.587651][ T7284] loop1: detected capacity change from 0 to 256
[  188.603921][ T7280] vhci_hcd vhci_hcd.0: Device attached
[  188.787029][ T7280] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  188.793730][ T7280] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  188.831622][ T7280] vhci_hcd vhci_hcd.0: Device attached
[  189.474422][ T7294] FAULT_INJECTION: forcing a failure.
[  189.474422][ T7294] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.487784][ T7294] CPU: 0 UID: 0 PID: 7294 Comm: syz.4.1113 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  189.487819][ T7294] Tainted: [W]=WARN
[  189.487877][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  189.487894][ T7294] Call Trace:
[  189.487902][ T7294]  <TASK>
[  189.487913][ T7294]  __dump_stack+0x1d/0x30
[  189.487937][ T7294]  dump_stack_lvl+0x95/0xd0
[  189.487992][ T7294]  dump_stack+0x15/0x1b
[  189.488015][ T7294]  should_fail_ex+0x263/0x280
[  189.488044][ T7294]  should_fail+0xb/0x20
[  189.488072][ T7294]  should_fail_usercopy+0x1a/0x20
[  189.488105][ T7294]  _copy_from_user+0x1c/0xb0
[  189.488194][ T7294]  do_ipt_set_ctl+0x3a9/0x8e0
[  189.488218][ T7294]  ? kstrtoull+0x111/0x140
[  189.488239][ T7294]  ? _raw_spin_lock_bh+0x56/0xb0
[  189.488354][ T7294]  nf_setsockopt+0x199/0x1b0
[  189.488405][ T7294]  ip_setsockopt+0x102/0x110
[  189.488428][ T7294]  tcp_setsockopt+0x98/0xb0
[  189.488526][ T7294]  sock_common_setsockopt+0x69/0x80
[  189.488562][ T7294]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  189.488684][ T7294]  __sys_setsockopt+0x184/0x200
[  189.488729][ T7294]  __x64_sys_setsockopt+0x64/0x80
[  189.488751][ T7294]  x64_sys_call+0x2327/0x3020
[  189.488781][ T7294]  do_syscall_64+0x12c/0x3b0
[  189.488819][ T7294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.488874][ T7294] RIP: 0033:0x7f141628cdd9
[  189.488890][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.488909][ T7294] RSP: 002b:00007f1414c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  189.488929][ T7294] RAX: ffffffffffffffda RBX: 00007f1416506180 RCX: 00007f141628cdd9
[  189.488943][ T7294] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007
[  189.488958][ T7294] RBP: 00007f1414c9d090 R08: 0000000000000360 R09: 0000000000000000
[  189.489002][ T7294] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  189.489017][ T7294] R13: 00007f1416506218 R14: 00007f1416506180 R15: 00007ffdd856e748
[  189.489041][ T7294]  </TASK>
[  189.697285][   T10] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  189.760615][   T10] usb 1-1: new full-speed USB device number 2 using vhci_hcd
[  189.775920][ T7281] vhci_hcd: connection closed
[  189.776244][   T30] vhci_hcd vhci_hcd.0: stop threads
[  189.786432][ T7288] vhci_hcd: connection closed
[  189.790164][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  189.790182][   T28] audit: type=1400 audit(1778538029.766:1320): avc:  denied  { bind } for  pid=7296 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  189.838895][   T30] vhci_hcd vhci_hcd.0: release socket
[  189.861480][   T30] vhci_hcd vhci_hcd.0: disconnect device
[  189.905682][   T30] vhci_hcd vhci_hcd.0: stop threads
[  189.925688][ T7303] netdevsim netdevsim1: Direct firmware load for   failed with error -2
[  189.934186][   T30] vhci_hcd vhci_hcd.0: release socket
[  189.954671][   T30] vhci_hcd vhci_hcd.0: disconnect device
[  190.119543][ T7303] xt_hashlimit: size too large, truncated to 1048576
[  191.098869][ T4969] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.213332][ T7312] program syz.0.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.228772][ T7312] loop0: detected capacity change from 0 to 764
[  191.399138][ T7320] FAULT_INJECTION: forcing a failure.
[  191.399138][ T7320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.424507][ T7320] CPU: 1 UID: 0 PID: 7320 Comm: syz.4.1122 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  191.424549][ T7320] Tainted: [W]=WARN
[  191.424557][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  191.424570][ T7320] Call Trace:
[  191.424578][ T7320]  <TASK>
[  191.424585][ T7320]  __dump_stack+0x1d/0x30
[  191.424672][ T7320]  dump_stack_lvl+0x95/0xd0
[  191.424693][ T7320]  dump_stack+0x15/0x1b
[  191.424717][ T7320]  should_fail_ex+0x263/0x280
[  191.424775][ T7320]  should_fail+0xb/0x20
[  191.424805][ T7320]  should_fail_usercopy+0x1a/0x20
[  191.424847][ T7320]  _copy_from_user+0x1c/0xb0
[  191.424883][ T7320]  ___sys_sendmsg+0xc1/0x1e0
[  191.424952][ T7320]  __x64_sys_sendmsg+0xd4/0x160
[  191.424988][ T7320]  x64_sys_call+0x194c/0x3020
[  191.425016][ T7320]  do_syscall_64+0x12c/0x3b0
[  191.425053][ T7320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.425089][ T7320] RIP: 0033:0x7f141628cdd9
[  191.425111][ T7320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.425133][ T7320] RSP: 002b:00007f1414cdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.425153][ T7320] RAX: ffffffffffffffda RBX: 00007f1416505fa0 RCX: 00007f141628cdd9
[  191.425167][ T7320] RDX: 00000000000c4010 RSI: 0000200000001540 RDI: 0000000000000003
[  191.425243][ T7320] RBP: 00007f1414cdf090 R08: 0000000000000000 R09: 0000000000000000
[  191.425260][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.425310][ T7320] R13: 00007f1416506038 R14: 00007f1416505fa0 R15: 00007ffdd856e748
[  191.425373][ T7320]  </TASK>
[  191.665509][   T28] audit: type=1400 audit(1778538031.626:1321): avc:  denied  { open } for  pid=7311 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  191.966986][   T28] audit: type=1400 audit(1778538031.626:1322): avc:  denied  { kernel } for  pid=7311 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  191.994277][ T7328] netlink: 'syz.5.1124': attribute type 3 has an invalid length.
[  192.283603][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'.
[  192.295598][   T28] audit: type=1400 audit(1778538031.656:1323): avc:  denied  { write } for  pid=7311 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  192.376612][   T28] audit: type=1400 audit(1778538031.996:1324): avc:  denied  { create } for  pid=7325 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  192.417069][ T7331] loop1: detected capacity change from 0 to 512
[  192.442355][ T7331] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  192.494780][ T7331] EXT4-fs (loop1): 1 truncate cleaned up
[  192.518051][ T7331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.651904][ T7326] loop4: detected capacity change from 0 to 1764
[  192.724843][ T7326] iso9660: Corrupted directory entry in block 2 of inode 1920
[  193.300729][   T28] audit: type=1400 audit(1778538033.266:1325): avc:  denied  { getopt } for  pid=7325 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  193.379219][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.549789][   T28] audit: type=1400 audit(1778538033.516:1326): avc:  denied  { append } for  pid=7363 comm="syz.4.1134" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  193.873234][ T7370] xt_hashlimit: size too large, truncated to 1048576
[  194.405313][ T7384] xt_hashlimit: size too large, truncated to 1048576
[  194.615313][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'.
[  194.723259][ T7396] loop4: detected capacity change from 0 to 512
[  194.755175][ T7396] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  194.817151][ T7396] EXT4-fs (loop4): 1 truncate cleaned up
[  194.824379][   T10] usb 1-1: enqueue for inactive port 0
[  194.830584][ T7396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.842817][   T10] usb 1-1: enqueue for inactive port 0
[  194.924303][   T10] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  195.031577][ T7391] xt_hashlimit: size too large, truncated to 1048576
[  195.119045][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.155198][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.478967][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.732463][ T7408] xt_hashlimit: size too large, truncated to 1048576
[  195.767979][ T7403] loop1: detected capacity change from 0 to 1764
[  195.815125][ T7403] iso9660: Corrupted directory entry in block 2 of inode 1920
[  195.846919][ T7405] FAULT_INJECTION: forcing a failure.
[  195.846919][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.902548][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.4.1145 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  195.902590][ T7405] Tainted: [W]=WARN
[  195.902599][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  195.902615][ T7405] Call Trace:
[  195.902624][ T7405]  <TASK>
[  195.902634][ T7405]  __dump_stack+0x1d/0x30
[  195.902716][ T7405]  dump_stack_lvl+0x95/0xd0
[  195.902743][ T7405]  dump_stack+0x15/0x1b
[  195.902768][ T7405]  should_fail_ex+0x263/0x280
[  195.902806][ T7405]  should_fail+0xb/0x20
[  195.902893][ T7405]  should_fail_usercopy+0x1a/0x20
[  195.902924][ T7405]  _copy_from_user+0x1c/0xb0
[  195.902964][ T7405]  do_ipt_set_ctl+0x3a9/0x8e0
[  195.902994][ T7405]  ? kstrtoull+0x111/0x140
[  195.903020][ T7405]  ? _raw_spin_lock_bh+0x56/0xb0
[  195.903132][ T7405]  nf_setsockopt+0x199/0x1b0
[  195.903161][ T7405]  ip_setsockopt+0x102/0x110
[  195.903196][ T7405]  tcp_setsockopt+0x98/0xb0
[  195.903226][ T7405]  sock_common_setsockopt+0x69/0x80
[  195.903407][ T7405]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  195.903451][ T7405]  __sys_setsockopt+0x184/0x200
[  195.903490][ T7405]  __x64_sys_setsockopt+0x64/0x80
[  195.903515][ T7405]  x64_sys_call+0x2327/0x3020
[  195.903541][ T7405]  do_syscall_64+0x12c/0x3b0
[  195.903579][ T7405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.903630][ T7405] RIP: 0033:0x7f141628cdd9
[  195.903648][ T7405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.903666][ T7405] RSP: 002b:00007f1414cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  195.903691][ T7405] RAX: ffffffffffffffda RBX: 00007f1416505fa0 RCX: 00007f141628cdd9
[  195.903784][ T7405] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  195.903796][ T7405] RBP: 00007f1414cdf090 R08: 0000000000000360 R09: 0000000000000000
[  195.903812][ T7405] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  195.903828][ T7405] R13: 00007f1416506038 R14: 00007f1416505fa0 R15: 00007ffdd856e748
[  195.903854][ T7405]  </TASK>
[  196.236906][   T28] audit: type=1400 audit(1778538036.206:1327): avc:  denied  { create } for  pid=7419 comm="syz.5.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  196.339731][ T7427] FAULT_INJECTION: forcing a failure.
[  196.339731][ T7427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.384465][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.1.1151 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  196.384521][ T7427] Tainted: [W]=WARN
[  196.384528][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  196.384540][ T7427] Call Trace:
[  196.384547][ T7427]  <TASK>
[  196.384556][ T7427]  __dump_stack+0x1d/0x30
[  196.384586][ T7427]  dump_stack_lvl+0x95/0xd0
[  196.384609][ T7427]  dump_stack+0x15/0x1b
[  196.384652][ T7427]  should_fail_ex+0x263/0x280
[  196.384681][ T7427]  should_fail+0xb/0x20
[  196.384789][ T7427]  should_fail_usercopy+0x1a/0x20
[  196.384819][ T7427]  _copy_from_user+0x1c/0xb0
[  196.384852][ T7427]  ___sys_sendmsg+0xc1/0x1e0
[  196.384912][ T7427]  ? path_openat+0x1b01/0x2050
[  196.384969][ T7427]  __sys_sendmmsg+0x185/0x320
[  196.385093][ T7427]  __x64_sys_sendmmsg+0x57/0x70
[  196.385125][ T7427]  x64_sys_call+0x27aa/0x3020
[  196.385157][ T7427]  do_syscall_64+0x12c/0x3b0
[  196.385253][ T7427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.385276][ T7427] RIP: 0033:0x7f5f5fc7cdd9
[  196.385296][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.385317][ T7427] RSP: 002b:00007f5f5e6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  196.385337][ T7427] RAX: ffffffffffffffda RBX: 00007f5f5fef5fa0 RCX: 00007f5f5fc7cdd9
[  196.385379][ T7427] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000a
[  196.385396][ T7427] RBP: 00007f5f5e6d7090 R08: 0000000000000000 R09: 0000000000000000
[  196.385413][ T7427] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001
[  196.385429][ T7427] R13: 00007f5f5fef6038 R14: 00007f5f5fef5fa0 R15: 00007ffe821c0fc8
[  196.385456][ T7427]  </TASK>
[  196.586507][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  196.612180][ T7435] xt_hashlimit: size too large, truncated to 1048576
[  196.625717][   T28] audit: type=1400 audit(1778538036.596:1328): avc:  denied  { tracepoint } for  pid=7438 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  196.714496][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1156'.
[  196.749215][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'.
[  196.859145][ T7446] loop4: detected capacity change from 0 to 512
[  196.920624][ T7450] loop0: detected capacity change from 0 to 4096
[  196.928135][ T7446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  196.948762][ T7450] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  196.981231][ T7450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.015678][ T7446] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1157: invalid indirect mapped block 4294967295 (level 0)
[  197.031515][ T7446] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  197.032637][ T7446] EXT4-fs (loop4): Remounting filesystem read-only
[  197.042021][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  197.042237][    C0] EXT4-fs (loop4): initial error at time 1778538037: ext4_free_branches:1023: inode 16
[  197.042750][    C0] EXT4-fs (loop4): last error at time 1778538037: ext4_free_branches:1023: inode 16
[  197.080035][ T7446] EXT4-fs (loop4): 1 orphan inode deleted
[  197.086388][ T7446] EXT4-fs (loop4): 1 truncate cleaned up
[  197.095364][ T7446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.108089][   T28] audit: type=1400 audit(1778538037.066:1329): avc:  denied  { write } for  pid=7455 comm="syz.0.1158" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  197.206056][ T7449] xt_hashlimit: size too large, truncated to 1048576
[  197.276837][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.524973][ T7462] xt_hashlimit: size too large, truncated to 1048576
[  197.588311][ T7466] FAULT_INJECTION: forcing a failure.
[  197.588311][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.624937][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.5.1163 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  197.624978][ T7466] Tainted: [W]=WARN
[  197.625011][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  197.625028][ T7466] Call Trace:
[  197.625037][ T7466]  <TASK>
[  197.625054][ T7466]  __dump_stack+0x1d/0x30
[  197.625086][ T7466]  dump_stack_lvl+0x95/0xd0
[  197.625112][ T7466]  dump_stack+0x15/0x1b
[  197.625136][ T7466]  should_fail_ex+0x263/0x280
[  197.625165][ T7466]  should_fail+0xb/0x20
[  197.625197][ T7466]  should_fail_usercopy+0x1a/0x20
[  197.625235][ T7466]  _copy_to_user+0x20/0xa0
[  197.625279][ T7466]  simple_read_from_buffer+0xb5/0x130
[  197.625408][ T7466]  proc_fail_nth_read+0x10e/0x150
[  197.625448][ T7466]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  197.625486][ T7466]  vfs_read+0x1ab/0x7f0
[  197.625678][ T7466]  ? __rcu_read_unlock+0x4e/0x70
[  197.625706][ T7466]  ? __fget_files+0x184/0x1c0
[  197.625733][ T7466]  ? mutex_lock+0x57/0x90
[  197.625826][ T7466]  ksys_read+0xdc/0x1a0
[  197.625855][ T7466]  __x64_sys_read+0x40/0x50
[  197.625882][ T7466]  x64_sys_call+0x2886/0x3020
[  197.625914][ T7466]  do_syscall_64+0x12c/0x3b0
[  197.625978][ T7466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.626008][ T7466] RIP: 0033:0x7f96b64ad60e
[  197.626030][ T7466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  197.626125][ T7466] RSP: 002b:00007f96b4f46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  197.626152][ T7466] RAX: ffffffffffffffda RBX: 00007f96b4f476c0 RCX: 00007f96b64ad60e
[  197.626170][ T7466] RDX: 000000000000000f RSI: 00007f96b4f470a0 RDI: 0000000000000004
[  197.626186][ T7466] RBP: 00007f96b4f47090 R08: 0000000000000000 R09: 0000000000000000
[  197.626199][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.626231][ T7466] R13: 00007f96b6766038 R14: 00007f96b6765fa0 R15: 00007ffed3741c28
[  197.626254][ T7466]  </TASK>
[  197.923568][ T7460] loop2: detected capacity change from 0 to 1764
[  197.960690][ T7460] iso9660: Corrupted directory entry in block 2 of inode 1920
[  197.987707][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.060724][ T7476] loop0: detected capacity change from 0 to 256
[  198.162251][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1168'.
[  198.174944][   T28] audit: type=1400 audit(1778538038.146:1330): avc:  denied  { read } for  pid=7482 comm="syz.5.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  198.211796][   T28] audit: type=1400 audit(1778538038.176:1331): avc:  denied  { connect } for  pid=7477 comm="syz.4.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  198.263932][   T28] audit: type=1400 audit(1778538038.226:1332): avc:  denied  { ioctl } for  pid=7477 comm="syz.4.1167" path="socket:[21724]" dev="sockfs" ino=21724 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  198.306877][    C1] vcan0: j1939_tp_rxtimer: 0xffff888121f04c00: rx timeout, send abort
[  198.318036][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121f04c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  198.334760][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888121f05400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  198.354668][ T7490] FAULT_INJECTION: forcing a failure.
[  198.354668][ T7490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.372425][ T7490] CPU: 0 UID: 0 PID: 7490 Comm: syz.2.1170 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  198.372498][ T7490] Tainted: [W]=WARN
[  198.372507][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  198.372587][ T7490] Call Trace:
[  198.372595][ T7490]  <TASK>
[  198.372604][ T7490]  __dump_stack+0x1d/0x30
[  198.372630][ T7490]  dump_stack_lvl+0x95/0xd0
[  198.372655][ T7490]  dump_stack+0x15/0x1b
[  198.372816][ T7490]  should_fail_ex+0x263/0x280
[  198.372896][ T7490]  should_fail+0xb/0x20
[  198.372935][ T7490]  should_fail_usercopy+0x1a/0x20
[  198.372975][ T7490]  _copy_from_user+0x1c/0xb0
[  198.373017][ T7490]  __sys_bpf+0x183/0x7e0
[  198.373078][ T7490]  __x64_sys_bpf+0x41/0x50
[  198.373112][ T7490]  x64_sys_call+0x10cb/0x3020
[  198.373165][ T7490]  do_syscall_64+0x12c/0x3b0
[  198.373204][ T7490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.373229][ T7490] RIP: 0033:0x7f121056cdd9
[  198.373248][ T7490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.373273][ T7490] RSP: 002b:00007f120efbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  198.373360][ T7490] RAX: ffffffffffffffda RBX: 00007f12107e5fa0 RCX: 00007f121056cdd9
[  198.373376][ T7490] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[  198.373389][ T7490] RBP: 00007f120efbf090 R08: 0000000000000000 R09: 0000000000000000
[  198.373402][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.373416][ T7490] R13: 00007f12107e6038 R14: 00007f12107e5fa0 R15: 00007ffc0b32d978
[  198.373435][ T7490]  </TASK>
[  198.403208][ T7480] syzkaller1: entered promiscuous mode
[  198.563708][ T7480] syzkaller1: entered allmulticast mode
[  198.571346][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'.
[  198.590478][ T7496] xt_hashlimit: size too large, truncated to 1048576
[  198.603095][ T7498] can0: slcan on ptm0.
[  198.683745][ T7498] can0 (unregistered): slcan off ptm0.
[  198.708838][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'.
[  198.722934][ T7498] Falling back ldisc for ptm0.
[  198.896440][ T7524] loop0: detected capacity change from 0 to 256
[  198.951682][ T7524] FAT-fs (loop0): Directory bread(block 64) failed
[  198.958440][ T7524] FAT-fs (loop0): Directory bread(block 65) failed
[  198.965048][ T7524] FAT-fs (loop0): Directory bread(block 66) failed
[  198.971669][ T7524] FAT-fs (loop0): Directory bread(block 67) failed
[  198.978319][ T7524] FAT-fs (loop0): Directory bread(block 68) failed
[  198.985002][ T7524] FAT-fs (loop0): Directory bread(block 69) failed
[  198.991583][ T7524] FAT-fs (loop0): Directory bread(block 70) failed
[  198.998233][ T7524] FAT-fs (loop0): Directory bread(block 71) failed
[  199.004923][ T7524] FAT-fs (loop0): Directory bread(block 72) failed
[  199.011575][ T7524] FAT-fs (loop0): Directory bread(block 73) failed
[  199.025323][ T7524] FAULT_INJECTION: forcing a failure.
[  199.025323][ T7524] name failslab, interval 1, probability 0, space 0, times 0
[  199.038321][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.0.1174 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  199.038413][ T7524] Tainted: [W]=WARN
[  199.038420][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  199.038432][ T7524] Call Trace:
[  199.038438][ T7524]  <TASK>
[  199.038446][ T7524]  __dump_stack+0x1d/0x30
[  199.038471][ T7524]  dump_stack_lvl+0x95/0xd0
[  199.038496][ T7524]  dump_stack+0x15/0x1b
[  199.038572][ T7524]  should_fail_ex+0x263/0x280
[  199.038600][ T7524]  should_failslab+0x8c/0xb0
[  199.038675][ T7524]  kmem_cache_alloc_noprof+0x66/0x3f0
[  199.038714][ T7524]  ? do_getname+0x2e/0x1c0
[  199.038771][ T7524]  do_getname+0x2e/0x1c0
[  199.038789][ T7524]  getname_flags+0x1d/0x30
[  199.038806][ T7524]  do_sys_openat2+0x60/0x130
[  199.038837][ T7524]  __x64_sys_openat+0xf2/0x120
[  199.038909][ T7524]  x64_sys_call+0x1e39/0x3020
[  199.038933][ T7524]  do_syscall_64+0x12c/0x3b0
[  199.038971][ T7524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.039000][ T7524] RIP: 0033:0x7fd175fed60e
[  199.039020][ T7524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  199.039124][ T7524] RSP: 002b:00007fd174a44b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  199.039155][ T7524] RAX: ffffffffffffffda RBX: 00007fd174a456c0 RCX: 00007fd175fed60e
[  199.039173][ T7524] RDX: 0000000000000002 RSI: 00007fd174a44c00 RDI: ffffffffffffff9c
[  199.039200][ T7524] RBP: 00007fd174a45090 R08: 0000000000000000 R09: 0000000000000000
[  199.039212][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.039228][ T7524] R13: 00007fd1762a6218 R14: 00007fd1762a6180 R15: 00007ffd902fca98
[  199.039252][ T7524]  </TASK>
[  199.336534][ T7526] loop4: detected capacity change from 0 to 4096
[  199.344803][   T28] audit: type=1400 audit(1778538039.266:1333): avc:  denied  { write } for  pid=7501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.453458][ T7526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  199.507543][   T28] audit: type=1400 audit(1778538039.476:1334): avc:  denied  { write } for  pid=7528 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.605243][ T7526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.626107][   T28] audit: type=1400 audit(1778538039.596:1335): avc:  denied  { write } for  pid=7534 comm="syz.4.1176" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  199.792581][   T28] audit: type=1400 audit(1778538039.756:1336): avc:  denied  { write } for  pid=7531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  199.950730][ T7519] xt_hashlimit: size too large, truncated to 1048576
[  199.960791][ T7516] xt_hashlimit: size too large, truncated to 1048576
[  200.572264][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.601153][ T7561] FAULT_INJECTION: forcing a failure.
[  200.601153][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.638073][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.2.1182 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  200.638112][ T7561] Tainted: [W]=WARN
[  200.638122][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  200.638137][ T7561] Call Trace:
[  200.638145][ T7561]  <TASK>
[  200.638154][ T7561]  __dump_stack+0x1d/0x30
[  200.638217][ T7561]  dump_stack_lvl+0x95/0xd0
[  200.638245][ T7561]  dump_stack+0x15/0x1b
[  200.638267][ T7561]  should_fail_ex+0x263/0x280
[  200.638296][ T7561]  should_fail+0xb/0x20
[  200.638418][ T7561]  should_fail_usercopy+0x1a/0x20
[  200.638458][ T7561]  _copy_from_user+0x1c/0xb0
[  200.638566][ T7561]  ___sys_sendmsg+0xc1/0x1e0
[  200.638656][ T7561]  __x64_sys_sendmsg+0xd4/0x160
[  200.638692][ T7561]  x64_sys_call+0x194c/0x3020
[  200.638722][ T7561]  do_syscall_64+0x12c/0x3b0
[  200.638753][ T7561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.638831][ T7561] RIP: 0033:0x7f121056cdd9
[  200.638852][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.638876][ T7561] RSP: 002b:00007f120efbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.638901][ T7561] RAX: ffffffffffffffda RBX: 00007f12107e5fa0 RCX: 00007f121056cdd9
[  200.638938][ T7561] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 000000000000001b
[  200.638953][ T7561] RBP: 00007f120efbf090 R08: 0000000000000000 R09: 0000000000000000
[  200.638973][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.638989][ T7561] R13: 00007f12107e6038 R14: 00007f12107e5fa0 R15: 00007ffc0b32d978
[  200.639015][ T7561]  </TASK>
[  200.828010][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  200.850427][ T7572] loop0: detected capacity change from 0 to 256
[  201.068459][ T7585] loop1: detected capacity change from 0 to 256
[  201.107051][ T7579] xfrm0 speed is unknown, defaulting to 1000
[  201.252698][ T7590] xt_hashlimit: size too large, truncated to 1048576
[  201.485462][ T7598] Cannot find add_set index 0 as target
[  201.502056][ T7598] loop4: detected capacity change from 0 to 256
[  203.174869][ T7598] FAT-fs (loop4): Directory bread(block 64) failed
[  203.181520][ T7598] FAT-fs (loop4): Directory bread(block 65) failed
[  203.188206][ T7598] FAT-fs (loop4): Directory bread(block 66) failed
[  203.194954][ T7598] FAT-fs (loop4): Directory bread(block 67) failed
[  203.201625][ T7598] FAT-fs (loop4): Directory bread(block 68) failed
[  203.208822][ T7598] FAT-fs (loop4): Directory bread(block 69) failed
[  203.215702][ T7598] FAT-fs (loop4): Directory bread(block 70) failed
[  203.222374][ T7598] FAT-fs (loop4): Directory bread(block 71) failed
[  203.229097][ T7598] FAT-fs (loop4): Directory bread(block 72) failed
[  203.235753][ T7598] FAT-fs (loop4): Directory bread(block 73) failed
[  203.964407][ T7609] FAULT_INJECTION: forcing a failure.
[  203.964407][ T7609] name failslab, interval 1, probability 0, space 0, times 0
[  203.977186][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.1.1194 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  203.977252][ T7609] Tainted: [W]=WARN
[  203.977262][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  203.977278][ T7609] Call Trace:
[  203.977286][ T7609]  <TASK>
[  203.977319][ T7609]  __dump_stack+0x1d/0x30
[  203.977420][ T7609]  dump_stack_lvl+0x95/0xd0
[  203.977494][ T7609]  dump_stack+0x15/0x1b
[  203.977514][ T7609]  should_fail_ex+0x263/0x280
[  203.977550][ T7609]  ? __se_sys_memfd_create+0x1df/0x3b0
[  203.977587][ T7609]  should_failslab+0x8c/0xb0
[  203.977617][ T7609]  __kmalloc_cache_noprof+0x5f/0x400
[  203.977671][ T7609]  ? fput+0x8f/0xc0
[  203.977697][ T7609]  __se_sys_memfd_create+0x1df/0x3b0
[  203.977733][ T7609]  __x64_sys_memfd_create+0x31/0x40
[  203.977768][ T7609]  x64_sys_call+0x1f22/0x3020
[  203.977875][ T7609]  do_syscall_64+0x12c/0x3b0
[  203.977909][ T7609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.977937][ T7609] RIP: 0033:0x7f5f5fc7cdd9
[  203.977957][ T7609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.978039][ T7609] RSP: 002b:00007f5f5e694e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  203.978060][ T7609] RAX: ffffffffffffffda RBX: 0000000000000359 RCX: 00007f5f5fc7cdd9
[  203.978073][ T7609] RDX: 00007f5f5e694ee0 RSI: 0000000000000000 RDI: 00007f5f5fd12f49
[  203.978088][ T7609] RBP: 0000200000000bc0 R08: 00000000ffffffff R09: 0000000000000000
[  203.978102][ T7609] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100
[  203.978121][ T7609] R13: 00007f5f5e694ee0 R14: 00007f5f5e694ea0 R15: 0000200000000f40
[  203.978188][ T7609]  </TASK>
[  204.748516][ T7602] xt_hashlimit: size too large, truncated to 1048576
[  205.198777][ T7620] FAULT_INJECTION: forcing a failure.
[  205.198777][ T7620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.213457][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1199'.
[  205.222676][ T7625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.229986][ T7625] IPv6: NLM_F_CREATE should be set when creating new route
[  205.239371][ T7620] CPU: 1 UID: 0 PID: 7620 Comm: syz.2.1198 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  205.239412][ T7620] Tainted: [W]=WARN
[  205.239421][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.239513][ T7620] Call Trace:
[  205.239522][ T7620]  <TASK>
[  205.239532][ T7620]  __dump_stack+0x1d/0x30
[  205.239592][ T7620]  dump_stack_lvl+0x95/0xd0
[  205.239613][ T7620]  dump_stack+0x15/0x1b
[  205.239710][ T7620]  should_fail_ex+0x263/0x280
[  205.239744][ T7620]  should_fail+0xb/0x20
[  205.239777][ T7620]  should_fail_usercopy+0x1a/0x20
[  205.239811][ T7620]  _copy_from_user+0x1c/0xb0
[  205.239923][ T7620]  __sys_sendto+0x1ca/0x490
[  205.239960][ T7620]  __x64_sys_sendto+0x76/0x90
[  205.239987][ T7620]  x64_sys_call+0x2d35/0x3020
[  205.240019][ T7620]  do_syscall_64+0x12c/0x3b0
[  205.240114][ T7620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.240140][ T7620] RIP: 0033:0x7f121056cdd9
[  205.240156][ T7620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.240179][ T7620] RSP: 002b:00007f120efbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  205.240204][ T7620] RAX: ffffffffffffffda RBX: 00007f12107e5fa0 RCX: 00007f121056cdd9
[  205.240222][ T7620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  205.240238][ T7620] RBP: 00007f120efbf090 R08: 0000200000000300 R09: 000000000000001c
[  205.240251][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.240265][ T7620] R13: 00007f12107e6038 R14: 00007f12107e5fa0 R15: 00007ffc0b32d978
[  205.240301][ T7620]  </TASK>
[  205.409869][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1199'.
[  205.422013][ T7625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.532218][ T7630] loop1: detected capacity change from 0 to 512
[  205.553581][ T7630] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #11: block 327694: comm syz.1.1201: lblock 0 mapped to illegal pblock 327694 (length 1)
[  205.568740][ T7635] loop0: detected capacity change from 0 to 256
[  205.569094][ T7630] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  205.577098][ T7630] EXT4-fs (loop1): 1 orphan inode deleted
[  205.586288][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  205.586311][    C0] EXT4-fs (loop1): initial error at time 1778538045: ext4_map_blocks:791: inode 11: block 327694
[  205.586363][    C0] EXT4-fs (loop1): last error at time 1778538045: ext4_map_blocks:791: inode 11: block 327694
[  205.621448][ T7630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.648847][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1202'.
[  205.672097][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'.
[  205.684781][ T7630] FAULT_INJECTION: forcing a failure.
[  205.684781][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.698348][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.1.1201 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  205.698457][ T7630] Tainted: [W]=WARN
[  205.698466][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.698483][ T7630] Call Trace:
[  205.698491][ T7630]  <TASK>
[  205.698501][ T7630]  __dump_stack+0x1d/0x30
[  205.698530][ T7630]  dump_stack_lvl+0x95/0xd0
[  205.698554][ T7630]  dump_stack+0x15/0x1b
[  205.698602][ T7630]  should_fail_ex+0x263/0x280
[  205.698638][ T7630]  should_fail+0xb/0x20
[  205.698719][ T7630]  should_fail_usercopy+0x1a/0x20
[  205.698757][ T7630]  _copy_from_user+0x1c/0xb0
[  205.698860][ T7630]  lo_ioctl+0x4b5/0x13a0
[  205.698901][ T7630]  ? _raw_spin_unlock+0x9/0x30
[  205.698965][ T7630]  ? __hrtimer_rearm_deferred+0x58d/0x670
[  205.699022][ T7630]  ? blkdev_common_ioctl+0xc12/0x20a0
[  205.699051][ T7630]  ? __tsan_read2+0x12/0x190
[  205.699086][ T7630]  ? do_vfs_ioctl+0x84f/0xe70
[  205.699186][ T7630]  ? selinux_file_ioctl+0x338/0x3b0
[  205.699274][ T7630]  ? __pfx_lo_ioctl+0x10/0x10
[  205.699378][ T7630]  ? __pfx_blkdev_ioctl+0x10/0x10
[  205.699407][ T7630]  blkdev_ioctl+0x387/0x460
[  205.699488][ T7630]  ? __pfx_blkdev_ioctl+0x10/0x10
[  205.699517][ T7630]  __se_sys_ioctl+0xce/0x140
[  205.699683][ T7630]  __x64_sys_ioctl+0x43/0x50
[  205.699765][ T7630]  x64_sys_call+0x1563/0x3020
[  205.699796][ T7630]  do_syscall_64+0x12c/0x3b0
[  205.699836][ T7630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.699865][ T7630] RIP: 0033:0x7f5f5fc7cdd9
[  205.699955][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.699985][ T7630] RSP: 002b:00007f5f5e6d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.700067][ T7630] RAX: ffffffffffffffda RBX: 00007f5f5fef5fa0 RCX: 00007f5f5fc7cdd9
[  205.700086][ T7630] RDX: 0000200000000540 RSI: 0000000000004c04 RDI: 000000000000000a
[  205.700103][ T7630] RBP: 00007f5f5e6d7090 R08: 0000000000000000 R09: 0000000000000000
[  205.700118][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.700131][ T7630] R13: 00007f5f5fef6038 R14: 00007f5f5fef5fa0 R15: 00007ffe821c0fc8
[  205.700156][ T7630]  </TASK>
[  205.961914][ T7642] ==================================================================
[  205.970050][ T7642] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[  205.976959][ T7642] 
[  205.979288][ T7642] write to 0xffff888103f30600 of 8 bytes by task 7640 on cpu 0:
[  205.986921][ T7642]  mas_wmb_replace+0x234/0x1760
[  205.991803][ T7642]  mas_wr_store_entry+0x54ff/0x5ad0
[  205.997015][ T7642]  mas_store_prealloc+0x43e/0x690
[  206.002057][ T7642]  vma_complete+0x3c7/0x850
[  206.006580][ T7642]  __split_vma+0x593/0x640
[  206.011044][ T7642]  vma_modify+0xb4b/0xca0
[  206.015388][ T7642]  vma_modify_flags+0x182/0x210
[  206.020274][ T7642]  mprotect_fixup+0x3a2/0x680
[  206.025053][ T7642]  do_mprotect_pkey+0x6ae/0x960
[  206.030123][ T7642]  __x64_sys_mprotect+0x48/0x60
[  206.035001][ T7642]  x64_sys_call+0x2768/0x3020
[  206.039701][ T7642]  do_syscall_64+0x12c/0x3b0
[  206.044314][ T7642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.050229][ T7642] 
[  206.052561][ T7642] read to 0xffff888103f30600 of 8 bytes by task 7642 on cpu 1:
[  206.060117][ T7642]  mas_walk+0x176/0x370
[  206.064312][ T7642]  lock_vma_under_rcu+0xc9/0x210
[  206.069296][ T7642]  do_user_addr_fault+0x232/0x1050
[  206.074471][ T7642]  exc_page_fault+0x62/0xa0
[  206.079039][ T7642]  asm_exc_page_fault+0x26/0x30
[  206.083942][ T7642] 
[  206.086299][ T7642] value changed: 0xffff888105128701 -> 0xffff888103f30600
[  206.093425][ T7642] 
[  206.095767][ T7642] Reported by Kernel Concurrency Sanitizer on:
[  206.101944][ T7642] CPU: 1 UID: 0 PID: 7642 Comm: syz.2.1205 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  206.112939][ T7642] Tainted: [W]=WARN
[  206.116768][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  206.126844][ T7642] ==================================================================
[  206.145968][ T7649] loop4: detected capacity change from 0 to 512
[  206.155703][ T7649] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  206.182754][ T7649] EXT4-fs (loop4): 1 truncate cleaned up
[  206.189336][ T7649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.461009][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.544952][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.