last executing test programs:

1m0.32866613s ago: executing program 0 (id=619):
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000000008010300000000000000000200000404000480050003008400000006000240430500000900010073797a31000000004aecafc7eab424e0c25ba310955d37226fe712fbafb27068c3d55a718c251b45558de687fded65022ec51bd018f8e7f493060f4596881526d5024b582a37bebc431240a3c18bd7c45ce2e15800a20501010000a860b61368af9f35f4687297d80e0f3b5c94966a87a9c058b8879dcd8c40a4582eea4076238e80257e9cab6b4228c99e72ed5729c3a0b95ca1c4a4dec5d780b7b51e422f80c6b4b77c2205d91aa44a755574a17a8a0768902e2f9826614a231946322e0311a3c3aa54b7aecd9929"], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]})
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080), 0x106, 0x2}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='0x', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000030, &(0x7f0000000080)={[{}, {@gid}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0)
write(r5, &(0x7f0000000540)='2', 0x1)

59.49773664s ago: executing program 0 (id=624):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00@\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x69}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1ff, 0x6}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x203, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000bc0)={[{@usrquota}, {@nodelalloc}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodioread_nolock}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1)
pwrite64(r2, &(0x7f0000000080), 0xfdcf, 0x404042ffe)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000640), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x50)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000007600010efeffffff7ddbdf25d0f404000000000008000100020000"], 0x20}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

58.214965493s ago: executing program 1 (id=633):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010329bd7000fcdbdf252400"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

58.117804055s ago: executing program 1 (id=634):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000d40)={0x1, 0x1, 0x4, 0x2, 0x8})
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)

58.048537337s ago: executing program 0 (id=635):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@abort}, {@block_validity}, {@grpid}]}, 0x1, 0x77f, &(0x7f0000000840)="$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")
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000002000000000000800010000000000", 0x24)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
umount2(&(0x7f0000000040)='.\x00', 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240))

58.006967258s ago: executing program 1 (id=636):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
msgsnd(r0, &(0x7f0000000180)={0x2, "f69a76e026afc71dd75f1e4dff056f708a5e5190217e5e6ceb3920a1e173d146458270cc4a571834745115a17b3a6b8338b2191ffecf2aa2693ccaafeeee50cc33f390779880c33c03cafd6fb265a409c88bc523387fd2b606561a4387d4ab428d984f3e1c2776413d3a223cde7c5cefeff03ab0b804165f236b0b5a4fc71da6d80c8d02a99f8f7eeb1711f24d705a832363c7408fdb7d260d6846f636d41490743b27c5ea14b81fdba94d4efa14d6d12fdd2d5829daaddd8e7eea9a29dfeb0705db43a6fa397d5356002eefd2dc3417f9c65494b65a826135a84f42c7262d98c43a4917bf09d20d4e7a74"}, 0xf3, 0x0)

58.005915338s ago: executing program 4 (id=637):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94)
openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2, 0xfffffffe, 0x6, 0x400, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x2, 0x4, 0x3}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000"], 0x1c}}, 0x0)
r3 = creat(&(0x7f0000000240)='./bus\x00', 0xc2)
io_setup(0x5, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x0])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x1, 0x6)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10)
listen(r4, 0x5)
setsockopt$inet_buf(r4, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount$nfs(&(0x7f0000000080)=':27.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]})
r5 = accept$inet(r4, 0x0, 0x0)
read(r5, &(0x7f0000000100), 0x4)
read(r5, &(0x7f0000000304), 0x4)

56.767666878s ago: executing program 3 (id=639):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
readv(r0, &(0x7f0000002bc0)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/129, 0x81}, {0x0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x5)

56.512134715s ago: executing program 1 (id=640):
socket$tipc(0x1e, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0x452, &(0x7f0000001540)="$eJzs28tvG0UcAODfruMU+koo5dFSIFAhIh5JkxbogQsIJA5FIMGhHIOTVlXdBjVBolVFA0LlgoQqwRlxROIv4MYFASckrnBHlRD00sLJaO3d1nbtPFonDvX3SZvMeMY7M56d3dkdO4CBNZb9SSK2R8RvETHSiLZmGGv8u3blfOWfK+crSdRqb/2V1PNdvXK+UmQt3rctj4ynEeknSV5Iq4Wz507OVKtzZ/L45OKp9yYXzp579sSpmeNzx+dOTx8+fOjg1AvPTz/XVqFbk7Xr6t4P5/ftee2dS69Xjl5696dvs91uz9Ob29ErY1nD/67Vtac90evC+mxHUzgZ6mNFWJNSRGTdVa6P/5EoxY3OG4lXP+5r5YB1lV2btnRPXqoBd7Ak+l0DoD+KC312/1tsGzT12BT+fKlxA5S1+1q+NVKGIs3zlNvub3tpLCKOLv37VbbFOj2HAABo9lnlyyPxTKf5Xxr3N+Xbma+hjEbEPRGxKyLujYjdEXFfRD3vAxHx4GoKbVofaF8aunn+k17utpvyaspaQTb/ezFf22qd/xWzvxgt5bEd9faXk2MnqnMH8s9kPMpbsvjUMmV8/8qvn3dLa57/ZVtWfjEXzOtxeajtAd3szOJMTxqftf+jiL1DndqfXO+mJCL2RMTete16ZxE48dQ3+7plWrn9y+jBOlPt64gnG/2/FG3tLyTLr09O3hXVuQOTxVFxs59/ufhmt/Jvq/09kPX/1tbjvz3LaNK8Xruw9jIu/v5p13uaWz3+h5O36/0ynL/2wczi4pmpiOHkSD3e8vr0jfcW8SJ/1v7x/Z3H/678PVk5D0VEdhA/HBGPRMSjed0fi4jHI2L/Mu3/8eXuaZuh/2c7nv+uH/9t/b/2QOnkD991K391/X+oHhrPX6mf/1aw2grezmcHAAAA/xdp/TvwSTpxPZymExON7/Dvjq1pdX5h8elj8++fnm18V340ymnxpGuk6XnoVLKU77ERn86fFRfpB/Pnxl+U7q7HJyrz1dk+tx0G3bYu4z/zR6nftQPWWedVtOnhDa8I0AftZ4C0NXrhjY2sDLCh/F4bBtcK479tOlAbWdfKABvK9R8GV6fxf6Etbi0A7kyu/zC4jH8YXMY/DC7jHwbS7fyuX2CQA5FuimoIrFOg32cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgvAAD//6037+Y=")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x19}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080000}, 0x80)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = dup3(r2, r3, 0x80000)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)

56.361191449s ago: executing program 4 (id=641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x20004000)

55.600259138s ago: executing program 0 (id=643):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7ffffffffffffffe, 0x3ff})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x11e0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x21, 0x2, 0x2)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xf9, 0x1223, &(0x7f0000001840)="$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")
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
getsockname$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

54.426869097s ago: executing program 4 (id=644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x14c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x0, 0x2, "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"}, @TCA_CHOKE_PARMS={0x0, 0x1, {0xa, 0x2, 0x0, 0x15, 0x9, 0x15, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000)

53.608989007s ago: executing program 3 (id=645):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x716e)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x7d4165cc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x7d4165c9)
listen(r4, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r7, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
unshare(0x2c000680)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000040)={0x20000001})

51.07135112s ago: executing program 1 (id=646):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff}}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x8000, 0x0, 0x4, 0x3, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)

50.833417796s ago: executing program 0 (id=647):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x4, @perf_bp={0x0, 0xe}, 0x2512, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}})
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0xd3751, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xf}, 0xc93, 0x2000000000001, 0x3, 0x1, 0x200000000081, 0x8005, 0x7fff, 0x0, 0x2cb, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080))

46.609256731s ago: executing program 1 (id=648):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000010000800d00000001000000", @ANYRES64=r1, @ANYBLOB="00000080000000000000000000000000000000001cf1f42792915998584027923dded403243abc974446b177f3cbd1ee4922c549ba1b6218581a1ce73d2c918f5133dbf9c2e087164ff8c761b074c87a4e901aa2e568c0246e6b54b4ad68f0def211d4576b263ef96a187b", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000102000/0x4000)=nil, 0x3)
lseek(r2, 0x10001, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000eba1c5620200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x17}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)

44.855431324s ago: executing program 3 (id=649):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010400000000000000000700000014000780080011400600000005001500050000000500010006000000050005000200000005000400030000000900020073797a30000000000d000300686173"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x20004000)

42.969369822s ago: executing program 0 (id=650):
socket$xdp(0x2c, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvTOkbFFr4kZ/yolTR2Ii2tKBy8KBGEy4aEz3gsZZKkAKG1kQIkWIMHo1/AXo0MfHkRS+aqFEvarzq3ZgQwwXUxNTM7kx32+5ut1torfv5JNt9nplnXr7PzDP77DzbCaBtDWZ/koi+iPg5IvrL2YUFBstvN69fnPjj+sWJJObmXvg9KZW7cf3iRFG0WG5LnhlKI9K3k9hTY7vT5y+cGp+amjyX50dmTr82Mn3+wsMnT4+fmDwxeWbsyJHDh0Yfe3TskabiuLTM/CyuG7vfPLt319GX3nt2Yi5e/vajbH/78vnVcZQNNLXdRgZjMOZylaldpb/3r3rt/y5boze683SyafHcy2u/QzSlIyKyw9VZav/90RGVg9cfz7w1n/lynXYQuG2yz6btS6Z25O/p/OcX8F+UaOPQpopP/Oz7b/Fay/7Herv2ZPZ3shT/zfz1/XPlukmz77IDEV299Zf/f41pPZXkXP8y2++rdLauRs37EA0kTZcEAJj3edb/eahW/y9d0LfZlo+hDETEgYjYERH/i4idkc6XuSMi7lzh9gcX5Zf2f35s0Ptavaz/93g+tlW8ynOKuJL53NZS/J3JKyenJg/mdTIUnd1ZfrTBNr54+qd3683L4j82++fV4pVtP3uvlEh/29S9cJnj4zPjqwh5gWuXI4lNteJP5kcCshrYFRG7W1h/VmcnH/xwb5betmXp/OXjb2DJONPKzX0Q8UD5+M/GovgLSXlL9cYnR3piavLgSHFWLPXdD1eer853VqUXxN/TXEw9rQZbw7XLEZtrnv95/EUzKMZrp/P8V31Nb+PKL+/U/U6z9PgncWy2ukR+/vdWqi07/7uSF0vprnzaG+MzM+dGIz7LJyyYPlZZW5EvymfxD+1fGH/5e3GaXeP+fj9fbk9EZCfxXRFxd0Tsy/f9noi4NyL2N4j/m6fue7VxDbV4/t8CWfzHGx3/iIGkery+hUTHqa8/rbf95q5/h0upoXxK9fWvq856m93B1dYfAAAAbARpaQw6SYcjYtFtxtgZm9Ops9MzBwbj9TPHy7+VH4jOtLjT1V91P3Q0vzdc5McW5Q9FxPbSL416S/nhibNTW9cpZqBsS1X7L18L0nR4uDzv14713jvgtlvROFr1j84+/uTW7wywpm7BODqwQWn/0L60f2hf2j+0r1rt/1LEzXXYFWCNtfr5v/gHA8DGo/8P7Uv7h/al/UNbWvov8fnjVrJrQuv/8j+14+hqnhhw+xNz/a0vHvVnza58hR3NFS6eftH0mpsrnEQU4aQN4qqRiLQy5a/8aZKlKZ3lMl3N7+raJ9JlyzyxXG10ruiZGD01amNfnuiOiGbXc2nNarW4QiSeMgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxo/wQAAP//HfHjTg==")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a1f0400000000000000000a0000440900010073797a3100000000200004801c0001800a00010072616e67650000000c00028008000140000000110900020073797a3200000000140000001100010000000000000000000500000a56a89dcd3e8991fa9ac5af1aaac1a72e2018feddb092"], 0x74}, 0x1, 0x0, 0x0, 0x20000084}, 0x24000840)
socket$unix(0x1, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
write$UHID_INPUT2(r7, &(0x7f0000000d00)={0xc, {0xc, "11ff04200000000000000000"}}, 0x12)
write$UHID_INPUT2(r7, &(0x7f0000000e00)={0xc, {0x2, "11ff"}}, 0x8)
write$tun(r6, &(0x7f0000000c00)={@val={0x0, 0x88f7}, @void, @ipv6=@icmpv6={0x3, 0x6, "a5bfd3", 0x21c, 0x3a, 0x0, @remote, @mcast2, {[@srh={0x7, 0x4, 0x4, 0x2, 0x9, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2b}, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x32, 0x2a, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xff}, @generic={0x7, 0x9a, "ad8fffdfd0748bc3b3da9373d4f42aa8503f05a8df143b3bc831fb777e88ea5a90ac0f541dcf06635defddb3577e61fbde944b1d21d6b38fb8c5299d5e8f580166df1342fe4d46e0d19ca12dc5aac424b59b6212469fe0b548a7cd896eb5f1b13412571c5b5611be871aefb71bfa3f8cf57a1fd62a72dc17f1840500d5d9e18c0ad37962cd230262cb18dd5480bda661bb69b52f21103ad5d994"}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim, @enc_lim={0x4, 0x1, 0x6}, @generic={0x7, 0x8f, "2daaf5b23345738fbf80d9a5068661346cf7261d961a1bb21d013b2f3e21832379213b855acff8b893ba6ee76e2a367cd8f7caa7db4c3b300ee1e765f8e8bda690bc2a02d9f8c6a3a7581edd3fe5d7882d81897a999eb7140d63d4830f3067980541a68b9d6f7bd1c125a42651bfe42af3743b01790f4c95c65c1121e2ebb64a4b9ab4c89f837399a7f638296bdbf2"}]}, @dstopts={0x2c, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}, @generic={0x3c, 0x30, "d2fb09e4279a0c8ed72bb16c1cfa07a762e8cc266ec96cfe1747c680a8868607ccab9971c357a103f5fc40f683f033ed"}, @ra={0x5, 0x2, 0x4}, @generic={0x8}]}], @mlv2_query={0x82, 0x0, 0x0, 0x800, 0x4, @private0, 0x5, 0x1, 0x1, 0x5, 0x3, [@remote, @local, @mcast2]}}}}, 0x248)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_emit_ethernet(0x78, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9})

42.722423578s ago: executing program 4 (id=651):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x15)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x20, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xffffffff, 0x1ff000100, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x12, 0x5, 0x5}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'lo\x00', {0x8001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1c00000068000100fdfc0000fbdbc325020001000000000004000b003eea56ba43281ce4414b9f66b337feb34dabf936e469d1ae1233d0d500c9319b9e2f8d6a96da8ed33908d283e92077b6ef5ce1be59bbd0f3b30d43d071d6798a3bb72b0dcccea7068512b58ce938da329ad40e5f9931c414b3bf29160db18f45b0ace99732564cb22244a21ec49f3dd238e9908154be6a9e"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r3, 0x8cee000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000980)="80f48f855bf9a2840d967c326de734be8ceb6c4f5801079a3a8848a4b4c0652c5ed5f9de9bce623be1b6fff791c7b36e67f83cc2a1fd1e7d49d7b933535175efd8103052a7dee1767dd063d0", 0x4c}], 0x2}}], 0x1, 0x40000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000f83000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)

42.429531225s ago: executing program 2 (id=652):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01fd25bdffbaf9805e698d254c9bd2cac0ec64dfe838e2b3fee170001ddcdf250700010008000300", @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$unix(0x1, 0x5, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x80, 0x6, 0x304, 0x0, 0x0, 0x101, 0x0})
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0x110)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x40)
ioctl$sock_bt_hci(r3, 0x400448e4, 0x0)

41.929422198s ago: executing program 3 (id=653):
r0 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)

40.084669843s ago: executing program 3 (id=654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x20004000)

38.518021133s ago: executing program 2 (id=655):
r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9)
readv(r0, &(0x7f0000002bc0)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/129, 0x81}, {0x0}, {0x0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x6)

37.662997013s ago: executing program 3 (id=656):
io_setup(0xbf, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = getpid() (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xffffc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r2 = signalfd(0xffffffffffffffff, 0x0, 0x0)
setns(r1, 0x24020000)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) (async)
syz_clone(0x51801400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={<r3=>0x0, 0x800}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x7e, 0x2f00}, 0x90)
io_submit(0x0, 0x0, 0x0)

35.553395616s ago: executing program 2 (id=657):
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)
syz_clone3(&(0x7f0000000080)={0x2d808400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa2}]}, 0x34}}, 0x4000080)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7800, 0x10, 0x2, 0x2f5, {{0x25, 0x4, 0x3, 0x39, 0x94, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x17, 0xea, [@multicast1, @rand_addr=0x64010102, @loopback, @empty, @broadcast]}, @generic={0x7, 0x3, "06"}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x7, 0x10, "577b148b483eefe18286bd9ed032"}, {0x5, 0x7, "ad1307e19c"}]}, @noop, @lsrr={0x83, 0x13, 0xc8, [@loopback, @remote, @rand_addr=0x64010100, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xb1, 0x1, 0x7, [{@multicast2, 0x3}, {@empty, 0x9}, {@private=0xa010102, 0xa6}, {@broadcast, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x447c1787}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x80000001}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl2\x00', <r4=>0x0, 0x7800, 0x10, 0x2, 0x2f5, {{0x25, 0x4, 0x3, 0x39, 0x94, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x17, 0xea, [@multicast1, @rand_addr=0x64010102, @loopback, @empty, @broadcast]}, @generic={0x7, 0x3, "06"}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x7, 0x10, "577b148b483eefe18286bd9ed032"}, {0x5, 0x7, "ad1307e19c"}]}, @noop, @lsrr={0x83, 0x13, 0xc8, [@loopback, @remote, @rand_addr=0x64010100, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xb1, 0x1, 0x7, [{@multicast2, 0x3}, {@empty, 0x9}, {@private=0xa010102, 0xa6}, {@broadcast, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x447c1787}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x80000001}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="39d51c7a1dfa"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="39d51c7a1dfa"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'gretap0\x00', <r7=>0x0, 0x20, 0x7, 0x10001, 0x75, {{0x1c, 0x4, 0x2, 0x1a, 0x70, 0x66, 0x0, 0x2, 0x2b, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x17, 0x3, [{0x1, 0xf, "8677c6b07e188997ed0991b791"}, {0x0, 0x2}]}, @cipso={0x86, 0x43, 0x3, [{0x0, 0xf, "4319fc02c64f65c747d3f8efa1"}, {0x0, 0x12, "497abafc42e5b8448cf67bc70ecbd926"}, {0x2, 0xa, "22b8d8088638f6c9"}, {0x0, 0x12, "ab4e486b28bc66820c6596cd86383669"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x9, 0x9, 0x40, @mcast1, @loopback, 0x8000, 0x8000, 0x4, 0xfffffff7}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', <r8=>0x0, 0x0, 0x3, 0x9, 0x9, 0x40, @mcast1, @loopback, 0x8000, 0x8000, 0x4, 0xfffffff7}})
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x50)
syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') (async)
r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00')
r11 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0xa, @empty}, 0x1c) (async)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0xa, @empty}, 0x1c)
pread64(r10, &(0x7f0000000140)=""/240, 0xf0, 0x2c)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x113400, 0x21)
ioctl$HIDIOCGFEATURE(r12, 0xc0404807, &(0x7f0000000840)={0x4, "d28bfa1bf66bca223909135510c02bfa2877031b189bb350ead4f61b1c0a692d577d9215af427c4255abf47bcbcbb5f4d6b8a48318748e30c26a7d9177e12156"})
r13 = syz_open_dev$tty20(0xc, 0x4, 0x1)
writev(r13, &(0x7f0000001b80)=[{&(0x7f0000000a00)="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", 0x3b9}], 0x1) (async)
writev(r13, &(0x7f0000001b80)=[{&(0x7f0000000a00)="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", 0x3b9}], 0x1)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="88010000", @ANYRES16=r3, @ANYBLOB="000226bd7000ffdbdf251500000068000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f000000000000000000000000000014000200000000000000000000000000000000000800030001000000140002006272696467653000000000000000000008000300000000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r4, @ANYBLOB="140002006d6163766c616e310000000000000000080003000100000014000200776c616e300000000000000000000000640001800800030002000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="140002006361696630000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0800030003000000080003000300000008000300010000001400020076657468305f746f5f62726964676500500001801400020076657468315f746f5f62726964676500140002006c6f00000000000000000000000000000800030000000000140002007767300000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0c0001800800130000000000"], 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="e8010000530420002ebd7000fddbdf25b92388565f562c40b467fe5a2e31a813cce5a34f2c53a8dc468c0b36ac7775187c6e3e2b1af988dacdd6838ea378a17fd6d0f1bc647fb2b3fb58359181716102d2f2151c756f39080741c3187ed987cf159f86555edda097ee88661b9cc0744e8de619c72c83b26f0f046e8eb61e8fd18e1db04e42b78471bc0c492e81d5eefa2de6bb869eebf31afa48a000a6a187b11bcce0dbb52a00c0f5af64e111de667e96e5994fa147f1dd33c40e5d148bf8ed2e5ff2b51dbeac958ef8b6ba76226564467dfec700d97a6cf1c9cb7959f71bec9df8ac20da26670215eee77d7b7cbb8efd2b6c53f7f639607cfe658e650b0bbbeb919b31257fe0ef5c64741f6b950465542c7c1823a32ac042091fcd084e441a0210c767e41e79a73b782782a036b390b4fc8a08ba28619e045d2cf648466f0780f1569c3fa16d6199cafd7adff417af1d0aa30c4215cd5ff9f78fc01d6873e15464fee1633c5f992394b926d6a538df377907be87c38086699f3a85e8c6d9876232faa3264ed45810ba811852d18bbf97d8cbfb6a49851e1e73d3498d3109a1d8240a6f3cf794b55b1ec64647d58aa3c3a02b6e4bc92076a4aa91c64f5f08bebbb659e7b5d1670185b32f34c7056ca09c434abc6f5096c48a5ac6ac26264540c6b7afc5493f0800"], 0x1e8}, 0x1, 0x0, 0x0, 0x2400d001}, 0x6400c045)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0)

34.615803569s ago: executing program 4 (id=658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newtaction={0xe98, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x7}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x3ff}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x80000001, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x10001, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x5586, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x100, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0xa, 0x3cf1}, {0x7, 0x5ffd, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x80, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x1, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794, 0x1}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="43082cbd7000fbdbdf2504000000140001800800050003000000060001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000001)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r10, &(0x7f0000002100)='usbip-vudc.0', 0xc)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe6670293a1a9d8e6}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000005000500040000000800030005"], 0x34}, 0x1, 0x0, 0x0, 0x929e894a1b5b259d}, 0x20040050)
sendmsg$netlink(r1, &(0x7f0000001f80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfd, 0x404}, 0xc, &(0x7f0000001f40)=[{&(0x7f00000019c0)={0x204, 0x2a, 0x2, 0x70bd28, 0x25dfdbfd, "", [@nested={0xf4, 0x12f, 0x0, 0x1, [@typed={0xed, 0x1d, 0x0, 0x0, @binary="7e9f9a1b701fc0c275718e549e6fd8352e68ecb5fe14cc2dea28d35961b9424140c5a9cbfb9d1f4f31a3b2674b1cb28d28530890a4f87f77496b06a40b87b07967caec3f05fe087b5e95d2c43f38b2b5894a815a7a43d8743fc49671f02a287d27a25b2073b09f3ab12dac8d9bccd08121648639a6feeb584ca5905463ede197a47cf0ba993774e0febce72ec33c73ffcce75414207714a0535d6bd25643ffcea136da342e4255519474eab6c3b704ce978cffaac99226113551aeb2a1245966014b852be4c35a2e36bbc26d12193c6be4997c7ec757aee2858c1604fff4c4f2c40f19f5a2a8d7562a"}]}, @generic="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"]}, 0x204}, {&(0x7f0000001c00)={0x30c, 0x25, 0xa, 0x70bd28, 0x25dfdbfd, "", [@generic="7fd798b5eb78ca2eb60d3930a90174d177dd2021ae621b0afe4f558fc60ec38ee9713f3142ec62be8344b7ccb88c34adacc729e830bec5983d406f671634cd4994efb13f54c9ae355574d93763f5e1d850394cdc0ee0ca45e2058ce8a015533ba3b9041d3cbbdd3fef472a4ef6c7077fd13a258a5301fc0c54666cb56513722094f25a9ee7b6c88a73c134daa55fbd5d41fc1d35da6d1d15317369df9c93b39767a880104fbe887d8f649aca31876b05d35831581dc02a7824784c65e51f62d01ec1427591046e7b", @generic="689965bd151aa1c2e4022c37ec02d73a39c7862a20b64d7be4bfbdf361b54fe6314959aece8b72900509dac306747759b7a161ce44583478ac4fe9e8e998e0d6cf9a7dfe57db9914049984f448f50ebb1cb5351778d16ba112e6bd7b10aca626acb951f84a5d864adeb4405d35947b7cc5e7cf7cad365419fe401a94a74e021918f5885c0ac27dab3acc210e4049ff2ce036f389f6c95bf027c6b8b5cac262ea3836e345edd8494bcaae4107e50c98cabf946d40a784574a0ddd0c720f2ef329064d01832fd6eac784b1019b1ea3e8aeb82d291087d1e8dc96136a510fd5eb29565f7ed5b35943a47744c2b233888e29", @nested={0x74, 0x6, 0x0, 0x1, [@typed={0x9, 0x4, 0x0, 0x0, @str='IPVS\x00'}, @generic="2e51dd7230a74a59ba523268818099f3e681bde3677d6d340a55edfea878497697121cd9a75c44cf40f0c1913b2f626deba949583d688210d38a1d1ca2a43621", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@remote}, @typed={0xd, 0x152, 0x0, 0x0, @str='configfs\x00'}, @nested={0x4, 0x159}, @nested={0x4, 0x4c}, @nested={0x4, 0x5c}]}, @generic="b123ef66da54df51dce25a3297b3964fc54d832fd5e1abc500d3e97d9f89e1c2b31917f1b046f9712e5e187b8db611008a29c464824cc81aec6ead407acba2a4af4f9e5b403a1b4a181f882a1b4e5f36f1937d2012ad0f0260c11dc5ea77deaf331461d4c96cb2ba786c5d61e1322202a27ab2dd208525c8dec39e5bd7e149a4c5fed117f90844823cbfd4e227e41a68e6f2dc24fe1a0f8fa97d9ecfcd549fd314dbe74dd09d09856651f95ac5559b9a690cf60e00c85bc6659361ba8aacd3c17cb5b5e7f5f3eded3b64e6abb205"]}, 0x30c}], 0x2, 0x0, 0x0, 0x8890}, 0x4000)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r10, 0x40786e88, &(0x7f0000001940)={{&(0x7f0000001640)=[{0x5, 0x7, 0xd, {0x1, 0x2}, 0xd, 0x2, 0x630}, {0x5, 0x5, 0x8, {0x1b7, 0x9}, 0x100, 0x6, 0x4}, {0x7, 0x9, 0x2, {0x7}, 0x0, 0x7, 0x1}, {0x66, 0x10000, 0x2, {0xfffffffffffffffe, 0x6}, 0x9, 0x6, 0xba5d}, {0x6, 0x4, 0x8000, {0x2, 0x3}, 0x8, 0x5, 0x4}, {0x1, 0x4, 0x8, {0x81}, 0x4, 0x3, 0x80}, {0x7, 0x6, 0x8, {0xff, 0x10001}, 0x5, 0x6, 0x7fffffff}], 0x7, 0x40, 0x2, 0xde35f2a}, {&(0x7f0000001800)=[{0x9, 0xc}, {0x7fffffff, 0x7fffffffffffffff}], 0x2, 0x10, 0x8, 0x8000000000000001}, {&(0x7f0000001840)=[0xe940, 0x6, 0x0, 0x99], 0x4, 0x8, 0x0, 0x4}, {&(0x7f0000001880)=[{0x0, 0xfffffffffffffffe, 0x9, 0xb}], 0x1, 0x28, 0x2, 0x80}, {&(0x7f00000018c0)=[0x8, 0x800, 0x6, 0x89e8, 0x1, 0x5, 0x8, 0x7f, 0xe], 0x9, 0x8, 0x3}})

32.811483554s ago: executing program 2 (id=659):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x2)
fchdir(r5)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0xed)
rmdir(&(0x7f0000000280)='./file0/file0\x00')
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r6, r6)
setpgid(0x0, r6)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0x20ce, r2}, 0x38)

30.354776376s ago: executing program 32 (id=648):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000010000800d00000001000000", @ANYRES64=r1, @ANYBLOB="00000080000000000000000000000000000000001cf1f42792915998584027923dded403243abc974446b177f3cbd1ee4922c549ba1b6218581a1ce73d2c918f5133dbf9c2e087164ff8c761b074c87a4e901aa2e568c0246e6b54b4ad68f0def211d4576b263ef96a187b", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00')
get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000102000/0x4000)=nil, 0x3)
lseek(r2, 0x10001, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000eba1c5620200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000140000001100"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x17}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)

26.767336184s ago: executing program 33 (id=650):
socket$xdp(0x2c, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a1f0400000000000000000a0000440900010073797a3100000000200004801c0001800a00010072616e67650000000c00028008000140000000110900020073797a3200000000140000001100010000000000000000000500000a56a89dcd3e8991fa9ac5af1aaac1a72e2018feddb092"], 0x74}, 0x1, 0x0, 0x0, 0x20000084}, 0x24000840)
socket$unix(0x1, 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b)
write$UHID_INPUT2(r7, &(0x7f0000000d00)={0xc, {0xc, "11ff04200000000000000000"}}, 0x12)
write$UHID_INPUT2(r7, &(0x7f0000000e00)={0xc, {0x2, "11ff"}}, 0x8)
write$tun(r6, &(0x7f0000000c00)={@val={0x0, 0x88f7}, @void, @ipv6=@icmpv6={0x3, 0x6, "a5bfd3", 0x21c, 0x3a, 0x0, @remote, @mcast2, {[@srh={0x7, 0x4, 0x4, 0x2, 0x9, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2b}, @ipv4={'\x00', '\xff\xff', @remote}]}, @hopopts={0x32, 0x2a, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xff}, @generic={0x7, 0x9a, "ad8fffdfd0748bc3b3da9373d4f42aa8503f05a8df143b3bc831fb777e88ea5a90ac0f541dcf06635defddb3577e61fbde944b1d21d6b38fb8c5299d5e8f580166df1342fe4d46e0d19ca12dc5aac424b59b6212469fe0b548a7cd896eb5f1b13412571c5b5611be871aefb71bfa3f8cf57a1fd62a72dc17f1840500d5d9e18c0ad37962cd230262cb18dd5480bda661bb69b52f21103ad5d994"}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim, @enc_lim={0x4, 0x1, 0x6}, @generic={0x7, 0x8f, "2daaf5b23345738fbf80d9a5068661346cf7261d961a1bb21d013b2f3e21832379213b855acff8b893ba6ee76e2a367cd8f7caa7db4c3b300ee1e765f8e8bda690bc2a02d9f8c6a3a7581edd3fe5d7882d81897a999eb7140d63d4830f3067980541a68b9d6f7bd1c125a42651bfe42af3743b01790f4c95c65c1121e2ebb64a4b9ab4c89f837399a7f638296bdbf2"}]}, @dstopts={0x2c, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x10}, @generic={0x3c, 0x30, "d2fb09e4279a0c8ed72bb16c1cfa07a762e8cc266ec96cfe1747c680a8868607ccab9971c357a103f5fc40f683f033ed"}, @ra={0x5, 0x2, 0x4}, @generic={0x8}]}], @mlv2_query={0x82, 0x0, 0x0, 0x800, 0x4, @private0, 0x5, 0x1, 0x1, 0x5, 0x3, [@remote, @local, @mcast2]}}}}, 0x248)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_emit_ethernet(0x78, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020660b, &(0x7f0000000000)={0x47, 0xffffffffffffffff, 0x4, 0x9})

25.837941027s ago: executing program 4 (id=662):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00800018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r1, 0xda8d)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x2, 0x9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0xef}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000000c0)=0x6311, 0x4)
sendmmsg(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015)
recvmmsg(r8, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002340)=[{0x0}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2002, 0x0)

23.353388059s ago: executing program 2 (id=663):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0xd, 0x2, 0xfffffffe})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file4\x00'}, 0x6e)
ioctl$sock_proto_private(r1, 0x89e0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:1c*7:9.19\x00'], 0x15)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800)
socket(0x10, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000000000000000000700000000000000b343c56931e9bdde5c0b4375f03034fe0bfdce103034e24afec208a09e69822aaa90f5d9b4a0ecac686a5ed9bf5b57f5113fa496fc008d6ce796051a4276dc24c2acc482137d0758990d904485fa4e86f96c4c434ead38df4a85fbce586e2fcc73889afbf55f315de30a0cf53331262a85fbc0e579f97f8b5ca33216fa36b235443aab343a6b971984210d11de261ea3f6be89bda84751a03749c4158c727f99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014090000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004528001c000100000002907809000000e00000010f00907800030003"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8404)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r7, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00')
socket$inet_tcp(0x2, 0x1, 0x0)

21.163758384s ago: executing program 34 (id=656):
io_setup(0xbf, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = getpid() (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xffffc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
r2 = signalfd(0xffffffffffffffff, 0x0, 0x0)
setns(r1, 0x24020000)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) (async)
syz_clone(0x51801400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={<r3=>0x0, 0x800}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x7e, 0x2f00}, 0x90)
io_submit(0x0, 0x0, 0x0)

17.121980114s ago: executing program 2 (id=665):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
write$sndseq(r4, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000140)={0x6, 0x1, {0x2, 0x2, 0xfd1e, 0x3, 0x3}, 0x25})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r5)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0))
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffa, 0x1222e2)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000280)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "37b4cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c00000000000000084cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffceb, 0x7fffffffffffffff]}})
sendfile(r7, r8, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0xe9, &(0x7f0000000400)=""/233, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x80000001, 0x2}, 0x10, 0x0, r1, 0x4, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r8], &(0x7f0000000a00)=[{0x3, 0x5, 0x10, 0x4}, {0x3, 0x2, 0x5, 0xc}, {0x1, 0x4, 0xc, 0x1}, {0x5, 0x4, 0xa, 0x9}], 0x10, 0x2}, 0x94)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40480c0)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x6}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

9.979639422s ago: executing program 35 (id=662):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00800018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r1, 0xda8d)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x2, 0x9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0xef}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000000c0)=0x6311, 0x4)
sendmmsg(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015)
recvmmsg(r8, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002340)=[{0x0}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2002, 0x0)

0s ago: executing program 36 (id=665):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
write$sndseq(r4, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000140)={0x6, 0x1, {0x2, 0x2, 0xfd1e, 0x3, 0x3}, 0x25})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r5)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0))
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffa, 0x1222e2)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000280)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "37b4cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c00000000000000084cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffceb, 0x7fffffffffffffff]}})
sendfile(r7, r8, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0xe9, &(0x7f0000000400)=""/233, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x80000001, 0x2}, 0x10, 0x0, r1, 0x4, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r8], &(0x7f0000000a00)=[{0x3, 0x5, 0x10, 0x4}, {0x3, 0x2, 0x5, 0xc}, {0x1, 0x4, 0xc, 0x1}, {0x5, 0x4, 0xa, 0x9}], 0x10, 0x2}, 0x94)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40480c0)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x6}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
[   28.801238][   T28] audit: type=1400 audit(1786224235.409:117): avc:  denied  { mounton } for  pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   28.824281][   T28] audit: type=1400 audit(1786224235.439:118): avc:  denied  { mount } for  pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.825015][ T3283] cgroup: Unknown subsys name 'net'
[   28.852076][   T28] audit: type=1400 audit(1786224235.469:119): avc:  denied  { unmount } for  pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.992911][ T3283] cgroup: Unknown subsys name 'cpuset'
[   28.998926][ T3283] cgroup: Unknown subsys name 'rlimit'
[   29.127741][   T28] audit: type=1400 audit(1786224235.739:120): avc:  denied  { setattr } for  pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   29.151094][   T28] audit: type=1400 audit(1786224235.739:121): avc:  denied  { create } for  pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.171624][   T28] audit: type=1400 audit(1786224235.739:122): avc:  denied  { write } for  pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.192197][   T28] audit: type=1400 audit(1786224235.739:123): avc:  denied  { read } for  pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   29.198742][ T3288] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   29.212762][   T28] audit: type=1400 audit(1786224235.739:124): avc:  denied  { mounton } for  pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   29.246045][   T28] audit: type=1400 audit(1786224235.739:125): avc:  denied  { mount } for  pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   29.269375][   T28] audit: type=1400 audit(1786224235.739:126): avc:  denied  { read } for  pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   29.291749][ T3283] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   30.566221][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.573610][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.580729][ T3303] bridge_slave_0: entered allmulticast mode
[   30.587277][ T3303] bridge_slave_0: entered promiscuous mode
[   30.593720][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.600882][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.608107][ T3301] bridge_slave_0: entered allmulticast mode
[   30.614387][ T3301] bridge_slave_0: entered promiscuous mode
[   30.628131][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.635293][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.642429][ T3303] bridge_slave_1: entered allmulticast mode
[   30.648741][ T3303] bridge_slave_1: entered promiscuous mode
[   30.655392][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.662456][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.669534][ T3301] bridge_slave_1: entered allmulticast mode
[   30.675923][ T3301] bridge_slave_1: entered promiscuous mode
[   30.727210][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.737460][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.748865][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.756026][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.763171][ T3294] bridge_slave_0: entered allmulticast mode
[   30.769458][ T3294] bridge_slave_0: entered promiscuous mode
[   30.775903][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.782977][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.790095][ T3295] bridge_slave_0: entered allmulticast mode
[   30.796482][ T3295] bridge_slave_0: entered promiscuous mode
[   30.803525][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.813541][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.828385][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.835497][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.842617][ T3294] bridge_slave_1: entered allmulticast mode
[   30.848957][ T3294] bridge_slave_1: entered promiscuous mode
[   30.855159][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.862307][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.869425][ T3295] bridge_slave_1: entered allmulticast mode
[   30.875976][ T3295] bridge_slave_1: entered promiscuous mode
[   30.909648][ T3301] team0: Port device team_slave_0 added
[   30.915925][ T3303] team0: Port device team_slave_0 added
[   30.921622][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.928842][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.936003][ T3302] bridge_slave_0: entered allmulticast mode
[   30.942252][ T3302] bridge_slave_0: entered promiscuous mode
[   30.957391][ T3301] team0: Port device team_slave_1 added
[   30.967895][ T3303] team0: Port device team_slave_1 added
[   30.981485][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.988656][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.995820][ T3302] bridge_slave_1: entered allmulticast mode
[   31.002259][ T3302] bridge_slave_1: entered promiscuous mode
[   31.009533][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.019745][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.033107][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.040054][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.065981][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.076987][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.083947][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.109923][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.125335][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.135301][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.148475][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.155435][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.181405][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.192446][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.199475][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.225359][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.252061][ T3295] team0: Port device team_slave_0 added
[   31.259277][ T3295] team0: Port device team_slave_1 added
[   31.265981][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.280394][ T3294] team0: Port device team_slave_0 added
[   31.287362][ T3294] team0: Port device team_slave_1 added
[   31.297792][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.338267][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.345256][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.371292][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.386871][ T3302] team0: Port device team_slave_0 added
[   31.394461][ T3303] hsr_slave_0: entered promiscuous mode
[   31.400416][ T3303] hsr_slave_1: entered promiscuous mode
[   31.406622][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.413590][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.439549][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.450573][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.457557][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.483517][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.496012][ T3301] hsr_slave_0: entered promiscuous mode
[   31.501910][ T3301] hsr_slave_1: entered promiscuous mode
[   31.507747][ T3301] debugfs: 'hsr0' already exists in 'hsr'
[   31.513466][ T3301] Cannot create hsr debugfs directory
[   31.519624][ T3302] team0: Port device team_slave_1 added
[   31.529225][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.536221][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.562449][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.595059][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.602020][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.628124][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.659358][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.666371][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   31.692438][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.705482][ T3295] hsr_slave_0: entered promiscuous mode
[   31.711302][ T3295] hsr_slave_1: entered promiscuous mode
[   31.717209][ T3295] debugfs: 'hsr0' already exists in 'hsr'
[   31.722959][ T3295] Cannot create hsr debugfs directory
[   31.741259][ T3294] hsr_slave_0: entered promiscuous mode
[   31.747240][ T3294] hsr_slave_1: entered promiscuous mode
[   31.753128][ T3294] debugfs: 'hsr0' already exists in 'hsr'
[   31.758859][ T3294] Cannot create hsr debugfs directory
[   31.821070][ T3302] hsr_slave_0: entered promiscuous mode
[   31.827029][ T3302] hsr_slave_1: entered promiscuous mode
[   31.832996][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   31.838743][ T3302] Cannot create hsr debugfs directory
[   31.970428][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.978513][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.986094][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.994662][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.002193][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.010556][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.020587][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.029190][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.053805][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.062595][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.070774][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.079211][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.086962][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.095360][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.107951][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.116317][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.141996][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.150547][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.158182][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.166909][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.174826][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.183226][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.191475][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.200012][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.228321][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.236704][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.247897][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.256397][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.263977][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.272207][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.280571][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.289214][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.315452][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.326227][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.334741][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   32.342994][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.350980][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   32.358773][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.366948][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   32.374881][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.383248][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   32.419066][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   32.433957][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.441101][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.463120][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.472986][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.480111][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.499698][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.516053][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   32.526478][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.547525][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.555132][ T3294] 8021q: adding VLAN 0 to HW filter on device team0
[   32.564470][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.571513][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.589228][ T3303] 8021q: adding VLAN 0 to HW filter on device team0
[   32.599781][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.606853][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.618833][ T3295] 8021q: adding VLAN 0 to HW filter on device team0
[   32.631645][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.638755][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.647549][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.654673][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.663330][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.670380][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.679200][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.686250][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.695818][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.725758][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   32.752892][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.759972][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.775394][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.782489][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.845619][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.992804][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.025903][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.033434][ T3301] veth0_vlan: entered promiscuous mode
[   33.040693][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.051911][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.069034][ T3301] veth1_vlan: entered promiscuous mode
[   33.093936][ T3301] veth0_macvtap: entered promiscuous mode
[   33.108374][ T3301] veth1_macvtap: entered promiscuous mode
[   33.141932][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.154008][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.206649][   T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.225646][ T3294] veth0_vlan: entered promiscuous mode
[   33.237155][ T3302] veth0_vlan: entered promiscuous mode
[   33.254741][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.264291][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.265347][ T3294] veth1_vlan: entered promiscuous mode
[   33.289360][ T3302] veth1_vlan: entered promiscuous mode
[   33.299159][ T3303] veth0_vlan: entered promiscuous mode
[   33.311422][ T3303] veth1_vlan: entered promiscuous mode
[   33.338479][ T3295] veth0_vlan: entered promiscuous mode
[   33.355444][ T3302] veth0_macvtap: entered promiscuous mode
[   33.362808][   T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.374057][ T3303] veth0_macvtap: entered promiscuous mode
[   33.382027][ T3295] veth1_vlan: entered promiscuous mode
[   33.391740][ T3302] veth1_macvtap: entered promiscuous mode
[   33.406017][ T3294] veth0_macvtap: entered promiscuous mode
[   33.414365][ T3294] veth1_macvtap: entered promiscuous mode
[   33.422573][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.431821][ T3303] veth1_macvtap: entered promiscuous mode
[   33.451650][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.460838][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.469573][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.480965][ T3295] veth0_macvtap: entered promiscuous mode
[   33.488859][ T3295] veth1_macvtap: entered promiscuous mode
[   33.499943][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.541957][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.552164][ T3504] ipvlan2: entered allmulticast mode
[   33.557773][ T3504] ip6gretap0: entered allmulticast mode
[   33.564612][ T3504] batman_adv: batadv0: Adding interface: ipvlan2
[   33.570962][ T3504] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   33.590535][ T3505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6'.
[   33.596908][ T3504] batman_adv: batadv0: Interface activated: ipvlan2
[   33.612546][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.626631][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.636530][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   33.648031][ T3476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.662574][   T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.671358][   T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.680585][   T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.700025][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.743911][ T3476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.815541][   T28] kauditd_printk_skb: 38 callbacks suppressed
[   33.815555][   T28] audit: type=1400 audit(1786224240.429:165): avc:  denied  { prog_load } for  pid=3516 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   33.840502][   T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.840851][   T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.884629][   T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.897565][ T3525] FAULT_INJECTION: forcing a failure.
[   33.897565][ T3525] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   33.898352][   T28] audit: type=1400 audit(1786224240.429:166): avc:  denied  { create } for  pid=3516 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.933355][   T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.941640][ T3523] loop3: detected capacity change from 0 to 512
[   33.950335][ T3525] CPU: 1 UID: 0 PID: 3525 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(lazy) 
[   33.950358][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   33.950400][ T3525] Call Trace:
[   33.950405][ T3525]  <TASK>
[   33.950412][ T3525]  __dump_stack+0x1d/0x30
[   33.950476][ T3525]  dump_stack_lvl+0x95/0xd0
[   33.950520][ T3525]  dump_stack+0x15/0x1b
[   33.950537][ T3525]  should_fail_ex+0x25e/0x270
[   33.950569][ T3525]  should_fail+0xb/0x20
[   33.950591][ T3525]  should_fail_usercopy+0x1a/0x20
[   33.950615][ T3525]  _copy_from_user+0x1c/0xb0
[   33.950631][ T3525]  __copy_msghdr+0x242/0x300
[   33.950653][ T3525]  ___sys_sendmsg+0x10c/0x1e0
[   33.950679][ T3525]  __x64_sys_sendmsg+0xd4/0x160
[   33.950699][ T3525]  x64_sys_call+0x194c/0x3020
[   33.950717][ T3525]  do_syscall_64+0x136/0x3c0
[   33.950777][ T3525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.950796][ T3525] RIP: 0033:0x7fab03e8e0d9
[   33.950858][ T3525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.950936][ T3525] RSP: 002b:00007fab028e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   33.950955][ T3525] RAX: ffffffffffffffda RBX: 00007fab04115fa0 RCX: 00007fab03e8e0d9
[   33.951030][ T3525] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[   33.951043][ T3525] RBP: 00007fab028e7090 R08: 0000000000000000 R09: 0000000000000000
[   33.951056][ T3525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.951067][ T3525] R13: 00007fab04116038 R14: 00007fab04115fa0 R15: 00007ffee6650a48
[   33.951081][ T3525]  </TASK>
[   33.964365][   T28] audit: type=1400 audit(1786224240.429:167): avc:  denied  { setopt } for  pid=3516 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.990182][ T3523] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   34.000604][ T3476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.068197][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'.
[   34.072653][   T28] audit: type=1400 audit(1786224240.429:168): avc:  denied  { write } for  pid=3516 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   34.183053][ T3476] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.188842][ T3533] loop4: detected capacity change from 0 to 512
[   34.191830][   T28] audit: type=1400 audit(1786224240.479:169): avc:  denied  { tracepoint } for  pid=3519 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   34.218558][   T28] audit: type=1400 audit(1786224240.539:170): avc:  denied  { create } for  pid=3519 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   34.243556][ T3533] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   34.255502][   T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.259997][ T3521] syz.0.1 (3521) used greatest stack depth: 11040 bytes left
[   34.270975][   T28] audit: type=1400 audit(1786224240.549:171): avc:  denied  { getopt } for  pid=3519 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   34.322278][ T3537] loop0: detected capacity change from 0 to 1024
[   34.323391][   T28] audit: type=1400 audit(1786224240.659:172): avc:  denied  { mount } for  pid=3522 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   34.348326][   T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.363271][   T28] audit: type=1400 audit(1786224240.659:173): avc:  denied  { create } for  pid=3522 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   34.382988][   T28] audit: type=1400 audit(1786224240.679:174): avc:  denied  { create } for  pid=3522 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.422636][   T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.444515][   T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.456037][ T3535] syzkaller0: entered promiscuous mode
[   34.456265][ T3537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.461766][ T3535] syzkaller0: entered allmulticast mode
[   34.513309][   T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.637333][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.670597][ T3550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'.
[   34.722909][ T3552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'.
[   34.782434][ T3555] loop0: detected capacity change from 0 to 512
[   34.805910][ T3555] =======================================================
[   34.805910][ T3555] WARNING: The mand mount option has been deprecated and
[   34.805910][ T3555]          and is ignored by this kernel. Remove the mand
[   34.805910][ T3555]          option from the mount to silence this warning.
[   34.805910][ T3555] =======================================================
[   34.875710][ T3555] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   34.885519][ T3557] loop4: detected capacity change from 0 to 512
[   34.904666][ T3557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   34.934498][ T3555] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   34.945660][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.989858][ T3557] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.046050][ T3569] FAULT_INJECTION: forcing a failure.
[   35.046050][ T3569] name failslab, interval 1, probability 0, space 0, times 1
[   35.066443][ T3567] Zero length message leads to an empty skb
[   35.070809][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT(lazy) 
[   35.070834][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.070844][ T3569] Call Trace:
[   35.070850][ T3569]  <TASK>
[   35.070858][ T3569]  __dump_stack+0x1d/0x30
[   35.070881][ T3569]  dump_stack_lvl+0x95/0xd0
[   35.070971][ T3569]  dump_stack+0x15/0x1b
[   35.070996][ T3569]  should_fail_ex+0x25e/0x270
[   35.071021][ T3569]  should_failslab+0x8c/0xb0
[   35.071041][ T3569]  __kmalloc_noprof+0xd4/0x4a0
[   35.071123][ T3569]  ? io_cache_alloc_new+0x2a/0xb0
[   35.071149][ T3569]  ? io_cache_alloc_new+0x2a/0xb0
[   35.071268][ T3569]  io_cache_alloc_new+0x2a/0xb0
[   35.071293][ T3569]  io_arm_apoll+0x234/0x420
[   35.071392][ T3569]  io_arm_poll_handler+0x121/0x150
[   35.071414][ T3569]  io_queue_async+0x276/0x330
[   35.071435][ T3569]  io_submit_sqes+0xaf0/0x1180
[   35.071486][ T3569]  __se_sys_io_uring_enter+0x25c/0xf90
[   35.071505][ T3569]  ? mutex_unlock+0x4e/0x90
[   35.071525][ T3569]  ? fput+0x8f/0xc0
[   35.071548][ T3569]  __x64_sys_io_uring_enter+0x78/0x90
[   35.071568][ T3569]  x64_sys_call+0x1e16/0x3020
[   35.071621][ T3569]  do_syscall_64+0x136/0x3c0
[   35.071670][ T3569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.071766][ T3569] RIP: 0033:0x7f7ed57fe0d9
[   35.071781][ T3569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   35.071796][ T3569] RSP: 002b:00007f7ed4257028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   35.071815][ T3569] RAX: ffffffffffffffda RBX: 00007f7ed5a85fa0 RCX: 00007f7ed57fe0d9
[   35.071828][ T3569] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[   35.071840][ T3569] RBP: 00007f7ed4257090 R08: 0000000000000000 R09: 0000000000000000
[   35.071888][ T3569] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[   35.071899][ T3569] R13: 00007f7ed5a86038 R14: 00007f7ed5a85fa0 R15: 00007fffa5a6d7e8
[   35.071915][ T3569]  </TASK>
[   35.075141][ T3539] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13'.
[   35.144968][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.288794][ T3567] loop3: detected capacity change from 0 to 764
[   35.392641][ T3577] tipc: Started in network mode
[   35.402381][ T3577] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[   35.428565][ T3577] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   35.531981][ T3586] loop4: detected capacity change from 0 to 4096
[   35.545066][ T3586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.582853][ T3586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.27'.
[   35.646325][ T3593] ipvlan2: entered allmulticast mode
[   35.652704][ T3593] ip6gretap0: entered allmulticast mode
[   35.678091][ T3593] batman_adv: batadv0: Adding interface: ipvlan2
[   35.686058][ T3593] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.712232][ T3593] batman_adv: batadv0: Interface activated: ipvlan2
[   35.754155][ T3593] syz.2.29 (3593) used greatest stack depth: 9856 bytes left
[   35.801814][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.918339][ T3585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'.
[   35.932896][ T3619] syzkaller0: entered promiscuous mode
[   35.939984][ T3619] syzkaller0: entered allmulticast mode
[   35.965333][ T3624] SET target dimension over the limit!
[   35.971374][ T3585] loop0: detected capacity change from 0 to 512
[   35.990604][ T3585] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   36.077057][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'.
[   36.086445][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'.
[   36.096118][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'.
[   36.161621][ T3646] loop4: detected capacity change from 0 to 512
[   36.171484][ T3646] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   36.195352][ T3646] EXT4-fs (loop4): orphan cleanup on readonly fs
[   36.204699][ T3646] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.47: bad orphan inode 15
[   36.215010][ T3646] loop4: lost filesystem error report for type 5 error -117
[   36.215152][ T3646] ext4_test_bit(bit=14, block=5) = 0
[   36.222475][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   36.222494][    C0] EXT4-fs (loop4): initial error at time 1786224242: ext4_orphan_get:1425
[   36.222532][    C0] EXT4-fs (loop4): last error at time 1786224242: ext4_orphan_get:1425
[   36.256350][ T3646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   36.287015][ T3644] loop1: detected capacity change from 0 to 764
[   36.313491][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.365144][ T3657] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   36.711870][ T3691] 9pnet: p9_errstr2errno: server reported unknown error 
[   36.877440][ T3713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.912167][ T3713] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.021804][ T3712] ext4: Unknown parameter 'smackfshat'
[   37.113640][ T3717] capability: warning: `syz.3.72' uses 32-bit capabilities (legacy support in use)
[   37.169454][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.300366][ T3727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.373124][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.504722][ T3751] 9p: Unknown access argument c: -22
[   37.648101][ T3766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.679065][ T3771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3771 comm=syz.0.95
[   37.769501][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.958144][ T3795] FAULT_INJECTION: forcing a failure.
[   37.958144][ T3795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   37.973473][ T3795] CPU: 0 UID: 0 PID: 3795 Comm: syz.1.103 Not tainted syzkaller #0 PREEMPT(lazy) 
[   37.973498][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   37.973546][ T3795] Call Trace:
[   37.973552][ T3795]  <TASK>
[   37.973559][ T3795]  __dump_stack+0x1d/0x30
[   37.973583][ T3795]  dump_stack_lvl+0x95/0xd0
[   37.973692][ T3795]  dump_stack+0x15/0x1b
[   37.973710][ T3795]  should_fail_ex+0x25e/0x270
[   37.973736][ T3795]  should_fail+0xb/0x20
[   37.973838][ T3795]  should_fail_usercopy+0x1a/0x20
[   37.973870][ T3795]  _copy_to_user+0x20/0xa0
[   37.973890][ T3795]  simple_read_from_buffer+0xb5/0x130
[   37.973992][ T3795]  proc_fail_nth_read+0x10e/0x150
[   37.974014][ T3795]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   37.974034][ T3795]  vfs_read+0x18e/0x7c0
[   37.974053][ T3795]  ? fdget_pos+0x13e/0x1d0
[   37.974151][ T3795]  ? mutex_lock+0x57/0x90
[   37.974213][ T3795]  ksys_read+0xdc/0x1a0
[   37.974285][ T3795]  __x64_sys_read+0x40/0x50
[   37.974300][ T3795]  x64_sys_call+0x2886/0x3020
[   37.974319][ T3795]  do_syscall_64+0x136/0x3c0
[   37.974341][ T3795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.974396][ T3795] RIP: 0033:0x7f7ed57be90e
[   37.974412][ T3795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   37.974429][ T3795] RSP: 002b:00007f7ed4256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   37.974448][ T3795] RAX: ffffffffffffffda RBX: 00007f7ed42576c0 RCX: 00007f7ed57be90e
[   37.974512][ T3795] RDX: 000000000000000f RSI: 00007f7ed42570a0 RDI: 0000000000000005
[   37.974684][ T3795] RBP: 00007f7ed4257090 R08: 0000000000000000 R09: 0000000000000000
[   37.974708][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.974721][ T3795] R13: 00007f7ed5a86038 R14: 00007f7ed5a85fa0 R15: 00007fffa5a6d7e8
[   37.974782][ T3795]  </TASK>
[   38.219019][ T3801] FAULT_INJECTION: forcing a failure.
[   38.219019][ T3801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   38.237833][ T3801] CPU: 0 UID: 0 PID: 3801 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT(lazy) 
[   38.237858][ T3801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   38.237891][ T3801] Call Trace:
[   38.237898][ T3801]  <TASK>
[   38.237905][ T3801]  __dump_stack+0x1d/0x30
[   38.237927][ T3801]  dump_stack_lvl+0x95/0xd0
[   38.237945][ T3801]  dump_stack+0x15/0x1b
[   38.237961][ T3801]  should_fail_ex+0x25e/0x270
[   38.238061][ T3801]  should_fail+0xb/0x20
[   38.238145][ T3801]  should_fail_usercopy+0x1a/0x20
[   38.238170][ T3801]  _copy_from_user+0x1c/0xb0
[   38.238187][ T3801]  ___sys_sendmsg+0xc1/0x1e0
[   38.238284][ T3801]  __x64_sys_sendmsg+0xd4/0x160
[   38.238347][ T3801]  x64_sys_call+0x194c/0x3020
[   38.238369][ T3801]  do_syscall_64+0x136/0x3c0
[   38.238394][ T3801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.238413][ T3801] RIP: 0033:0x7f7e7aade0d9
[   38.238494][ T3801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   38.238534][ T3801] RSP: 002b:00007f7e79537028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   38.238554][ T3801] RAX: ffffffffffffffda RBX: 00007f7e7ad65fa0 RCX: 00007f7e7aade0d9
[   38.238568][ T3801] RDX: 0000000004000002 RSI: 0000200000000400 RDI: 0000000000000003
[   38.238580][ T3801] RBP: 00007f7e79537090 R08: 0000000000000000 R09: 0000000000000000
[   38.238593][ T3801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.238668][ T3801] R13: 00007f7e7ad66038 R14: 00007f7e7ad65fa0 R15: 00007fffd2f820e8
[   38.238686][ T3801]  </TASK>
[   38.403936][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.522093][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.561061][ T3823] syz.4.115 uses obsolete (PF_INET,SOCK_PACKET)
[   38.937000][ T3843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.962972][ T3834] set_capacity_and_notify: 10 callbacks suppressed
[   38.963027][ T3834] loop2: detected capacity change from 0 to 764
[   38.992167][ T3843] __nla_validate_parse: 17 callbacks suppressed
[   38.992183][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'.
[   39.013666][ T3847] loop0: detected capacity change from 0 to 512
[   39.036197][ T3847] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.069624][ T3818] netlink: 168 bytes leftover after parsing attributes in process `syz.1.116'.
[   39.102478][ T3847] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   39.113903][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.132225][   T28] kauditd_printk_skb: 131 callbacks suppressed
[   39.132268][   T28] audit: type=1400 audit(2000000001.170:306): avc:  denied  { append } for  pid=3853 comm="syz.2.129" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   39.194962][   T28] audit: type=1400 audit(2000000001.220:307): avc:  denied  { read } for  pid=3853 comm="syz.2.129" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   39.273777][ T3860] loop4: detected capacity change from 0 to 2048
[   39.274406][   T28] audit: type=1400 audit(2000000001.220:308): avc:  denied  { open } for  pid=3853 comm="syz.2.129" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   39.326392][ T3866] No such timeout policy "syz1"
[   39.345773][ T3860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.358290][   T28] audit: type=1400 audit(2000000001.220:309): avc:  denied  { write } for  pid=3853 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   39.394740][   T28] audit: type=1400 audit(2000000001.270:310): avc:  denied  { write } for  pid=3853 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   39.417869][   T28] audit: type=1400 audit(2000000001.370:311): avc:  denied  { ioctl } for  pid=3853 comm="syz.2.129" path="socket:[6515]" dev="sockfs" ino=6515 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   39.449985][   T28] audit: type=1400 audit(2000000001.370:312): avc:  denied  { ioctl } for  pid=3853 comm="syz.2.129" path="socket:[6516]" dev="sockfs" ino=6516 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   39.475770][   T28] audit: type=1400 audit(2000000001.430:313): avc:  denied  { getopt } for  pid=3859 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   39.531781][ T3825] netlink: 168 bytes leftover after parsing attributes in process `syz.3.117'.
[   39.621208][   T28] audit: type=1400 audit(2000000001.660:314): avc:  denied  { bind } for  pid=3884 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   39.730999][   T28] audit: type=1400 audit(2000000001.770:315): avc:  denied  { ioctl } for  pid=3884 comm="syz.1.131" path="socket:[6532]" dev="sockfs" ino=6532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   39.979725][ T3857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.129'.
[   40.115431][ T3997] loop2: detected capacity change from 0 to 4096
[   40.135109][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.153499][ T4003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.140'.
[   40.153753][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.193837][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[   40.290517][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.316821][ T4011] netlink: 36 bytes leftover after parsing attributes in process `syz.3.143'.
[   40.361747][ T4000] loop1: detected capacity change from 0 to 764
[   40.417586][ T4019] netlink: 236 bytes leftover after parsing attributes in process `syz.2.146'.
[   40.427440][ T4017] program syz.0.145 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   40.437198][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'.
[   40.474171][ T4021] sch_tbf: peakrate 5120 is lower than or equals to rate 67108864 !
[   40.576584][ T4023] loop2: detected capacity change from 0 to 1024
[   40.591406][ T4023] EXT4-fs: Ignoring removed bh option
[   40.605566][ T4029] netlink: 168 bytes leftover after parsing attributes in process `syz.4.141'.
[   40.653901][ T4023] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   40.809866][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.765031][ T4056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=4056 comm=syz.0.158
[   42.120304][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.173845][ T4067] loop1: detected capacity change from 0 to 512
[   42.221170][ T4067] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   42.240102][ T4077] C: renamed from veth1_to_team (while UP)
[   42.247315][ T4067] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.163: invalid block
[   42.266182][ T4077] netlink: 'syz.2.157': attribute type 3 has an invalid length.
[   42.268491][ T4067] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   42.275223][ T4067] EXT4-fs (loop1): Remounting filesystem read-only
[   42.284763][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   42.284792][    C0] EXT4-fs (loop1): initial error at time 2000000004: ext4_get_branch:178: inode 13: block 1024
[   42.285034][    C0] EXT4-fs (loop1): last error at time 2000000004: ext4_get_branch:178: inode 13: block 1024
[   42.322975][ T4067] EXT4-fs (loop1): 1 truncate cleaned up
[   42.335696][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.356202][ T4067] EXT4-fs (loop1): shut down requested (2)
[   42.380044][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.420808][ T4087] loop4: detected capacity change from 0 to 512
[   42.439824][ T4085] loop3: detected capacity change from 0 to 1024
[   42.456008][ T4085] EXT4-fs: Ignoring removed bh option
[   42.485687][ T4085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.535771][ T4087] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[   42.543537][ T4087] FAT-fs (loop4): error, corrupted file size (i_pos 51, 8960)
[   42.574028][ T4085] EXT4-fs (loop3): shut down requested (2)
[   42.623839][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.833144][ T4116] loop3: detected capacity change from 0 to 4096
[   42.861433][ T4116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.898186][ T4109] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   42.944828][ T4109] EXT4-fs (loop4): 1 truncate cleaned up
[   42.956883][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.982710][ T4109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.087018][ T4109] EXT4-fs (loop4): shut down requested (2)
[   43.182846][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.211894][ T4144] iso9660: Corrupted directory entry in block 2 of inode 1792
[   43.266628][ T4147] FAT-fs (loop1): Directory bread(block 2080) failed
[   43.278279][ T4147] FAT-fs (loop1): Directory bread(block 2081) failed
[   43.286054][ T4147] FAT-fs (loop1): Directory bread(block 2082) failed
[   43.295050][ T4147] FAT-fs (loop1): Directory bread(block 2083) failed
[   43.302519][ T4147] FAT-fs (loop1): Directory bread(block 2084) failed
[   43.309708][ T4147] FAT-fs (loop1): Directory bread(block 2085) failed
[   43.328549][ T4147] FAT-fs (loop1): Directory bread(block 2086) failed
[   43.342273][ T4147] FAT-fs (loop1): Directory bread(block 2087) failed
[   43.371044][ T4147] FAT-fs (loop1): Directory bread(block 2080) failed
[   43.397742][ T4147] FAT-fs (loop1): Directory bread(block 2081) failed
[   43.458940][ T4169] netlink: 'syz.0.201': attribute type 5 has an invalid length.
[   43.707526][ T4176] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   43.770130][ T4176] EXT4-fs (loop4): 1 truncate cleaned up
[   43.814340][ T4176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.873932][ T4176] EXT4-fs (loop4): shut down requested (2)
[   43.927366][ T4203] syz.3.212 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   43.969083][ T3414] IPVS: starting estimator thread 0...
[   43.976872][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.072396][ T4207] IPVS: using max 2736 ests per chain, 136800 per kthread
[   44.109646][ T4219] bridge1: entered promiscuous mode
[   44.122439][ T4219] bridge1: entered allmulticast mode
[   44.183825][ T4228] FAULT_INJECTION: forcing a failure.
[   44.183825][ T4228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.197556][ T4228] CPU: 1 UID: 0 PID: 4228 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(lazy) 
[   44.197636][ T4228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.197645][ T4228] Call Trace:
[   44.197651][ T4228]  <TASK>
[   44.197658][ T4228]  __dump_stack+0x1d/0x30
[   44.197732][ T4228]  dump_stack_lvl+0x95/0xd0
[   44.197751][ T4228]  dump_stack+0x15/0x1b
[   44.197768][ T4228]  should_fail_ex+0x25e/0x270
[   44.197809][ T4228]  should_fail+0xb/0x20
[   44.197907][ T4228]  should_fail_usercopy+0x1a/0x20
[   44.197943][ T4228]  _copy_from_iter+0x20c/0xe70
[   44.197978][ T4228]  ? ip_route_output_key_hash_rcu+0x11de/0x1320
[   44.198016][ T4228]  raw_send_hdrinc+0x595/0x9f0
[   44.198063][ T4228]  raw_sendmsg+0xe61/0x1080
[   44.198087][ T4228]  ? __pfx_raw_sendmsg+0x10/0x10
[   44.198144][ T4228]  inet_sendmsg+0xc5/0xd0
[   44.198162][ T4228]  ? __pfx_inet_sendmsg+0x10/0x10
[   44.198179][ T4228]  ____sys_sendmsg+0x4e8/0x580
[   44.198201][ T4228]  ___sys_sendmsg+0x195/0x1e0
[   44.198265][ T4228]  __x64_sys_sendmsg+0xd4/0x160
[   44.198286][ T4228]  x64_sys_call+0x194c/0x3020
[   44.198307][ T4228]  do_syscall_64+0x136/0x3c0
[   44.198333][ T4228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.198354][ T4228] RIP: 0033:0x7f781bbae0d9
[   44.198372][ T4228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.198387][ T4228] RSP: 002b:00007f781a607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.198406][ T4228] RAX: ffffffffffffffda RBX: 00007f781be35fa0 RCX: 00007f781bbae0d9
[   44.198451][ T4228] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003
[   44.198463][ T4228] RBP: 00007f781a607090 R08: 0000000000000000 R09: 0000000000000000
[   44.198475][ T4228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.198486][ T4228] R13: 00007f781be36038 R14: 00007f781be35fa0 R15: 00007ffc63e9fbc8
[   44.198500][ T4228]  </TASK>
[   44.455484][ T4239] __nla_validate_parse: 9 callbacks suppressed
[   44.455564][ T4239] netlink: 68 bytes leftover after parsing attributes in process `syz.0.224'.
[   44.481429][ T4239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'.
[   44.532252][ T4237] set_capacity_and_notify: 5 callbacks suppressed
[   44.532274][ T4237] loop4: detected capacity change from 0 to 512
[   44.586960][ T4237] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   44.598431][ T4237] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.223: invalid block
[   44.640705][ T4237] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   44.641746][ T4237] EXT4-fs (loop4): Remounting filesystem read-only
[   44.651156][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   44.651204][    C1] EXT4-fs (loop4): initial error at time 2000000006: ext4_get_branch:178: inode 13: block 1024
[   44.651376][    C1] EXT4-fs (loop4): last error at time 2000000006: ext4_get_branch:178: inode 13: block 1024
[   44.698827][   T28] kauditd_printk_skb: 61 callbacks suppressed
[   44.698842][   T28] audit: type=1400 audit(2000000006.740:377): avc:  denied  { ioctl } for  pid=4246 comm="syz.0.228" path="socket:[7005]" dev="sockfs" ino=7005 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   44.756505][ T4237] EXT4-fs (loop4): 1 truncate cleaned up
[   44.766622][ T4237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.791847][ T4237] EXT4-fs (loop4): shut down requested (2)
[   44.813828][   T28] audit: type=1400 audit(2000000006.860:378): avc:  denied  { write } for  pid=4236 comm="syz.4.223" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   44.886579][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.917073][ T4273] FAULT_INJECTION: forcing a failure.
[   44.917073][ T4273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.940472][ T4273] CPU: 0 UID: 0 PID: 4273 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(lazy) 
[   44.940548][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.940560][ T4273] Call Trace:
[   44.940567][ T4273]  <TASK>
[   44.940575][ T4273]  __dump_stack+0x1d/0x30
[   44.940598][ T4273]  dump_stack_lvl+0x95/0xd0
[   44.940689][ T4273]  dump_stack+0x15/0x1b
[   44.940703][ T4273]  should_fail_ex+0x25e/0x270
[   44.940747][ T4273]  should_fail+0xb/0x20
[   44.940842][ T4273]  should_fail_usercopy+0x1a/0x20
[   44.940864][ T4273]  _copy_from_iter+0xcc/0xe70
[   44.940942][ T4273]  ? __alloc_skb+0x511/0x6f0
[   44.940990][ T4273]  ? __alloc_skb+0x205/0x6f0
[   44.941015][ T4273]  netlink_sendmsg+0x4a4/0x6f0
[   44.941072][ T4273]  ? __pfx_netlink_sendmsg+0x10/0x10
[   44.941093][ T4273]  ____sys_sendmsg+0x532/0x580
[   44.941114][ T4273]  ___sys_sendmsg+0x195/0x1e0
[   44.941141][ T4273]  __x64_sys_sendmsg+0xd4/0x160
[   44.941162][ T4273]  x64_sys_call+0x194c/0x3020
[   44.941225][ T4273]  do_syscall_64+0x136/0x3c0
[   44.941364][ T4273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.941384][ T4273] RIP: 0033:0x7f781bbae0d9
[   44.941400][ T4273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   44.941441][ T4273] RSP: 002b:00007f781a607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   44.941497][ T4273] RAX: ffffffffffffffda RBX: 00007f781be35fa0 RCX: 00007f781bbae0d9
[   44.941510][ T4273] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[   44.941522][ T4273] RBP: 00007f781a607090 R08: 0000000000000000 R09: 0000000000000000
[   44.941535][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.941547][ T4273] R13: 00007f781be36038 R14: 00007f781be35fa0 R15: 00007ffc63e9fbc8
[   44.941629][ T4273]  </TASK>
[   45.124507][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'.
[   45.186747][ T4289] loop2: detected capacity change from 0 to 1024
[   45.208831][    T9] IPVS: starting estimator thread 0...
[   45.236291][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.267744][ T4301] FAULT_INJECTION: forcing a failure.
[   45.267744][ T4301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   45.300654][ T4301] CPU: 0 UID: 0 PID: 4301 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(lazy) 
[   45.300680][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.300691][ T4301] Call Trace:
[   45.300697][ T4301]  <TASK>
[   45.300704][ T4301]  __dump_stack+0x1d/0x30
[   45.300770][ T4301]  dump_stack_lvl+0x95/0xd0
[   45.300788][ T4301]  dump_stack+0x15/0x1b
[   45.300805][ T4301]  should_fail_ex+0x25e/0x270
[   45.300870][ T4301]  should_fail+0xb/0x20
[   45.300927][ T4301]  should_fail_usercopy+0x1a/0x20
[   45.300949][ T4301]  _copy_from_user+0x1c/0xb0
[   45.300965][ T4301]  ucma_write+0xd8/0x260
[   45.301034][ T4301]  vfs_writev+0x41e/0x8b0
[   45.301054][ T4301]  ? __pfx_ucma_write+0x10/0x10
[   45.301129][ T4301]  do_writev+0xe9/0x210
[   45.301149][ T4301]  __x64_sys_writev+0x45/0x50
[   45.301170][ T4301]  x64_sys_call+0x1c0c/0x3020
[   45.301191][ T4301]  do_syscall_64+0x136/0x3c0
[   45.301247][ T4301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.301328][ T4301] RIP: 0033:0x7f7ed57fe0d9
[   45.301340][ T4301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.301355][ T4301] RSP: 002b:00007f7ed4257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   45.301375][ T4301] RAX: ffffffffffffffda RBX: 00007f7ed5a85fa0 RCX: 00007f7ed57fe0d9
[   45.301388][ T4301] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[   45.301401][ T4301] RBP: 00007f7ed4257090 R08: 0000000000000000 R09: 0000000000000000
[   45.301491][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.301502][ T4301] R13: 00007f7ed5a86038 R14: 00007f7ed5a85fa0 R15: 00007fffa5a6d7e8
[   45.301521][ T4301]  </TASK>
[   45.312872][   T28] audit: type=1400 audit(2000000007.350:379): avc:  denied  { write } for  pid=4286 comm="syz.2.241" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   45.321849][ T4294] IPVS: using max 2304 ests per chain, 115200 per kthread
[   45.428815][   T28] audit: type=1400 audit(2000000007.470:380): avc:  denied  { mount } for  pid=4305 comm="syz.3.247" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   45.546040][   T28] audit: type=1400 audit(2000000007.590:381): avc:  denied  { search } for  pid=4305 comm="syz.3.247" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   45.578636][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.588497][   T28] audit: type=1400 audit(2000000007.590:382): avc:  denied  { search } for  pid=4305 comm="syz.3.247" name="usb_gadget" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   45.611804][   T28] audit: type=1400 audit(2000000007.620:383): avc:  denied  { search } for  pid=4305 comm="syz.3.247" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   45.634202][   T28] audit: type=1400 audit(2000000007.620:384): avc:  denied  { search } for  pid=4305 comm="syz.3.247" name="usb_gadget" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   45.657335][   T28] audit: type=1400 audit(2000000007.620:385): avc:  denied  { search } for  pid=4305 comm="syz.3.247" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   45.690506][   T28] audit: type=1400 audit(2000000007.620:386): avc:  denied  { search } for  pid=4305 comm="syz.3.247" name="usb_gadget" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   45.693846][ T4316] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   45.732404][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'.
[   45.873591][ T4336] loop2: detected capacity change from 0 to 1024
[   45.905506][ T4336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.005041][ T4346] loop3: detected capacity change from 0 to 512
[   46.005798][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'.
[   46.032534][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.056685][ T4354] gretap1: entered promiscuous mode
[   46.061999][ T4354] gretap1: entered allmulticast mode
[   46.065665][ T4346] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.095751][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'.
[   46.105479][ T4346] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[   46.148010][ T4362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'.
[   46.223251][ T4369] netlink: 'syz.3.272': attribute type 1 has an invalid length.
[   46.303029][ T4369] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[   46.366492][ T4369] syz.3.272 (4369) used greatest stack depth: 9728 bytes left
[   46.422056][ T4384] loop3: detected capacity change from 0 to 512
[   46.441328][ T4384] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   46.457177][ T4384] EXT4-fs (loop3): 1 truncate cleaned up
[   46.480855][ T4384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.507468][ T4384] EXT4-fs (loop3): shut down requested (2)
[   46.526340][ T4400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'.
[   46.568880][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.584971][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'.
[   46.646039][ T4412] loop1: detected capacity change from 0 to 512
[   46.653199][ T4412] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.682993][ T4412] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   46.708003][ T4414] loop2: detected capacity change from 0 to 512
[   46.731509][ T4414] EXT4-fs (loop2): corrupt root inode, run e2fsck
[   46.745266][ T4414] EXT4-fs (loop2): mount failed
[   46.765204][ T3986] Bluetooth: hci0: Frame reassembly failed (-84)
[   46.830574][ T4420] loop4: detected capacity change from 0 to 764
[   46.838480][ T4423] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   46.888522][ T4423] SELinux: failed to load policy
[   46.898613][ T4423] loop1: detected capacity change from 0 to 128
[   46.931760][ T4423] FAT-fs (loop1): bogus number of reserved sectors
[   46.950840][ T4423] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   46.971591][ T4423] FAT-fs (loop1): Can't find a valid FAT filesystem
[   46.985812][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'.
[   47.078361][ T4441] loop0: detected capacity change from 0 to 1024
[   47.085311][ T4439] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:65532
[   47.104676][ T4441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.173219][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.239414][ T4447] iso9660: Corrupted directory entry in block 2 of inode 1792
[   47.267500][ T4452] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   47.313374][ T4452] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[   47.367125][ T4464] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[   47.413013][ T4468] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   47.426379][ T4468] SELinux: failed to load policy
[   47.449656][ T4468] FAT-fs (loop1): bogus number of reserved sectors
[   47.466901][ T4468] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   47.501375][ T4468] FAT-fs (loop1): Can't find a valid FAT filesystem
[   47.521069][ T4475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.658850][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.690970][ T4481] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   47.713427][ T4481] EXT4-fs (loop1): 1 truncate cleaned up
[   47.725497][ T4481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.757232][ T4495] syzkaller0: entered promiscuous mode
[   47.761443][ T4481] EXT4-fs (loop1): shut down requested (2)
[   47.774732][ T4495] syzkaller0: entered allmulticast mode
[   47.804866][ T3397] IPVS: starting estimator thread 0...
[   47.820090][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.892974][ T4504] IPVS: using max 2448 ests per chain, 122400 per kthread
[   47.940341][ T3383] IPVS: starting estimator thread 0...
[   48.042691][ T4519] IPVS: using max 2304 ests per chain, 115200 per kthread
[   48.082140][ T4535] syzkaller0: entered promiscuous mode
[   48.087851][ T4535] syzkaller0: entered allmulticast mode
[   48.659891][ T4549] FAULT_INJECTION: forcing a failure.
[   48.659891][ T4549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.686017][ T4549] CPU: 0 UID: 0 PID: 4549 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(lazy) 
[   48.686044][ T4549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.686093][ T4549] Call Trace:
[   48.686100][ T4549]  <TASK>
[   48.686109][ T4549]  __dump_stack+0x1d/0x30
[   48.686138][ T4549]  dump_stack_lvl+0x95/0xd0
[   48.686157][ T4549]  dump_stack+0x15/0x1b
[   48.686173][ T4549]  should_fail_ex+0x25e/0x270
[   48.686227][ T4549]  should_fail+0xb/0x20
[   48.686250][ T4549]  should_fail_usercopy+0x1a/0x20
[   48.686276][ T4549]  _copy_from_user+0x1c/0xb0
[   48.686354][ T4549]  ucma_write+0xd8/0x260
[   48.686374][ T4549]  vfs_writev+0x41e/0x8b0
[   48.686397][ T4549]  ? __pfx_ucma_write+0x10/0x10
[   48.686427][ T4549]  do_writev+0xe9/0x210
[   48.686529][ T4549]  __x64_sys_writev+0x45/0x50
[   48.686547][ T4549]  x64_sys_call+0x1c0c/0x3020
[   48.686565][ T4549]  do_syscall_64+0x136/0x3c0
[   48.686587][ T4549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.686608][ T4549] RIP: 0033:0x7f7e7aade0d9
[   48.686624][ T4549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.686641][ T4549] RSP: 002b:00007f7e79537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   48.686661][ T4549] RAX: ffffffffffffffda RBX: 00007f7e7ad65fa0 RCX: 00007f7e7aade0d9
[   48.686717][ T4549] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000014
[   48.686730][ T4549] RBP: 00007f7e79537090 R08: 0000000000000000 R09: 0000000000000000
[   48.686743][ T4549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.686802][ T4549] R13: 00007f7e7ad66038 R14: 00007f7e7ad65fa0 R15: 00007fffd2f820e8
[   48.686873][ T4549]  </TASK>
[   48.863771][ T3579] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   49.008299][ T4563] syzkaller0: entered promiscuous mode
[   49.014081][ T4563] syzkaller0: entered allmulticast mode
[   49.097480][ T4569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.176291][ T4576] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   49.188970][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.206182][ T4576] SELinux: failed to load policy
[   49.226934][ T4579] EXT4-fs: Ignoring removed bh option
[   49.242351][ T4576] FAT-fs (loop0): bogus number of reserved sectors
[   49.264010][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.267244][ T4576] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   49.285903][ T4579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.298024][ T4576] FAT-fs (loop0): Can't find a valid FAT filesystem
[   49.306988][ T4579] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   49.333891][ T4583] capability: warning: `syz.4.359' uses deprecated v2 capabilities in a way that may be insecure
[   49.372247][ T4597] msdos: Unknown parameter 'fots�v>>��
'
[   49.391861][ T4579] FAULT_INJECTION: forcing a failure.
[   49.391861][ T4579] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.419211][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.423459][ T4601] syzkaller0: entered promiscuous mode
[   49.433780][ T4601] syzkaller0: entered allmulticast mode
[   49.447423][ T4579] CPU: 0 UID: 0 PID: 4579 Comm: syz.2.357 Not tainted syzkaller #0 PREEMPT(lazy) 
[   49.447446][ T4579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.447458][ T4579] Call Trace:
[   49.447464][ T4579]  <TASK>
[   49.447471][ T4579]  __dump_stack+0x1d/0x30
[   49.447492][ T4579]  dump_stack_lvl+0x95/0xd0
[   49.447570][ T4579]  dump_stack+0x15/0x1b
[   49.447621][ T4579]  should_fail_ex+0x25e/0x270
[   49.447697][ T4579]  should_fail+0xb/0x20
[   49.447717][ T4579]  should_fail_usercopy+0x1a/0x20
[   49.447773][ T4579]  _copy_from_user+0x1c/0xb0
[   49.447792][ T4579]  __se_sys_mbind+0x446/0xdd0
[   49.447840][ T4579]  ? __fget_files+0x184/0x1c0
[   49.447862][ T4579]  ? mutex_lock+0x57/0x90
[   49.447882][ T4579]  ? mutex_unlock+0x4e/0x90
[   49.447909][ T4579]  ? __x64_sys_mbind+0x2c/0x90
[   49.447932][ T4579]  __x64_sys_mbind+0x78/0x90
[   49.448008][ T4579]  x64_sys_call+0x2b72/0x3020
[   49.448027][ T4579]  do_syscall_64+0x136/0x3c0
[   49.448073][ T4579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.448091][ T4579] RIP: 0033:0x7fab03e8e0d9
[   49.448107][ T4579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.448156][ T4579] RSP: 002b:00007fab028e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   49.448256][ T4579] RAX: ffffffffffffffda RBX: 00007fab04115fa0 RCX: 00007fab03e8e0d9
[   49.448269][ T4579] RDX: 0000000000004006 RSI: 0000000000004000 RDI: 0000200000000000
[   49.448282][ T4579] RBP: 00007fab028e7090 R08: 0000000000000006 R09: 0000000000000002
[   49.448310][ T4579] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000001
[   49.448322][ T4579] R13: 00007fab04116038 R14: 00007fab04115fa0 R15: 00007ffee6650a48
[   49.448339][ T4579]  </TASK>
[   49.637446][ T4592] __nla_validate_parse: 15 callbacks suppressed
[   49.637461][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'.
[   49.661714][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'.
[   49.692730][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.735867][   T28] kauditd_printk_skb: 42 callbacks suppressed
[   49.735882][   T28] audit: type=1400 audit(2000000011.780:429): avc:  denied  { mounton } for  pid=4615 comm="syz.3.371" path="/69/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   49.766127][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'.
[   49.777106][ T4616] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   49.787185][ T4616] SELinux: failed to load policy
[   49.797273][ T4616] set_capacity_and_notify: 10 callbacks suppressed
[   49.797286][ T4616] loop4: detected capacity change from 0 to 128
[   49.812682][ T4617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'.
[   49.827714][ T4616] FAT-fs (loop4): bogus number of reserved sectors
[   49.854034][ T4616] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   49.870047][   T28] audit: type=1400 audit(2000000011.910:430): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   49.878287][ T4622] loop2: detected capacity change from 0 to 4096
[   49.900828][ T4616] FAT-fs (loop4): Can't find a valid FAT filesystem
[   49.919847][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.940214][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[   49.995499][ T4630] loop1: detected capacity change from 0 to 512
[   50.017501][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.036569][ T4630] msdos: Unknown parameter 'fots�v>>��
'
[   50.113841][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'.
[   50.178034][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'.
[   50.193575][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'.
[   50.226738][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'.
[   50.240825][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'.
[   50.379381][ T4659] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   50.389383][ T4657] loop4: detected capacity change from 0 to 4096
[   50.398301][ T4657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.419675][ T4659] SELinux: failed to load policy
[   50.443909][ T4659] loop1: detected capacity change from 0 to 128
[   50.463297][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.481472][ T4659] FAT-fs (loop1): bogus number of reserved sectors
[   50.492196][ T4659] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   50.504509][ T4659] FAT-fs (loop1): Can't find a valid FAT filesystem
[   50.677369][ T4666] loop1: detected capacity change from 0 to 164
[   50.685121][ T4664] loop4: detected capacity change from 0 to 764
[   50.750300][ T4666] iso9660: Corrupted directory entry in block 2 of inode 1792
[   50.901155][ T4685] loop4: detected capacity change from 0 to 1024
[   50.936563][ T4685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.961869][ T4674] loop2: detected capacity change from 0 to 764
[   50.975279][ T4687] loop1: detected capacity change from 0 to 4096
[   50.986983][   T28] audit: type=1400 audit(2000000013.020:431): avc:  denied  { write } for  pid=4684 comm="syz.4.398" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.047897][ T4687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.085397][ T4692] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   51.130722][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.140401][ T4692] SELinux: failed to load policy
[   51.157246][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.193243][ T4692] FAT-fs (loop3): bogus number of reserved sectors
[   51.214150][ T4692] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   51.248034][ T4692] FAT-fs (loop3): Can't find a valid FAT filesystem
[   51.358474][   T28] audit: type=1326 audit(2000000013.400:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed57fe0d9 code=0x7ffc0000
[   51.384976][   T28] audit: type=1326 audit(2000000013.400:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed57fe0d9 code=0x7ffc0000
[   51.417967][ T4716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.430983][   T28] audit: type=1326 audit(2000000013.400:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed57fe0d9 code=0x7ffc0000
[   51.456885][   T28] audit: type=1326 audit(2000000013.400:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed57fe0d9 code=0x7ffc0000
[   51.482325][   T28] audit: type=1326 audit(2000000013.400:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed57fe0d9 code=0x7ffc0000
[   51.510665][   T28] audit: type=1326 audit(2000000013.400:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7ed57fe0d9 code=0x7ffc0000
[   51.538829][   T28] audit: type=1326 audit(2000000013.400:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.1.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ed57be90e code=0x7ffc0000
[   51.660868][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.830080][ T4742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.842644][ T4742] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.292628][ T4759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.383272][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.439290][ T4764] vfat: Unknown parameter '���|>Ӿ)�]9iB	��7$p_
[   52.439290][ T4764] �1oy$'
[   53.474355][ T4790] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   53.567415][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.603484][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.069352][ T4863] mmap: syz.2.471 (4863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   54.134627][ T4876] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   54.148195][ T4876] SELinux: failed to load policy
[   54.219928][ T4876] FAT-fs (loop2): bogus number of reserved sectors
[   54.240464][ T4876] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   54.257833][ T4876] FAT-fs (loop2): Can't find a valid FAT filesystem
[   54.307506][ T4893] EXT4-fs: Ignoring removed i_version option
[   54.327548][ T4893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002]
[   54.339108][ T4893] System zones: 1-12
[   54.343810][ T4893] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.482: invalid indirect mapped block 8 (level 2)
[   54.357344][ T4893] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   54.357670][ T4893] EXT4-fs (loop0): 1 truncate cleaned up
[   54.366852][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   54.366868][    C0] EXT4-fs (loop0): initial error at time 2000000016: ext4_free_branches:1023: inode 11
[   54.366895][    C0] EXT4-fs (loop0): last error at time 2000000016: ext4_free_branches:1023: inode 11
[   54.487388][ T4905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.628288][ T4905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.700486][ T4905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.743436][ T4924] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   54.758512][ T4905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.774983][ T4924] SELinux: failed to load policy
[   54.788344][ T4924] FAT-fs (loop2): bogus number of reserved sectors
[   54.795569][ T4924] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   54.804986][ T4924] FAT-fs (loop2): Can't find a valid FAT filesystem
[   54.827310][ T4922] set_capacity_and_notify: 13 callbacks suppressed
[   54.827454][ T4922] loop3: detected capacity change from 0 to 764
[   54.853295][ T4926] syzkaller0: entered promiscuous mode
[   54.860442][ T4926] syzkaller0: entered allmulticast mode
[   54.876663][ T4931] __nla_validate_parse: 21 callbacks suppressed
[   54.876677][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   54.891943][ T3986] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.901061][ T4931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.497'.
[   54.942391][ T3986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.954998][ T4937] FAULT_INJECTION: forcing a failure.
[   54.954998][ T4937] name failslab, interval 1, probability 0, space 0, times 0
[   54.970349][ T3988] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.987991][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: syz.3.498 Not tainted syzkaller #0 PREEMPT(lazy) 
[   54.988017][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.988071][ T4937] Call Trace:
[   54.988077][ T4937]  <TASK>
[   54.988084][ T4937]  __dump_stack+0x1d/0x30
[   54.988107][ T4937]  dump_stack_lvl+0x95/0xd0
[   54.988123][ T4937]  dump_stack+0x15/0x1b
[   54.988137][ T4937]  should_fail_ex+0x25e/0x270
[   54.988195][ T4937]  should_failslab+0x8c/0xb0
[   54.988217][ T4937]  __kmalloc_noprof+0xd4/0x4a0
[   54.988240][ T4937]  ? trace_parser_get_init+0x32/0x80
[   54.988320][ T4937]  ? trace_parser_get_init+0x32/0x80
[   54.988420][ T4937]  ? kstrtouint_from_user+0xa8/0xf0
[   54.988444][ T4937]  trace_parser_get_init+0x32/0x80
[   54.988505][ T4937]  ftrace_event_write+0x8a/0x1d0
[   54.988530][ T4937]  ? __pfx_ftrace_event_write+0x10/0x10
[   54.988693][ T4937]  vfs_write+0x252/0x990
[   54.988709][ T4937]  ? __fget_files+0x184/0x1c0
[   54.988730][ T4937]  ? mutex_lock+0x57/0x90
[   54.988751][ T4937]  ksys_write+0xdc/0x1a0
[   54.988827][ T4937]  __x64_sys_write+0x40/0x50
[   54.988843][ T4937]  x64_sys_call+0x27e1/0x3020
[   54.988861][ T4937]  do_syscall_64+0x136/0x3c0
[   54.988931][ T4937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.988948][ T4937] RIP: 0033:0x7f7e7aade0d9
[   54.988963][ T4937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.988980][ T4937] RSP: 002b:00007f7e79537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   54.988997][ T4937] RAX: ffffffffffffffda RBX: 00007f7e7ad65fa0 RCX: 00007f7e7aade0d9
[   54.989009][ T4937] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000004
[   54.989092][ T4937] RBP: 00007f7e79537090 R08: 0000000000000000 R09: 0000000000000000
[   54.989183][ T4937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.989194][ T4937] R13: 00007f7e7ad66038 R14: 00007f7e7ad65fa0 R15: 00007fffd2f820e8
[   54.989284][ T4937]  </TASK>
[   54.990873][ T3988] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.249191][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.507'.
[   55.266700][ T4950] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   55.284148][ T4950] SELinux: failed to load policy
[   55.345314][ T4950] loop1: detected capacity change from 0 to 128
[   55.372011][ T4950] FAT-fs (loop1): bogus number of reserved sectors
[   55.384632][ T4950] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   55.406492][ T4950] FAT-fs (loop1): Can't find a valid FAT filesystem
[   55.427401][ T4954] loop4: detected capacity change from 0 to 764
[   55.459934][ T4956] loop3: detected capacity change from 0 to 164
[   55.519138][ T4956] iso9660: Corrupted directory entry in block 2 of inode 1792
[   55.575651][ T4966] program syz.3.514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.624583][   T28] kauditd_printk_skb: 341 callbacks suppressed
[   55.624598][   T28] audit: type=1326 audit(2000000017.670:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   55.659342][   T28] audit: type=1326 audit(2000000017.690:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   55.685168][   T28] audit: type=1326 audit(2000000017.700:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   55.747798][   T28] audit: type=1326 audit(2000000017.700:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   55.800161][   T28] audit: type=1326 audit(2000000017.700:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   55.856625][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.518'.
[   55.880883][   T28] audit: type=1326 audit(2000000017.700:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   55.945660][   T28] audit: type=1326 audit(2000000017.700:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   56.003669][   T28] audit: type=1326 audit(2000000017.700:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   56.029425][   T28] audit: type=1326 audit(2000000017.700:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   56.048837][ T4986] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   56.055107][   T28] audit: type=1326 audit(2000000017.700:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7aade0d9 code=0x7ffc0000
[   56.091264][ T4986] SELinux: failed to load policy
[   56.126099][ T4986] loop4: detected capacity change from 0 to 128
[   56.147137][ T4986] FAT-fs (loop4): bogus number of reserved sectors
[   56.172465][ T4986] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   56.184120][ T4986] FAT-fs (loop4): Can't find a valid FAT filesystem
[   56.248567][ T4992] loop0: detected capacity change from 0 to 256
[   56.268417][ T4988] loop1: detected capacity change from 0 to 764
[   56.452290][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.470720][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.708248][ T5022] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   56.732397][ T5022] SELinux: failed to load policy
[   56.760056][ T5022] loop1: detected capacity change from 0 to 128
[   56.768691][ T5022] FAT-fs (loop1): bogus number of reserved sectors
[   56.782654][ T5022] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   56.801177][ T5022] FAT-fs (loop1): Can't find a valid FAT filesystem
[   56.910146][ T4972] Set syz1 is full, maxelem 65536 reached
[   57.093320][ T5049] loop1: detected capacity change from 0 to 1024
[   57.104557][ T5049] EXT4-fs: Ignoring removed oldalloc option
[   57.119918][ T5051] loop3: detected capacity change from 0 to 1024
[   57.196526][ T5060] EXT4-fs (loop1): shut down requested (2)
[   57.226182][ T5062] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   57.236545][ T5062] SELinux: failed to load policy
[   57.264636][ T5062] FAT-fs (loop3): bogus number of reserved sectors
[   57.271560][ T5062] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   57.281326][ T5062] FAT-fs (loop3): Can't find a valid FAT filesystem
[   57.317125][ T5070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.552'.
[   57.559954][ T5082] sg_write: data in/out 1956575/985 bytes for SCSI command 0x0-- guessing data in;
[   57.559954][ T5082]    program syz.3.557 not setting count and/or reply_len properly
[   57.745568][ T5094] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   57.759585][ T5094] SELinux: failed to load policy
[   57.800843][ T5094] FAT-fs (loop3): bogus number of reserved sectors
[   57.807869][ T5094] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   57.818290][ T5094] FAT-fs (loop3): Can't find a valid FAT filesystem
[   57.889524][ T5098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[   57.919690][ T5102] FAULT_INJECTION: forcing a failure.
[   57.919690][ T5102] name failslab, interval 1, probability 0, space 0, times 0
[   57.939161][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz.0.566 Not tainted syzkaller #0 PREEMPT(lazy) 
[   57.939185][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.939194][ T5102] Call Trace:
[   57.939213][ T5102]  <TASK>
[   57.939220][ T5102]  __dump_stack+0x1d/0x30
[   57.939318][ T5102]  dump_stack_lvl+0x95/0xd0
[   57.939334][ T5102]  dump_stack+0x15/0x1b
[   57.939350][ T5102]  should_fail_ex+0x25e/0x270
[   57.939445][ T5102]  should_failslab+0x8c/0xb0
[   57.939502][ T5102]  __kmalloc_noprof+0xd4/0x4a0
[   57.939542][ T5102]  ? kernfs_fop_write_iter+0xd4/0x2e0
[   57.939580][ T5102]  ? kernfs_fop_write_iter+0xd4/0x2e0
[   57.939600][ T5102]  kernfs_fop_write_iter+0xd4/0x2e0
[   57.939640][ T5102]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   57.939662][ T5102]  vfs_write+0x57d/0x990
[   57.939682][ T5102]  ksys_write+0xdc/0x1a0
[   57.939778][ T5102]  __x64_sys_write+0x40/0x50
[   57.939797][ T5102]  x64_sys_call+0x27e1/0x3020
[   57.939818][ T5102]  do_syscall_64+0x136/0x3c0
[   57.939844][ T5102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.939890][ T5102] RIP: 0033:0x7f781bbae0d9
[   57.939916][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.939933][ T5102] RSP: 002b:00007f781a607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   57.939997][ T5102] RAX: ffffffffffffffda RBX: 00007f781be35fa0 RCX: 00007f781bbae0d9
[   57.940008][ T5102] RDX: 0000000000000009 RSI: 0000200000000080 RDI: 0000000000000003
[   57.940018][ T5102] RBP: 00007f781a607090 R08: 0000000000000000 R09: 0000000000000000
[   57.940119][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.940131][ T5102] R13: 00007f781be36038 R14: 00007f781be35fa0 R15: 00007ffc63e9fbc8
[   57.940149][ T5102]  </TASK>
[   58.150224][ T5108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.569'.
[   58.273080][ T5116] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   58.284182][ T5116] SELinux: failed to load policy
[   58.307528][ T5116] FAT-fs (loop2): bogus number of reserved sectors
[   58.316060][ T5116] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   58.334123][ T5116] FAT-fs (loop2): Can't find a valid FAT filesystem
[   58.562686][ T5130] FAULT_INJECTION: forcing a failure.
[   58.562686][ T5130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.587371][ T5130] CPU: 1 UID: 0 PID: 5130 Comm: syz.0.579 Not tainted syzkaller #0 PREEMPT(lazy) 
[   58.587397][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.587415][ T5130] Call Trace:
[   58.587421][ T5130]  <TASK>
[   58.587427][ T5130]  __dump_stack+0x1d/0x30
[   58.587461][ T5130]  dump_stack_lvl+0x95/0xd0
[   58.587495][ T5130]  dump_stack+0x15/0x1b
[   58.587513][ T5130]  should_fail_ex+0x25e/0x270
[   58.587537][ T5130]  should_fail+0xb/0x20
[   58.587558][ T5130]  should_fail_usercopy+0x1a/0x20
[   58.587645][ T5130]  _copy_from_user+0x1c/0xb0
[   58.587665][ T5130]  do_ipv6_mcast_group_source+0x119/0x330
[   58.587718][ T5130]  ? lockref_put_return+0xf7/0x130
[   58.587736][ T5130]  ? __rcu_read_unlock+0x4e/0x70
[   58.587781][ T5130]  ? __rcu_read_unlock+0x4e/0x70
[   58.587804][ T5130]  ? terminate_walk+0x1d5/0x200
[   58.587901][ T5130]  ? lock_sock_nested+0x84/0x110
[   58.587923][ T5130]  do_ipv6_setsockopt+0x1282/0x2040
[   58.587999][ T5130]  ? kstrtoull+0x111/0x140
[   58.588024][ T5130]  ? avc_has_perm_noaudit+0xa3/0x120
[   58.588047][ T5130]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[   58.588080][ T5130]  ipv6_setsockopt+0x59/0x130
[   58.588185][ T5130]  udpv6_setsockopt+0x89/0xa0
[   58.588209][ T5130]  sock_common_setsockopt+0x69/0x80
[   58.588232][ T5130]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   58.588331][ T5130]  __sys_setsockopt+0x184/0x200
[   58.588435][ T5130]  __x64_sys_setsockopt+0x64/0x80
[   58.588594][ T5130]  x64_sys_call+0x2327/0x3020
[   58.588666][ T5130]  do_syscall_64+0x136/0x3c0
[   58.588688][ T5130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.588704][ T5130] RIP: 0033:0x7f781bbae0d9
[   58.588721][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.588739][ T5130] RSP: 002b:00007f781a607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   58.588840][ T5130] RAX: ffffffffffffffda RBX: 00007f781be35fa0 RCX: 00007f781bbae0d9
[   58.588854][ T5130] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003
[   58.588866][ T5130] RBP: 00007f781a607090 R08: 0000000000000108 R09: 0000000000000000
[   58.588941][ T5130] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[   58.588952][ T5130] R13: 00007f781be36038 R14: 00007f781be35fa0 R15: 00007ffc63e9fbc8
[   58.588966][ T5130]  </TASK>
[   58.851611][ T5132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'.
[   58.944361][ T5144] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   58.957614][ T5144] SELinux: failed to load policy
[   58.972740][ T5144] FAT-fs (loop3): bogus number of reserved sectors
[   58.984176][ T5144] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   58.995352][ T5144] FAT-fs (loop3): Can't find a valid FAT filesystem
[   59.123837][ T5162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.591'.
[   59.277136][ T5154] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   59.287199][ T5174] SELinux:  policydb magic number 0x8902 does not match expected magic number 0xf97cff8c
[   59.302215][ T5174] SELinux: failed to load policy
[   59.311891][ T5154] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.589: invalid block
[   59.324001][ T5154] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   59.329860][ T5154] EXT4-fs (loop0): Remounting filesystem read-only
[   59.339129][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   59.339179][    C1] EXT4-fs (loop0): initial error at time 2000000021: ext4_get_branch:178: inode 13: block 1024
[   59.339310][    C1] EXT4-fs (loop0): last error at time 2000000021: ext4_get_branch:178: inode 13: block 1024
[   59.360107][ T5174] FAT-fs (loop1): bogus number of reserved sectors
[   59.364956][ T5154] EXT4-fs (loop0): 1 truncate cleaned up
[   59.379857][ T5180] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   59.392446][ T5174] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   59.405048][ T5174] FAT-fs (loop1): Can't find a valid FAT filesystem
[   59.413655][ T5154] EXT4-fs (loop0): shut down requested (2)
[   59.422488][ T5180] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   59.440645][ T5180] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[   59.539102][ T5191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'.
[   59.569110][ T5196] SELinux:  policydb magic number 0xed67ff8c does not match expected magic number 0xf97cff8c
[   59.587472][ T5198] 9pnet_fd: Insufficient options for proto=fd
[   59.597554][ T5196] SELinux: failed to load policy
[   59.684456][ T5203] Falling back ldisc for ttyS3.
[   59.936208][ T5200] netlink: 168 bytes leftover after parsing attributes in process `syz.1.608'.
[   60.096551][ T5212] set_capacity_and_notify: 11 callbacks suppressed
[   60.096566][ T5212] loop4: detected capacity change from 0 to 1024
[   60.107749][ T5210] loop0: detected capacity change from 0 to 512
[   60.178848][ T5210] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   60.204167][ T5210] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.613: invalid block
[   60.222479][ T5210] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   60.223045][ T5210] EXT4-fs (loop0): Remounting filesystem read-only
[   60.232775][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   60.232816][    C0] EXT4-fs (loop0): initial error at time 2000000022: ext4_get_branch:178: inode 13: block 1024
[   60.232906][    C0] EXT4-fs (loop0): last error at time 2000000022: ext4_get_branch:178: inode 13: block 1024
[   60.316283][ T5210] EXT4-fs (loop0): 1 truncate cleaned up
[   60.361661][ T5210] EXT4-fs (loop0): shut down requested (2)
[   60.415098][ T5219] loop2: detected capacity change from 0 to 512
[   60.480181][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'.
[   60.554772][ T5236] loop2: detected capacity change from 0 to 512
[   60.565351][ T5234] loop4: detected capacity change from 0 to 2048
[   60.575063][ T5236] ext3: Unknown parameter 'nouser_xattr'
[   60.592300][ T5236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.621'.
[   60.632420][   T28] kauditd_printk_skb: 52 callbacks suppressed
[   60.632434][   T28] audit: type=1326 audit(2000000022.670:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f781bbae0d9 code=0x7ffc0000
[   60.686661][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[   60.697295][ T5243] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.620: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[   60.751963][   T28] audit: type=1400 audit(2000000022.710:844): avc:  denied  { bind } for  pid=5235 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   60.787437][   T28] audit: type=1400 audit(2000000022.710:843): avc:  denied  { read write } for  pid=5231 comm="syz.0.619" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   60.824882][   T28] audit: type=1400 audit(2000000022.720:845): avc:  denied  { open } for  pid=5231 comm="syz.0.619" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   60.851829][   T28] audit: type=1326 audit(2000000022.720:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781bbae0d9 code=0x7ffc0000
[   60.887515][ T5243] EXT4-fs (loop4): Remounting filesystem read-only
[   60.925732][   T28] audit: type=1326 audit(2000000022.720:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f781bbade42 code=0x7ffc0000
[   60.951840][   T28] audit: type=1326 audit(2000000022.730:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f781bbaded7 code=0x7ffc0000
[   60.999613][   T28] audit: type=1326 audit(2000000022.730:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f781bb6add1 code=0x7ffc0000
[   61.033598][   T28] audit: type=1326 audit(2000000022.730:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f781bbaeec9 code=0x7ffc0000
[   61.118560][   T28] audit: type=1326 audit(2000000022.730:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5231 comm="syz.0.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f781bb6ae3b code=0x7ffc0000
[   61.225849][ T5253] loop3: detected capacity change from 0 to 512
[   61.280323][ T5253] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   61.309303][ T5253] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.622: corrupted in-inode xattr: e_value size too large
[   61.380404][ T5253] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   61.380518][ T5253] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.622: couldn't read orphan inode 15 (err -117)
[   61.389743][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   61.389761][    C1] EXT4-fs (loop3): initial error at time 2000000023: ext4_iget_extra_inode:5180: inode 15
[   61.389789][    C1] EXT4-fs (loop3): last error at time 2000000023: ext4_iget_extra_inode:5180: inode 15
[   61.508912][ T5257] loop0: detected capacity change from 0 to 1024
[   61.515445][ T5253] loop3: lost filesystem error report for type 5 error -117
[   61.523041][ T5257] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.553166][ T5257] EXT4-fs: Ignoring removed orlov option
[   61.639726][ T5217] loop1: detected capacity change from 0 to 512
[   61.883093][ T5270] loop3: detected capacity change from 0 to 512
[   61.903791][ T5270] EXT4-fs: Ignoring removed nobh option
[   61.929563][ T5270] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.013425][ T5266] loop4: detected capacity change from 0 to 512
[   62.059799][ T5270] EXT4-fs (loop3): orphan cleanup on readonly fs
[   62.060849][ T5266] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   62.076046][ T5270] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   62.084887][ T5270] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.628: attempt to clear invalid blocks 2 len 1
[   62.097760][ T5270] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   62.097985][ T5270] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, 
[   62.107146][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   62.107161][    C1] EXT4-fs (loop3): initial error at time 2000000024: ext4_clear_blocks:876: inode 13
[   62.107189][    C1] EXT4-fs (loop3): last error at time 2000000024: ext4_clear_blocks:876: inode 13
[   62.140672][ T5270] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   62.153244][   T23] IPVS: starting estimator thread 0...
[   62.158820][ T5270] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.628: invalid indirect mapped block 1819239214 (level 0)
[   62.173709][ T5270] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   62.173847][ T5270] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.628: invalid indirect mapped block 1819239214 (level 1)
[   62.200075][ T5270] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   62.200617][ T5270] EXT4-fs (loop3): 1 truncate cleaned up
[   62.226575][ T5217] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[   62.239767][ T5217] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.614: corrupted in-inode xattr: e_value size too large
[   62.254680][ T5278] IPVS: using max 2016 ests per chain, 100800 per kthread
[   62.263812][ T5217] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   62.264999][ T5217] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.614: couldn't read orphan inode 15 (err -117)
[   62.274807][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   62.274838][    C1] EXT4-fs (loop1): initial error at time 2000000024: ext4_iget_extra_inode:5180: inode 15
[   62.275054][    C1] EXT4-fs (loop1): last error at time 2000000024: ext4_iget_extra_inode:5180: inode 15
[   62.317728][ T5217] loop1: lost filesystem error report for type 5 error -117
[   62.498037][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'.
[   62.615260][ T5281] serio: Serial port ttyS3
[   62.625461][ T5266] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.626: invalid block
[   62.639466][ T5266] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   62.640260][ T5266] EXT4-fs (loop4): Remounting filesystem read-only
[   62.649662][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   62.649690][    C1] EXT4-fs (loop4): initial error at time 2000000024: ext4_get_branch:178: inode 13: block 1024
[   62.649872][    C1] EXT4-fs (loop4): last error at time 2000000024: ext4_get_branch:178: inode 13: block 1024
[   62.697624][ T5266] EXT4-fs (loop4): 1 truncate cleaned up
[   62.746309][ T5266] EXT4-fs (loop4): shut down requested (2)
[   62.838272][ T5281] hub 8-0:1.0: USB hub found
[   62.871250][ T5281] hub 8-0:1.0: 8 ports detected
[   62.929727][ T5298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'.
[   63.595182][ T5303] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.768327][ T5321] set_capacity_and_notify: 2 callbacks suppressed
[   66.768342][ T5321] loop1: detected capacity change from 0 to 512
[   67.303363][ T5321] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.640: corrupted in-inode xattr: invalid ea_ino
[   67.543663][ T5321] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   67.554529][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   67.570108][    C0] EXT4-fs (loop1): initial error at time 2000000029: ext4_iget_extra_inode:5180: inode 15
[   67.580025][    C0] EXT4-fs (loop1): last error at time 2000000029: ext4_iget_extra_inode:5180: inode 15
[   67.655630][ T5321] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.640: couldn't read orphan inode 15 (err -117)
[   67.858360][ T5321] loop1: lost filesystem error report for type 5 error -117
[   67.900773][ T5321] EXT4-fs mount: 33 callbacks suppressed
[   67.900790][ T5321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.424422][ T5320] loop0: detected capacity change from 0 to 8192
[   68.657811][   T28] kauditd_printk_skb: 111 callbacks suppressed
[   68.657826][   T28] audit: type=1400 audit(2000000030.700:963): avc:  denied  { write } for  pid=5319 comm="syz.1.640" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.847196][ T5320] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   69.829945][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.764335][ T5348] loop0: detected capacity change from 0 to 512
[   72.157099][ T5348] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   72.476048][ T5348] EXT4-fs (loop0): 1 truncate cleaned up
[   72.625020][ T5348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.791261][ T5348] EXT4-fs (loop0): shut down requested (2)
[   72.925204][   T28] audit: type=1400 audit(2000000034.950:964): avc:  denied  { write } for  pid=5346 comm="syz.0.647" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.502207][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'.
[   77.863277][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.410091][ T5368] loop4: detected capacity change from 0 to 1024
[   79.735161][ T5373] loop0: detected capacity change from 0 to 512
[   79.879352][ T5368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.156609][ T5373] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.650: Directory hole found for htree index block 0
[   80.255064][   T28] audit: type=1400 audit(2000000042.190:965): avc:  denied  { write } for  pid=5367 comm="syz.4.651" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   80.509144][ T5373] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   80.514350][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   80.529939][    C0] EXT4-fs (loop0): initial error at time 2000000042: dx_probe:791: inode 2
[   80.538565][    C0] EXT4-fs (loop0): last error at time 2000000042: dx_probe:791: inode 2
[   80.622432][ T5373] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   80.650454][ T5373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.540322][   T28] audit: type=1400 audit(2000000043.550:966): avc:  denied  { create } for  pid=5371 comm="syz.0.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.115440][   T28] audit: type=1400 audit(2000000045.160:967): avc:  denied  { setopt } for  pid=5371 comm="syz.0.650" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   83.821397][ T5376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[   86.224957][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.908673][   T28] audit: type=1400 audit(2000000051.920:968): avc:  denied  { write } for  pid=5401 comm="syz.4.658" name="UDC" dev="configfs" ino=11445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   90.064829][   T28] audit: type=1400 audit(2000000052.070:969): avc:  denied  { mount } for  pid=5408 comm="syz.2.659" name="/" dev="autofs" ino=12516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   90.345997][   T28] audit: type=1400 audit(2000000052.090:970): avc:  denied  { open } for  pid=5401 comm="syz.4.658" path="/125/config/usb_gadget/g1/UDC" dev="configfs" ino=11445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   90.431387][ T5402] Need at least one configuration in g1.
[   90.497388][ T5403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'.
[   90.675336][ T5402] udc usbip-vudc.0: failed to start g1: -22
[   90.724846][ T5402] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   90.884441][   T28] audit: type=1400 audit(2000000052.880:971): avc:  denied  { ioctl } for  pid=5401 comm="syz.4.658" path="/125/config/usb_gadget/g1/UDC" dev="configfs" ino=11445 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[   90.888962][ T5402] UDC core: g1: couldn't find an available UDC or it's busy
[  100.562090][   T28] audit: type=1400 audit(2000000062.600:972): avc:  denied  { bind } for  pid=5427 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  102.228058][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'.
[  107.307581][ T5460] loop8: detected capacity change from 0 to 7
[  107.583417][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.593028][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.646990][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  107.656588][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  107.745178][ T5460]  loop8: unable to read partition table
[  107.846902][ T5460] loop_reread_partitions: partition scan of loop8 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  107.890141][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.024485][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.034100][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  108.086124][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.095742][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  108.152394][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.162456][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  108.196559][ T5459] syz_tun: entered allmulticast mode
[  108.251433][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.261026][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[  108.696935][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  108.706560][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[  189.852407][    C1] ==================================================================
[  189.860536][    C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick
[  189.867755][    C1] 
[  189.870071][    C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0:
[  189.878131][    C1]  wq_worker_tick+0x64/0x240
[  189.882725][    C1]  sched_tick+0xbc/0x1f0
[  189.886959][    C1]  update_process_times+0x15e/0x190
[  189.892158][    C1]  tick_nohz_handler+0x227/0x380
[  189.897089][    C1]  __hrtimer_run_queues+0x1f8/0x510
[  189.902295][    C1]  hrtimer_interrupt+0x257/0x810
[  189.907232][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  189.913124][    C1]  sysvec_apic_timer_interrupt+0x32/0x80
[  189.918758][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  189.924729][    C1]  __tsan_read2+0xff/0x190
[  189.929141][    C1]  nf_nat_ipv4_local_fn+0x29b/0x2f0
[  189.934327][    C1]  nf_hook_slow+0x78/0x180
[  189.938750][    C1]  __ip_local_out+0x2fd/0x320
[  189.943418][    C1]  ip_local_out+0x28/0xd0
[  189.947770][    C1]  synproxy_send_tcp+0x293/0x2e0
[  189.952714][    C1]  synproxy_send_client_synack+0x55e/0x5b0
[  189.958527][    C1]  nft_synproxy_eval_v4+0x21f/0x270
[  189.963724][    C1]  nft_synproxy_do_eval+0x1cf/0x270
[  189.968925][    C1]  nft_synproxy_eval+0x29/0x40
[  189.973682][    C1]  nft_do_chain+0x1ff/0xde0
[  189.978189][    C1]  nft_do_chain_ipv4+0x14e/0x180
[  189.983125][    C1]  nf_hook_slow+0x78/0x180
[  189.987541][    C1]  ip_local_deliver+0x199/0x1e0
[  189.992378][    C1]  ip_rcv_finish+0x188/0x1a0
[  189.996958][    C1]  ip_rcv+0x62/0x160
[  190.000835][    C1]  process_backlog+0x333/0x680
[  190.005585][    C1]  __napi_poll+0x61/0x300
[  190.009900][    C1]  net_rx_action+0x456/0x930
[  190.014476][    C1]  handle_softirqs+0xb9/0x280
[  190.019154][    C1]  do_softirq+0x45/0x60
[  190.023295][    C1]  __local_bh_enable_ip+0x70/0x80
[  190.028313][    C1]  _raw_spin_unlock_bh+0x18/0x20
[  190.033246][    C1]  nsim_dev_trap_report_work+0x521/0x630
[  190.038877][    C1]  process_scheduled_works+0x4d4/0x9a0
[  190.044326][    C1]  worker_thread+0x569/0x750
[  190.048917][    C1]  kthread+0x221/0x270
[  190.052984][    C1]  ret_from_fork+0x146/0x330
[  190.057585][    C1]  ret_from_fork_asm+0x1a/0x30
[  190.062357][    C1] 
[  190.064691][    C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1:
[  190.072741][    C1]  wq_worker_tick+0x64/0x240
[  190.077342][    C1]  sched_tick+0xbc/0x1f0
[  190.081571][    C1]  update_process_times+0x15e/0x190
[  190.086758][    C1]  tick_nohz_handler+0x227/0x380
[  190.091679][    C1]  __hrtimer_run_queues+0x1f8/0x510
[  190.096867][    C1]  hrtimer_interrupt+0x257/0x810
[  190.101795][    C1]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  190.107676][    C1]  sysvec_apic_timer_interrupt+0x32/0x80
[  190.113300][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  190.119275][    C1]  __tsan_read4+0x1d/0x190
[  190.123692][    C1]  ipt_do_table+0x16b/0xb40
[  190.128202][    C1]  nf_hook_slow+0x78/0x180
[  190.132610][    C1]  ip_rcv+0x11f/0x160
[  190.136595][    C1]  process_backlog+0x333/0x680
[  190.141360][    C1]  __napi_poll+0x61/0x300
[  190.145684][    C1]  net_rx_action+0x456/0x930
[  190.150354][    C1]  handle_softirqs+0xb9/0x280
[  190.155021][    C1]  do_softirq+0x45/0x60
[  190.159160][    C1]  __local_bh_enable_ip+0x70/0x80
[  190.164168][    C1]  __alloc_skb+0x6b1/0x6f0
[  190.168588][    C1]  nsim_dev_trap_report_work+0x18b/0x630
[  190.174217][    C1]  process_scheduled_works+0x4d4/0x9a0
[  190.179676][    C1]  worker_thread+0x569/0x750
[  190.184259][    C1]  kthread+0x221/0x270
[  190.188321][    C1]  ret_from_fork+0x146/0x330
[  190.192904][    C1]  ret_from_fork_asm+0x1a/0x30
[  190.197667][    C1] 
[  190.199975][    C1] value changed: 0x0000000002017550 -> 0x0000000002019c60
[  190.207061][    C1] 
[  190.209376][    C1] Reported by Kernel Concurrency Sanitizer on:
[  190.215523][    C1] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(lazy) 
[  190.224791][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  190.234839][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  190.241614][    C1] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)