last executing test programs:

7m9.440056902s ago: executing program 3 (id=197):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0xc020680)
syz_io_uring_setup(0x606d, &(0x7f0000000180)={0x0, 0x8eab, 0x2, 0x3, 0x20a}, 0x0, 0x0, 0x0)
unshare(0x24020400)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0xa6, @mcast2, 0x5}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000400)={0x1, 0x0, 0x8c, &(0x7f0000000340)=""/140})
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
futex_waitv(&(0x7f0000001240)=[{0x0, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x74a, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x1e5, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x7fffffff, 0x0}, {0x5, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x0, 0x0}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0}, {0x6, 0x0, 0x2}, {0x80, 0x0, 0x82}, {0x7fffffff, 0x0}, {0x9, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x5, 0xfffffffffffffffc, 0x2}, {0x4, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x28000000000, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x8000, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0xfffffffffffffbff, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x9, 0x0}, {0x8a, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x8db0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0xd, 0x0, 0x82}], 0x33, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000026c0)={'gre0\x00', 0x0})
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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")
r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)
fallocate(r5, 0x0, 0x0, 0x8800000)
r6 = open(&(0x7f0000000300)='./file1\x00', 0x66842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)

7m7.582116994s ago: executing program 3 (id=207):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb)
bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e)
creat(0x0, 0x81)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@nodelalloc}]}, 0x81, 0x637, &(0x7f0000000c40)="$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")
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0)
rename(0x0, &(0x7f0000003440)='./file1\x00')
iopl(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c000}, 0x4000804)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)

7m6.490718141s ago: executing program 3 (id=210):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r1, 0x1)

7m5.898369622s ago: executing program 3 (id=215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@errors_continue}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29e, &(0x7f0000000680)="$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")
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$cont(0x20, r5, 0x80000001, 0x3f6beaeb)
r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

7m5.663424259s ago: executing program 3 (id=216):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000003600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0000000000000300000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

7m4.798209209s ago: executing program 3 (id=223):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x11c, 0x23, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000cc0)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ffb, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="89a1b71b57e6ef43547b8fd3f5661dccd6bddd7fd2aaf2e8b6e06deea7ee62237f824362d645ac", 0x27}, {&(0x7f0000000380)="39feb29fea5fc1620675f7fc8412ea1eccec6fe7d18f0afed74ac93ba0bcba50709710242b1ec8555f49f8d17ea0dada757bc73918e8daf6a6361e5bca3fcd3d1de3eae71da727f8353fb874bd95722de363395583aeaaf3f7cb9fccf4135ead62fb020d6954c9de4623327829dfe2bdd94990cad5fc75b504a2e3f1f52b84deefba8ad0beb97da77a7a6159677881bbd660c9350d89a620023c09549dde4019479d236799b9131d9cf2c1e39df246979c25767ed1a1510022f89a1d768b963455aab8aa33bf02367ba94fe4ccabee4253787e6948152a56d214ce08bb9038b6e65a6cf5efcb970695ef1a", 0xeb}, {0x0}], 0x3}, 0x20044880)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4482, 0x175b516d79fb5d4c)
readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000780)=""/237, 0xed)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000800)

7m4.732290921s ago: executing program 32 (id=223):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x11c, 0x23, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000cc0)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ffb, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="89a1b71b57e6ef43547b8fd3f5661dccd6bddd7fd2aaf2e8b6e06deea7ee62237f824362d645ac", 0x27}, {&(0x7f0000000380)="39feb29fea5fc1620675f7fc8412ea1eccec6fe7d18f0afed74ac93ba0bcba50709710242b1ec8555f49f8d17ea0dada757bc73918e8daf6a6361e5bca3fcd3d1de3eae71da727f8353fb874bd95722de363395583aeaaf3f7cb9fccf4135ead62fb020d6954c9de4623327829dfe2bdd94990cad5fc75b504a2e3f1f52b84deefba8ad0beb97da77a7a6159677881bbd660c9350d89a620023c09549dde4019479d236799b9131d9cf2c1e39df246979c25767ed1a1510022f89a1d768b963455aab8aa33bf02367ba94fe4ccabee4253787e6948152a56d214ce08bb9038b6e65a6cf5efcb970695ef1a", 0xeb}, {0x0}], 0x3}, 0x20044880)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4482, 0x175b516d79fb5d4c)
readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000780)=""/237, 0xed)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000800)

5m49.497100686s ago: executing program 4 (id=1044):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xc9, 0x17, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m48.893304037s ago: executing program 4 (id=1048):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xc9, 0x17, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 2)

5m48.423491302s ago: executing program 4 (id=1051):
syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00')
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="29c726bd7000fedbc82519000000080003", @ANYRES64=r2], 0x1c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x1a4, &(0x7f00000005c0)="$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")
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000140)={0x5, 0xb})
socket$packet(0x11, 0x3, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x1e, 0x80804, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5m47.962579318s ago: executing program 4 (id=1057):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000080)={[{@user_xattr}, {@usrjquota_path={'usrjquota', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@grpquota}, {@nombcache}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@i_version}]}, 0x1, 0x59d, &(0x7f0000001100)="$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")
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b)
renameat(r3, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000034c0)={0x40, r5, 0x1, 0x2004, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0)

5m46.693918201s ago: executing program 4 (id=1073):
r0 = socket$inet6(0xa, 0x1, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0xc0089364, &(0x7f0000000140)=0x6)

5m46.268539866s ago: executing program 4 (id=1079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xf0}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0)

5m46.192470708s ago: executing program 33 (id=1079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xf0}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0)

5m36.152420508s ago: executing program 2 (id=1235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5b0, 0x0, 0x328, 0x0, 0x3f8, 0x328, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [0x0, 0x0, 0x2803], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x22}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x6}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00'})

5m36.097919989s ago: executing program 2 (id=1237):
r0 = io_uring_setup(0x1d9b, &(0x7f0000000300)={0x0, 0x6af, 0x1000, 0x1, 0x20a})
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0x1, r1, 0x2, {0x6}, 0x5}, 0x1) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
mq_open(&(0x7f0000000000)='syztnl1\x00', 0x1, 0x8, &(0x7f00000001c0)={0xa781, 0x5, 0x100000000}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', <r4=>0x0, 0x8, 0x20, 0x1, 0x73, {{0x34, 0x4, 0x2, 0xc, 0xd0, 0x66, 0x0, 0x92, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@timestamp={0x44, 0x8, 0xef, 0x0, 0xe, [0x5]}, @timestamp_prespec={0x44, 0xc, 0x30, 0x3, 0x6, [{@broadcast, 0x9}]}, @rr={0x7, 0xb, 0x6f, [@broadcast, @local]}, @ssrr={0x89, 0x1f, 0x26, [@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @remote]}, @rr={0x7, 0xb, 0xaa, [@local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @end, @cipso={0x86, 0x5b, 0x1, [{0x7, 0x8, "58e06ff2891c"}, {0x1, 0x6, "aa58d10c"}, {0x0, 0xb, "a3300c915fd38f8581"}, {0x5, 0x5, "cb6330"}, {0x0, 0xf, "bccaf201c302494f4ca9b0cb36"}, {0x1, 0x11, "fb58b7bc41a262a762fe6310396679"}, {0x6, 0x5, "740d9f"}, {0x1, 0xe, "ed573600c73d90367029d441"}, {0x5, 0x4, "ca46"}]}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x8, [{@rand_addr=0x64010102, 0xdc}, {@local, 0x8001}]}]}}}}})
sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x2000000, {0x80, 0x20, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xfff7, 0x20, 0xb, r4}}]}, 0x28}}, 0x0) (async, rerun: 64)
r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000680000012bbd7000fadbdf250a00030006000000060003000100000004000b002c000200010000000300000000000000ff000000be0000000200000000000002fd0000000000000003000000d6b01cf7a0aebb436820651e721203ff0890b072106036c1e262904c0c6e192dd3763172d5c79ea4de499259adb644a68445c01b33b0128754876837dcaf7e59afae5fa396"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async, rerun: 32)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (rerun: 32)
ioctl$OCFS2_IOC_RESVSP64(r7, 0x4030582a, &(0x7f0000000080)={0x1, 0x1, 0x30d, 0x3, 0x80000000, 0x6})

5m35.981842153s ago: executing program 2 (id=1241):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)

5m35.974714474s ago: executing program 2 (id=1242):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40019f, &(0x7f0000000240)={[{@sysvgroups}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x73}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80001000, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})
r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x8e)
r5 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x189042, 0x1a0)
capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200800})
open_by_handle_at(r5, &(0x7f00000000c0)=@ocfs2_parent={0x18, 0x2, {{0x7, 0x3}, {0x2, 0x0, 0x3}}}, 0x10000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x200004, 0x0)

5m35.453338061s ago: executing program 2 (id=1250):
unshare(0x22020600)
socket(0x10, 0x803, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x24a71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffccc, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x9, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x10102)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4000055)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640), 0x111, 0x6}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x800)
ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000500))
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010029bd7000fddbdf25090002002f797a320000000008004100727865001400330076657468305f746f5f626174616476"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000480)={{0x8, @multicast1, 0x4e20, 0x1, 'fo\x00', 0x24, 0x9, 0x6c}, {@loopback, 0x4e21, 0x1, 0x7f, 0xf, 0x2}}, 0x44)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan1\x00')
pread64(r8, &(0x7f00000000c0)=""/144, 0x90, 0x3)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xbc7ae83238fbe995})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$sock(r6, &(0x7f0000004280)={&(0x7f00000005c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000700)="39d421b16e30f7082fd7bb292a27826d5a6e012240889c89c4d96f5fa7bc2478a0fbaf14dba146937c205736dd31295929984681b92cf2fab933f8bd9e0200f2f64885d57a6615c9aa3cdad5888bf2d4b384f4634cd9216394261699b54628957a203aa777735dc4d308e240dd5d2aaeeb86e5dd4ceb211b8b880692b8a602d0c725bd2e4c749599728c4ac2419885ffff42ecb63c61f2a31f94a1221909796d68280c1da18e78d0f214cb241fcdc262a0940d3f4be94950c6bb26f66f18913f186bf8e635fea02894e3e06ba32aa77395165ad06dfa5f5adf35871690d0675bfa4fcdf146be9767b10c2421609e2ec6bde955b26782998cfe", 0xf9}, {&(0x7f00000042c0)="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", 0x1093}, {&(0x7f0000002dc0)="95bbb8d5a60f060eab6e30e74e094461486e078f9a483f08527199599cef2fc22693bc8de5b83f4732a7f9333edd1467629ae25a6e6477a700a2dc3e6327c1e08341f734b8ba7b6eef522da88beaa2fb1067c244195d3b8584f55ff1ab0232932dcb1b884fdff48ec02bd7d50f15fe07b3a7905c678071afa7ace3ae58fb5ab95b2b31baaf84ee4aed97e3128cbb3b7cd233a7a7c0ff57de5615c410029059", 0x9f}, {&(0x7f0000002e80)="34b00388f4ef38c1fb9178b606d683196c7e3a28b6cb6db809ea248b3b06bc05981fcac61cb6911a657f40f5cba2ee0e31f1b9a6cb040db1799e95690d2cc2e9c8552f8a29e2e6f8bed45a840189eddcf9af2980ce10cf0f37d97b369fca28171fdd49671e485fc6d8c0afd28483177230f12fce4f8f2c6816b4e68cd29702ac72614a8379ace0e9f3aa0d904c9961ef4690811c940ede54ee38c2d279de4862580a6c5d276ac14132914146ac90ed6b12d20b10662f02632729080b532163d1a2ef992d963738d1f2b3110859cbefac4aee51cd38", 0xd5}, {&(0x7f0000002f80)="e907959dc9eb3f13826478913dd43a32701b09dde406167718e6a7d8c10b1d90fc110156b3cfe5c45449c6550dd834b345ba175ee730bd5f1f3f0a8707f411ac51fc2b183965d1e40fd33dbaee4507fd7ef6dd890c3108012592a0dbc053297cd14f80adc562fcfcbf45d58b60d422e049f0a8390520", 0xffffff55}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="bce29359a61b3a6f65fff8165d3612068bf4699f9c663db9722a17a089a3fcd88af700b9b3b6967f9470f2e1f6bc8d490926c83283a8676c8f0047a94eacda0c0eed2e48497ebf87dad445cf26e398e90b601d5f0aab1dbe247156344d7bcb5dcde8b9", 0x63}, {&(0x7f0000004080)="96aafd104e29b809eb4f6eeb42f8913342a36dca344564cb06d9ed8adc0351a68ba6cb32b02e7e2fe6494037c66911dc003b88c85ce3013e0b517302b1286730b41de465fcd5be0c75ea8cacaad313549c0da0d5f8659018cb7741fd366fda52e2ad364670cd3b0422662ca953da8f3b6d1dadf1d63e9f94dd72b429987bed24a63c300e0a4c570136a4f332e603adfc806de8ba83e1dc22a2c5d7313a3012224cb50b347049b0b7dfe9a291d43e7be5965653741fa599d5e291b40b67400dfc10404ca1dfea6233634df6b8", 0xcc}], 0x8, &(0x7f0000004200)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14}}], 0x48}, 0x400000c)

5m34.757348195s ago: executing program 2 (id=1264):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}})
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000380)={0x100, 0x2, 0x9})
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000000)=""/48, 0x30)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

5m34.734133325s ago: executing program 34 (id=1264):
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}})
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000380)={0x100, 0x2, 0x9})
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$eJzs3T9PA2UcB/DfldIWHdrByZB4iQxOBFhdSgwkRiZNB3VQI5AY2phAQuKfWJlcXRx9BSYmbr4JF9+BiauJmwwkZ653Rwu0hRoKGj+fAR6ee77P/e7yFErIPXy4Pjg5TOP44svfotVKotaNtbhMohO1qHwdN3S/DQDgv+wyy+LPrLBILomI1vLKAgCWaObP/5UZgZ+epCwAYIneefe9t3YPDvbeTtNW7A++Oe/lv9nnn4vju8fxSfTjKLaiHVcRWaX6+0CWZcN6mqZp1o4YDM97eXLwwS/l/Lt/RIzy29GOTpUo3m3kH/ffPNjbTguxcZ0f5nW8UJ6/m+d3oh0vTZx/Ir8zJR+9Rrz26kT9m9GOXz+OT6Mfh6MixvmvttP0jey7v754Py8vzyfD815zNG4sm/WOCAAAAAAAAAAAAAAAAAAAAAAAFrZZ7p3TjLQTG4O8q9x/Z+Uq/2I10krn5v48Rb5ZTXRrf6BhFt9X++tspWmaJcWwcb4eL9ej/jxXDQAAAAAAAAAAAAAAAAAAAP8uZ599fvJRv390+iiN8iH/68f6/+k83YmeV2L+4Ob4XLWyOWfmWKnGJBF5TzLrJuQX8Ui35b7G2qyaf/hx0Qlb949ZnXd/HqdRra789k4d04yqp1Utkp8nxzTigedqzDq0XpbwsHkaUw+1F772xoujxnDOmEjmvS5e/70ou+xJbr+IGqO7OjW+Wjbieo3fXhsLree73ysSu3UAAAAAAAAAAAAAAAAAAMBSjR/6vXOoHhdzo7WsucTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJjf///+xGPSJu9AzL8NxU0WjE6dkzXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//zY6VNc=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000000)=""/48, 0x30)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

1m29.450716704s ago: executing program 0 (id=3349):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@grpid}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4da, &(0x7f0000000900)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080))
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xcf2c39061c7b83f2)
getdents(r0, 0x0, 0x58)

1m29.103891056s ago: executing program 0 (id=3350):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r3)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8)

1m29.010491589s ago: executing program 0 (id=3351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010000104000000000005000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

1m28.943390991s ago: executing program 0 (id=3352):
r0 = socket(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipmr_delroute={0x1c, 0x19, 0x5, 0x70bd29, 0x25dfdbfc, {0x80, 0x80, 0x10, 0x1, 0xfc, 0x0, 0xff, 0x2, 0x1000}}, 0x1c}}, 0x4400c8c0)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x41]}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10)
chdir(&(0x7f0000000000)='./cgroup\x00')
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x2c, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipmr_delroute={0x1c, 0x19, 0x5, 0x70bd29, 0x25dfdbfc, {0x80, 0x80, 0x10, 0x1, 0xfc, 0x0, 0xff, 0x2, 0x1000}}, 0x1c}}, 0x4400c8c0) (async)
signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x41]}, 0x8) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) (async)
chdir(&(0x7f0000000000)='./cgroup\x00') (async)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

1m28.600049863s ago: executing program 0 (id=3353):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mq_timedreceive(r1, 0x0, 0x0, 0x680000000000000, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000080)={0x2c, 0xc, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x400c055)

1m28.190732866s ago: executing program 0 (id=3360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x30}}, 0x0)

1m28.190260456s ago: executing program 35 (id=3360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x30}}, 0x0)

9.964247153s ago: executing program 6 (id=4074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000004)
r2 = socket$tipc(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200003401c000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2", 0xa5}], 0x1}, 0x40840)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000001040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r10 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r10, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e20", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
tee(r5, r8, 0xfffffffffffffc01, 0x0)
tee(r5, r8, 0x60000000000, 0x8)
vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000000000)="b00e053187ea64622718f4d29a5a4e2d5434fa7af437bf7d06c6d28f9534d66570255d4e4cb8854b4b3865d92f0c77c2fc63df3ffec8a9ef0819bfed6c141503cadebc7f55ba0a969bfadbc15f1c39799fe43b50e8398b406257ae67eae049e502c2950efedfb72b16a275963880c822434211a8472ad16e750e19079eb8788aaf3e2c3791d69abd879827c0c3c2108e56f13819e891e2fae4185b5c6b5b9c0b9a377a5bc19f4bf53797548ea0b5c3f0a3c6e268c02199d3de05a92c2d2edd471d49329d8fb866", 0xc7}, {&(0x7f0000000100)="9ba755f913d665faefe17de9641d8e8fe42bbc41496f9af2fb9bea2e79d845009b31a7b7e039ee9d3e9309fe83d5bdc03ac263414d5f73cf7431e50108256de618d797a70624b5b00c4586baf646c8a44a56053be50c581ccb2836260cda0479012f9db490bfb362ccdb17784aaa7ba436c31163456e247ed147ab4b06282a722f7f55c88e32993b9d7ea0", 0x8b}, {&(0x7f00000001c0)="e604342e13c4f9bb8e0894a3c5e27c65447f073237ef873ee3ffdaf6f4b62e832bfb6717065516ad26ad7fe743509bc3eeb6be8d7e6f4f97daeb60f7715780244a4c0de36b7e01666d05ca7ccd8ac11bdc0bfab2da4bfbc82cf240cca79a2662ec70e19b846763e2", 0x68}, {&(0x7f0000000280)="1e0f55a3c36466d4ffe78976d167aff900937b1721def62942ea5062143d131e4e598f58af36b80d832850af0930b86b42068ecb2a47f5", 0x37}, {&(0x7f0000001080)="7dd5fbb94461393c2f437ddbd28ffa66c4aae394cfead12bf2e6db9e2d4e4ee253a1947d12b7b9b4c3e2f8f5ad73b69888521d62d60a4f10e832c21c34221b3e197b31b21e8d2be4334c38b64a450b2133c8e1c3de57592f700e84bff93888855d8f3e409f6d246904122380dbd6ce8962f14df0898388da845f822b160e9d670e55f864414d27ae790279bc91d496237e18131006ec7db0ec40a3ddada42aa193721a75966bb6b27bee1b1e260d6c00a4f7a14aa956b2b658ca23738b72e4932431fe8ac2013fac5fc53d046107191b4d89a725fbcb7e48e0c319d27e6e72b75f13251093e78ad72d399fba05b7ec05fbdfb905752d07df3c893dc7921479dfc55b4a41aa132de2528402c19c834119db6e79c19bac225bd502218385ffbc29430cc72dc66c7a89915a4f663ad5a447f529068f6df335a319e17088dad930f8e2f7ec0f5d72f47d89c078c3b766c9d31f5369cff0b19629680909f8f10da84c6f923bb0380f3d5b38967c6ad7d0cf308c8245ef4de5f4df5f4bdac7cb32db0a6e6f496abcb2baaee75f64fc2d46ac52f7ce085a301c659ff9247d1ef254e6fa68ec3c91e14d98c9b7146b160c2dfaf230c60c5512150c66aee4d41f53542131fa6086aade4c1b9532be0ea37bbeaad41a6314fd65b8f5f5dae3f1386b780e6f31fab054a4e30ecfe4a4b1d0900bece107f6ee11718b58e2575283ebc7e9226b06614cbfcff2fb92a0576648c244efc5db8e873d8277bbc809b47173a23708a87dbe599cf9b9bb77ff9967875784e6469f15737626c600f6a1b339468f7cbff4a90a6619adbb4dc5fbc81829955e0180a7ec28a47ba0788348b3086e631b7f47a91a0cad3029edc66ce5e5dc88ec746df652260a9b093b30411335a9b826b222d121ff57a70799b8c15840883b82ca645d8cd120750bc2a2e1a97b981e4885c5cd288026e75b0199ec31dbc863fd7619c249af1ae93b7d09d83bd4644e95b257826e07acc3377e1179d164b0f522de84224851102e66269ff4b4e925b11825b92912c7564b8d676ff8549f830d029c8c87440bb6402294fb0f87815e74bbad8054216c857d273ed3d07271a9f934eac763a7acf61582a8545dc4cbf1bba7d713f6d918493ec1231a8e47b9d27bbc52553124e3546878029c3a196be5f6ca3c455ac526075db19d2d30406d3ffd7c81bbd3620fdc47b59a894f3890aa3e0f3dc7dbf22ed3b8a983cb084b75a5f1a4345bb623dca85a5385c3c88e696adb4516b779be7fec771692cd8b9079707f5c6da84bd8b06d4bddaab29932e01b616b7aac5c499b2f926a894c635a6c32ffe81ca41836f870d87e8569a2f52acdd50c4ae5abfefae72a2696b5a054a6ab341ec53fdac85e5491b716dd5c549930e2d12c4cf46cb30dc2e8150eff59b1176b5e6a1c87316df873b02c6093757291d7f3fd0478c4d6ed03d8ec4b107a9e8d8c6eaedd4761777f9a898eecb8a592c4fe1a66e428e9518a423017da126c6746af657bf1770bd77e0234b7fefe7f7f254b892b8450e17887377747e640ece9fcf1e2ab433c48d79792b593f580b32c352820e7881c2021dfce42473be1b58153ee2dd41855632fb04a73718c7f79bf17dcfa4cb1190fbfd66216ca845d2f16c0efc18cb5cdec34a6b3770d3381c4d609ed3e5017b2b2f15e2999a2a57bb15b767a63eb229985ee17d00bedd1006bc8d04d7e2fc5be25e4299ac644f24f88d2b3b949794038d10896f06657d7c9d5fe5ed2e7409760da20055b2b6fd8369ddcd4b2ac3689d9c58d2818858af6b77af2cf5ff024374507585554744918916e3dd68f4e0cc04d28dfbf2881e1c487e4deec223ec6314c4e0d3ab6189b08bd1d5588e6dd9f882c79f980f169d00c8ffc91185ed51ea4033e62220b69a4af529d038d27e715b2c95b97b9aacb72576ec14b5eb89f630065a8cd55bed0896368f15d256a13e74b30c81637617697a5ffaca73cfac641cbf26eac6e726e8effd3394c3ad32f4f7ed6fd63274e64b2059dc9150c8b2b07e67bf3f3925751a53d74ee03d4856ffa247ac28e3913c322f1de0c5b9985b72ac614c758a6c153d6f61d7511b97482dae5e89bcd3e7c1f8a0d81b8f2adf8cf01f3ffb8be80ac8333e26842467dba3f908c6f10476be206de080a16b83d3f2d5993d375f52092a1d1ed5024adf1b77b943c6e3d7831d3d9deec0ebc3b12e2d933b7be480f09e6bf3782192d90130be87ea0f9aaa39ff1cdf6f75c574d3759132a93f5e087bc680777cf654013fc77c8f1a6d67136d5d338c93725c42fda8025eb8d779f489b91961782d10d4fd7cd677caa61dc2768df4dbd4209fab55c40d0f71034825359677950a91166f257a275b7b8d6caecaea32a6c8d7f535e97c3ffb39f604e859b9e964bf3f287c507ef366f432f538a8648ea4625f1a0242cf46df716459ca15d7c5bfe04a75f5f4ac759d07f2a4378a31a32e05670dd8cedb4c134f3f5a8712f5446a4e73d9779e16f8585cedf335e71f8b9b6b5a63f4c33bc0b57433f616e700485ac5aba658c32a12b4ff218c28cc52b8073d15918f4fb70e7415362526712f718cc2d74e16ff55c5c1a6c89c7de00703d970057188b62fb4b7fde7b1ab0ffcb61a52c94382b00e4909d03588308a041f2fd2f49580f73ed9b0037ad2fc68a4a1c515ba6629abf288de539b5565f711d735a9e66b0fa72169399c9f96f16de807a557a5f5e829c39df59248a2e0245c23885e0a5a37f512cc019bbf638ecf71847d9be2b82e0867fd9b27dfbf8072f6710edbab53de57ea65237d4ebfda84957d24eae164fc68e3fdcb828df5bd303d31300feb14f9b59100824c3edd6b2ea11a932b48fbc17601c03400af059cfc094074c42b052a4040d766c01c2d3c6b5c39df72ba3aa13d1a2b630d105ce9a823427778a6616ff12eacbf264ba70694d19017791466ad2697d4acd2aee2f90e33282264de6678e68c55d4f192448488b84a32000439e9646a28bd8efefc2859305a969af434d766b2d3e2370784ea39b4212df4d53f749c7ef81d86e752560996428085f18e2757d995c45a482c560463155f574ccf6c4055b943493749c0f08ab7771b1d1ac96dcaf63734f0412ea6a4c3a07eb20b99ff6191e66f02c2d0ec02fe27ffe835b5d61ab6b66291c439499c57f93bfc70415b2e623fd99b113658796141457a9ccab075e37ededab33b43b7c24bc1264a3a63dcfc8c0fb8dda8555147d37b208ee54db5fd0a3a05975f46e57e0fa3ec9765a933b7cb99b544d590fa009c3e8ccc7d6083f9acd756da72b16dd332c1feac661c66cbb4b1ca832138480f958e76ed358862ab23ec2d2605ee52ad76963e45f48fded4b2c2f4d83ba40453b58c73f8fd15252f9cf17505e338a19b1032414cf8017967d303b320513ce1cb5e3396647f2baae30d43ac0dc3858b230567d4087d8d2d9b3c8ce6b60c6d083c8554d8c5858bf50da73afad249bda6950a306eafdad7a6c4c67cbd20db22b5d4a695143302c8d911a55141ff2b858dc813e25611e1a86ee91a41c7f7cb5b10d201ef970c1772c467fecf609c8f1e602ec8f73b62b68e5e7b85b771cad797773010462b5e3f5d2fee984b7347ad19e9cee3c6234e974d3b4114d9e9860a55c7f449aaf7caef500e67251a599fd96b1e1efb8d937925616e4f8c2add141aaff29de31dd6e862071ce917e38f35a1c252eb3aee8a38633758a6abd2f1ba220f3ec76191ab688635673594cee0213387ddd3c66fc715361730982cbd4e5ebe067b2903c6a3a13e26be288e1ebac9b522dd093472aa339b070047b5ac36951c06bdad87d3ce4cfef9d2f29cded17b4eb4a74a4c899eb229efa4b29ca637232b8a183d300e7546068dab890bddf1a75a8f43e3d98bd488df71b0e6988cb3a7f8c1c80e5e15607d79bb3e3333527e2e0c2e6060295eaef34c6d2c17b12619218d09d5d749e60204c0717495a0760890618c6b17aec251b55da0ef065d9b1e5423a01801bedbfbd924a203e1b3b6ae22dfa6adb120462b49261db23e30c02b9fe852dc5f54761a5e39ab54dd1e56ee1867c2623e6f0958114c4f03a8e8c0b1378af31a26565b6d6f76193452d0b16a4101078d3e6b5e290101c9fd32df4a13c5c23d987a12432c4485ba10ed7f8397b1102be9bdfaf27319bd94e262ea4891dbf1fd327287ab6fdfbbfdb23433d2d23c836ea42433b629c2dcddce95c581a70d1f43085cd6b0829bd75f0f31a411ac1a6bdd15287f715b6d578fe58e9cbefe42d43c4aa2276fe043b47a54ce3a348a772d83f4dd66322dde0a97567ab02a187a8b046af5c50214248f317ad352bbf862ef23aee017a885ecec67463b026d96d3c3275101acc305548e26b284679f8a49d9a1682be414eded81939b1e337bbe798de078bf90c74242bbea85a10da15caabe587195469fd8d0ec9816da849011b5afdef272848a57976e7c2d9bf46c085e4174b1fdfc89a9f4bca15a493cca4774a6c90bd6e9631918511021124d38d9ed20d04c83f7a5bc51a5e4099d184c97a26102b9dccbc1dad520da8dfa46797e33ae44d86d5101e3c31704946e07259cf44bb22615b5df2eb00834136364b5b2ea94ed26debc9dc5c8a307f73beee2706a20d70618ff1322998405b863ad4788b375b1458f14d1a37b5ab4c21a7a60d9a67deb217ca1347f1cc7dd99e3498195573f324ea77f63c44e1423e4177989df23ecf760deee8cfe9c6a97f042190404e163071b2a8d714bd4c64f0d5b111b37830ba1bfc63144926798cfc6de60a1a9ba97ee50a20e3fba8ebfd7f236c726c2d9a4842fbb7b58a4a952512db7408d3083421af6a144d64fb5385d828b3702b03bfe697670d9f862cea6b0931e0feafd171b547a3c1d14ac3f36035e61e268d8c2300d2fa0fa1203f5fd0ab127f3f654ff74c34128e623e32714248366baf7a10936c87b3ec8ce6159dc4b67751f61769e0bc8e09163eee02079f566e2bd787b75182d573911e8e24b82c3f566bf76a380861a94f11b623ce02e766892bc3f237ab0a823cd2a84a15f791ce8f5fd4c9d5d05220f6532db074bea96735f64f", 0xe0f}], 0x5, 0x9)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd7000fcdbdf250300000008000300", @ANYRES32=r12], 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r13, &(0x7f0000000200)={'#! ', './file0'}, 0xb)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0xd, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x0, 0x8, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

9.048922354s ago: executing program 6 (id=4088):
socket$inet6_mptcp(0xa, 0x1, 0x106)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f00000001c0), 0x18)
utimensat(r1, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000d0000000400000002db70ccf01850000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000100000000000000000000003cdf7ae6b19c00009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)

7.440857668s ago: executing program 6 (id=4097):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
bind$can_raw(r0, &(0x7f0000000280), 0x10) (fail_nth: 1)

7.182529917s ago: executing program 6 (id=4100):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000005c0)={[{@sysvgroups}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x20500)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000001240)={[{@abort}, {@inlinecrypt}]}, 0x4, 0x541, &(0x7f0000001e00)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0})

4.799979907s ago: executing program 6 (id=4117):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

4.297904084s ago: executing program 6 (id=4122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x137, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f50000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

2.108128458s ago: executing program 7 (id=4135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x78bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.928569704s ago: executing program 7 (id=4136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)

1.836766287s ago: executing program 7 (id=4138):
socket$kcm(0xa, 0x2, 0x88)
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0)
syz_emit_ethernet(0x4a4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1)

1.698638162s ago: executing program 7 (id=4139):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x82803, 0xf)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000040)=0x9, 0x5, 0x3)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x1, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7461a74df2cfc06c89fe4de234b30c50297d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa44c75d51fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1.233697848s ago: executing program 1 (id=4143):
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x81)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x2000008})
unlink(&(0x7f0000000280)='./file0\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)

1.221393498s ago: executing program 7 (id=4144):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x50)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x5, 0x3, 0x0, 0x0, 0x1, 0xc}, 0x2, {0x5, 0x45, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0)
readv(r3, &(0x7f0000000240)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x7c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc091}, 0x4000000)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000))
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
ioctl$VT_DISALLOCATE(r1, 0x5608)
unshare(0x20060400)
r6 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
unshare(0x42010000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x1f)
r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6}, {0x0, 0xb}, {0x3, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x176, 0xffffffff, {0x2e, 0x0, 0xfffe, 0x7, 0x3, 0x4}, {0x1, 0x2, 0x0, 0x3, 0x9, 0x5}, 0x3, 0x5, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
unshare(0x0)

1.093441673s ago: executing program 8 (id=4146):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000720ac0ff0100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x721e}, 0x94)

1.009847035s ago: executing program 8 (id=4147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)

978.021226ms ago: executing program 8 (id=4148):
socket$netlink(0x10, 0x3, 0x4)
unshare(0x6a040000)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x56, 0x0, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x9)
readv(r1, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/125, 0x7d}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, 0x0, 0x0)

819.584442ms ago: executing program 5 (id=4149):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

765.763614ms ago: executing program 5 (id=4150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x3, 0x0, 0x0, 0x96}, 0x20)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3a7c, @rand_addr=' \x01\x00', 0x8000}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8)
bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x1}, 0x2a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x52e, &(0x7f0000000ac0)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RVERSION(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)

750.600364ms ago: executing program 8 (id=4151):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0x100000001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES64=r1], 0x58}}, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r7}}, 0x48)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4014, &(0x7f0000001000)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESDEC=r5])
r8 = fcntl$dupfd(r3, 0x0, r3)
sendto$inet(r0, &(0x7f0000000100)="ef2c638887c62221032c30fcfe0705f4c6f9b2d68eda59d46a88199831feec755a0e060b9200abf71022b10dad203047fa07488d2e9f2a623bd5fdd7bc9c6ed6225ead9f51e6f225b8832013186dca4fb69b5494c7af813cefe8473fd1a383eb45bcb3d3e50ed3acd37e3c8130fac28d9be683a189c330fd4fd1b6d949353f00afd2dc27a9c04a15c3725b83c95454f5cc03ecb15cb252b03fc353d3e929775562471524f054f58e8f7de9d022beed9c0da6b6717a52a69e8ffd6a9f906c37b79ffa8f", 0xc3, 0x14, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10)
openat$cgroup_ro(r8, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r8, 0x5309, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85)

617.022509ms ago: executing program 1 (id=4152):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x4202, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000c80)={<r3=>0x0, 0x4, 0x4, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001080)={r3, "9bc873b22b66161a24aa824ba0bcd0da"})
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x24, 0x0, 0xffff, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

578.13999ms ago: executing program 1 (id=4153):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3})
close(0x3) (fail_nth: 1)

502.472473ms ago: executing program 8 (id=4154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x10000, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0xe, r4}, 0x10)

478.015563ms ago: executing program 5 (id=4155):
socket$kcm(0x10, 0x2, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r1 = dup(r0)
r2 = open(0x0, 0x1298c2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000000000000000000000000000000000012001000000000000000000000000000000000004000000090a00300000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000003000000000000000000000000000093dbf5186904669900ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffffe0000002000000003c0000000a00000000000000000000000000000000000000043500000403000000000000faffffff00000200"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ftruncate(r2, 0x200004)
sendfile(r1, r2, 0x0, 0x80001d00c0d1)

427.625395ms ago: executing program 1 (id=4156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000010c0)=ANY=[], 0x58}}], 0x1, 0x2404cc54)

255.421881ms ago: executing program 1 (id=4157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)

164.054514ms ago: executing program 1 (id=4158):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

163.487834ms ago: executing program 7 (id=4159):
socket$inet6(0xa, 0x1, 0x0)
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003804e"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014)
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x20b, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0)

163.350104ms ago: executing program 5 (id=4160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008080}, 0x8804) (fail_nth: 3)

63.279828ms ago: executing program 8 (id=4161):
socket$netlink(0x10, 0x3, 0x4)
unshare(0x6a040000)
perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x56, 0x0, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x9)
readv(r1, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/125, 0x7d}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)

33.040469ms ago: executing program 5 (id=4162):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "05cddc587f1cc30e", "bd3dd3dada631d0900f13740de3020c1fa77a23de29ee202730d62870500bca9", "65f50b29", "18209a4170203b33"}, 0x38)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="f79b76b1a967f9031fa4bbcbe2e63dd34000"/32, 0x20}, {0x0}, {&(0x7f00000029c0)="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", 0x7b6}], 0x3)

0s ago: executing program 5 (id=4163):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x60, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x90, 0x20, 0xbffffffc, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0})

kernel console output (not intermixed with test programs):

as an invalid length.
[  417.959455][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3450'.
[  417.985142][T14969] team0: entered promiscuous mode
[  418.000491][T14969] team_slave_0: entered promiscuous mode
[  418.010657][T14969] team_slave_1: entered promiscuous mode
[  418.025022][T14969] bond0: entered promiscuous mode
[  418.030077][T14969] bond_slave_0: entered promiscuous mode
[  418.046579][T14969] bond_slave_1: entered promiscuous mode
[  418.064603][T14969] erspan0: entered promiscuous mode
[  418.084879][T14969] 8021q: adding VLAN 0 to HW filter on device hsr1
[  418.190826][T14980] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  418.384393][T14980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3452'.
[  419.425172][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.430746][T14980] loop1: detected capacity change from 0 to 256
[  420.016486][T14993] xt_hashlimit: size too large, truncated to 1048576
[  420.284994][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3458'.
[  420.349264][T15003] netlink: 'syz.1.3460': attribute type 4 has an invalid length.
[  420.588358][T15022] tipc: Started in network mode
[  420.652228][T15025] loop6: detected capacity change from 0 to 512
[  420.658657][T15022] tipc: Node identity 4, cluster identity 4711
[  420.688080][T15022] tipc: Node number set to 4
[  420.704648][T15025] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  420.726852][T14994] loop7: detected capacity change from 0 to 8192
[  420.816263][T15033] netlink: 'syz.1.3467': attribute type 29 has an invalid length.
[  420.984281][ T7114] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  421.272160][T15038] FAULT_INJECTION: forcing a failure.
[  421.272160][T15038] name failslab, interval 1, probability 0, space 0, times 0
[  421.528320][T15038] CPU: 1 UID: 0 PID: 15038 Comm: syz.5.3469 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  421.528413][T15038] Tainted: [W]=WARN
[  421.528420][T15038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  421.528437][T15038] Call Trace:
[  421.528445][T15038]  <TASK>
[  421.528479][T15038]  __dump_stack+0x1d/0x30
[  421.528504][T15038]  dump_stack_lvl+0x95/0xd0
[  421.528523][T15038]  dump_stack+0x15/0x1b
[  421.528605][T15038]  should_fail_ex+0x263/0x280
[  421.528666][T15038]  should_failslab+0x8c/0xb0
[  421.528686][T15038]  kmem_cache_alloc_noprof+0x66/0x400
[  421.528780][T15038]  ? do_getname+0x2e/0x1c0
[  421.528805][T15038]  do_getname+0x2e/0x1c0
[  421.528826][T15038]  getname_flags+0x1d/0x30
[  421.528845][T15038]  __x64_sys_lgetxattr+0xfd/0x150
[  421.528933][T15038]  x64_sys_call+0x2ecc/0x3020
[  421.528960][T15038]  do_syscall_64+0x12c/0x370
[  421.528987][T15038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.529080][T15038] RIP: 0033:0x7f2adefec819
[  421.529097][T15038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  421.529146][T15038] RSP: 002b:00007f2adda3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  421.529165][T15038] RAX: ffffffffffffffda RBX: 00007f2adf265fa0 RCX: 00007f2adefec819
[  421.529181][T15038] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000
[  421.529196][T15038] RBP: 00007f2adda3f090 R08: 0000000000000000 R09: 0000000000000000
[  421.529210][T15038] R10: fffffffffffffe5f R11: 0000000000000246 R12: 0000000000000001
[  421.529225][T15038] R13: 00007f2adf266038 R14: 00007f2adf265fa0 R15: 00007fff5149d268
[  421.529281][T15038]  </TASK>
[  421.852189][T15060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'.
[  421.905465][T15064] loop8: detected capacity change from 0 to 1024
[  421.912112][T15064] EXT4-fs: Ignoring removed mblk_io_submit option
[  421.924156][T15064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  421.948381][T15064] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  421.960587][T15068] netlink: 'syz.1.3474': attribute type 4 has an invalid length.
[  422.005113][T15074] loop6: detected capacity change from 0 to 512
[  422.142218][T15074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.156004][T15064] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #11: comm syz.8.3473: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  422.186818][T15084] tipc: Started in network mode
[  422.191909][T15084] tipc: Node identity 4, cluster identity 4711
[  422.199373][T15084] tipc: Node number set to 4
[  422.229622][T15074] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.298650][T15085] loop1: detected capacity change from 0 to 4096
[  422.333548][T15064] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  422.335307][T15064] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3473: couldn't read orphan inode 11 (err -117)
[  422.344728][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  422.344746][    C0] EXT4-fs (loop8): initial error at time 1775070380: ext4_ext_check_inode:521: inode 11
[  422.344772][    C0] EXT4-fs (loop8): last error at time 1775070380: ext4_ext_check_inode:521: inode 11
[  422.430206][T15088] netlink: 'syz.7.3480': attribute type 29 has an invalid length.
[  422.760161][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.833655][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.884824][T15092] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3477: corrupted xattr block 33: invalid checksum
[  422.976206][T15092] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop6 ino=15
[  422.994531][T15064] loop8: lost filesystem error report for type 5 error -117
[  422.995568][T15064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.063145][T15092] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3477: corrupted xattr block 33: invalid checksum
[  423.142521][T15085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.178316][T15092] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop6 ino=15
[  423.434894][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.447803][T15092] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:105: comm syz.6.3477: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  423.551367][T15092] EXT4-fs error (device loop6) in ext4_free_inode:361: Filesystem failed CRC
[  424.534321][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.579975][T15135] netlink: 'syz.7.3486': attribute type 4 has an invalid length.
[  424.967943][T15147] 9p: Bad value for 'rfdno'
[  425.172248][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.198991][T15157] netlink: 'syz.8.3497': attribute type 4 has an invalid length.
[  425.211326][T15155] loop6: detected capacity change from 0 to 512
[  425.244281][T15158] netlink: 'syz.5.3496': attribute type 29 has an invalid length.
[  425.245678][T15165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3485'.
[  425.548717][T15171] random: crng reseeded on system resumption
[  425.579333][T15171] lo speed is unknown, defaulting to 1000
[  425.962778][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  425.962796][   T28] audit: type=1400 audit(1775070383.838:15546): avc:  denied  { create } for  pid=15169 comm="syz.1.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  426.007626][T15180] 9p: Bad value for 'rfdno'
[  426.237217][T15194] netlink: 'syz.8.3509': attribute type 4 has an invalid length.
[  426.342457][T15202] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  426.387732][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3514'.
[  426.407948][T15206] netlink: 'syz.8.3516': attribute type 29 has an invalid length.
[  426.463442][T15208] 9p: Bad value for 'rfdno'
[  426.649346][T15202] loop7: detected capacity change from 0 to 256
[  426.743311][T15217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3513'.
[  427.228527][   T28] audit: type=1400 audit(1775070385.508:15547): avc:  denied  { mounton } for  pid=15201 comm="syz.7.3514" path="/396/file0/file0" dev="loop7" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  427.252763][T15209] 9p: Bad value for 'rfdno'
[  427.274923][T15228] netlink: 'syz.5.3523': attribute type 4 has an invalid length.
[  427.471522][T15244] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3530'.
[  427.577559][T15255] hsr0: left allmulticast mode
[  427.577614][T15255] hsr_slave_0: left allmulticast mode
[  427.577679][T15255] hsr_slave_1: left allmulticast mode
[  427.577701][T15255] hsr0: left promiscuous mode
[  427.578015][T15255] bridge0: port 3(hsr0) entered disabled state
[  427.639366][T15255] bridge_slave_1: left allmulticast mode
[  427.733905][T15255] bridge_slave_1: left promiscuous mode
[  427.735009][T15255] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.837440][T15255] bridge_slave_0: left allmulticast mode
[  427.837517][T15255] bridge_slave_0: left promiscuous mode
[  427.838519][T15255] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.249926][T15258] netlink: 'syz.8.3535': attribute type 29 has an invalid length.
[  428.523134][T15280] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3543'.
[  428.558398][T15283] loop8: detected capacity change from 0 to 512
[  428.577678][T15285] FAULT_INJECTION: forcing a failure.
[  428.577678][T15285] name failslab, interval 1, probability 0, space 0, times 0
[  428.601050][T15283] EXT4-fs: inline encryption not supported
[  428.624973][T15285] CPU: 1 UID: 0 PID: 15285 Comm: syz.6.3545 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  428.625002][T15285] Tainted: [W]=WARN
[  428.625069][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  428.625079][T15285] Call Trace:
[  428.625086][T15285]  <TASK>
[  428.625095][T15285]  __dump_stack+0x1d/0x30
[  428.625122][T15285]  dump_stack_lvl+0x95/0xd0
[  428.625146][T15285]  dump_stack+0x15/0x1b
[  428.625163][T15285]  should_fail_ex+0x263/0x280
[  428.625244][T15285]  ? init_srcu_struct_fields+0x57/0x660
[  428.625338][T15285]  should_failslab+0x8c/0xb0
[  428.625358][T15285]  __kmalloc_cache_noprof+0x5f/0x410
[  428.625507][T15285]  init_srcu_struct_fields+0x57/0x660
[  428.625531][T15285]  ? __kmalloc_noprof+0x1e3/0x4e0
[  428.625557][T15285]  init_srcu_struct+0x23/0x30
[  428.625632][T15285]  hci_alloc_dev_priv+0x35/0xe70
[  428.625694][T15285]  hci_uart_tty_ioctl+0x28b/0x5c0
[  428.625736][T15285]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  428.625815][T15285]  tty_ioctl+0x83e/0xb80
[  428.625841][T15285]  ? __pfx_tty_ioctl+0x10/0x10
[  428.625866][T15285]  __se_sys_ioctl+0xce/0x140
[  428.625930][T15285]  __x64_sys_ioctl+0x43/0x50
[  428.625976][T15285]  x64_sys_call+0x1563/0x3020
[  428.626097][T15285]  do_syscall_64+0x12c/0x370
[  428.626126][T15285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.626183][T15285] RIP: 0033:0x7f11e98dc819
[  428.626197][T15285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.626214][T15285] RSP: 002b:00007f11e832f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  428.626235][T15285] RAX: ffffffffffffffda RBX: 00007f11e9b55fa0 RCX: 00007f11e98dc819
[  428.626251][T15285] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003
[  428.626265][T15285] RBP: 00007f11e832f090 R08: 0000000000000000 R09: 0000000000000000
[  428.626298][T15285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.626309][T15285] R13: 00007f11e9b56038 R14: 00007f11e9b55fa0 R15: 00007ffe5ebe7e68
[  428.626378][T15285]  </TASK>
[  428.626390][T15285] Bluetooth: Can't allocate HCI device
[  428.848364][T15283] EXT4-fs (loop8): 1 orphan inode deleted
[  428.854912][T15283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.882076][T15283] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.896982][ T6871] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  428.917100][ T6871] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:10: Failed to release dquot type 1
[  428.938650][T15283] FAULT_INJECTION: forcing a failure.
[  428.938650][T15283] name failslab, interval 1, probability 0, space 0, times 0
[  428.971023][T15283] CPU: 1 UID: 0 PID: 15283 Comm: syz.8.3546 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  428.971061][T15283] Tainted: [W]=WARN
[  428.971067][T15283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  428.971078][T15283] Call Trace:
[  428.971085][T15283]  <TASK>
[  428.971093][T15283]  __dump_stack+0x1d/0x30
[  428.971121][T15283]  dump_stack_lvl+0x95/0xd0
[  428.971187][T15283]  dump_stack+0x15/0x1b
[  428.971206][T15283]  should_fail_ex+0x263/0x280
[  428.971229][T15283]  ? ext4_init_fs_context+0x32/0x90
[  428.971248][T15283]  should_failslab+0x8c/0xb0
[  428.971270][T15283]  __kmalloc_cache_noprof+0x5f/0x410
[  428.971321][T15283]  ? alloc_fs_context+0x46/0x580
[  428.971411][T15283]  ext4_init_fs_context+0x32/0x90
[  428.971429][T15283]  alloc_fs_context+0x4a6/0x580
[  428.971455][T15283]  fs_context_for_reconfigure+0x42/0x50
[  428.971483][T15283]  path_mount+0xa61/0xbc0
[  428.971562][T15283]  __se_sys_mount+0x28c/0x2e0
[  428.971585][T15283]  ? fput+0x8f/0xc0
[  428.971614][T15283]  __x64_sys_mount+0x67/0x80
[  428.971636][T15283]  x64_sys_call+0x2d61/0x3020
[  428.971719][T15283]  do_syscall_64+0x12c/0x370
[  428.971744][T15283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.971765][T15283] RIP: 0033:0x7f84164bc819
[  428.971830][T15283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.971919][T15283] RSP: 002b:00007f8414f0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  428.971941][T15283] RAX: ffffffffffffffda RBX: 00007f8416735fa0 RCX: 00007f84164bc819
[  428.971957][T15283] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000
[  428.972033][T15283] RBP: 00007f8414f0f090 R08: 0000000000000000 R09: 0000000000000000
[  428.972047][T15283] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001
[  428.972061][T15283] R13: 00007f8416736038 R14: 00007f8416735fa0 R15: 00007ffdbdf11488
[  428.972085][T15283]  </TASK>
[  429.233453][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.305503][T15309] loop8: detected capacity change from 0 to 512
[  429.367328][T15309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.383250][T15309] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.405644][T15314] netlink: 'syz.6.3556': attribute type 29 has an invalid length.
[  429.509894][T15318] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3558'.
[  429.551515][T15319] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.3554: corrupted xattr block 33: invalid checksum
[  429.581649][T15319] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop8 ino=15
[  429.590887][T15319] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.3554: corrupted xattr block 33: invalid checksum
[  429.628255][T15319] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop8 ino=15
[  429.738068][T15326] random: crng reseeded on system resumption
[  429.868346][T15319] EXT4-fs error (device loop8): ext4_validate_inode_bitmap:105: comm syz.8.3554: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  429.986024][T15319] EXT4-fs error (device loop8) in ext4_free_inode:361: Filesystem failed CRC
[  430.304027][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.384142][T15345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3570'.
[  430.417317][T15351] loop6: detected capacity change from 0 to 128
[  430.537888][T15355] loop7: detected capacity change from 0 to 8192
[  430.555012][T15363] netlink: 'syz.6.3578': attribute type 29 has an invalid length.
[  430.660801][ T3294]  loop7: p2 p3 p4[EZD]
[  430.666594][ T3294] loop7: p3 start 331781 is beyond EOD, truncated
[  430.674938][ T3294] loop7: p4 size 197376 extends beyond EOD, truncated
[  430.685342][T15355]  loop7: p2 p3 p4[EZD]
[  430.690433][T15355] loop7: p3 start 331781 is beyond EOD, truncated
[  430.733094][T15355] loop7: p4 size 197376 extends beyond EOD, truncated
[  430.817349][   T28] audit: type=1400 audit(1775070389.088:15548): avc:  denied  { read write } for  pid=15354 comm="syz.7.3575" name="loop7p4" dev="devtmpfs" ino=2432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  431.020771][   T28] audit: type=1400 audit(1775070389.088:15549): avc:  denied  { ioctl open } for  pid=15354 comm="syz.7.3575" path="/dev/loop7p4" dev="devtmpfs" ino=2432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  431.462427][T15378] netem: change failed
[  431.554136][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3585'.
[  431.701824][T15402] loop8: detected capacity change from 0 to 1024
[  431.725907][T15402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.844242][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.887811][T15407] FAULT_INJECTION: forcing a failure.
[  431.887811][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.913197][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.8.3592 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  431.913278][T15407] Tainted: [W]=WARN
[  431.913284][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  431.913429][T15407] Call Trace:
[  431.913438][T15407]  <TASK>
[  431.913446][T15407]  __dump_stack+0x1d/0x30
[  431.913470][T15407]  dump_stack_lvl+0x95/0xd0
[  431.913571][T15407]  dump_stack+0x15/0x1b
[  431.913594][T15407]  should_fail_ex+0x263/0x280
[  431.913617][T15407]  should_fail+0xb/0x20
[  431.913637][T15407]  should_fail_usercopy+0x1a/0x20
[  431.913723][T15407]  _copy_from_user+0x1c/0xb0
[  431.913755][T15407]  io_unregister_pbuf_ring+0x4c/0x200
[  431.913833][T15407]  __se_sys_io_uring_register+0xccb/0x12d0
[  431.913932][T15407]  ? mutex_unlock+0x4e/0x90
[  431.913952][T15407]  ? fput+0x8f/0xc0
[  431.913977][T15407]  ? ksys_write+0x194/0x1a0
[  431.913998][T15407]  __x64_sys_io_uring_register+0x55/0x70
[  431.914029][T15407]  x64_sys_call+0x2be0/0x3020
[  431.914129][T15407]  do_syscall_64+0x12c/0x370
[  431.914179][T15407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.914215][T15407] RIP: 0033:0x7f84164bc819
[  431.914233][T15407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.914252][T15407] RSP: 002b:00007f8414f0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  431.914270][T15407] RAX: ffffffffffffffda RBX: 00007f8416735fa0 RCX: 00007f84164bc819
[  431.914351][T15407] RDX: 0000200000000f40 RSI: 0000000000000017 RDI: 0000000000000003
[  431.914374][T15407] RBP: 00007f8414f0f090 R08: 0000000000000000 R09: 0000000000000000
[  431.914389][T15407] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  431.914402][T15407] R13: 00007f8416736038 R14: 00007f8416735fa0 R15: 00007ffdbdf11488
[  431.914425][T15407]  </TASK>
[  432.165203][T15415] netlink: 'syz.7.3595': attribute type 29 has an invalid length.
[  432.866493][T15424] loop6: detected capacity change from 0 to 4096
[  432.965378][T15424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.376334][T15433] tipc: Started in network mode
[  433.381224][T15433] tipc: Node identity 4, cluster identity 4711
[  433.388090][T15433] tipc: Node number set to 4
[  434.934760][T15440] loop8: detected capacity change from 0 to 4096
[  434.952664][T15440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.030723][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.704317][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.994984][T15462] netlink: 'syz.6.3609': attribute type 29 has an invalid length.
[  438.533692][T15492] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3620'.
[  439.653130][T15500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3621'.
[  440.265318][T15500] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  440.281269][T15506] netlink: 'syz.8.3625': attribute type 4 has an invalid length.
[  440.441515][T15504] loop6: detected capacity change from 0 to 512
[  440.469914][T15512] netlink: 'syz.1.3627': attribute type 29 has an invalid length.
[  440.489210][T15504] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  440.531827][T15504] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  440.623977][T15504] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3624: Corrupt directory, running e2fsck is recommended
[  440.797257][T15504] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  440.818495][T15504] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.3624: corrupted in-inode xattr: e_name out of bounds
[  440.857974][T15523] FAULT_INJECTION: forcing a failure.
[  440.857974][T15523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.923872][T15504] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  440.924079][T15504] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3624: couldn't read orphan inode 15 (err -117)
[  440.933361][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  440.933379][    C0] EXT4-fs (loop6): initial error at time 1775070399: ext4_iget_extra_inode:5040: inode 15
[  440.933410][    C0] EXT4-fs (loop6): last error at time 1775070399: ext4_iget_extra_inode:5040: inode 15
[  441.001401][T15523] CPU: 0 UID: 0 PID: 15523 Comm: syz.8.3630 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  441.001431][T15523] Tainted: [W]=WARN
[  441.001447][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  441.001458][T15523] Call Trace:
[  441.001464][T15523]  <TASK>
[  441.001470][T15523]  __dump_stack+0x1d/0x30
[  441.001555][T15523]  dump_stack_lvl+0x95/0xd0
[  441.001649][T15523]  dump_stack+0x15/0x1b
[  441.001666][T15523]  should_fail_ex+0x263/0x280
[  441.001692][T15523]  should_fail+0xb/0x20
[  441.001713][T15523]  should_fail_usercopy+0x1a/0x20
[  441.001808][T15523]  _copy_to_user+0x20/0xa0
[  441.001840][T15523]  simple_read_from_buffer+0xb5/0x130
[  441.001895][T15523]  proc_fail_nth_read+0x10e/0x150
[  441.001968][T15523]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  441.001993][T15523]  vfs_read+0x1ab/0x7f0
[  441.002023][T15523]  ? __rcu_read_unlock+0x4e/0x70
[  441.002046][T15523]  ? __fget_files+0x184/0x1c0
[  441.002126][T15523]  ? mutex_lock+0x57/0x90
[  441.002149][T15523]  ksys_read+0xdc/0x1a0
[  441.002169][T15523]  __x64_sys_read+0x40/0x50
[  441.002190][T15523]  x64_sys_call+0x2886/0x3020
[  441.002234][T15523]  do_syscall_64+0x12c/0x370
[  441.002330][T15523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.002353][T15523] RIP: 0033:0x7f841647d04e
[  441.002369][T15523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  441.002451][T15523] RSP: 002b:00007f8414eccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  441.002473][T15523] RAX: ffffffffffffffda RBX: 00007f8414ecd6c0 RCX: 00007f841647d04e
[  441.002488][T15523] RDX: 000000000000000f RSI: 00007f8414ecd0a0 RDI: 0000000000000004
[  441.002500][T15523] RBP: 00007f8414ecd090 R08: 0000000000000000 R09: 0000000000000000
[  441.002511][T15523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.002522][T15523] R13: 00007f8416736218 R14: 00007f8416736180 R15: 00007ffdbdf11488
[  441.002587][T15523]  </TASK>
[  441.205309][T15504] loop6: lost filesystem error report for type 5 error -117
[  441.207138][T15504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.399217][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.519746][T15535] FAULT_INJECTION: forcing a failure.
[  441.519746][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.614236][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz.1.3634 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  441.614318][T15535] Tainted: [W]=WARN
[  441.614324][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  441.614336][T15535] Call Trace:
[  441.614342][T15535]  <TASK>
[  441.614348][T15535]  __dump_stack+0x1d/0x30
[  441.614371][T15535]  dump_stack_lvl+0x95/0xd0
[  441.614394][T15535]  dump_stack+0x15/0x1b
[  441.614416][T15535]  should_fail_ex+0x263/0x280
[  441.614497][T15535]  should_fail+0xb/0x20
[  441.614520][T15535]  should_fail_usercopy+0x1a/0x20
[  441.614548][T15535]  _copy_to_user+0x20/0xa0
[  441.614622][T15535]  pagemap_read+0x3ac/0x610
[  441.614688][T15535]  ? __pfx_pagemap_read+0x10/0x10
[  441.614737][T15535]  vfs_read+0x1ab/0x7f0
[  441.614752][T15535]  ? __rcu_read_unlock+0x4e/0x70
[  441.614776][T15535]  ? __fget_files+0x184/0x1c0
[  441.614800][T15535]  ? mutex_unlock+0x4e/0x90
[  441.614852][T15535]  __x64_sys_pread64+0xfd/0x150
[  441.614871][T15535]  x64_sys_call+0x27b5/0x3020
[  441.614915][T15535]  do_syscall_64+0x12c/0x370
[  441.614937][T15535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.614960][T15535] RIP: 0033:0x7fb2607ec819
[  441.615006][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.615024][T15535] RSP: 002b:00007fb25f23f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  441.615043][T15535] RAX: ffffffffffffffda RBX: 00007fb260a65fa0 RCX: 00007fb2607ec819
[  441.615106][T15535] RDX: 00000000ffffff8c RSI: 0000200000001240 RDI: 0000000000000005
[  441.615119][T15535] RBP: 00007fb25f23f090 R08: 0000000000000000 R09: 0000000000000000
[  441.615137][T15535] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002
[  441.615151][T15535] R13: 00007fb260a66038 R14: 00007fb260a65fa0 R15: 00007ffc8fc7d078
[  441.615245][T15535]  </TASK>
[  441.842906][T15539] random: crng reseeded on system resumption
[  441.860717][T15542] netlink: 'syz.7.3637': attribute type 4 has an invalid length.
[  442.131170][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3640'.
[  442.756929][T15566] loop6: detected capacity change from 0 to 4096
[  442.767835][T15566] EXT4-fs: Ignoring removed bh option
[  442.786211][T15566] EXT4-fs (loop6): stripe (138) is not aligned with cluster size (16), stripe is disabled
[  442.800718][T15566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.817585][T15566] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  442.828169][T15566] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 16: comm syz.6.3646: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=2, rec_len=4, size=4096 fake=1
[  442.845561][T15559] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  442.849043][T15566] EXT4-fs (loop6): Remounting filesystem read-only
[  442.922327][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.976675][T15576] FAULT_INJECTION: forcing a failure.
[  442.976675][T15576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.977825][T15573] netlink: 'syz.7.3650': attribute type 4 has an invalid length.
[  443.044209][T15576] CPU: 1 UID: 0 PID: 15576 Comm: syz.1.3651 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  443.044242][T15576] Tainted: [W]=WARN
[  443.044326][T15576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  443.044336][T15576] Call Trace:
[  443.044343][T15576]  <TASK>
[  443.044351][T15576]  __dump_stack+0x1d/0x30
[  443.044379][T15576]  dump_stack_lvl+0x95/0xd0
[  443.044404][T15576]  dump_stack+0x15/0x1b
[  443.044491][T15576]  should_fail_ex+0x263/0x280
[  443.044520][T15576]  should_fail+0xb/0x20
[  443.044544][T15576]  should_fail_usercopy+0x1a/0x20
[  443.044567][T15576]  _copy_from_user+0x1c/0xb0
[  443.044619][T15576]  sk_getsockopt+0xcf/0x1a70
[  443.044646][T15576]  ? selinux_socket_getsockopt+0x192/0x1c0
[  443.044712][T15576]  ? should_fail_ex+0xd9/0x280
[  443.044737][T15576]  do_sock_getsockopt+0x14d/0x210
[  443.044800][T15576]  __x64_sys_getsockopt+0x11d/0x1a0
[  443.044828][T15576]  x64_sys_call+0x2dcf/0x3020
[  443.044937][T15576]  do_syscall_64+0x12c/0x370
[  443.044965][T15576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.044984][T15576] RIP: 0033:0x7fb2607ec819
[  443.045004][T15576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.045020][T15576] RSP: 002b:00007fb25f23f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  443.045102][T15576] RAX: ffffffffffffffda RBX: 00007fb260a65fa0 RCX: 00007fb2607ec819
[  443.045114][T15576] RDX: 000000000000001e RSI: 0000000000000001 RDI: 0000000000000003
[  443.045126][T15576] RBP: 00007fb25f23f090 R08: 0000200000000040 R09: 0000000000000000
[  443.045214][T15576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.045225][T15576] R13: 00007fb260a66038 R14: 00007fb260a65fa0 R15: 00007ffc8fc7d078
[  443.045244][T15576]  </TASK>
[  443.906978][T15600] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3660'.
[  443.921702][T15600] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3660'.
[  443.968478][T15602] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3657'.
[  443.987541][T15602] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  444.044582][T15601] loop1: detected capacity change from 0 to 512
[  444.111311][T15601] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  444.232773][T15610] netlink: 'syz.8.3663': attribute type 10 has an invalid length.
[  444.341689][T12601] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  444.635255][T15620] netlink: 'syz.1.3665': attribute type 4 has an invalid length.
[  444.862699][T15635] loop8: detected capacity change from 0 to 128
[  444.871788][T15633] loop6: detected capacity change from 0 to 512
[  444.912814][T15637] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3674'.
[  444.912940][T15633] EXT4-fs: Invalid want_extra_isize 61
[  444.951046][T15635] loop8: detected capacity change from 0 to 512
[  444.967177][T15633] netlink: 'syz.6.3672': attribute type 1 has an invalid length.
[  444.991127][T15635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  445.018657][T15648] tipc: Can't bind to reserved service type 1
[  445.028590][T15652] loop7: detected capacity change from 0 to 512
[  445.029654][T15633] 8021q: adding VLAN 0 to HW filter on device bond3
[  445.053563][T15653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3672'.
[  445.069131][T15635] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  445.069369][T15648] netlink: 'syz.1.3676': attribute type 39 has an invalid length.
[  445.092541][T15641] lo speed is unknown, defaulting to 1000
[  445.092652][T15652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  445.126319][T15635] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  445.147961][T15653] bond3: entered allmulticast mode
[  445.173497][T15662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3676'.
[  445.184009][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.184082][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'.
[  445.185980][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3676'.
[  445.216676][T15662] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3676'.
[  445.236359][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.254673][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'.
[  445.307212][T15674] loop8: detected capacity change from 0 to 512
[  445.331761][T15673] loop7: detected capacity change from 0 to 512
[  445.346988][T15674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  445.394654][T15674] FAULT_INJECTION: forcing a failure.
[  445.394654][T15674] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.420069][T15681] FAULT_INJECTION: forcing a failure.
[  445.420069][T15681] name failslab, interval 1, probability 0, space 0, times 0
[  445.423011][T15674] CPU: 0 UID: 0 PID: 15674 Comm: syz.8.3679 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  445.423100][T15674] Tainted: [W]=WARN
[  445.423107][T15674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  445.423120][T15674] Call Trace:
[  445.423128][T15674]  <TASK>
[  445.423167][T15674]  __dump_stack+0x1d/0x30
[  445.423195][T15674]  dump_stack_lvl+0x95/0xd0
[  445.423217][T15674]  dump_stack+0x15/0x1b
[  445.423289][T15674]  should_fail_ex+0x263/0x280
[  445.423318][T15674]  should_fail+0xb/0x20
[  445.423366][T15674]  should_fail_usercopy+0x1a/0x20
[  445.423392][T15674]  _copy_from_user+0x1c/0xb0
[  445.423437][T15674]  memdup_user+0x5e/0xd0
[  445.423494][T15674]  strndup_user+0x68/0xb0
[  445.423572][T15674]  __se_sys_mount+0x4d/0x2e0
[  445.423659][T15674]  ? __se_sys_mkdirat+0xa2/0xf0
[  445.423679][T15674]  ? kmem_cache_free+0xc8/0x380
[  445.423730][T15674]  __x64_sys_mount+0x67/0x80
[  445.423753][T15674]  x64_sys_call+0x2d61/0x3020
[  445.423777][T15674]  do_syscall_64+0x12c/0x370
[  445.423867][T15674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.423908][T15674] RIP: 0033:0x7f84164bda8a
[  445.423925][T15674] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.423941][T15674] RSP: 002b:00007f8414f0ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  445.423958][T15674] RAX: ffffffffffffffda RBX: 00007f8414f0eee0 RCX: 00007f84164bda8a
[  445.423972][T15674] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000
[  445.424042][T15674] RBP: 0000200000000180 R08: 00007f8414f0eee0 R09: 00000000000820f8
[  445.424056][T15674] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100
[  445.424069][T15674] R13: 00007f8414f0eea0 R14: 0000000000000000 R15: 0000200000000240
[  445.424091][T15674]  </TASK>
[  445.459212][T15673] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  445.459237][T15673] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  445.532804][T15673] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  445.567637][T15681] CPU: 1 UID: 0 PID: 15681 Comm: syz.5.3681 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  445.567673][T15681] Tainted: [W]=WARN
[  445.567681][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  445.567737][T15681] Call Trace:
[  445.567744][T15681]  <TASK>
[  445.567754][T15681]  __dump_stack+0x1d/0x30
[  445.567781][T15681]  dump_stack_lvl+0x95/0xd0
[  445.567821][T15681]  dump_stack+0x15/0x1b
[  445.567843][T15681]  should_fail_ex+0x263/0x280
[  445.567896][T15681]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  445.567972][T15681]  should_failslab+0x8c/0xb0
[  445.568002][T15681]  kmem_cache_alloc_lru_noprof+0x6c/0x410
[  445.568028][T15681]  ? shmem_alloc_inode+0x34/0x50
[  445.568106][T15681]  ? kstrtouint+0x76/0xc0
[  445.568130][T15681]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  445.568232][T15681]  shmem_alloc_inode+0x34/0x50
[  445.568258][T15681]  alloc_inode+0x40/0x170
[  445.568314][T15681]  new_inode+0x1d/0xe0
[  445.568338][T15681]  shmem_get_inode+0x246/0x750
[  445.568369][T15681]  __shmem_file_setup+0x112/0x210
[  445.568492][T15681]  shmem_file_setup+0x3b/0x50
[  445.568517][T15681]  memfd_alloc_file+0x4e/0x300
[  445.568572][T15681]  __se_sys_memfd_create+0x2e1/0x3b0
[  445.568603][T15681]  __x64_sys_memfd_create+0x31/0x40
[  445.568662][T15681]  x64_sys_call+0x1f22/0x3020
[  445.568686][T15681]  do_syscall_64+0x12c/0x370
[  445.568718][T15681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.568740][T15681] RIP: 0033:0x7f2adefec819
[  445.568758][T15681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.568777][T15681] RSP: 002b:00007f2adda3ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  445.568855][T15681] RAX: ffffffffffffffda RBX: 0000000000000516 RCX: 00007f2adefec819
[  445.568869][T15681] RDX: 00007f2adda3eee0 RSI: 0000000000000000 RDI: 00007f2adf082e71
[  445.568882][T15681] RBP: 0000200000000740 R08: 00000000ffffffff R09: 0000000000000000
[  445.568896][T15681] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080
[  445.568909][T15681] R13: 00007f2adda3eee0 R14: 00007f2adda3eea0 R15: 0000200000000180
[  445.568978][T15681]  </TASK>
[  445.868645][T15673] System zones: 0-2, 18-18, 34-35
[  445.874895][T15673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  445.887260][T15673] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.903634][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.031112][T15705] netlink: 'syz.8.3682': attribute type 4 has an invalid length.
[  446.076244][T15709] loop8: detected capacity change from 0 to 512
[  446.127750][T15709] EXT4-fs (loop8): orphan cleanup on readonly fs
[  446.172215][T15709] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters
[  446.261946][T15714] loop1: detected capacity change from 0 to 4096
[  446.313819][T15714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.340571][T15709] EXT4-fs (loop8): Remounting filesystem read-only
[  446.347212][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  446.347236][    C0] EXT4-fs (loop8): initial error at time 1775070404: ext4_mb_generate_buddy:1317
[  446.347259][    C0] EXT4-fs (loop8): last error at time 1775070404: ext4_mb_generate_buddy:1317
[  446.395926][T15719] netlink: 'syz.7.3689': attribute type 17 has an invalid length.
[  446.426614][T15722] FAULT_INJECTION: forcing a failure.
[  446.426614][T15722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.567305][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.6.3690 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  446.567336][T15722] Tainted: [W]=WARN
[  446.567342][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  446.567353][T15722] Call Trace:
[  446.567361][T15722]  <TASK>
[  446.567442][T15722]  __dump_stack+0x1d/0x30
[  446.567466][T15722]  dump_stack_lvl+0x95/0xd0
[  446.567546][T15722]  dump_stack+0x15/0x1b
[  446.567564][T15722]  should_fail_ex+0x263/0x280
[  446.567587][T15722]  should_fail+0xb/0x20
[  446.567646][T15722]  should_fail_usercopy+0x1a/0x20
[  446.567746][T15722]  _copy_to_user+0x20/0xa0
[  446.567776][T15722]  simple_read_from_buffer+0xb5/0x130
[  446.567799][T15722]  proc_fail_nth_read+0x10e/0x150
[  446.567831][T15722]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  446.567866][T15722]  vfs_read+0x1ab/0x7f0
[  446.567885][T15722]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[  446.567911][T15722]  ? __rcu_read_unlock+0x4e/0x70
[  446.568024][T15722]  ? __fget_files+0x184/0x1c0
[  446.568045][T15722]  ? mutex_lock+0x57/0x90
[  446.568063][T15722]  ksys_read+0xdc/0x1a0
[  446.568080][T15722]  __x64_sys_read+0x40/0x50
[  446.568096][T15722]  x64_sys_call+0x2886/0x3020
[  446.568193][T15722]  do_syscall_64+0x12c/0x370
[  446.568298][T15722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.568317][T15722] RIP: 0033:0x7f11e989d04e
[  446.568331][T15722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  446.568347][T15722] RSP: 002b:00007f11e832efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  446.568368][T15722] RAX: ffffffffffffffda RBX: 00007f11e832f6c0 RCX: 00007f11e989d04e
[  446.568476][T15722] RDX: 000000000000000f RSI: 00007f11e832f0a0 RDI: 0000000000000003
[  446.568488][T15722] RBP: 00007f11e832f090 R08: 0000000000000000 R09: 0000000000000000
[  446.568499][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.568510][T15722] R13: 00007f11e9b56038 R14: 00007f11e9b55fa0 R15: 00007ffe5ebe7e68
[  446.568529][T15722]  </TASK>
[  446.927453][T15709] EXT4-fs warning (device loop8): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.8.3686: cleanup dec ref error -28
[  446.953867][T15709] EXT4-fs warning (device loop8): ext4_evict_inode:268: couldn't mark inode dirty (err -30)
[  446.969508][T15709] EXT4-fs (loop8): 1 orphan inode deleted
[  446.976889][T15709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  447.117084][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.179793][T15734] netlink: 'syz.6.3696': attribute type 4 has an invalid length.
[  447.302134][T15737] loop7: detected capacity change from 0 to 4096
[  447.334888][T15737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.112526][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.139971][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.290266][T15753] sg_write: data in/out 801761132/2010 bytes for SCSI command 0x20-- guessing data in;
[  448.290266][T15753]    program syz.1.3700 not setting count and/or reply_len properly
[  448.377205][T15756] loop7: detected capacity change from 0 to 8192
[  448.439868][ T3829]  loop7: p2 p3 p4[EZD]
[  448.450986][ T3829] loop7: p3 start 331781 is beyond EOD, truncated
[  448.463163][ T3829] loop7: p4 size 197376 extends beyond EOD, truncated
[  448.475896][T15756]  loop7: p2 p3 p4[EZD]
[  448.483150][T15756] loop7: p3 start 331781 is beyond EOD, truncated
[  448.489583][T15756] loop7: p4 size 197376 extends beyond EOD, truncated
[  448.998875][T15778] loop6: detected capacity change from 0 to 512
[  449.011626][T15782] netlink: 'syz.5.3709': attribute type 4 has an invalid length.
[  449.041676][T15786] loop1: detected capacity change from 0 to 512
[  449.049407][T15778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.080577][T15778] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.118141][T15786] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  449.207387][T15796] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3708: corrupted xattr block 33: invalid checksum
[  449.268047][T15796] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop6 ino=15
[  449.297331][T15795] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  449.314046][T15796] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3708: corrupted xattr block 33: invalid checksum
[  449.374298][T15796] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop6 ino=15
[  449.391271][T12601] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  449.411754][T15796] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:105: comm syz.6.3708: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  449.457087][T15796] EXT4-fs error (device loop6) in ext4_free_inode:361: Filesystem failed CRC
[  449.466843][   T28] audit: type=1400 audit(1775070407.748:15550): avc:  denied  { bind } for  pid=15799 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  449.525224][T15807] __nla_validate_parse: 3 callbacks suppressed
[  449.525244][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3718'.
[  449.526191][   T28] audit: type=1400 audit(1775070407.748:15551): avc:  denied  { read } for  pid=15799 comm="syz.5.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  449.531537][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3718'.
[  449.578679][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3718'.
[  449.586361][T15809] vlan2: entered allmulticast mode
[  449.613109][T15809] bridge0: entered allmulticast mode
[  449.613136][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3718'.
[  449.624232][T15809] bridge0: port 3(vlan2) entered blocking state
[  449.634695][T15809] bridge0: port 3(vlan2) entered disabled state
[  449.658806][   T30] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  449.677958][   T30] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  449.704908][   T30] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  449.721596][   T30] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  449.734630][T15815] loop1: detected capacity change from 0 to 512
[  449.793460][T15815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.810062][T15815] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  449.864835][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.882400][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.924230][T15822] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  449.959689][T15826] loop1: detected capacity change from 0 to 512
[  449.992017][T15826] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  450.174472][T12601] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  450.188997][T15451] udevd[15451]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  450.200758][T15453] udevd[15453]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  450.387752][   T28] audit: type=1400 audit(1775070408.648:15552): avc:  denied  { listen } for  pid=15842 comm="syz.7.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  450.458457][   T28] audit: type=1400 audit(1775070408.658:15553): avc:  denied  { ioctl } for  pid=15842 comm="syz.7.3732" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  450.560796][   T28] audit: type=1400 audit(1775070408.658:15554): avc:  denied  { accept } for  pid=15842 comm="syz.7.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  450.761505][   T28] audit: type=1400 audit(1775070409.038:15555): avc:  denied  { name_connect } for  pid=15848 comm="syz.5.3734" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  450.966004][   T28] audit: type=1400 audit(1775070409.238:15556): avc:  denied  { name_connect } for  pid=15848 comm="syz.5.3734" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1
[  451.047525][T15854] loop8: detected capacity change from 0 to 164
[  451.062292][T15854] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  451.280962][T15859] loop1: detected capacity change from 0 to 4096
[  451.335868][T15859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.406279][T15863] loop7: detected capacity change from 0 to 512
[  451.487586][T15863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.568593][T15863] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.670403][T15865] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3736: corrupted xattr block 33: invalid checksum
[  452.010191][T15865] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop7 ino=15
[  452.054268][T15865] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3736: corrupted xattr block 33: invalid checksum
[  452.104419][T15865] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop7 ino=15
[  452.118288][T15871] loop8: detected capacity change from 0 to 2048
[  452.149490][T15865] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.3736: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  452.166136][T15871] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  452.208107][T15865] EXT4-fs error (device loop7) in ext4_free_inode:361: Filesystem failed CRC
[  452.218770][T15871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.257707][   T28] audit: type=1400 audit(1775070410.538:15557): avc:  denied  { ioctl } for  pid=15870 comm="syz.8.3739" path="socket:[46229]" dev="sockfs" ino=46229 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  452.312800][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.353572][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.383820][T12022] Bluetooth: hci0: command 0x1003 tx timeout
[  452.389962][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  452.945983][T15884] loop6: detected capacity change from 0 to 512
[  452.972440][T15884] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  453.059356][ T7114] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  453.271339][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.291246][T15893] loop7: detected capacity change from 0 to 8192
[  453.338735][T15900] syzkaller0: entered promiscuous mode
[  453.356191][ T3829]  loop7: p1 p2 p4
[  453.361187][ T3829] loop7: p4 size 262912 extends beyond EOD, truncated
[  453.363725][T15900] syzkaller0: entered allmulticast mode
[  453.368615][T15908] FAULT_INJECTION: forcing a failure.
[  453.368615][T15908] name failslab, interval 1, probability 0, space 0, times 0
[  453.392530][T15909] loop1: detected capacity change from 0 to 1024
[  453.399651][T15909] EXT4-fs: inline encryption not supported
[  453.424648][T15893]  loop7: p1 p2 p4
[  453.433443][T15908] CPU: 0 UID: 0 PID: 15908 Comm: syz.8.3751 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  453.433471][T15908] Tainted: [W]=WARN
[  453.433477][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  453.433488][T15908] Call Trace:
[  453.433496][T15908]  <TASK>
[  453.433505][T15908]  __dump_stack+0x1d/0x30
[  453.433556][T15908]  dump_stack_lvl+0x95/0xd0
[  453.433575][T15908]  dump_stack+0x15/0x1b
[  453.433594][T15908]  should_fail_ex+0x263/0x280
[  453.433619][T15908]  should_failslab+0x8c/0xb0
[  453.433637][T15908]  __kmalloc_noprof+0xb8/0x4e0
[  453.433658][T15908]  ? security_prepare_creds+0x52/0x120
[  453.433682][T15908]  security_prepare_creds+0x52/0x120
[  453.433779][T15908]  prepare_creds+0x381/0x540
[  453.433864][T15908]  selinux_lsm_setattr+0x1a3/0x660
[  453.433943][T15908]  selinux_setprocattr+0x4f/0x70
[  453.433975][T15908]  security_setprocattr+0x1a7/0x1d0
[  453.434081][T15908]  proc_pid_attr_write+0x1ea/0x220
[  453.434106][T15908]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  453.434128][T15908]  vfs_write+0x269/0x9f0
[  453.434223][T15908]  ? __rcu_read_unlock+0x4e/0x70
[  453.434243][T15908]  ? __fget_files+0x184/0x1c0
[  453.434276][T15908]  ? mutex_lock+0x57/0x90
[  453.434365][T15908]  ksys_write+0xdc/0x1a0
[  453.434390][T15908]  __x64_sys_write+0x40/0x50
[  453.434411][T15908]  x64_sys_call+0x27e1/0x3020
[  453.434438][T15908]  do_syscall_64+0x12c/0x370
[  453.434539][T15908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.434627][T15908] RIP: 0033:0x7f84164bc819
[  453.434645][T15908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.434702][T15908] RSP: 002b:00007f8414f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  453.434719][T15908] RAX: ffffffffffffffda RBX: 00007f8416735fa0 RCX: 00007f84164bc819
[  453.434734][T15908] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003
[  453.434748][T15908] RBP: 00007f8414f0f090 R08: 0000000000000000 R09: 0000000000000000
[  453.434805][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.434819][T15908] R13: 00007f8416736038 R14: 00007f8416735fa0 R15: 00007ffdbdf11488
[  453.434838][T15908]  </TASK>
[  453.435578][T15909] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  453.508016][T15893] loop7: p4 size 262912 extends beyond EOD, truncated
[  453.575738][T15918] lo speed is unknown, defaulting to 1000
[  453.703790][T15909] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.3748: Freeing blocks not in datazone - block = 0, count = 4096
[  453.718285][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3746'.
[  453.744010][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3746'.
[  453.762871][T15909] loop1: lost filesystem error report for type 5 error -117
[  453.762965][T15909] EXT4-fs (loop1): Remounting filesystem read-only
[  453.770386][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  453.770402][    C1] EXT4-fs (loop1): initial error at time 1775070412: ext4_free_blocks:6724
[  453.770422][    C1] EXT4-fs (loop1): last error at time 1775070412: ext4_free_blocks:6724
[  453.809751][ T3829] udevd[3829]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  453.821400][T15451] udevd[15451]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  453.833662][T15453] udevd[15453]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  453.865909][T15451] udevd[15451]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  453.866207][ T3829] udevd[3829]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  453.876822][T15453] udevd[15453]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  453.891136][T15931] loop8: detected capacity change from 0 to 512
[  453.896885][T15909] EXT4-fs (loop1): 1 orphan inode deleted
[  453.897316][T15909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.928334][   T30] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  453.941036][   T30] Quota error (device loop1): write_blk: dquota write failed
[  453.941624][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.948664][   T30] Quota error (device loop1): remove_free_dqentry: Can't write block (2) with free entries
[  453.948688][   T30] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  453.948725][   T30] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  453.996546][T15931] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  454.730445][T14605] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  454.822140][T15947] lo speed is unknown, defaulting to 1000
[  455.069991][T15962] loop8: detected capacity change from 0 to 164
[  455.223637][T15963] lo speed is unknown, defaulting to 1000
[  455.946245][T15962] Unable to read rock-ridge attributes
[  455.977502][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  455.977516][   T28] audit: type=1400 audit(1775070414.248:15558): avc:  denied  { remount } for  pid=15961 comm="syz.8.3769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  456.094362][T15962] netlink: 'syz.8.3769': attribute type 1 has an invalid length.
[  456.144373][T15962] 8021q: adding VLAN 0 to HW filter on device bond2
[  456.152336][T15962] bond1: (slave bond2): making interface the new active one
[  456.189833][T15962] bond1: (slave bond2): Enslaving as an active interface with an up link
[  456.206535][T15967] xt_hashlimit: size too large, truncated to 1048576
[  456.259133][T15976] loop6: detected capacity change from 0 to 512
[  456.285811][T15900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  456.334955][T15976] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  456.376409][T15962] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  456.408695][T15976] 9p: Bad value for 'rfdno'
[  456.418527][T15982] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3775'.
[  456.464755][T15982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15982 comm=syz.5.3775
[  456.496889][ T7114] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  456.528340][   T28] audit: type=1400 audit(1775070414.798:15559): avc:  denied  { override_creds } for  pid=15981 comm="syz.5.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  456.715117][T15982] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  456.796352][T15982] bond1: (slave lo): Enslaving as an active interface with an up link
[  456.806030][T16003] openvswitch: netlink: Missing key (keys=1000040, expected=2000)
[  456.844920][T15982] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  456.951207][T16011] loop8: detected capacity change from 0 to 512
[  457.004066][T16013] loop7: detected capacity change from 0 to 512
[  457.029953][T16015] tipc: Started in network mode
[  457.036848][T16011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.060154][T16015] tipc: Node identity 4, cluster identity 4711
[  457.074722][T16013] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  457.104700][T16015] tipc: Node number set to 4
[  457.109463][T16011] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.143008][T16013] 9p: Bad value for 'rfdno'
[  457.245125][ T7749] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  457.325493][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3787'.
[  457.377402][T16030] netlink: 'syz.1.3794': attribute type 29 has an invalid length.
[  457.417704][T16034] netlink: 'syz.5.3795': attribute type 29 has an invalid length.
[  457.469771][T16037] 9p: Bad value for 'rfdno'
[  457.538615][T16041] loop6: detected capacity change from 0 to 4096
[  457.553379][T16041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.707730][T16037] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3796'.
[  457.727799][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.824484][T16047] loop1: detected capacity change from 0 to 256
[  457.854904][T16052] Failed to initialize the IGMP autojoin socket (err -2)
[  458.111932][T16063] loop7: detected capacity change from 0 to 512
[  458.177296][T16063] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  458.208889][T16070] netlink: 'syz.1.3803': attribute type 8 has an invalid length.
[  458.249640][T16063] 9p: Bad value for 'rfdno'
[  458.260052][T16070] netlink: 'syz.1.3803': attribute type 4 has an invalid length.
[  458.287075][T16081] netlink: 'syz.8.3807': attribute type 19 has an invalid length.
[  458.296148][T16080] netlink: 'syz.5.3806': attribute type 29 has an invalid length.
[  458.319055][ T7749] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  458.338346][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3807'.
[  458.406747][T16086] Failed to initialize the IGMP autojoin socket (err -2)
[  459.368556][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.402169][T16121] loop8: detected capacity change from 0 to 2048
[  459.427586][T16121] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  459.464405][   T28] audit: type=1400 audit(1775070417.748:15560): avc:  denied  { read write } for  pid=16127 comm="syz.5.3819" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  459.489402][   T28] audit: type=1400 audit(1775070417.768:15561): avc:  denied  { open } for  pid=16127 comm="syz.5.3819" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  459.534062][T16135] netlink: 'syz.7.3820': attribute type 4 has an invalid length.
[  459.542301][T16121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.647307][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.931110][T16162] loop8: detected capacity change from 0 to 4096
[  459.943353][T16163] Failed to initialize the IGMP autojoin socket (err -2)
[  460.039448][T16162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.840008][T16176] netlink: 'syz.1.3834': attribute type 4 has an invalid length.
[  461.410408][T16172] Invalid argument reading file caps for ./file0
[  462.714418][T16196] loop1: detected capacity change from 0 to 512
[  462.815438][T16196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.855044][T16209] netlink: 'syz.6.3842': attribute type 29 has an invalid length.
[  462.901083][T16196] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.982929][T16196] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3839: corrupted xattr block 33: invalid checksum
[  463.028954][T16221] netlink: 422 bytes leftover after parsing attributes in process `syz.5.3845'.
[  463.211633][T16196] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  463.227689][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.250633][T16196] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3839: corrupted xattr block 33: invalid checksum
[  463.264847][T16196] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop1 ino=15
[  463.339851][T16240] Invalid argument reading file caps for ./file0
[  463.369701][T16196] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.3839: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  463.633758][T16196] EXT4-fs error (device loop1) in ext4_free_inode:361: Filesystem failed CRC
[  463.860050][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.915076][T16257] netlink: 'syz.5.3856': attribute type 29 has an invalid length.
[  463.987567][T16262] netlink: 'syz.6.3859': attribute type 19 has an invalid length.
[  464.021301][T16267] netlink: 'syz.5.3860': attribute type 4 has an invalid length.
[  464.023302][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3859'.
[  464.044935][T16268] Failed to initialize the IGMP autojoin socket (err -2)
[  464.290785][T16289] loop8: detected capacity change from 0 to 4096
[  464.333586][T16289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.459354][T16290] Failed to initialize the IGMP autojoin socket (err -2)
[  465.066193][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3873'.
[  465.391148][T16308] netlink: 'syz.1.3874': attribute type 4 has an invalid length.
[  465.537940][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3879'.
[  465.571821][T16321] netlink: 'syz.5.3881': attribute type 19 has an invalid length.
[  465.608342][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3881'.
[  465.636547][T16324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.667670][T16324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.799295][T16332] netlink: 'syz.7.3886': attribute type 4 has an invalid length.
[  465.868208][T16336] loop7: detected capacity change from 0 to 512
[  465.974549][T16342] FAULT_INJECTION: forcing a failure.
[  465.974549][T16342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.998765][T16342] CPU: 1 UID: 0 PID: 16342 Comm: syz.5.3890 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  465.998818][T16342] Tainted: [W]=WARN
[  465.998826][T16342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  465.998838][T16342] Call Trace:
[  465.998844][T16342]  <TASK>
[  465.998852][T16342]  __dump_stack+0x1d/0x30
[  465.998880][T16342]  dump_stack_lvl+0x95/0xd0
[  465.998959][T16342]  dump_stack+0x15/0x1b
[  465.999055][T16342]  should_fail_ex+0x263/0x280
[  465.999087][T16342]  should_fail+0xb/0x20
[  465.999160][T16342]  should_fail_usercopy+0x1a/0x20
[  465.999226][T16342]  _copy_from_iter+0xcf/0xea0
[  465.999257][T16342]  ? __alloc_skb+0x4f6/0x690
[  465.999285][T16342]  ? __alloc_skb+0x200/0x690
[  465.999393][T16342]  netlink_sendmsg+0x4ae/0x6f0
[  465.999417][T16342]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.999438][T16342]  ____sys_sendmsg+0x563/0x5b0
[  465.999526][T16342]  ___sys_sendmsg+0x195/0x1e0
[  465.999556][T16342]  __x64_sys_sendmsg+0xd4/0x160
[  465.999609][T16342]  x64_sys_call+0x194c/0x3020
[  465.999630][T16342]  do_syscall_64+0x12c/0x370
[  465.999658][T16342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.999677][T16342] RIP: 0033:0x7f2adefec819
[  465.999691][T16342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.999728][T16342] RSP: 002b:00007f2adda3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.999820][T16342] RAX: ffffffffffffffda RBX: 00007f2adf265fa0 RCX: 00007f2adefec819
[  465.999836][T16342] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003
[  465.999910][T16342] RBP: 00007f2adda3f090 R08: 0000000000000000 R09: 0000000000000000
[  465.999922][T16342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.999933][T16342] R13: 00007f2adf266038 R14: 00007f2adf265fa0 R15: 00007fff5149d268
[  465.999972][T16342]  </TASK>
[  466.195777][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.200988][T16336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.224336][T16336] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.271436][T16336] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3888: corrupted xattr block 33: invalid checksum
[  466.343328][T16336] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop7 ino=15
[  466.352646][T16336] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3888: corrupted xattr block 33: invalid checksum
[  466.416959][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3895'.
[  466.423329][T16336] SELinux: inode_doinit_use_xattr:  getxattr returned 74 for dev=loop7 ino=15
[  466.470881][T16357] Failed to initialize the IGMP autojoin socket (err -2)
[  466.474158][T16336] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.3888: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  466.513383][T16336] EXT4-fs error (device loop7) in ext4_free_inode:361: Filesystem failed CRC
[  466.547465][T16361] netlink: 'syz.6.3898': attribute type 19 has an invalid length.
[  466.571537][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3898'.
[  466.586684][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.623808][   T28] audit: type=1400 audit(1775070424.898:15562): avc:  denied  { setopt } for  pid=16364 comm="syz.8.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  466.659524][T16367] netlink: 'syz.7.3900': attribute type 4 has an invalid length.
[  466.710195][T16375] loop8: detected capacity change from 0 to 512
[  466.729859][T16379] loop7: detected capacity change from 0 to 512
[  466.738208][T16375] EXT4-fs (loop8): orphan cleanup on readonly fs
[  466.747195][T16375] EXT4-fs (loop8): 1 orphan inode deleted
[  466.747973][T16379] EXT4-fs: Ignoring removed nobh option
[  466.793916][   T12] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  466.812072][T16379] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  466.822218][   T12] EXT4-fs error (device loop8): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1
[  466.843962][   T12] loop8: lost filesystem error report for type 5 error -117
[  466.844613][T16375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  466.844879][T16379] EXT4-fs (loop7): 1 truncate cleaned up
[  466.871461][T16379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.907031][T16379] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 1769366884 > max in inode 18
[  466.956357][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.005168][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3908'.
[  467.046916][T16394] loop7: detected capacity change from 0 to 1024
[  467.091870][T16394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.106633][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.130910][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.168122][T16397] netlink: 'syz.8.3911': attribute type 10 has an invalid length.
[  467.194867][T16397] team0: Port device dummy0 added
[  467.250829][T16403] FAULT_INJECTION: forcing a failure.
[  467.250829][T16403] name failslab, interval 1, probability 0, space 0, times 0
[  467.284504][T16403] CPU: 1 UID: 0 PID: 16403 Comm: syz.7.3914 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  467.284537][T16403] Tainted: [W]=WARN
[  467.284545][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  467.284556][T16403] Call Trace:
[  467.284562][T16403]  <TASK>
[  467.284569][T16403]  __dump_stack+0x1d/0x30
[  467.284595][T16403]  dump_stack_lvl+0x95/0xd0
[  467.284632][T16403]  dump_stack+0x15/0x1b
[  467.284682][T16403]  should_fail_ex+0x263/0x280
[  467.284727][T16403]  ? snd_seq_pool_new+0x32/0xe0
[  467.284752][T16403]  should_failslab+0x8c/0xb0
[  467.284775][T16403]  __kmalloc_cache_noprof+0x5f/0x410
[  467.284815][T16403]  ? __pfx_snd_seq_open+0x10/0x10
[  467.284837][T16403]  snd_seq_pool_new+0x32/0xe0
[  467.284939][T16403]  ? __pfx_snd_seq_open+0x10/0x10
[  467.284960][T16403]  seq_create_client1+0x4b/0x370
[  467.285007][T16403]  ? __pfx_snd_seq_open+0x10/0x10
[  467.285043][T16403]  snd_seq_open+0x52/0x360
[  467.285060][T16403]  ? __pfx_snd_seq_open+0x10/0x10
[  467.285084][T16403]  snd_open+0x275/0x2e0
[  467.285140][T16403]  chrdev_open+0x2eb/0x3a0
[  467.285164][T16403]  do_dentry_open+0x4ca/0xa90
[  467.285190][T16403]  ? __pfx_chrdev_open+0x10/0x10
[  467.285291][T16403]  vfs_open+0x37/0x1e0
[  467.285317][T16403]  path_openat+0x1b70/0x2050
[  467.285351][T16403]  ? _parse_integer_limit+0x170/0x190
[  467.285409][T16403]  ? kstrtouint+0x76/0xc0
[  467.285434][T16403]  do_file_open+0x16c/0x290
[  467.285476][T16403]  do_sys_openat2+0x94/0x130
[  467.285506][T16403]  __x64_sys_openat+0xf2/0x120
[  467.285597][T16403]  x64_sys_call+0x1e39/0x3020
[  467.285625][T16403]  do_syscall_64+0x12c/0x370
[  467.285739][T16403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.285762][T16403] RIP: 0033:0x7f644281c819
[  467.285781][T16403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  467.285800][T16403] RSP: 002b:00007f644126f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  467.285822][T16403] RAX: ffffffffffffffda RBX: 00007f6442a95fa0 RCX: 00007f644281c819
[  467.285837][T16403] RDX: 000000000018d843 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  467.285849][T16403] RBP: 00007f644126f090 R08: 0000000000000000 R09: 0000000000000000
[  467.285904][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.285918][T16403] R13: 00007f6442a96038 R14: 00007f6442a95fa0 R15: 00007ffc462bc1a8
[  467.285941][T16403]  </TASK>
[  467.630355][T16415] loop7: detected capacity change from 0 to 4096
[  467.723778][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  467.784639][T16415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.830517][T16426] tmpfs: Bad value for 'mpol'
[  467.842870][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.883112][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3923'.
[  468.017167][T16429] validate_nla: 1 callbacks suppressed
[  468.017182][T16429] netlink: 'syz.5.3926': attribute type 4 has an invalid length.
[  468.062940][T16431] loop7: detected capacity change from 0 to 512
[  468.117513][T16431] EXT4-fs: quotafile must be on filesystem root
[  468.186831][T16426] netlink: 116376 bytes leftover after parsing attributes in process `syz.8.3924'.
[  468.298303][T16434] netlink: 'syz.5.3927': attribute type 19 has an invalid length.
[  468.395046][T16426] netlink: zone id is out of range
[  468.411349][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3927'.
[  468.445388][T16426] netlink: zone id is out of range
[  468.473210][T16426] netlink: zone id is out of range
[  468.494293][T16426] netlink: zone id is out of range
[  468.508360][T16426] netlink: zone id is out of range
[  468.525536][T16426] netlink: zone id is out of range
[  468.559976][T16426] netlink: zone id is out of range
[  468.577509][T16426] netlink: zone id is out of range
[  468.591599][T16426] netlink: zone id is out of range
[  468.614308][T16426] netlink: zone id is out of range
[  468.717445][T16453] loop8: detected capacity change from 0 to 4096
[  468.735159][T16453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.769028][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.833188][T16463] FAULT_INJECTION: forcing a failure.
[  468.833188][T16463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.847950][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.8.3937 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  468.848050][T16463] Tainted: [W]=WARN
[  468.848058][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  468.848071][T16463] Call Trace:
[  468.848078][T16463]  <TASK>
[  468.848085][T16463]  __dump_stack+0x1d/0x30
[  468.848140][T16463]  dump_stack_lvl+0x95/0xd0
[  468.848164][T16463]  dump_stack+0x15/0x1b
[  468.848183][T16463]  should_fail_ex+0x263/0x280
[  468.848207][T16463]  should_fail+0xb/0x20
[  468.848297][T16463]  should_fail_usercopy+0x1a/0x20
[  468.848324][T16463]  _copy_from_user+0x1c/0xb0
[  468.848393][T16463]  ___sys_sendmsg+0xc1/0x1e0
[  468.848433][T16463]  __x64_sys_sendmsg+0xd4/0x160
[  468.848457][T16463]  x64_sys_call+0x194c/0x3020
[  468.848478][T16463]  do_syscall_64+0x12c/0x370
[  468.848501][T16463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.848666][T16463] RIP: 0033:0x7f84164bc819
[  468.848683][T16463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.848722][T16463] RSP: 002b:00007f8414f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.848740][T16463] RAX: ffffffffffffffda RBX: 00007f8416735fa0 RCX: 00007f84164bc819
[  468.848756][T16463] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  468.848770][T16463] RBP: 00007f8414f0f090 R08: 0000000000000000 R09: 0000000000000000
[  468.848786][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.848798][T16463] R13: 00007f8416736038 R14: 00007f8416735fa0 R15: 00007ffdbdf11488
[  468.848901][T16463]  </TASK>
[  469.031571][T16465] loop7: detected capacity change from 0 to 1024
[  469.042528][T16467] loop6: detected capacity change from 0 to 512
[  469.049998][T16467] EXT4-fs: Ignoring removed mblk_io_submit option
[  469.073896][T16465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.096652][T16465] FAULT_INJECTION: forcing a failure.
[  469.096652][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.110788][T16465] CPU: 0 UID: 0 PID: 16465 Comm: syz.7.3938 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  469.110902][T16465] Tainted: [W]=WARN
[  469.110910][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  469.110923][T16465] Call Trace:
[  469.110930][T16465]  <TASK>
[  469.110939][T16465]  __dump_stack+0x1d/0x30
[  469.110965][T16465]  dump_stack_lvl+0x95/0xd0
[  469.111049][T16465]  dump_stack+0x15/0x1b
[  469.111070][T16465]  should_fail_ex+0x263/0x280
[  469.111099][T16465]  should_fail+0xb/0x20
[  469.111123][T16465]  should_fail_usercopy+0x1a/0x20
[  469.111196][T16465]  strncpy_from_user+0x27/0x250
[  469.111218][T16465]  ? kmem_cache_alloc_noprof+0x18c/0x400
[  469.111256][T16465]  do_getname+0x59/0x1c0
[  469.111289][T16465]  getname_flags+0x1d/0x30
[  469.111382][T16465]  __x64_sys_lgetxattr+0xfd/0x150
[  469.111424][T16465]  x64_sys_call+0x2ecc/0x3020
[  469.111450][T16465]  do_syscall_64+0x12c/0x370
[  469.111477][T16465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.111565][T16465] RIP: 0033:0x7f644281c819
[  469.111579][T16465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.111595][T16465] RSP: 002b:00007f644126f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  469.111612][T16465] RAX: ffffffffffffffda RBX: 00007f6442a95fa0 RCX: 00007f644281c819
[  469.111624][T16465] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000
[  469.111734][T16465] RBP: 00007f644126f090 R08: 0000000000000000 R09: 0000000000000000
[  469.111759][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.111839][T16465] R13: 00007f6442a96038 R14: 00007f6442a95fa0 R15: 00007ffc462bc1a8
[  469.111858][T16465]  </TASK>
[  469.294911][T16467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.320538][T16467] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  469.320822][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.411976][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.431178][   T28] audit: type=1400 audit(1775070427.698:15563): avc:  denied  { accept } for  pid=16484 comm="syz.8.3948" path="socket:[48286]" dev="sockfs" ino=48286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  469.568006][T16504] FAULT_INJECTION: forcing a failure.
[  469.568006][T16504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.602867][T16511] FAULT_INJECTION: forcing a failure.
[  469.602867][T16511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.612319][T16504] CPU: 0 UID: 0 PID: 16504 Comm: syz.8.3956 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  469.612417][T16504] Tainted: [W]=WARN
[  469.612454][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  469.612466][T16504] Call Trace:
[  469.612474][T16504]  <TASK>
[  469.612484][T16504]  __dump_stack+0x1d/0x30
[  469.612510][T16504]  dump_stack_lvl+0x95/0xd0
[  469.612533][T16504]  dump_stack+0x15/0x1b
[  469.612553][T16504]  should_fail_ex+0x263/0x280
[  469.612623][T16504]  should_fail+0xb/0x20
[  469.612645][T16504]  should_fail_usercopy+0x1a/0x20
[  469.612672][T16504]  _copy_from_user+0x1c/0xb0
[  469.612751][T16504]  memdup_user+0x5e/0xd0
[  469.612770][T16504]  strndup_user+0x68/0xb0
[  469.612864][T16504]  perf_ioctl+0x7a0/0x15d0
[  469.612965][T16504]  ? do_vfs_ioctl+0x84f/0xe70
[  469.613065][T16504]  ? selinux_file_ioctl+0x5f7/0xcb0
[  469.613089][T16504]  ? __rcu_read_unlock+0x4e/0x70
[  469.613110][T16504]  ? __rcu_read_unlock+0x4e/0x70
[  469.613129][T16504]  ? __fget_files+0x184/0x1c0
[  469.613201][T16504]  ? mutex_lock+0x57/0x90
[  469.613221][T16504]  ? __pfx_perf_ioctl+0x10/0x10
[  469.613309][T16504]  __se_sys_ioctl+0xce/0x140
[  469.613329][T16504]  __x64_sys_ioctl+0x43/0x50
[  469.613347][T16504]  x64_sys_call+0x1563/0x3020
[  469.613430][T16504]  do_syscall_64+0x12c/0x370
[  469.613456][T16504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.613478][T16504] RIP: 0033:0x7f84164bc819
[  469.613502][T16504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.613519][T16504] RSP: 002b:00007f8414f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  469.613540][T16504] RAX: ffffffffffffffda RBX: 00007f8416735fa0 RCX: 00007f84164bc819
[  469.613554][T16504] RDX: 0000200000000000 RSI: 0000000040082406 RDI: 0000000000000003
[  469.613567][T16504] RBP: 00007f8414f0f090 R08: 0000000000000000 R09: 0000000000000000
[  469.613581][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.613648][T16504] R13: 00007f8416736038 R14: 00007f8416735fa0 R15: 00007ffdbdf11488
[  469.613669][T16504]  </TASK>
[  469.832472][T16511] CPU: 0 UID: 0 PID: 16511 Comm: syz.1.3958 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  469.832499][T16511] Tainted: [W]=WARN
[  469.832507][T16511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  469.832519][T16511] Call Trace:
[  469.832525][T16511]  <TASK>
[  469.832580][T16511]  __dump_stack+0x1d/0x30
[  469.832597][T16511]  dump_stack_lvl+0x95/0xd0
[  469.832610][T16511]  dump_stack+0x15/0x1b
[  469.832623][T16511]  should_fail_ex+0x263/0x280
[  469.832639][T16511]  should_fail+0xb/0x20
[  469.832689][T16511]  should_fail_usercopy+0x1a/0x20
[  469.832705][T16511]  _copy_to_user+0x20/0xa0
[  469.832723][T16511]  simple_read_from_buffer+0xb5/0x130
[  469.832796][T16511]  proc_fail_nth_read+0x10e/0x150
[  469.832847][T16511]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  469.832863][T16511]  vfs_read+0x1ab/0x7f0
[  469.832873][T16511]  ? tipc_getsockopt+0x35c/0x370
[  469.832887][T16511]  ? __rcu_read_unlock+0x4e/0x70
[  469.832955][T16511]  ? __fget_files+0x184/0x1c0
[  469.832969][T16511]  ? mutex_lock+0x57/0x90
[  469.832981][T16511]  ksys_read+0xdc/0x1a0
[  469.833069][T16511]  __x64_sys_read+0x40/0x50
[  469.833086][T16511]  x64_sys_call+0x2886/0x3020
[  469.833130][T16511]  do_syscall_64+0x12c/0x370
[  469.833229][T16511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.833252][T16511] RIP: 0033:0x7fb2607ad04e
[  469.833269][T16511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  469.833288][T16511] RSP: 002b:00007fb25f23efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  469.833308][T16511] RAX: ffffffffffffffda RBX: 00007fb25f23f6c0 RCX: 00007fb2607ad04e
[  469.833409][T16511] RDX: 000000000000000f RSI: 00007fb25f23f0a0 RDI: 0000000000000004
[  469.833422][T16511] RBP: 00007fb25f23f090 R08: 0000000000000000 R09: 0000000000000000
[  469.833436][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.833448][T16511] R13: 00007fb260a66038 R14: 00007fb260a65fa0 R15: 00007ffc8fc7d078
[  469.833471][T16511]  </TASK>
[  470.174792][T16543] loop7: detected capacity change from 0 to 512
[  470.194831][T16543] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3972: EA inode hash validation failed
[  470.248807][T16543] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.3972: corrupted inode contents
[  470.285526][T16543] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  470.291924][T16543] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #15: comm syz.7.3972: mark_inode_dirty error
[  470.301118][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  470.301135][    C0] EXT4-fs (loop7): initial error at time 1775070428: ext4_do_update_inode:5602: inode 15
[  470.301159][    C0] EXT4-fs (loop7): last error at time 1775070428: ext4_do_update_inode:5602: inode 15
[  470.366142][T16543] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  470.367875][T16543] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.3972: corrupted inode contents
[  470.427161][T16543] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  470.427308][T16543] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.3972: mark_inode_dirty error
[  470.449826][T16576] FAULT_INJECTION: forcing a failure.
[  470.449826][T16576] name failslab, interval 1, probability 0, space 0, times 0
[  470.465176][T16543] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  470.465367][T16576] CPU: 1 UID: 0 PID: 16576 Comm: syz.1.3987 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  470.465477][T16576] Tainted: [W]=WARN
[  470.465485][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  470.465497][T16576] Call Trace:
[  470.465504][T16576]  <TASK>
[  470.465590][T16576]  __dump_stack+0x1d/0x30
[  470.465619][T16576]  dump_stack_lvl+0x95/0xd0
[  470.465640][T16576]  dump_stack+0x15/0x1b
[  470.465702][T16576]  should_fail_ex+0x263/0x280
[  470.465726][T16576]  should_failslab+0x8c/0xb0
[  470.465744][T16576]  __kmalloc_noprof+0xb8/0x4e0
[  470.465764][T16576]  ? sock_kmalloc+0x85/0xc0
[  470.465784][T16576]  sock_kmalloc+0x85/0xc0
[  470.465801][T16576]  ____sys_sendmsg+0xf9/0x5b0
[  470.465834][T16576]  ___sys_sendmsg+0x195/0x1e0
[  470.465871][T16576]  __x64_sys_sendmsg+0xd4/0x160
[  470.465949][T16576]  x64_sys_call+0x194c/0x3020
[  470.465973][T16576]  do_syscall_64+0x12c/0x370
[  470.466001][T16576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.466025][T16576] RIP: 0033:0x7fb2607ec819
[  470.466038][T16576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.466067][T16576] RSP: 002b:00007fb25f23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.466084][T16576] RAX: ffffffffffffffda RBX: 00007fb260a65fa0 RCX: 00007fb2607ec819
[  470.466100][T16576] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003
[  470.466114][T16576] RBP: 00007fb25f23f090 R08: 0000000000000000 R09: 0000000000000000
[  470.466131][T16576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.466199][T16576] R13: 00007fb260a66038 R14: 00007fb260a65fa0 R15: 00007ffc8fc7d078
[  470.466221][T16576]  </TASK>
[  470.669721][T16543] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.3972: mark inode dirty (error -117)
[  470.683199][T16543] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  470.688690][T16543] EXT4-fs warning (device loop7): ext4_evict_inode:285: xattr delete (err -117)
[  470.707590][T16543] EXT4-fs (loop7): 1 orphan inode deleted
[  470.714290][T16543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.760523][   T28] audit: type=1400 audit(1775070429.028:15564): avc:  denied  { ioctl } for  pid=16542 comm="syz.7.3972" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  470.800500][T16588] program syz.7.3972 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  470.901267][T16594] loop1: detected capacity change from 0 to 512
[  470.908676][T16594] EXT4-fs: inline encryption not supported
[  470.943576][T16594] EXT4-fs (loop1): 1 orphan inode deleted
[  470.949500][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.963271][   T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  470.978785][T16594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.004623][T16600] bridge0: entered promiscuous mode
[  471.015703][   T30] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1
[  471.040691][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3997'.
[  471.051562][T16594] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.224663][T16614] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4002'.
[  471.288025][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.662644][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4010'.
[  473.382666][T16657] Failed to initialize the IGMP autojoin socket (err -2)
[  473.528042][T16671] loop1: detected capacity change from 0 to 512
[  473.571884][T16671] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  473.599184][T16671] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  473.640304][T16671] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.4023: bad orphan inode 4
[  473.697276][T16671] loop1: lost filesystem error report for type 5 error -117
[  473.697611][T16671] EXT4-fs (loop1): 1 orphan inode deleted
[  473.705009][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  473.705024][    C0] EXT4-fs (loop1): initial error at time 1775070431: ext4_orphan_get:1423
[  473.705049][    C0] EXT4-fs (loop1): last error at time 1775070431: ext4_orphan_get:1423
[  473.748780][T16684] netlink: 'syz.5.4028': attribute type 4 has an invalid length.
[  473.795251][T16671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  473.940490][T16682] Failed to initialize the IGMP autojoin socket (err -2)
[  474.486187][   T28] audit: type=1400 audit(1775070432.748:15565): avc:  denied  { write } for  pid=16692 comm="syz.5.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  474.883931][T16677] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  475.008439][T12601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.045497][T16722] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4045'.
[  475.058652][T16718] loop6: detected capacity change from 0 to 512
[  475.063962][T16722] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4045'.
[  475.090126][T16718] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  475.118745][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4048'.
[  475.152617][T16730] net_ratelimit: 16 callbacks suppressed
[  475.152631][T16730] openvswitch: netlink: Flow actions attr not present in new flow.
[  475.170242][T16718] EXT4-fs (loop6): 1 truncate cleaned up
[  475.175270][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4050'.
[  475.183877][T16718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.261704][T16746] loop8: detected capacity change from 0 to 164
[  475.269231][T16746] iso9660: Unknown parameter ''
[  475.323742][   T28] audit: type=1400 audit(1775070433.598:15566): avc:  denied  { connect } for  pid=16732 comm="syz.7.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  475.378169][T16749] 9p: Could not find request transport: fd0xffffffffffffffff
[  475.446730][T16761] netlink: 'syz.7.4057': attribute type 19 has an invalid length.
[  475.455140][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4057'.
[  476.669656][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4061'.
[  478.252874][T16739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.312528][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.313742][T16782] loop7: detected capacity change from 0 to 512
[  478.410227][T16782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.433894][T16792] netlink: 'syz.8.4069': attribute type 2 has an invalid length.
[  478.450822][T16792] netlink: 'syz.8.4069': attribute type 1 has an invalid length.
[  478.458916][T16792] netlink: 'syz.8.4069': attribute type 1 has an invalid length.
[  478.469993][T16792] netlink: 'syz.8.4069': attribute type 2 has an invalid length.
[  478.478134][T16792] netlink: 'syz.8.4069': attribute type 1 has an invalid length.
[  478.482703][T16782] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  478.486866][T16792] netlink: 'syz.8.4069': attribute type 2 has an invalid length.
[  478.518655][ T7749] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.614441][   T28] audit: type=1326 audit(1775070436.888:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.642954][   T28] audit: type=1326 audit(1775070436.888:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.653657][T16813] loop8: detected capacity change from 0 to 512
[  478.686905][T16813] EXT4-fs: Ignoring removed mblk_io_submit option
[  478.713505][T16813] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  478.725007][   T28] audit: type=1326 audit(1775070436.918:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.755820][   T28] audit: type=1326 audit(1775070436.918:15570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.756066][T16813] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4076: bg 0: block 384: padding at end of block bitmap is not set
[  478.780532][   T28] audit: type=1326 audit(1775070436.918:15571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.797258][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4074'.
[  478.822858][   T28] audit: type=1326 audit(1775070436.918:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.836161][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4072'.
[  478.853955][   T28] audit: type=1326 audit(1775070436.918:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.853992][   T28] audit: type=1326 audit(1775070436.918:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16808 comm="syz.7.4075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644281c819 code=0x7ffc0000
[  478.887029][T16813] loop8: lost filesystem error report for type 5 error -117
[  478.898811][T16813] EXT4-fs (loop8): Remounting filesystem read-only
[  478.912300][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  478.912322][    C0] EXT4-fs (loop8): initial error at time 1775070437: ext4_validate_block_bitmap:441
[  478.912348][    C0] EXT4-fs (loop8): last error at time 1775070437: ext4_validate_block_bitmap:441
[  478.955037][T16813] EXT4-fs (loop8): 1 truncate cleaned up
[  478.958835][T16822] loop7: detected capacity change from 0 to 512
[  478.961354][T16813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.980015][T16822] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  478.980039][T16822] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  478.981184][T16822] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  479.017872][T16817] Failed to initialize the IGMP autojoin socket (err -2)
[  479.027984][T16822] System zones: 0-2, 18-18, 34-35
[  479.034863][T16822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  479.051222][T16822] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.097023][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  479.272111][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4081'.
[  479.415956][T16844] EXT4-fs (loop8): unable to read superblock
[  479.516051][T16847] netlink: 'syz.6.4088': attribute type 83 has an invalid length.
[  479.681671][T16852] Invalid argument reading file caps for ./file0
[  480.280173][T16851] FAULT_INJECTION: forcing a failure.
[  480.280173][T16851] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.305672][T16858] loop7: detected capacity change from 0 to 164
[  480.312164][T16851] CPU: 0 UID: 0 PID: 16851 Comm: syz.1.4089 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  480.312199][T16851] Tainted: [W]=WARN
[  480.312207][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  480.312222][T16851] Call Trace:
[  480.312230][T16851]  <TASK>
[  480.312240][T16851]  __dump_stack+0x1d/0x30
[  480.312323][T16851]  dump_stack_lvl+0x95/0xd0
[  480.312347][T16851]  dump_stack+0x15/0x1b
[  480.312368][T16851]  should_fail_ex+0x263/0x280
[  480.312424][T16851]  should_fail+0xb/0x20
[  480.312449][T16851]  should_fail_usercopy+0x1a/0x20
[  480.312480][T16851]  _copy_to_user+0x20/0xa0
[  480.312511][T16851]  simple_read_from_buffer+0xb5/0x130
[  480.312728][T16851]  proc_fail_nth_read+0x10e/0x150
[  480.312760][T16851]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.312790][T16851]  vfs_read+0x1ab/0x7f0
[  480.312809][T16851]  ? __rcu_read_unlock+0x4e/0x70
[  480.312882][T16851]  ? __rcu_read_unlock+0x4e/0x70
[  480.312904][T16851]  ? __fget_files+0x184/0x1c0
[  480.313010][T16851]  ? mutex_lock+0x57/0x90
[  480.313031][T16851]  ksys_read+0xdc/0x1a0
[  480.313105][T16851]  __x64_sys_read+0x40/0x50
[  480.313125][T16851]  x64_sys_call+0x2886/0x3020
[  480.313162][T16851]  do_syscall_64+0x12c/0x370
[  480.313191][T16851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.313212][T16851] RIP: 0033:0x7fb2607ad04e
[  480.313300][T16851] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  480.313373][T16851] RSP: 002b:00007fb25f23efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  480.313472][T16851] RAX: ffffffffffffffda RBX: 00007fb25f23f6c0 RCX: 00007fb2607ad04e
[  480.313484][T16851] RDX: 000000000000000f RSI: 00007fb25f23f0a0 RDI: 0000000000000003
[  480.313549][T16851] RBP: 00007fb25f23f090 R08: 0000000000000000 R09: 0000000000000000
[  480.313560][T16851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.313573][T16851] R13: 00007fb260a66038 R14: 00007fb260a65fa0 R15: 00007ffc8fc7d078
[  480.313596][T16851]  </TASK>
[  480.555922][T16858] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  480.595244][T16858] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  480.751763][T16858] Symlink component flag not implemented
[  480.814562][T16849] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4086'.
[  480.866185][T16858] Symlink component flag not implemented
[  480.916169][T16858] Symlink component flag not implemented (7)
[  480.956376][T16861] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  481.026877][T16858] Symlink component flag not implemented (116)
[  481.063403][T16861] rock: directory entry would overflow storage
[  481.115341][T16861] rock: sig=0x4f50, size=4, remaining=3
[  481.121540][T16861] iso9660: Corrupted directory entry in block 4 of inode 1792
[  481.146886][T16875] FAULT_INJECTION: forcing a failure.
[  481.146886][T16875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.164065][T16875] CPU: 0 UID: 0 PID: 16875 Comm: syz.6.4097 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  481.164169][T16875] Tainted: [W]=WARN
[  481.164176][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  481.164190][T16875] Call Trace:
[  481.164198][T16875]  <TASK>
[  481.164208][T16875]  __dump_stack+0x1d/0x30
[  481.164237][T16875]  dump_stack_lvl+0x95/0xd0
[  481.164269][T16875]  dump_stack+0x15/0x1b
[  481.164333][T16875]  should_fail_ex+0x263/0x280
[  481.164375][T16875]  should_fail+0xb/0x20
[  481.164402][T16875]  should_fail_usercopy+0x1a/0x20
[  481.164429][T16875]  _copy_from_user+0x1c/0xb0
[  481.164487][T16875]  __sys_bind+0x106/0x290
[  481.164515][T16875]  __x64_sys_bind+0x3f/0x50
[  481.164539][T16875]  x64_sys_call+0x2b30/0x3020
[  481.164631][T16875]  do_syscall_64+0x12c/0x370
[  481.164656][T16875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.164680][T16875] RIP: 0033:0x7f11e98dc819
[  481.164698][T16875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.164757][T16875] RSP: 002b:00007f11e832f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  481.164775][T16875] RAX: ffffffffffffffda RBX: 00007f11e9b55fa0 RCX: 00007f11e98dc819
[  481.164788][T16875] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003
[  481.164863][T16875] RBP: 00007f11e832f090 R08: 0000000000000000 R09: 0000000000000000
[  481.164874][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.164885][T16875] R13: 00007f11e9b56038 R14: 00007f11e9b55fa0 R15: 00007ffe5ebe7e68
[  481.164957][T16875]  </TASK>
[  481.359355][T16881] loop6: detected capacity change from 0 to 1024
[  481.369267][T16881] EXT4-fs: Ignoring removed mblk_io_submit option
[  481.399826][T16881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  481.425076][T16881] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  481.451263][T16889] serio: Serial port ttyS3
[  481.458662][T16881] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.4100: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  481.481372][T16881] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  481.482730][T16881] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4100: couldn't read orphan inode 11 (err -117)
[  481.492101][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  481.492120][    C1] EXT4-fs (loop6): initial error at time 1775070439: ext4_ext_check_inode:521: inode 11
[  481.492145][    C1] EXT4-fs (loop6): last error at time 1775070439: ext4_ext_check_inode:521: inode 11
[  481.532269][T16881] loop6: lost filesystem error report for type 5 error -117
[  481.533948][T16881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.564975][T16897] vlan2: entered allmulticast mode
[  481.570277][T16897] bridge0: port 3(vlan2) entered blocking state
[  481.576925][T16897] bridge0: port 3(vlan2) entered disabled state
[  481.607132][T16901] FAULT_INJECTION: forcing a failure.
[  481.607132][T16901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.626362][T16881] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4100: Invalid block bitmap block 0 in block_group 0
[  481.654170][T16901] CPU: 0 UID: 0 PID: 16901 Comm: syz.7.4107 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  481.654220][T16901] Tainted: [W]=WARN
[  481.654227][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  481.654241][T16901] Call Trace:
[  481.654260][T16901]  <TASK>
[  481.654267][T16901]  __dump_stack+0x1d/0x30
[  481.654290][T16901]  dump_stack_lvl+0x95/0xd0
[  481.654311][T16901]  dump_stack+0x15/0x1b
[  481.654372][T16901]  should_fail_ex+0x263/0x280
[  481.654402][T16901]  should_fail+0xb/0x20
[  481.654426][T16901]  should_fail_usercopy+0x1a/0x20
[  481.654460][T16901]  _copy_to_user+0x20/0xa0
[  481.654489][T16901]  simple_read_from_buffer+0xb5/0x130
[  481.654511][T16901]  proc_fail_nth_read+0x10e/0x150
[  481.654584][T16901]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  481.654642][T16901]  vfs_read+0x1ab/0x7f0
[  481.654656][T16901]  ? __rcu_read_unlock+0x4e/0x70
[  481.654674][T16901]  ? __rcu_read_unlock+0x4e/0x70
[  481.654694][T16901]  ? __fget_files+0x184/0x1c0
[  481.654795][T16901]  ? mutex_lock+0x57/0x90
[  481.654816][T16901]  ksys_read+0xdc/0x1a0
[  481.654836][T16901]  __x64_sys_read+0x40/0x50
[  481.654855][T16901]  x64_sys_call+0x2886/0x3020
[  481.654881][T16901]  do_syscall_64+0x12c/0x370
[  481.654971][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.655055][T16901] RIP: 0033:0x7f64427dd04e
[  481.655071][T16901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  481.655091][T16901] RSP: 002b:00007f644126efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  481.655121][T16901] RAX: ffffffffffffffda RBX: 00007f644126f6c0 RCX: 00007f64427dd04e
[  481.655195][T16901] RDX: 000000000000000f RSI: 00007f644126f0a0 RDI: 0000000000000003
[  481.655209][T16901] RBP: 00007f644126f090 R08: 0000000000000000 R09: 0000000000000000
[  481.655223][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.655237][T16901] R13: 00007f6442a96038 R14: 00007f6442a95fa0 R15: 00007ffc462bc1a8
[  481.655260][T16901]  </TASK>
[  481.669701][T16881] __quota_error: 47 callbacks suppressed
[  481.669746][T16881] Quota error (device loop6): write_blk: dquota write failed
[  481.704791][T16903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.873820][T16881] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  481.902601][T16910] EXT4-fs (loop1): unable to read superblock
[  482.032700][T16912] loop8: detected capacity change from 0 to 4096
[  483.043424][T16881] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.4100: Failed to acquire dquot type 0
[  483.055523][   T28] audit: type=1400 audit(1775070441.188:15622): avc:  denied  { append } for  pid=16878 comm="syz.6.4100" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  483.170043][T16903] Invalid argument reading file caps for ./file0
[  483.239275][T16912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.504423][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4100'.
[  483.579445][T16925] Invalid argument reading file caps for ./file0
[  483.602086][T14194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.615620][T16928] openvswitch: netlink: Flow actions attr not present in new flow.
[  483.627008][T16908] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4100: Invalid inode bitmap blk 137438953472 in block_group 0
[  483.773185][  T314] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm kworker/u8:6: Invalid inode table block 8589934593 in block_group 0
[  483.821260][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.187219][   T28] audit: type=1400 audit(1775070442.468:15623): avc:  denied  { mount } for  pid=16935 comm="syz.7.4120" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  484.221216][T16947] FAULT_INJECTION: forcing a failure.
[  484.221216][T16947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.258775][T16947] CPU: 1 UID: 0 PID: 16947 Comm: syz.5.4121 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  484.258807][T16947] Tainted: [W]=WARN
[  484.258814][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  484.258828][T16947] Call Trace:
[  484.258836][T16947]  <TASK>
[  484.258921][T16947]  __dump_stack+0x1d/0x30
[  484.258950][T16947]  dump_stack_lvl+0x95/0xd0
[  484.258974][T16947]  dump_stack+0x15/0x1b
[  484.259007][T16947]  should_fail_ex+0x263/0x280
[  484.259097][T16947]  should_fail+0xb/0x20
[  484.259120][T16947]  should_fail_usercopy+0x1a/0x20
[  484.259150][T16947]  _copy_from_user+0x1c/0xb0
[  484.259177][T16947]  memdup_user+0x5e/0xd0
[  484.259199][T16947]  __snd_timer_user_ioctl+0x278/0x2bc0
[  484.259262][T16947]  ? do_vfs_ioctl+0x84f/0xe70
[  484.259279][T16947]  ? selinux_file_ioctl+0x5f7/0xcb0
[  484.259303][T16947]  ? __rcu_read_unlock+0x4e/0x70
[  484.259378][T16947]  ? __rcu_read_unlock+0x4e/0x70
[  484.259494][T16947]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  484.259519][T16947]  snd_timer_user_ioctl+0x45/0x90
[  484.259586][T16947]  __se_sys_ioctl+0xce/0x140
[  484.259603][T16947]  __x64_sys_ioctl+0x43/0x50
[  484.259621][T16947]  x64_sys_call+0x1563/0x3020
[  484.259672][T16947]  do_syscall_64+0x12c/0x370
[  484.259696][T16947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.259715][T16947] RIP: 0033:0x7f2adefec819
[  484.259729][T16947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.259746][T16947] RSP: 002b:00007f2adda3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  484.259807][T16947] RAX: ffffffffffffffda RBX: 00007f2adf265fa0 RCX: 00007f2adefec819
[  484.259822][T16947] RDX: 0000000000000000 RSI: 00000000c0f85403 RDI: 0000000000000003
[  484.259906][T16947] RBP: 00007f2adda3f090 R08: 0000000000000000 R09: 0000000000000000
[  484.259918][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.259929][T16947] R13: 00007f2adf266038 R14: 00007f2adf265fa0 R15: 00007fff5149d268
[  484.260003][T16947]  </TASK>
[  484.502431][   T28] audit: type=1400 audit(1775070442.768:15624): avc:  denied  { getopt } for  pid=16935 comm="syz.7.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  484.538636][   T28] audit: type=1400 audit(1775070442.808:15625): avc:  denied  { setopt } for  pid=16935 comm="syz.7.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  484.844589][   T28] audit: type=1400 audit(1775070443.128:15626): avc:  denied  { append } for  pid=16958 comm="syz.5.4126" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  484.877061][T16959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4126'.
[  484.981309][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.247343][T16957] Failed to initialize the IGMP autojoin socket (err -2)
[  485.266466][T16975] loop5: detected capacity change from 0 to 512
[  485.365720][T16976] loop8: detected capacity change from 0 to 4096
[  485.529841][T16975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.544454][T16976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.632919][   T55] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  485.740996][T16975] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.759606][   T55] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.089404][   T55] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.139108][T14194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.148380][   T55] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.200748][T16957] chnl_net:caif_netlink_parms(): no params data found
[  486.267542][   T55] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.324904][   T55] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.412683][T17004] vlan2: entered allmulticast mode
[  486.436957][T17004] bridge0: entered allmulticast mode
[  486.473322][T17004] bridge0: port 3(vlan2) entered blocking state
[  486.490235][T17004] bridge0: port 3(vlan2) entered disabled state
[  486.544119][   T55] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.563182][   T55] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.769807][T17017] loop5: detected capacity change from 0 to 512
[  486.806609][T16957] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.859527][T16957] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.886795][T16957] bridge_slave_0: entered allmulticast mode
[  486.895922][T17024] loop5: detected capacity change from 0 to 7
[  486.921892][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  486.931735][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  486.940877][T16957] bridge_slave_0: entered promiscuous mode
[  486.947386][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  486.957455][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  486.966158][ T3829]  loop5: unable to read partition table
[  486.993654][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.003266][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.011545][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.021136][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.029900][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.039492][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.048174][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.057769][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.066797][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.076381][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.099823][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.109508][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.123907][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.133769][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.142384][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  487.151983][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[  487.169753][T16957] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.192401][T16957] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.221671][T16957] bridge_slave_1: entered allmulticast mode
[  487.245798][T17024]  loop5: unable to read partition table
[  487.251874][T17024] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  487.264708][T16957] bridge_slave_1: entered promiscuous mode
[  487.275308][T14605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.364580][   T28] audit: type=1400 audit(1775070445.648:15627): avc:  denied  { read } for  pid=17037 comm="syz.7.4144" path="socket:[48128]" dev="sockfs" ino=48128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  487.415923][T17046] ieee802154 phy0 wpan0: encryption failed: -22
[  487.479868][   T55] bond2 (unregistering): (slave ip6erspan0): Releasing active interface
[  487.496386][T17051] tmpfs: Bad value for 'mpol'
[  487.502608][   T55] erspan0 (unregistering): left promiscuous mode
[  487.526892][   T55] bond0 (unregistering): left promiscuous mode
[  487.540566][   T55] bond_slave_0: left promiscuous mode
[  487.558756][   T55] bond_slave_1: left promiscuous mode
[  487.579739][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.611225][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.644108][   T55] bond0 (unregistering): Released all slaves
[  487.652159][   T55] bond1 (unregistering): Released all slaves
[  487.669322][   T55] bond2 (unregistering): Released all slaves
[  487.682817][   T55] bond3 (unregistering): Released all slaves
[  487.719926][T17059] Failed to initialize the IGMP autojoin socket (err -2)
[  487.807219][T17067] loop5: detected capacity change from 0 to 512
[  487.822034][T17069] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4151'.
[  487.836216][T16957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.850740][T16957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.862006][   T55] tipc: Left network mode
[  487.869591][T17067] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  487.886824][T17069] tmpfs: Bad value for 'mpol'
[  487.899534][T17069] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  487.985680][T17079] FAULT_INJECTION: forcing a failure.
[  487.985680][T17079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.993772][T16957] team0: Port device team_slave_0 added
[  488.022960][T16957] team0: Port device team_slave_1 added
[  488.041123][T16957] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.048826][T16957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.080738][T16957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.099255][T17079] CPU: 1 UID: 0 PID: 17079 Comm: syz.1.4153 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  488.099294][T17079] Tainted: [W]=WARN
[  488.099302][T17079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.099315][T17079] Call Trace:
[  488.099323][T17079]  <TASK>
[  488.099331][T17079]  __dump_stack+0x1d/0x30
[  488.099396][T17079]  dump_stack_lvl+0x95/0xd0
[  488.099456][T17079]  dump_stack+0x15/0x1b
[  488.099474][T17079]  should_fail_ex+0x263/0x280
[  488.099540][T17079]  should_fail+0xb/0x20
[  488.099559][T17079]  should_fail_usercopy+0x1a/0x20
[  488.099585][T17079]  _copy_to_user+0x20/0xa0
[  488.099628][T17079]  simple_read_from_buffer+0xb5/0x130
[  488.099649][T17079]  proc_fail_nth_read+0x10e/0x150
[  488.099677][T17079]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  488.099702][T17079]  vfs_read+0x1ab/0x7f0
[  488.099719][T17079]  ? __rcu_read_unlock+0x4e/0x70
[  488.099741][T17079]  ? __fget_files+0x184/0x1c0
[  488.099774][T17079]  ? mutex_lock+0x57/0x90
[  488.099809][T17079]  ksys_read+0xdc/0x1a0
[  488.099830][T17079]  __x64_sys_read+0x40/0x50
[  488.099845][T17079]  x64_sys_call+0x2886/0x3020
[  488.099867][T17079]  do_syscall_64+0x12c/0x370
[  488.099889][T17079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.099913][T17079] RIP: 0033:0x7fb2607ad04e
[  488.099929][T17079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  488.099945][T17079] RSP: 002b:00007fb25f23efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  488.099962][T17079] RAX: ffffffffffffffda RBX: 00007fb25f23f6c0 RCX: 00007fb2607ad04e
[  488.099978][T17079] RDX: 000000000000000f RSI: 00007fb25f23f0a0 RDI: 0000000000000004
[  488.100026][T17079] RBP: 00007fb25f23f090 R08: 0000000000000000 R09: 0000000000000000
[  488.100040][T17079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.100054][T17079] R13: 00007fb260a66038 R14: 00007fb260a65fa0 R15: 00007ffc8fc7d078
[  488.100122][T17079]  </TASK>
[  488.124209][T16957] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.135196][T14194] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  488.168632][T16957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.351120][T16957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.397135][T17102] FAULT_INJECTION: forcing a failure.
[  488.397135][T17102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.415136][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4159'.
[  488.443257][T17102] CPU: 0 UID: 0 PID: 17102 Comm: syz.5.4160 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  488.443363][T17102] Tainted: [W]=WARN
[  488.443392][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.443405][T17102] Call Trace:
[  488.443412][T17102]  <TASK>
[  488.443421][T17102]  __dump_stack+0x1d/0x30
[  488.443487][T17102]  dump_stack_lvl+0x95/0xd0
[  488.443508][T17102]  dump_stack+0x15/0x1b
[  488.443532][T17102]  should_fail_ex+0x263/0x280
[  488.443632][T17102]  should_fail+0xb/0x20
[  488.443715][T17102]  should_fail_usercopy+0x1a/0x20
[  488.443776][   T55] team0: left promiscuous mode
[  488.443856][T17102] ==================================================================
[  488.443882][T17102] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  488.443917][T17102] 
[  488.443922][T17102] write to 0xffffffff86c7a218 of 8 bytes by task 55 on cpu 1:
[  488.443936][T17102]  data_alloc+0x310/0x390
[  488.443963][T17102]  prb_reserve+0x8d7/0xae0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  488.443989][T17102]  vprintk_store+0x54a/0x910
[  488.444006][T17102]  vprintk_emit+0x1a4/0x600
[  488.444023][T17102]  vprintk_default+0x26/0x30
[  488.444041][T17102]  vprintk+0x1d/0x30
[  488.444063][T17102]  _printk+0x79/0xa0
[  488.444080][T17102]  __netdev_printk+0x310/0x370
[  488.444098][T17102]  netdev_info+0xa6/0xd0
[  488.444123][T17102]  __dev_set_promiscuity+0x1fb/0x3f0
[  488.444147][T17102]  netif_set_promiscuity+0x39/0x90
[  488.444169][T17102]  dev_set_promiscuity+0xc1/0x170
[  488.444192][T17102]  hsr_del_port+0x13b/0x1a0
[  488.444214][T17102]  hsr_del_ports+0x31/0xc0
[  488.444232][T17102]  hsr_dellink+0x5b/0xa0
[  488.444252][T17102]  default_device_exit_batch+0x45c/0x640
[  488.444273][T17102]  ops_undo_list+0x2ca/0x420
[  488.444296][T17102]  cleanup_net+0x37c/0x5b0
[  488.444318][T17102]  process_scheduled_works+0x513/0xa10
[  488.444342][T17102]  worker_thread+0x58a/0x780
[  488.444366][T17102]  kthread+0x22a/0x280
[  488.444382][T17102]  ret_from_fork+0x150/0x360
[  488.444408][T17102]  ret_from_fork_asm+0x1a/0x30
[  488.444432][T17102] 
[  488.444437][T17102] read to 0xffffffff86c7a218 of 16 bytes by task 17102 on cpu 0:
[  488.444453][T17102]  _prb_read_valid+0x1bc/0x950
[  488.444486][T17102]  desc_update_last_finalized+0x8f/0x170
[  488.444514][T17102]  prb_final_commit+0x10d/0x150
[  488.444541][T17102]  vprintk_store+0x88b/0x910
[  488.444558][T17102]  vprintk_emit+0x1a4/0x600
[  488.444574][T17102]  vprintk_default+0x26/0x30
[  488.444592][T17102]  vprintk+0x1d/0x30
[  488.444613][T17102]  _printk+0x79/0xa0
[  488.444629][T17102]  __show_trace_log_lvl+0x460/0x560
[  488.444654][T17102]  __dump_stack+0x1d/0x30
[  488.444671][T17102]  dump_stack_lvl+0x95/0xd0
[  488.444688][T17102]  dump_stack+0x15/0x1b
[  488.444705][T17102]  should_fail_ex+0x263/0x280
[  488.444726][T17102]  should_fail+0xb/0x20
[  488.444746][T17102]  should_fail_usercopy+0x1a/0x20
[  488.444770][T17102]  _copy_from_iter+0xcf/0xea0
[  488.444794][T17102]  netlink_sendmsg+0x4ae/0x6f0
[  488.444812][T17102]  ____sys_sendmsg+0x563/0x5b0
[  488.444839][T17102]  ___sys_sendmsg+0x195/0x1e0
[  488.444855][T17102]  __x64_sys_sendmsg+0xd4/0x160
[  488.444872][T17102]  x64_sys_call+0x194c/0x3020
[  488.444894][T17102]  do_syscall_64+0x12c/0x370
[  488.444916][T17102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.444935][T17102] 
[  488.444939][T17102] Reported by Kernel Concurrency Sanitizer on:
[  488.444952][T17102] CPU: 0 UID: 0 PID: 17102 Comm: syz.5.4160 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  488.444980][T17102] Tainted: [W]=WARN
[  488.444987][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.444998][T17102] ==================================================================
[  488.445008][T17102]  _copy_from_iter+0xcf/0xea0
[  488.445035][T17102]  ? __alloc_skb+0x4f6/0x690
[  488.445082][T17102]  ? __alloc_skb+0x200/0x690
[  488.445170][T17102]  netlink_sendmsg+0x4ae/0x6f0
[  488.445192][T17102]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.445260][T17102]  ____sys_sendmsg+0x563/0x5b0
[  488.445333][T17102]  ___sys_sendmsg+0x195/0x1e0
[  488.445368][T17102]  __x64_sys_sendmsg+0xd4/0x160
[  488.445392][T17102]  x64_sys_call+0x194c/0x3020
[  488.445417][T17102]  do_syscall_64+0x12c/0x370
[  488.445497][T17102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.445518][T17102] RIP: 0033:0x7f2adefec819
[  488.445533][T17102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.445602][T17102] RSP: 002b:00007f2adda3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.445621][T17102] RAX: ffffffffffffffda RBX: 00007f2adf265fa0 RCX: 00007f2adefec819
[  488.445635][T17102] RDX: 0000000000008804 RSI: 0000200000000ec0 RDI: 0000000000000003
[  488.445648][T17102] RBP: 00007f2adda3f090 R08: 0000000000000000 R09: 0000000000000000
[  488.445661][T17102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.445715][T17102] R13: 00007f2adf266038 R14: 00007f2adf265fa0 R15: 00007fff5149d268
[  488.445736][T17102]  </TASK>
[  488.455337][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4159'.
[  488.459078][   T55] team_slave_0: left promiscuous mode
[  488.663198][   T28] audit: type=1400 audit(1775070446.878:15628): avc:  denied  { write } for  pid=3298 comm="syz-executor" path="pipe:[2280]" dev="pipefs" ino=2280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  488.673545][   T55] team_slave_1: left promiscuous mode
[  489.002079][   T55] dummy0: left promiscuous mode
[  489.184412][   T55] hsr_slave_0: left promiscuous mode
[  489.190233][   T55] hsr_slave_1: left promiscuous mode
[  489.196993][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.204538][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.214152][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.221652][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.230769][   T55] veth1_macvtap: left promiscuous mode
[  489.237055][   T55] veth0_macvtap: left promiscuous mode
[  489.242674][   T55] veth1_vlan: left promiscuous mode
[  489.248014][   T55] veth0_vlan: left promiscuous mode
[  489.331564][   T55] team_slave_1 (unregistering): left allmulticast mode
[  489.339894][   T55] team0 (unregistering): Port device team_slave_1 removed
[  489.349973][   T55] team_slave_0 (unregistering): left allmulticast mode
[  489.358145][   T55] team0 (unregistering): Port device team_slave_0 removed
[  489.385184][   T55] dummy0 (unregistering): left allmulticast mode
[  489.391898][   T55] team0 (unregistering): Port device dummy0 removed
[  489.410592][T17108] Failed to initialize the IGMP autojoin socket (err -2)
[  489.828074][   T55] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.838859][   T55] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.885615][   T55] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.896409][   T55] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.966012][   T55] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  489.978026][   T55] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.046331][   T55] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.057579][   T55] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.136362][   T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.193196][   T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.247559][   T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.286384][   T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.541030][   T55] bridge_slave_1: left allmulticast mode
[  490.547846][   T55] bridge_slave_1: left promiscuous mode
[  490.553792][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.561985][   T55] bridge_slave_0: left allmulticast mode
[  490.568507][   T55] bridge_slave_0: left promiscuous mode
[  490.574231][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.624996][   T55] bridge_slave_1: left allmulticast mode
[  490.630756][   T55] bridge_slave_1: left promiscuous mode
[  490.637654][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.645951][   T55] bridge_slave_0: left allmulticast mode
[  490.652814][   T55] bridge_slave_0: left promiscuous mode
[  490.659767][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.790200][   T55] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  490.883449][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.895073][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.904999][   T55] bond0 (unregistering): Released all slaves
[  490.912947][   T55] bond1 (unregistering): (slave bond2): Releasing backup interface
[  490.922229][   T55] bond1 (unregistering): Released all slaves
[  490.931152][   T55] bond2 (unregistering): Released all slaves
[  490.986083][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.998377][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  491.008503][   T55] bond0 (unregistering): Released all slaves
[  491.022042][   T55] bond3 (unregistering): (slave ip6gre1): Releasing backup interface
[  491.046739][   T55] erspan0 (unregistering): left promiscuous mode
[  491.094551][   T55] bond0 (unregistering): left promiscuous mode
[  491.100739][   T55] bond_slave_0: left promiscuous mode
[  491.106382][   T55] bond_slave_1: left promiscuous mode
[  491.111958][   T55] dummy0: left promiscuous mode
[  491.118368][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  491.128678][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  491.138326][   T55] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  491.148007][   T55] bond0 (unregistering): Released all slaves
[  491.156653][   T55] bond1 (unregistering): Released all slaves
[  491.165486][   T55] bond2 (unregistering): Released all slaves
[  491.175117][   T55] bond3 (unregistering): Released all slaves
[  491.233189][   T55] tipc: Left network mode
[  491.237782][   T55] tipc: Left network mode
[  491.242374][   T55] tipc: Left network mode
[  491.305649][   T55] hsr_slave_0: left promiscuous mode
[  491.311432][   T55] hsr_slave_1: left promiscuous mode
[  491.317274][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.326171][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.334095][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.341510][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.351121][   T55] hsr_slave_0: left promiscuous mode
[  491.357892][   T55] hsr_slave_1: left promiscuous mode
[  491.364080][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.371460][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.379640][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.387213][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.396242][   T55] team0: left promiscuous mode
[  491.401039][   T55] team_slave_0: left promiscuous mode
[  491.406628][   T55] team_slave_1: left promiscuous mode
[  491.412720][   T55] hsr_slave_0: left promiscuous mode
[  491.418402][   T55] hsr_slave_1: left promiscuous mode
[  491.424174][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.431725][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.448878][   T55] veth1_macvtap: left promiscuous mode
[  491.454475][   T55] veth0_macvtap: left promiscuous mode
[  491.460023][   T55] veth1_vlan: left promiscuous mode
[  491.465381][   T55] veth0_vlan: left promiscuous mode
[  491.471096][   T55] veth1_macvtap: left promiscuous mode
[  491.477010][   T55] veth0_macvtap: left promiscuous mode
[  491.482582][   T55] veth1_vlan: left promiscuous mode
[  491.488534][   T55] veth0_vlan: left promiscuous mode
[  491.612153][   T55] team0 (unregistering): Port device team_slave_1 removed
[  491.626051][   T55] team0 (unregistering): Port device team_slave_0 removed
[  491.658197][   T55] team0 (unregistering): Port device dummy0 removed
[  491.702020][   T55] team0 (unregistering): Port device team_slave_1 removed
[  491.712647][   T55] team0 (unregistering): Port device team_slave_0 removed
[  491.774622][   T55] team0 (unregistering): Port device team_slave_1 removed
[  491.785080][   T55] team0 (unregistering): Port device team_slave_0 removed
[  491.821191][   T12] smc: removing ib device syz0
[  492.300541][   T55] IPVS: stop unused estimator thread 0...
[  492.306749][   T55] IPVS: stop unused estimator thread 0...
[  492.312936][   T55] IPVS: stop unused estimator thread 0...
[  492.388178][   T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.445884][   T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.510877][   T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.556848][   T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.636411][   T55] bridge_slave_1: left allmulticast mode
[  492.642275][   T55] bridge_slave_1: left promiscuous mode
[  492.648171][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.657768][   T55] bridge_slave_0: left allmulticast mode
[  492.663528][   T55] bridge_slave_0: left promiscuous mode
[  492.670874][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.758487][   T55] erspan0 (unregistering): left promiscuous mode
[  492.818740][   T55] bond0 (unregistering): left promiscuous mode
[  492.825801][   T55] bond_slave_0: left promiscuous mode
[  492.831281][   T55] bond_slave_1: left promiscuous mode
[  492.838875][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.850402][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.863478][   T55] bond0 (unregistering): Released all slaves
[  492.871603][   T55] bond1 (unregistering): (slave lo): Releasing backup interface
[  492.880301][   T55] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  492.891762][   T55] bond1 (unregistering): Released all slaves
[  492.935869][   T55] team0: left promiscuous mode
[  492.940668][   T55] team_slave_0: left promiscuous mode
[  492.946303][   T55] team_slave_1: left promiscuous mode
[  492.956226][   T55] hsr_slave_0: left promiscuous mode
[  492.961896][   T55] hsr_slave_1: left promiscuous mode
[  492.967677][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.975512][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.983205][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.990704][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.001056][   T55] veth1_macvtap: left promiscuous mode
[  493.006644][   T55] veth0_macvtap: left promiscuous mode
[  493.012236][   T55] veth1_vlan: left promiscuous mode
[  493.017645][   T55] veth0_vlan: left promiscuous mode
[  493.089469][   T55] team0 (unregistering): Port device team_slave_1 removed
[  493.099985][   T55] team0 (unregistering): Port device team_slave_0 removed
[  493.337875][   T55] IPVS: stop unused estimator thread 0...