last executing test programs:

19.330216123s ago: executing program 1 (id=131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x4, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "d9"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$kcm(0x29, 0x6, 0x0)
sendmsg$kcm(r2, &(0x7f0000001b40)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e22, 0x4, @mcast2, 0x7}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="3bc4e5fe054306aa32104cfdd32da7d82926e8e570ee1ad74bc8d7b35c024f131812227f6ca079a98ceddeffd74f215b8b4d72e189345651dc695fb075240f85aeb838ec6213578b448e54ebd8c529d4058885eaf2c4815f93b5e9cd36ffbf6fb78c06aa6d541831e97c8577650fe5ea848609544e933c49288b", 0x7a}, {&(0x7f0000000100)="f4c70a226da8fca98232209acf6a05ab3e49f9152a42f4a08f08a8be10dc817f100c3e4a41205928a7cb08892e745b70b387c1289300eb3068d26792de811888a898ed73a7764a7621235efe17bc6673fbe0fadbe01266fed3f38f148914480f5480fc80883b02", 0x67}, {&(0x7f0000000180)="45f9df2b5510cf0254ed0e100fd37fddecde07d5f91fe0aaf3a5fd9a015b3f0e160ecde63c606b3aed0815abec587706e40fa594c67ef3516f1b7b06443339979a98e767a5309f0965e65e36a725d82a1c6de579ad1ffd1b3e6a23512730eda042b3e7212de5e464d94431fc9f9800e184df5a31a0205539fa0dbcf0e67c97914bc0e69bb2823b9037e6d99b5ff8cbbc7e32c8", 0x93}, {&(0x7f0000000240)="b847b3d0e97ba61c6a070a4eef247e7f4ce5f73589feea3669e4dde648b4b27633c6f6fd12be5ed9ee4e186baab3f554e8765328d8eb36136862b709d10187cb794077b5b42aed18595b0ae13e63b94f95d0e210beab31de49bbd2ae227efc229c5d114652efab5a3d1b016983157c615176130d2d6bb63162f3c97af385841ed53eef746ca6009fa6eabecf8b64e8a39deb3111cf13ee0c63993224", 0x9c}, {&(0x7f0000000300)="5f6de37d1b0d654753a7139fb9256a669078ae4bba5639f235aa524b733a93fb83adab4e80dd3c9d8cf435ffef6fbc0aff76c86db49b01015585d1cd0b22f9ae62505e9f9d293002e29fab13942b5704cdc82e6221f6a161d4966edc14979af8b4d24fa949095808007274496c10c7f2aabd13d30043ca05db73bce373aea09aa28fd194af6d7661fd8ef4286c3a338c78a007", 0x93}, {&(0x7f00000003c0)="fdb1225b4ee1cd5577eaf514582ee02e82588b2c994c348f496696b164c4febe08788155a38395bc93caae16a0f250b9ba55b3106955a21828293b6c96723b8947903b62e6da124505958c6e8fc1542e86935dfd6a7cf8ef4ff538a69767827557d769710d7d9d51a3ed913c8a5fd9871a890f30c19749e1dbc48f4068bf5d2d73631b", 0x83}], 0x6, &(0x7f00000007c0)=[{0x1010, 0x116, 0x2, "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"}, {0x100, 0x108, 0xf8, "4ae2cd47bb14b6bbaa49bd936b2c8da4317cbcd0ad54f4c07414b691814330b22b421f7423784a1b2b0645422830c9f0c7310df5333c5426de5cfa69ee41798d6de49afcd77c37b0a37ec15c3e529ec71fde906a256347e753453cb3d7cf30f46caa6489109f594afeb0336b09e97d498ffaac2b6cf408788aa01fffc4297fd50d338f46f75b4d79afa8b158aeedf162b5409aa709407e866d28292f470d330a07465de62815cb843923b6b1b4457e11e498c159eda12460b57d701a07b213a839f814b96f915a1e33275b1fb077efaeca48b18cd48cdbaf745d381a86b1e648882ff3bd7c797ae6f6775c71840a"}, {0xd8, 0x1, 0xfffff2fd, "b294f34742ff4458320857ad3ee12fb8c5ed9b321f4dc38971057b47d29ba0c10fb8fe8a92994956dc67793de3dd3e8e10c9ce6514e42fde4d9fe4b06a992eb11357129411f1a234f927d4228a3c67835fd30c96ecfb5f68206a3b26dd1f8393da794f532f1df27202003be8f60a7c8fbad72418d12c7fe0e7c0c90e7966dbab8972eae79ecc012c822d037714f993983c70ca936cdf9b979022d3c1520f1b532d62b4868eddcc9accab4cc8f4f182c8485f994a2696ca9b127aa6823590b050333fd2"}, {0xf8, 0x115, 0x5, "ae06fa3eab665a63c0d15fd5b3b691d7225bed3bb4835069eac06358571730c826953abcb0e770bf9fbc968d981d7c66a289c3ede943df154de1d411d193fd77f84f6a24a5e1e69275853b4a4c62947b5928c37134360384b0246099951f1a51b703bb1cf286f44298addbfb0c9df6bb74f49ea9f5cb1db29a49f891f220b5c02ff3e25725f80e279364801523fa1f1a87ec35c25778ba421a7cd726e66f9ab2eebf671d81cfebeea0c6f7c0b0fcad9cfed3ea8a505bf0a0a35832dbf415bfa804db5263b118abc23569d653e1d40f6381dab5fe377807db7213c8d3773f136b59a5cb29d3"}, {0x70, 0xff, 0x3ff, "97795305f58a20da3a6bc4a43369fcb93ab08962ca9cf963675e9853f51ab5a9d785d04bdef5a15b1b1fd9855c67e9850f4d50f1f51ef8722a3eeac57f405f1034c845c4f74556e8b5871bc6bbd42e1be808d5d282043803ee05"}], 0x1350}, 0x20000001)

19.329769793s ago: executing program 1 (id=132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x840)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, 0x0, 0x0, 0x100000000000000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (fail_nth: 6)

19.262184954s ago: executing program 1 (id=133):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x2, 0x0, 0x5, 0x87c, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050)

19.121611638s ago: executing program 1 (id=134):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040854) (async)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000440)) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0x401}}, './file0/../file0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x54, 0x0, 0xd00, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x4a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000104020000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2128000000000000400012800e0001006970366772657461700000002c00028014000700fe8800000000000000000000ae74000000011400060000000000000000000000000000000001"], 0x60}}, 0x80) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async, rerun: 32)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) (async, rerun: 32)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x9762, 0x4) (async, rerun: 32)
ftruncate(r1, 0x7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4820, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

18.934179462s ago: executing program 1 (id=135):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0)
io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000"], 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r4 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x6a, 0x1, 0x0, 0xc)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ff040040", @ANYRES16=r5, @ANYBLOB="080029bd7000fbdbdf250400000014000980080002000100010008000200040000000c00028008000200010000005000058008000100657468000700010069620000080001007564700008000100657468002400028008000300703d0000080002000100000008000200ff070000080001001b0000000800010065746800"], 0x84}, 0x1, 0x0, 0x0, 0x300400c0}, 0x20000000)
bind$can_raw(r4, &(0x7f0000001a80)={0x1d, r3}, 0x10)
r6 = fsmount(r0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
syz_emit_ethernet(0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000021001122334455000a424203000101"], 0x0)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15)

18.58784877s ago: executing program 1 (id=137):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x1fc, 0x8521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
ptrace(0x4206, r7)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001d00)={'ip_vti0\x00', &(0x7f0000001c00)={'gre0\x00', 0x0, 0x80, 0x80, 0xfffffff9, 0x7, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @multicast2}}}})
wait4(r7, 0x0, 0x8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$packet(0x11, 0x3, 0x300) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r11], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2})

18.573176801s ago: executing program 32 (id=137):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x1fc, 0x8521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
ptrace(0x4206, r7)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001d00)={'ip_vti0\x00', &(0x7f0000001c00)={'gre0\x00', 0x0, 0x80, 0x80, 0xfffffff9, 0x7, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @multicast2}}}})
wait4(r7, 0x0, 0x8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$packet(0x11, 0x3, 0x300) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r11], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2})

3.639656954s ago: executing program 5 (id=419):
r0 = shmget(0x0, 0x3000, 0x54000200, &(0x7f0000ffb000/0x3000)=nil)
r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/367], &(0x7f0000000000)='GPL\x00'}, 0x80)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}})
ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000840))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = dup(r7)
socket$inet(0x2, 0x2, 0x1)
io_setup(0x3fe, &(0x7f00000001c0)=<r9=>0x0)
io_getevents(r9, 0xf515, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0)
io_submit(r9, 0x1, &(0x7f0000000280)=[0x0])
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000003c0)={r8, &(0x7f00000002c0)='^\x00', 0x400200, &(0x7f0000000300)={@_ha_fsid={[0xa9]}, {0x2, 0x2, 0x2, 0x7}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x386})
shmat(r0, &(0x7f0000c00000/0x400000)=nil, 0x2000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000000, 0x0)

2.217875998s ago: executing program 5 (id=449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00'})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000040)='reno\x00', 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000780)="17000000020001000003d68c5ee1057688a2003208020300ecff3f0200000300000a000000009afc5ad9a67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115000000ea000000000000002009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba211200"/161, 0xa1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001d00e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000f8ffffffffffffff000000000000000000000000000000000300000000200000000000000000000000000000000000000b000000000000000000000000fdffffffffffffff00000000000000000000000000000000c4ec64566ea252e3b4c10b7683724675af8dde064f11bc00837c361440a93d0555569d592add162c5cbbd22da1ab14ea63c3ba16c8fd67c6bf7f368b5f8db560e6d5057ec0ebeaf3b7a8cb6277fd63529419d4422c47b0ac43e7781275cee0599650a7f0530ea9f6b41fdd983352d30e6981cc5878b8e6e9eaf55b2f57f4ca690469946c52366b90e6685294eb32962f3df2f73b4f23cb4652bcdacff022f11d7822195517843a93a5c9df17e8f4000000"], 0xb8}}, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={0x0, 0x4}, 0x0, &(0x7f0000005840)="00000002", 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20000)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000280), 0x4}, 0x1061, 0x1, 0xbd6, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
creat(&(0x7f0000000340)='./file0\x00', 0xd1)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r6}, 0x18)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r7, &(0x7f00000007c0)="aa01b502", 0x4, 0x20000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x76, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, [], "17c1ff2bbd7f1499f26ff189e3606b5d"}}}}}}}, 0x0)
sendmsg$inet_sctp(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000000000008400000702000000c6004100c000000007000000", @ANYRES32=0x0], 0x20, 0x4048800}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=@newtaction={0x48, 0x58, 0x284f, 0xfffffffc, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x3ffe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0)
pipe2$watch_queue(&(0x7f00000001c0), 0x80)
write$cgroup_int(r4, &(0x7f0000000480)=0xfe8e, 0x12)

2.070295842s ago: executing program 4 (id=450):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
socket(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000440)={[{@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x54fcea75}}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}]}, 0x1, 0x275, &(0x7f00000007c0)="$eJzs3b+OEl0UAPADy7/9mqX+YjGJjdVG7SyJwcRIYoKZQitJVptdY2Sb0UYew95O38jHoKLDLEMWXFCzCozs/H4JmZN75s6cS8GlOAMvb705PXl7/nr67VO0WknUIkYxiWhHNQ4iV5kfq7O4EctGAQDsm35/0PlxpFpUKWzC7MtaZbI0chgRg3pENFdOTr/ssjQAAAAAAAAAAAA25zf9/7Nm//X9/xfH9sr1KrssHgD4I6v9/9wMR5fRcNh511h7jv5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDiT6fRo+otX0fUBAJtn/weA8rH/A0D52P8BoHyePX/xpNPrdftJ0ooYj7I0S/Njnn/0uNe9m8y0ZwPV+cS0Pg963Xt5PllcdZxlaT3+m8+/vzbfiDu38/xF7uHT3pV8M062vnoAAAAAAAAAAAAAAAAAAAD4Nxwnl9qL0XGWpQd5/vhn+Txa+n2AK8/v1+L/2s6WAQAAAAAAAAAAAAAAAAAAAHvt/P2H08HZ2auhYE+CaSVi2/c6jGvP+vqgFde7VzOKfzNvdPD5r6YX/ckEAAAAAAAAAAAAAAAAAADls3jodzX3sYiCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAAi///315Q9BoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcvgeAAD//4zSjos=")
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
sendfile(r2, r3, 0x0, 0x7fffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x6a)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000078001b0000000000"], 0x30}}, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r0, r4, 0x0, 0x7ffff004)

2.046914102s ago: executing program 5 (id=452):
syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001340)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {}, {@resgid}, {@noauto_da_alloc}], [{@appraise}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@dont_hash}, {@audit}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800c10, 0x0, 0x3, 0x0, &(0x7f00000001c0))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0x400000000010, 0x2, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000150)='./cfg/usb_gadget/g1/functions/eem.usb0/ifname\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00')
write$char_usb(r2, &(0x7f0000000800)='(', 0x1)
r3 = syz_open_dev$usbmon(0x0, 0x7, 0x0)
clock_gettime(0x0, &(0x7f0000000bc0)={<r4=>0x0, <r5=>0x0})
futimesat(r2, &(0x7f00000002c0)='./cfg/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000c00)={{}, {r4, r5/1000+10000}})
ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x8)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8850}, 0x20000084)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000340)={0x2e390c280, &(0x7f0000000100)=<r6=>0xffffffffffffffff, 0x0, 0x0, {0x80000027}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14}, 0x4f)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
io_setup(0x8, &(0x7f0000000600)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}])
recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x1, 0x0}}, {{&(0x7f0000000cc0)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/224}, {&(0x7f0000001040)=""/109}, {&(0x7f00000010c0)=""/69}, {&(0x7f0000001140)=""/93}]}, 0xc}], 0x1, 0x121a1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
rmdir(&(0x7f0000000fc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

1.890085616s ago: executing program 5 (id=455):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x81}, {0x0, 0x0, 0x3}, {0x16, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) (fail_nth: 7)

1.867846217s ago: executing program 5 (id=456):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x2, 0x7, 0x0, 0x1, 0xfffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf3, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

1.455475326s ago: executing program 4 (id=459):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_ivalue=0x9})
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e1f, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x20000020, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x1, 0x10)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
socket$kcm(0x2, 0x2, 0x73)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8440, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfff}}, {@abort}]}, 0x2, 0x786, &(0x7f0000000f80)="$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")
acct(0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.442022236s ago: executing program 0 (id=460):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ppoll(&(0x7f0000000100)=[{r0, 0x4100}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x10, 0x2, 0x0, 'queue0\x00', 0x7f})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xd}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x2c020400)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r3)
set_mempolicy(0x8000, &(0x7f0000000140)=0x5, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020cbaaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r3, 0xc0085508, &(0x7f0000000100)=0x1b)
syz_usb_ep_read(r4, 0x94, 0x57, &(0x7f0000000280)=""/87)
mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x21, 0x2, @thr={0x0, 0x0}})
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cad, 0x20000, 0xa, 0x350})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
sendto$inet6(r6, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
unshare(0x2a020400)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)

1.313357399s ago: executing program 4 (id=463):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012010, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000}, 0x12, &(0x7f0000000080)={0x0, 0xb00}, 0x8}, 0x0)

1.061846205s ago: executing program 3 (id=466):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001a0001002dbd7000010000000a"], 0x54}, 0x1, 0x0, 0x0, 0x4048055}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x20000000000000fb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000070000000093186ed5f494aa00"/33], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
mlockall(0x7)
r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x65, 0x10}, 0xb, 0x8002, 0xb0f0, 0x2, 0x0, 0x0, 0x6})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x1000) (async)
shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
socket$inet_icmp(0x2, 0x2, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, 0x0, 0x0)
connect$inet(r5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) (async)
r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x4175, &(0x7f0000000300)={0x0, 0x136f, 0x200, 0x2, 0x2d8}, &(0x7f0000000140), &(0x7f0000000380), &(0x7f0000000440))
io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x4, 0xb7f6, 0xfffffffffffffffd, 0x2}, {0x302, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x5, 0x2, 0xb7, 0x2, 0x80}}, 0xe8)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x180c850, &(0x7f0000000080)=ANY=[@ANYBLOB='shortname=win95,shortname=winnt,nonumtail=0,nonumtail=0,utf8=1,iocharset=cp874,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696e39352c634f9ec7d06a111ab6c12d6865636b3d7374726963742c636f6465706167653d3934392c696f636861727365743d6d61636761656c69632c757466383d302c6e6f6e756d7461696c3d302c00"/93], 0x1, 0x371, &(0x7f0000002980)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzr0+ok/Wm8+lGc7NSfKV0i2Z6QSd3S6v5xplsbCVMT1j8dxZMXGxH3l+uX7n0wy+7PU/pm4SNOgAAAAAAAAAAAAAAAAAA4K4ovVe8ULzZd3qnVo89VQRzezs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg7hv//vxRsjWV2E/zZjvGi2dWNZsThez1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+4/4OAAD//5U3aTg=")
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))

983.253707ms ago: executing program 2 (id=468):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
read$rfkill(r0, &(0x7f0000000300), 0x8) (fail_nth: 2)

885.16586ms ago: executing program 2 (id=469):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
socket(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000440)={[{@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x54fcea75}}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}]}, 0x1, 0x275, &(0x7f00000007c0)="$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")
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
sendfile(r2, r3, 0x0, 0x7fffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x6a)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000078001b0000000000"], 0x30}}, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r0, r4, 0x0, 0x7ffff004)

785.254822ms ago: executing program 4 (id=470):
socket$kcm(0xa, 0x2, 0x0) (async)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000001000)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000000000000007000000890704ac1414bb070b08ac1414aae00000012902"], 0x28}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x9, 0x4f, {{0x24, 0x4, 0x0, 0xf, 0x90, 0x67, 0x0, 0x13, 0x4, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x8, 0x8, 0x0, 0xf, [0x2]}, @timestamp_prespec={0x44, 0x54, 0x26, 0x3, 0x5, [{@multicast1, 0x20000ad}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x7ffffffb}, {@loopback, 0xffffb69b}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x1}, {@loopback, 0x9}]}, @rr={0x7, 0x1f, 0x1c, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101, @private=0xa010101, @multicast1, @loopback, @multicast2, @rand_addr=0x64010102]}]}}}}})
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x28040}, 0x80)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc64, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x28f7, 0x0, 0xfffffffffffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
r3 = dup(0xffffffffffffffff)
write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
inotify_init1(0x0) (async)
r4 = inotify_init1(0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f", 0x26}], 0x1) (async)
writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f", 0x26}], 0x1)
inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000526)
open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b)
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10e8c8, 0x0, 0x1, 0x0, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
syz_io_uring_setup(0x97b, &(0x7f0000000280)={0x0, 0xce17, 0x8000, 0x0, 0x1ce}, &(0x7f0000000180), 0x0, 0x0) (async)
syz_io_uring_setup(0x97b, &(0x7f0000000280)={0x0, 0xce17, 0x8000, 0x0, 0x1ce}, &(0x7f0000000180), 0x0, 0x0)
syz_clone3(&(0x7f0000000dc0)={0x20000, 0x0, 0x0, &(0x7f00000003c0), {0x1e}, &(0x7f0000000400)=""/212, 0xd4, 0x0, &(0x7f0000000d80)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) (async)
syz_clone3(&(0x7f0000000dc0)={0x20000, 0x0, 0x0, &(0x7f00000003c0), {0x1e}, &(0x7f0000000400)=""/212, 0xd4, 0x0, &(0x7f0000000d80)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0x3, @mcast1, 0x4}}}, 0x3a)

698.594854ms ago: executing program 4 (id=471):
setgroups(0x2, &(0x7f0000000180)=[0x0, 0xee00])
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0)
mlockall(0x7)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendfile(0xffffffffffffffff, r2, 0x0, 0xbc44)
syz_io_uring_setup(0x21a3, &(0x7f0000000100)={0x0, 0x8b0b, 0x2, 0x3, 0x1c}, &(0x7f0000000000), 0x0, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000649, &(0x7f0000000000)={[{@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noinit_itable}]}, 0x9, 0x60d, &(0x7f0000000800)="$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")
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000001c0)={0x0, "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"})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x1b, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20040804}, 0x40080a0)

633.078816ms ago: executing program 4 (id=472):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x80010040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x80, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1b, 0x40, 0xb, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "ee5c05d3a18a585d349dcf7bf787f9a6"}, @eol, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x86, 0x80000001}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0xc, "39cdb44d6203ad4cde65"}, @timestamp={0x8, 0xa, 0x1, 0x7}]}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x11, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080)

499.876289ms ago: executing program 0 (id=473):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) (fail_nth: 1)

396.008641ms ago: executing program 3 (id=474):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
read$rfkill(r0, &(0x7f0000000300), 0x8)

395.556692ms ago: executing program 0 (id=475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x100)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r3, &(0x7f0000000ac0)={&(0x7f0000000500)={0xa, 0x4e23, 0x7, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}, 0x4004801)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
mkdir(0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="18"], 0x20)
connect$l2tp6(r5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000100)='./file0\x00', 0x21488b, &(0x7f0000000380)=ANY=[], 0x41, 0x65c, &(0x7f0000002280)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)
sendto$l2tp(r2, &(0x7f0000000000)="87c54d2328cb80d8cd", 0x9, 0x40000, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0x1002)
r8 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}}, 0x24}}, 0x0)

260.046624ms ago: executing program 0 (id=476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x10008200, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = getuid()
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x8d8801, &(0x7f0000000480)=ANY=[@ANYBLOB="646f6e745f61707072616973652c6578743d757365725f752c657569643d000000000000962e3ca6b9c1df779d418c8ab0ccade6dc85c47a81efe287a25cade3d5901ac27fda629a66556c2862b80a7aec7f0e2edff90ae0d8f5c92ea8d16b2b3bcb900a0080c4e181", @ANYRESDEC=r2, @ANYBLOB=',\x00'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
rmdir(&(0x7f0000000640)='./file0\x00')
r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x4000104, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x14e, r4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prlimit64(0x0, 0xd, 0x0, &(0x7f0000000440))
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r5)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100273d7000ffdb7132172f0000180001801400020064756d6d7930"], 0x2c}}, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0), 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020008001300", @ANYRES32=0x0, @ANYBLOB="08141e7d133da427"], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet6(r8, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x6}, 0x1c, &(0x7f00000029c0)=[{&(0x7f0000000240)="92", 0x1}], 0x1}}], 0x1, 0x240800d0)
socket$inet6(0xa, 0x3, 0x83)

253.821495ms ago: executing program 3 (id=477):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x60ff, 0x1}, 0x20)

244.225545ms ago: executing program 2 (id=478):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1)
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x149a82, 0x192)
write$cgroup_int(r1, &(0x7f0000000480)=0xfe8e, 0x12)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0xa, 0x2, 0x80, @mcast2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="374a36b9016755c5ca3a972e56e36d1cef8cb98733ea67448efc6441386ab22063088df51f1777b623ba79ddd0c235218dd47d11ffef583d32889981c547c5f30e6f6a45", 0x44}], 0x2}, 0x30008b08)
io_setup(0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x4d31, 0xe6080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./configfs\x00', 0x1ff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={<r5=>0x0, @in={{0x2, 0x4e24, @local}}, 0x9f71, 0x8}, &(0x7f0000000480)=0x90)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000580)=0x84)
mount(0x0, &(0x7f0000000440)='./configfs\x00', &(0x7f0000000380)='devpts\x00', 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r6, 0x4}, 0x38)
write$char_usb(0xffffffffffffffff, &(0x7f00000003c0)="bd17fd72c9d5", 0x6)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@md0, 0xffffffffffffffff, 0x0)

209.813216ms ago: executing program 2 (id=479):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mtu(r0, 0x0, 0x33, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setns(0xc9, 0x0)
socket(0x8, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
mkdir(0x0, 0x111)
rmdir(&(0x7f00000000c0)='./control\x00')
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xffc3)
r2 = socket$unix(0x1, 0x5, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', <r3=>0x0})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x401, 0x1, &(0x7f0000006680))
syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0)
mlockall(0x7)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)={0x104, r5, 0x8, 0x0, 0x0, {{0x5}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xed, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @random="ec7304b81dd3", {0x0, 0xb}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9, 0x61}}, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0x4000}}, [{0xdd, 0x77, "8e1be231f79cb2e5da111797b09bb5cb3ef8bd9925bf550e72e5b124fd186a45b715b180ac1a672af5ee614f0b06637aeeb4abffb55a2ad33dffc7a26e00d109577e2869c5ea276f7f70ebc0fb5af8c8bd6a29a569bd839ebf78f68c7cc552e352813561f39b47450353878274a3875fe3d1687499e1c5"}, {0xdd, 0x27, "fea125043c656f689512aed85048db0a17d312b97146f218954250bf70a0ca71810162735a22dd"}]}}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x82, [0x4, 0x7, 0x3, 0x1ff, 0x40, 0x6], 0x0, &(0x7f0000000080), &(0x7f0000000180)=""/130}, &(0x7f0000000440)=0x78)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
read$rfkill(r6, &(0x7f0000000300), 0x8)

158.269257ms ago: executing program 3 (id=480):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x20482)
r1 = dup(r0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x10702, 0x35, 0x6, 0x8, 0x7, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x20ec, 0x0, 0x0, 0x0})

157.744426ms ago: executing program 0 (id=481):
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$notify(r0, 0x402, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080)

156.597726ms ago: executing program 3 (id=482):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendto(r1, &(0x7f0000000500)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058004000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) (async)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) (async)
sendmmsg$sock(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) (async)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x2, 0x86a, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f00000004c0)={@mcast1, r5}, 0x14)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x10000000, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x40) (async)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000081df0796a8f85efec5212cc80000000200"/72], 0x48) (async)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r9, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)

129.256458ms ago: executing program 0 (id=483):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140))
r4 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/time\x00')
syz_clone3(&(0x7f0000000540)={0x800000, &(0x7f0000000180)=<r5=>0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x2e}, &(0x7f0000000380)=""/137, 0x89, &(0x7f0000000440)=""/188, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r1, r2, 0x25, 0x1, @val=@iter={&(0x7f00000005c0)=@task={r3, r4, r5}, 0x10}}, 0x20)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0x200000000a}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x4004010)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000074000000030a01020000000000000000020000060900010073797a300000000052000300fd02b21edf8b511e23f25f4769af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af6603"], 0xbc}}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

99.479998ms ago: executing program 2 (id=484):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='7', 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

22.15342ms ago: executing program 2 (id=485):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0x9, 0x0, 0x3, 0x800000, 0x44, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x8) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
io_uring_enter(0xffffffffffffffff, 0x1bc1, 0xa0e7, 0x21, &(0x7f0000000200)={[0x8]}, 0x8)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') (async)
exit(0xfffffffffffffffb)
getdents64(r5, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@ifindex, 0xffffffffffffffff, 0x1d, 0x8}, 0x20) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0xfdef}], 0x1)

21.90045ms ago: executing program 3 (id=486):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioperm(0xd, 0x800, 0x80000000)
syz_read_part_table(0x5ee, &(0x7f0000000600)="$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")
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xf001}, 0x8)

0s ago: executing program 5 (id=487):
mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x880, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x1f, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0xe06}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10000}}, 0xe8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x4000, 0x0)
ioctl$NILFS_IOCTL_GET_BDESCS(r5, 0xc0186e87, &(0x7f00000003c0)={&(0x7f0000000340)=[{0xfffffffffffffffa, 0x3, 0x9, 0x3, 0x3}], 0x1, 0x28, 0x3, 0x8})
keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0)
shutdown(r2, 0x1)

kernel console output (not intermixed with test programs):

=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   37.106441][ T3694] loop4: detected capacity change from 0 to 512
[   37.113488][   T29] audit: type=1400 audit(1788709894.788:286): avc:  denied  { write } for  pid=3697 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   37.139976][   T29] audit: type=1400 audit(1788709894.808:287): avc:  denied  { ioctl } for  pid=3693 comm="syz.4.53" path="socket:[4299]" dev="sockfs" ino=4299 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.165527][   T29] audit: type=1400 audit(1788709894.828:288): avc:  denied  { read append } for  pid=3695 comm="syz.2.54" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   37.165612][   T29] audit: type=1400 audit(1788709894.828:289): avc:  denied  { open } for  pid=3695 comm="syz.2.54" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   37.257119][   T29] audit: type=1400 audit(1788709894.928:290): avc:  denied  { read write } for  pid=3702 comm="syz.4.56" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   37.257198][   T29] audit: type=1400 audit(1788709894.928:291): avc:  denied  { open } for  pid=3702 comm="syz.4.56" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   37.282365][   T29] audit: type=1400 audit(1788709894.938:292): avc:  denied  { wake_alarm } for  pid=3695 comm="syz.2.54" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   37.327632][   T29] audit: type=1400 audit(1788709894.998:293): avc:  denied  { read write } for  pid=3702 comm="syz.4.56" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   37.328184][ T3703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.328319][ T3703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.343141][ T3703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   37.343270][ T3703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   37.351662][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7fd800: rx timeout, send abort
[   37.359593][ T3703] syzkaller0: entered promiscuous mode
[   37.359612][ T3703] syzkaller0: entered allmulticast mode
[   37.511415][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.547659][ T3706] loop0: detected capacity change from 0 to 512
[   37.619557][ T3712] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   37.627593][ T3712] veth3: entered promiscuous mode
[   37.668996][ T3712] veth2: entered allmulticast mode
[   37.716222][ T3719] veth1_to_batadv: entered promiscuous mode
[   37.716250][ T3719] veth1_to_batadv: entered allmulticast mode
[   37.718387][ T3719] __nla_validate_parse: 2 callbacks suppressed
[   37.718401][ T3719] netlink: 352 bytes leftover after parsing attributes in process `syz.0.59'.
[   37.845036][    C1] vcan0: j1939_tp_rxtimer: 0xffff888123801000: rx timeout, send abort
[   37.853743][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7fd800: abort rx timeout. Force session deactivation
[   38.057471][ T3731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'.
[   38.066768][ T3729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'.
[   38.319636][ T3721] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   38.326991][ T3723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   38.353634][    C1] vcan0: j1939_tp_rxtimer: 0xffff888123801000: abort rx timeout. Force session deactivation
[   38.567704][ T3736] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   38.567732][ T3736] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   38.567773][ T3736] vhci_hcd vhci_hcd.0: Device attached
[   38.607022][ T3735] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10)
[   38.607038][ T3640] syz.1.38 (3640) used greatest stack depth: 9792 bytes left
[   38.607048][ T3735] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   38.607147][ T3735] vhci_hcd vhci_hcd.0: Device attached
[   38.637371][ T3735] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13)
[   38.637396][ T3735] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   38.637496][ T3735] vhci_hcd vhci_hcd.0: Device attached
[   38.638369][ T3740] vhci_hcd: connection closed
[   38.638537][   T55] vhci_hcd vhci_hcd.0: stop threads
[   38.638556][   T55] vhci_hcd vhci_hcd.0: release socket
[   38.638572][   T55] vhci_hcd vhci_hcd.0: disconnect device
[   38.638639][ T3742] vhci_hcd: connection closed
[   38.638969][   T55] vhci_hcd vhci_hcd.0: stop threads
[   38.638984][   T55] vhci_hcd vhci_hcd.0: release socket
[   38.638999][   T55] vhci_hcd vhci_hcd.0: disconnect device
[   38.639090][ T3737] vhci_hcd: connection closed
[   38.639295][   T55] vhci_hcd vhci_hcd.0: stop threads
[   38.639310][   T55] vhci_hcd vhci_hcd.0: release socket
[   38.639324][   T55] vhci_hcd vhci_hcd.0: disconnect device
[   39.156620][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.172453][ T3750] FAULT_INJECTION: forcing a failure.
[   39.172453][ T3750] name failslab, interval 1, probability 0, space 0, times 0
[   39.172491][ T3750] CPU: 1 UID: 0 PID: 3750 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(lazy) 
[   39.172516][ T3750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   39.172563][ T3750] Call Trace:
[   39.172571][ T3750]  <TASK>
[   39.172579][ T3750]  __dump_stack+0x1d/0x30
[   39.172605][ T3750]  dump_stack_lvl+0x95/0xd0
[   39.172632][ T3750]  dump_stack+0x15/0x1b
[   39.172724][ T3750]  should_fail_ex+0x262/0x280
[   39.172746][ T3750]  ? tcf_idr_create+0x41/0x4a0
[   39.172778][ T3750]  should_failslab+0x8c/0xb0
[   39.172812][ T3750]  __kmalloc_noprof+0xd0/0x4d0
[   39.172923][ T3750]  ? tcf_idr_create+0x41/0x4a0
[   39.172982][ T3750]  tcf_idr_create+0x41/0x4a0
[   39.173010][ T3750]  ? dst_cache_init+0x31/0x100
[   39.173116][ T3750]  tcf_idr_create_from_flags+0x60/0x80
[   39.173153][ T3750]  tunnel_key_init+0x460/0xf50
[   39.173192][ T3750]  ? __nla_validate_parse+0x16c7/0x1d70
[   39.173224][ T3750]  ? __pfx_tunnel_key_init+0x10/0x10
[   39.173252][ T3750]  tcf_action_init_1+0x395/0x4d0
[   39.173327][ T3750]  tcf_action_init+0x29d/0x700
[   39.173382][ T3750]  tc_ctl_action+0x29e/0x860
[   39.173485][ T3750]  ? __pfx_tc_ctl_action+0x10/0x10
[   39.173514][ T3750]  rtnetlink_rcv_msg+0x6a7/0x720
[   39.173561][ T3750]  netlink_rcv_skb+0x11e/0x220
[   39.173588][ T3750]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   39.173615][ T3750]  rtnetlink_rcv+0x1c/0x30
[   39.173643][ T3750]  netlink_unicast+0x5a9/0x680
[   39.173673][ T3750]  netlink_sendmsg+0x5be/0x6f0
[   39.173816][ T3750]  ? __pfx_netlink_sendmsg+0x10/0x10
[   39.173850][ T3750]  ____sys_sendmsg+0x532/0x580
[   39.173960][ T3750]  ___sys_sendmsg+0x195/0x1e0
[   39.174010][ T3750]  __sys_sendmmsg+0x185/0x320
[   39.174071][ T3750]  __x64_sys_sendmmsg+0x57/0x70
[   39.174117][ T3750]  x64_sys_call+0x1fb4/0x2550
[   39.174192][ T3750]  do_syscall_64+0x112/0x360
[   39.174229][ T3750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.174259][ T3750] RIP: 0033:0x7fbd69fde159
[   39.174275][ T3750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.174293][ T3750] RSP: 002b:00007fbd68a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   39.174314][ T3750] RAX: ffffffffffffffda RBX: 00007fbd6a265fa0 RCX: 00007fbd69fde159
[   39.174332][ T3750] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005
[   39.174346][ T3750] RBP: 00007fbd68a37090 R08: 0000000000000000 R09: 0000000000000000
[   39.174437][ T3750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.174450][ T3750] R13: 00007fbd6a266038 R14: 00007fbd6a265fa0 R15: 00007ffd8b4caba8
[   39.174469][ T3750]  </TASK>
[   39.264881][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'.
[   39.375952][ T3750] Zero length message leads to an empty skb
[   39.448736][ T3765] kernel profiling enabled (shift: 63)
[   39.448756][ T3765] profiling shift: 63 too large
[   39.454412][ T3765] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   39.498656][ T3750] syz.2.67 (3750) used greatest stack depth: 9544 bytes left
[   39.541481][ T3776] loop2: detected capacity change from 0 to 1024
[   39.548232][ T3776] EXT4-fs: inline encryption not supported
[   39.575252][ T3776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   39.575328][ T3776] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.601029][ T3780] kernel profiling enabled (shift: 63)
[   39.601249][ T3780] profiling shift: 63 too large
[   39.615167][ T3780] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   39.633440][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   39.697358][  T359] Bluetooth: hci0: Frame reassembly failed (-84)
[   39.732338][ T3773] loop0: detected capacity change from 0 to 512
[   39.744606][ T3763] FAULT_INJECTION: forcing a failure.
[   39.744606][ T3763] name failslab, interval 1, probability 0, space 0, times 0
[   39.744801][ T3763] CPU: 1 UID: 0 PID: 3763 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(lazy) 
[   39.744827][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   39.744840][ T3763] Call Trace:
[   39.744846][ T3763]  <TASK>
[   39.744929][ T3763]  __dump_stack+0x1d/0x30
[   39.744955][ T3763]  dump_stack_lvl+0x95/0xd0
[   39.744983][ T3763]  dump_stack+0x15/0x1b
[   39.745046][ T3763]  should_fail_ex+0x262/0x280
[   39.745067][ T3763]  ? seq_create_client1+0x36/0x2e0
[   39.745124][ T3763]  should_failslab+0x8c/0xb0
[   39.745156][ T3763]  __kmalloc_cache_noprof+0x7a/0x400
[   39.745189][ T3763]  ? seq_create_client1+0x36/0x2e0
[   39.745218][ T3763]  ? __pfx_snd_seq_open+0x10/0x10
[   39.745268][ T3763]  ? __pfx_snd_seq_open+0x10/0x10
[   39.745380][ T3763]  seq_create_client1+0x36/0x2e0
[   39.745420][ T3763]  ? __pfx_snd_seq_open+0x10/0x10
[   39.745532][ T3763]  snd_seq_open+0x3d/0x300
[   39.745572][ T3763]  ? __pfx_snd_seq_open+0x10/0x10
[   39.745605][ T3763]  snd_open+0x23b/0x290
[   39.745668][ T3763]  chrdev_open+0x2eb/0x3a0
[   39.745755][ T3763]  do_dentry_open+0x49f/0xa60
[   39.745778][ T3763]  ? __pfx_chrdev_open+0x10/0x10
[   39.745893][ T3763]  vfs_open+0x37/0x1e0
[   39.745913][ T3763]  path_openat+0xc01/0x10d0
[   39.745939][ T3763]  ? do_file_open+0x7e/0x290
[   39.745971][ T3763]  do_file_open+0x16c/0x290
[   39.746011][ T3763]  do_sys_openat2+0xa0/0x130
[   39.746038][ T3763]  __x64_sys_openat+0xf2/0x120
[   39.746072][ T3763]  x64_sys_call+0x1f72/0x2550
[   39.746157][ T3763]  do_syscall_64+0x112/0x360
[   39.746190][ T3763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.746214][ T3763] RIP: 0033:0x7fc30a99e159
[   39.746230][ T3763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.746331][ T3763] RSP: 002b:00007fc3093f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   39.746356][ T3763] RAX: ffffffffffffffda RBX: 00007fc30ac25fa0 RCX: 00007fc30a99e159
[   39.746381][ T3763] RDX: 00000000000e0c81 RSI: 00002000000018c0 RDI: ffffffffffffff9c
[   39.746395][ T3763] RBP: 00007fc30aa35024 R08: 0000000000000000 R09: 0000000000000000
[   39.746408][ T3763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.746443][ T3763] R13: 00007fc30ac26038 R14: 00007fc30ac25fa0 R15: 00007ffe703217f8
[   39.746464][ T3763]  </TASK>
[   39.757548][ T3794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[   39.757574][ T3794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   39.757607][ T3794] vhci_hcd vhci_hcd.0: Device attached
[   39.762312][ T3794] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10)
[   39.762338][ T3794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   39.762389][ T3794] vhci_hcd vhci_hcd.0: Device attached
[   39.770441][ T3794] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13)
[   39.770468][ T3794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   39.770522][ T3794] vhci_hcd vhci_hcd.0: Device attached
[   39.783185][ T3377] vhci_hcd vhci_hcd.4: vhci_device speed not set
[   39.951231][ T3802] loop4: detected capacity change from 0 to 1024
[   39.977286][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   39.977401][ T3802] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.983504][ T3802] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.82: lblock 3 mapped to illegal pblock 3 (length 3)
[   39.983880][ T3802] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   39.983992][ T3802] EXT4-fs (loop4): This should not happen!! Data will be lost
[   39.983992][ T3802] 
[   40.027053][ T3773] loop0: detected capacity change from 0 to 4096
[   40.041642][ T3773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.056980][ T3806] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.82: lblock 0 mapped to illegal pblock 0 (length 3)
[   40.062100][ T3806] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[   40.062130][ T3806] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.062130][ T3806] 
[   40.096299][ T3806] xt_nfacct: accounting object `s' does not exist
[   40.512680][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.671156][ T3820] batadv_slave_1: entered promiscuous mode
[   40.677382][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'.
[   40.677490][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.715050][ T3820] batadv_slave_1 (unregistering): left promiscuous mode
[   40.715093][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.743609][  T359] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 2)
[   40.743923][  T359] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[   40.743950][  T359] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.743950][  T359] 
[   40.747776][  T359] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8)
[   40.747966][  T359] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   40.747991][  T359] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.747991][  T359] 
[   40.755549][ T3303] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[   40.837032][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   40.865804][ T3818] loop2: detected capacity change from 0 to 1024
[   40.875821][ T3818] EXT4-fs: dax option not supported
[   40.949744][ T3831] syzkaller0: entered promiscuous mode
[   40.949784][ T3831] syzkaller0: entered allmulticast mode
[   41.000763][ T3818] loop2: detected capacity change from 0 to 1024
[   41.016291][ T3818] EXT4-fs (loop2): inodes count not valid: 1 vs 32
[   41.088548][ T3818] loop2: detected capacity change from 0 to 512
[   41.148623][ T3839] 9pnet_fd: Insufficient options for proto=fd
[   41.160145][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   41.160187][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   41.160243][ T3838] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22)
[   41.204346][ T3818] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   41.205122][ T3818] EXT4-fs (loop2): orphan cleanup on readonly fs
[   41.206872][ T3818] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   41.207416][ T3818] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   41.210289][ T3818] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.85: bg 0: block 15: invalid block bitmap
[   41.210358][ T3818] fserror_report: 2 callbacks suppressed
[   41.210389][ T3818] loop2: lost filesystem error report for type 5 error -117
[   41.210861][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   41.210888][    C0] EXT4-fs (loop2): initial error at time 1788709898: ext4_validate_block_bitmap:436
[   41.210969][    C0] EXT4-fs (loop2): last error at time 1788709898: ext4_validate_block_bitmap:436
[   41.217329][ T3818] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   41.217438][ T3818] loop2: lost filesystem error report for type 5 error -117
[   41.218947][ T3818] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #16: comm syz.2.85: data will be lost
[   41.219597][ T3818] EXT4-fs (loop2): 1 truncate cleaned up
[   41.228424][ T3818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.355260][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.581715][ T3847] FAULT_INJECTION: forcing a failure.
[   41.581715][ T3847] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   41.581754][ T3847] CPU: 0 UID: 0 PID: 3847 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(lazy) 
[   41.581784][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.581798][ T3847] Call Trace:
[   41.581807][ T3847]  <TASK>
[   41.581816][ T3847]  __dump_stack+0x1d/0x30
[   41.581844][ T3847]  dump_stack_lvl+0x95/0xd0
[   41.581925][ T3847]  dump_stack+0x15/0x1b
[   41.581948][ T3847]  should_fail_ex+0x262/0x280
[   41.581971][ T3847]  should_fail+0xb/0x20
[   41.581990][ T3847]  should_fail_usercopy+0x1a/0x20
[   41.582016][ T3847]  _copy_to_user+0x20/0xa0
[   41.582047][ T3847]  __se_sys_mincore+0x39a/0x4e0
[   41.582130][ T3847]  __x64_sys_mincore+0x43/0x50
[   41.582199][ T3847]  x64_sys_call+0x1c8c/0x2550
[   41.582230][ T3847]  do_syscall_64+0x112/0x360
[   41.582265][ T3847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.582289][ T3847] RIP: 0033:0x7faac60ce159
[   41.582306][ T3847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   41.582326][ T3847] RSP: 002b:00007faac4b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b
[   41.582347][ T3847] RAX: ffffffffffffffda RBX: 00007faac6356090 RCX: 00007faac60ce159
[   41.582364][ T3847] RDX: 0000200000000000 RSI: 0000000000800000 RDI: 0000200000000000
[   41.582453][ T3847] RBP: 00007faac4b06090 R08: 0000000000000000 R09: 0000000000000000
[   41.582468][ T3847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.582483][ T3847] R13: 00007faac6356128 R14: 00007faac6356090 R15: 00007ffdc909ebf8
[   41.582519][ T3847]  </TASK>
[   41.711595][ T3599] Bluetooth: hci0: command 0x1003 tx timeout
[   41.711624][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   41.729209][ T3799] vhci_hcd: connection closed
[   41.729333][ T3795] vhci_hcd: connection reset by peer
[   41.729599][   T42] vhci_hcd vhci_hcd.3: stop threads
[   41.729618][   T42] vhci_hcd vhci_hcd.3: release socket
[   41.729640][   T42] vhci_hcd vhci_hcd.3: disconnect device
[   41.729746][ T3797] vhci_hcd: connection closed
[   41.729810][   T42] vhci_hcd vhci_hcd.3: stop threads
[   41.729853][   T42] vhci_hcd vhci_hcd.3: release socket
[   41.729888][   T42] vhci_hcd vhci_hcd.3: disconnect device
[   41.729976][   T42] vhci_hcd vhci_hcd.3: stop threads
[   41.730049][   T42] vhci_hcd vhci_hcd.3: release socket
[   41.730068][   T42] vhci_hcd vhci_hcd.3: disconnect device
[   41.734771][   T24] usb 7-1: enqueue for inactive port 0
[   41.734794][   T24] usb 7-1: enqueue for inactive port 0
[   41.804029][   T24] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   41.813797][ T3859] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use)
[   42.322164][ T3869] syzkaller0: entered promiscuous mode
[   42.322192][ T3869] syzkaller0: entered allmulticast mode
[   42.391346][ T3875] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   42.395445][ T3871] set_capacity_and_notify: 2 callbacks suppressed
[   42.395592][ T3871] loop4: detected capacity change from 0 to 256
[   42.414142][ T3871] vfat: Unknown parameter '/dev/usb/hiddev#'
[   42.495617][ T3871] loop4: detected capacity change from 0 to 512
[   42.543247][ T3877] loop3: detected capacity change from 0 to 512
[   42.568622][ T3871] FAULT_INJECTION: forcing a failure.
[   42.568622][ T3871] name failslab, interval 1, probability 0, space 0, times 0
[   42.568717][ T3871] CPU: 0 UID: 0 PID: 3871 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(lazy) 
[   42.568748][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   42.568761][ T3871] Call Trace:
[   42.568768][ T3871]  <TASK>
[   42.568779][ T3871]  __dump_stack+0x1d/0x30
[   42.568807][ T3871]  dump_stack_lvl+0x95/0xd0
[   42.568835][ T3871]  dump_stack+0x15/0x1b
[   42.568860][ T3871]  should_fail_ex+0x262/0x280
[   42.568927][ T3871]  ? __se_sys_mount+0xef/0x2e0
[   42.568959][ T3871]  should_failslab+0x8c/0xb0
[   42.568993][ T3871]  __kmalloc_cache_noprof+0x7a/0x400
[   42.569060][ T3871]  ? __se_sys_mount+0xef/0x2e0
[   42.569092][ T3871]  ? memdup_user+0x99/0xd0
[   42.569113][ T3871]  __se_sys_mount+0xef/0x2e0
[   42.569159][ T3871]  __x64_sys_mount+0x67/0x80
[   42.569200][ T3871]  x64_sys_call+0xc3b/0x2550
[   42.569242][ T3871]  do_syscall_64+0x112/0x360
[   42.569310][ T3871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.569333][ T3871] RIP: 0033:0x7f5ffc78e159
[   42.569352][ T3871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.569397][ T3871] RSP: 002b:00007f5ffb1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   42.569465][ T3871] RAX: ffffffffffffffda RBX: 00007f5ffca15fa0 RCX: 00007f5ffc78e159
[   42.569482][ T3871] RDX: 00002000000010c0 RSI: 0000200000001080 RDI: 0000200000001040
[   42.569500][ T3871] RBP: 00007f5ffb1e7090 R08: 0000200000001180 R09: 0000000000000000
[   42.569517][ T3871] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[   42.569533][ T3871] R13: 00007f5ffca16038 R14: 00007f5ffca15fa0 R15: 00007ffc4ee5f418
[   42.569556][ T3871]  </TASK>
[   42.580030][ T3877] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   42.580808][ T3877] EXT4-fs (loop3): orphan cleanup on readonly fs
[   42.589138][ T3882] loop1: detected capacity change from 0 to 1024
[   42.590784][ T3877] __quota_error: 330 callbacks suppressed
[   42.595221][ T3882] EXT4-fs: Ignoring removed orlov option
[   42.607004][ T3877] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[   42.607394][ T3877] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   42.629228][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.638914][ T3877] EXT4-fs (loop3): Cannot turn on quotas: error -117
[   42.642743][ T3877] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #16: comm syz.3.105: inode has both inline data and extents flags
[   42.642804][ T3877] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   42.644271][ T3877] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.105: couldn't read orphan inode 16 (err -117)
[   42.644421][ T3877] loop3: lost filesystem error report for type 5 error -117
[   42.648642][ T3877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.690371][ T3888] loop0: detected capacity change from 0 to 512
[   42.700433][ T3888] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   42.701078][ T3888] EXT4-fs (loop0): invalid journal inode
[   42.701115][ T3888] EXT4-fs (loop0): can't get journal size
[   42.701824][ T3888] EXT4-fs (loop0): 1 truncate cleaned up
[   42.702126][ T3888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.703681][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.704868][   T29] audit: type=1400 audit(1788709900.378:623): avc:  denied  { write } for  pid=3887 comm="syz.0.108" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.736970][   T29] audit: type=1400 audit(1788709900.408:624): avc:  denied  { listen } for  pid=3885 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   42.738156][   T29] audit: type=1400 audit(1788709900.408:625): avc:  denied  { write } for  pid=3885 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   42.749105][   T29] audit: type=1400 audit(1788709900.418:626): avc:  denied  { write } for  pid=3887 comm="syz.0.108" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.749228][   T29] audit: type=1400 audit(1788709900.418:627): avc:  denied  { create } for  pid=3887 comm="syz.0.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   42.755257][   T29] audit: type=1400 audit(1788709900.428:628): avc:  denied  { write } for  pid=3887 comm="syz.0.108" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.755286][   T29] audit: type=1400 audit(1788709900.428:629): avc:  denied  { write } for  pid=3887 comm="syz.0.108" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   42.755359][   T29] audit: type=1400 audit(1788709900.428:630): avc:  denied  { unlink } for  pid=3887 comm="syz.0.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   42.755401][   T29] audit: type=1400 audit(1788709900.428:631): avc:  denied  { rename } for  pid=3887 comm="syz.0.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   42.824346][ T3894] loop4: detected capacity change from 0 to 1024
[   42.829169][ T3894] EXT4-fs: Ignoring removed bh option
[   42.831230][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.851397][ T3894] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[   42.978429][  T359] Bluetooth: hci0: Frame reassembly failed (-84)
[   43.038532][ T3903] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[   43.038567][ T3903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   43.038600][ T3903] vhci_hcd vhci_hcd.0: Device attached
[   43.039458][ T3903] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11)
[   43.039481][ T3903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   43.039507][ T3903] vhci_hcd vhci_hcd.0: Device attached
[   43.041925][ T3903] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14)
[   43.041949][ T3903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   43.041974][ T3903] vhci_hcd vhci_hcd.0: Device attached
[   43.131041][ T3892] loop3: detected capacity change from 0 to 764
[   43.158866][ T3892] iso9660: Unknown parameter 'Uhowassoc'
[   43.270900][ T1008] usb 1-1: new high-speed USB device number 3 using vhci_hcd
[   43.282621][ T3913] syzkaller0: entered promiscuous mode
[   43.282690][ T3913] syzkaller0: entered allmulticast mode
[   43.346363][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.370822][ T3921] loop4: detected capacity change from 0 to 128
[   43.380298][ T3921] msdos: Unknown parameter '1"Зo"Ž.gŽ“ƒ6'
[   43.438619][ T3932] kernel profiling enabled (shift: 63)
[   43.438759][ T3932] profiling shift: 63 too large
[   43.451534][ T3932] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   43.813911][ T3939] usb usb7: usbfs: process 3939 (syz.4.123) did not claim interface 0 before use
[   43.823372][ T3939] loop4: detected capacity change from 0 to 256
[   43.825467][ T3939] vfat: Unknown parameter '/dev/usb/hiddev#'
[   43.896786][ T3952] loop4: detected capacity change from 0 to 2048
[   43.912408][ T3954] syz.1.125 uses obsolete (PF_INET,SOCK_PACKET)
[   43.929822][ T3952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.987339][ T3962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'.
[   44.051833][ T3965] syzkaller0: entered promiscuous mode
[   44.051856][ T3965] syzkaller0: entered allmulticast mode
[   44.221477][ T3972] FAULT_INJECTION: forcing a failure.
[   44.221477][ T3972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.221536][ T3972] CPU: 1 UID: 0 PID: 3972 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT(lazy) 
[   44.221565][ T3972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   44.221580][ T3972] Call Trace:
[   44.221588][ T3972]  <TASK>
[   44.221598][ T3972]  __dump_stack+0x1d/0x30
[   44.221627][ T3972]  dump_stack_lvl+0x95/0xd0
[   44.221653][ T3972]  dump_stack+0x15/0x1b
[   44.221673][ T3972]  should_fail_ex+0x262/0x280
[   44.221697][ T3972]  should_fail+0xb/0x20
[   44.221719][ T3972]  should_fail_usercopy+0x1a/0x20
[   44.221749][ T3972]  _copy_to_user+0x20/0xa0
[   44.221825][ T3972]  simple_read_from_buffer+0xb5/0x130
[   44.221927][ T3972]  proc_fail_nth_read+0x10e/0x150
[   44.221966][ T3972]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   44.222033][ T3972]  vfs_read+0x18e/0x7c0
[   44.222062][ T3972]  ? __rcu_read_unlock+0x4e/0x70
[   44.222108][ T3972]  ? __fget_files+0x184/0x1c0
[   44.222131][ T3972]  ? mutex_lock+0x57/0x90
[   44.222153][ T3972]  ksys_read+0xdc/0x1a0
[   44.222182][ T3972]  __x64_sys_read+0x40/0x50
[   44.222316][ T3972]  x64_sys_call+0x2135/0x2550
[   44.222343][ T3972]  do_syscall_64+0x112/0x360
[   44.222373][ T3972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.222404][ T3972] RIP: 0033:0x7fc30a95e98e
[   44.222428][ T3972] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   44.222448][ T3972] RSP: 002b:00007fc3093f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   44.222489][ T3972] RAX: ffffffffffffffda RBX: 00007fc3093f76c0 RCX: 00007fc30a95e98e
[   44.222502][ T3972] RDX: 000000000000000f RSI: 00007fc3093f70a0 RDI: 0000000000000008
[   44.222515][ T3972] RBP: 00007fc3093f7090 R08: 0000000000000000 R09: 0000000000000000
[   44.222528][ T3972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.222542][ T3972] R13: 00007fc30ac26038 R14: 00007fc30ac25fa0 R15: 00007ffe703217f8
[   44.222581][ T3972]  </TASK>
[   44.308565][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'.
[   44.736805][  T126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.769418][  T126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.811333][  T126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.879805][  T126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.968675][  T126] bridge_slave_1: left allmulticast mode
[   44.968709][  T126] bridge_slave_1: left promiscuous mode
[   44.968820][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.981104][  T126] bridge_slave_0: left allmulticast mode
[   44.981124][  T126] bridge_slave_0: left promiscuous mode
[   44.981281][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.993023][ T3599] Bluetooth: hci0: command 0x1003 tx timeout
[   44.993045][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   45.032113][ T3904] vhci_hcd: connection reset by peer
[   45.037712][ T3906] vhci_hcd: connection closed
[   45.037822][ T3908] vhci_hcd: connection closed
[   45.038029][  T359] vhci_hcd vhci_hcd.0: stop threads
[   45.038049][  T359] vhci_hcd vhci_hcd.0: release socket
[   45.038132][  T359] vhci_hcd vhci_hcd.0: disconnect device
[   45.042714][  T359] vhci_hcd vhci_hcd.0: stop threads
[   45.042733][  T359] vhci_hcd vhci_hcd.0: release socket
[   45.042752][  T359] vhci_hcd vhci_hcd.0: disconnect device
[   45.042924][  T359] vhci_hcd vhci_hcd.0: stop threads
[   45.042940][  T359] vhci_hcd vhci_hcd.0: release socket
[   45.043037][  T359] vhci_hcd vhci_hcd.0: disconnect device
[   45.142243][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.151909][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.167556][  T126] bond0 (unregistering): Released all slaves
[   45.224619][  T126] hsr_slave_0: left promiscuous mode
[   45.230138][  T126] hsr_slave_1: left promiscuous mode
[   45.230601][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.230648][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.235823][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.235865][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.252386][  T126] veth1_macvtap: left promiscuous mode
[   45.252445][  T126] veth0_macvtap: left promiscuous mode
[   45.252550][  T126] veth1_vlan: left promiscuous mode
[   45.252583][  T126] veth0_vlan: left promiscuous mode
[   45.356807][  T126] team0 (unregistering): Port device team_slave_1 removed
[   45.369590][  T126] team0 (unregistering): Port device team_slave_0 removed
[   45.432135][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1
[   45.593019][ T4021] syz.0.141: attempt to access beyond end of device
[   45.593019][ T4021] loop0: rw=2049, sector=138, nr_sectors = 56 limit=128
[   45.610728][ T4021] syz.0.141: attempt to access beyond end of device
[   45.610728][ T4021] loop0: rw=2049, sector=194, nr_sectors = 2 limit=128
[   45.628988][ T4021] syz.0.141: attempt to access beyond end of device
[   45.628988][ T4021] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128
[   45.646817][ T4021] syz.0.141: attempt to access beyond end of device
[   45.646817][ T4021] loop0: rw=2049, sector=202, nr_sectors = 2 limit=128
[   45.667809][ T4021] syz.0.141: attempt to access beyond end of device
[   45.667809][ T4021] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128
[   45.681006][ T4021] syz.0.141: attempt to access beyond end of device
[   45.681006][ T4021] loop0: rw=2049, sector=210, nr_sectors = 2 limit=128
[   45.697205][ T4021] syz.0.141: attempt to access beyond end of device
[   45.697205][ T4021] loop0: rw=2049, sector=210, nr_sectors = 8 limit=128
[   45.717284][ T4021] syz.0.141: attempt to access beyond end of device
[   45.717284][ T4021] loop0: rw=2049, sector=218, nr_sectors = 2 limit=128
[   45.731483][ T4021] syz.0.141: attempt to access beyond end of device
[   45.731483][ T4021] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128
[   45.747083][ T4021] syz.0.141: attempt to access beyond end of device
[   45.747083][ T4021] loop0: rw=2049, sector=226, nr_sectors = 2 limit=128
[   45.831433][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2
[   45.877523][ T3997] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.877564][ T3997] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.877619][ T3997] bridge_slave_0: entered allmulticast mode
[   45.878102][ T3997] bridge_slave_0: entered promiscuous mode
[   45.910716][ T3997] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.910818][ T3997] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.925152][ T3997] bridge_slave_1: entered allmulticast mode
[   45.925666][ T3997] bridge_slave_1: entered promiscuous mode
[   45.951788][ T3997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.961927][ T3997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.981641][ T3997] team0: Port device team_slave_0 added
[   45.988241][ T3997] team0: Port device team_slave_1 added
[   46.003831][ T3997] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.003851][ T3997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.003904][ T3997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.048248][ T3997] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.048265][ T3997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   46.048303][ T3997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.171817][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3
[   46.183333][ T3997] hsr_slave_0: entered promiscuous mode
[   46.183757][ T3997] hsr_slave_1: entered promiscuous mode
[   46.184058][ T3997] debugfs: 'hsr0' already exists in 'hsr'
[   46.184071][ T3997] Cannot create hsr debugfs directory
[   46.377290][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4
[   46.387960][ T4079] netlink: 72 bytes leftover after parsing attributes in process `syz.3.145'.
[   46.459973][ T3997] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   46.469046][ T3997] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   46.477270][ T3997] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   46.486231][ T3997] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   46.495192][ T3997] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   46.504049][ T3997] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   46.513612][ T3997] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   46.523397][ T3997] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   46.605533][ T3997] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.622913][ T3997] 8021q: adding VLAN 0 to HW filter on device team0
[   46.633909][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.633951][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.653629][  T126] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.653665][  T126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.688577][ T3997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.825998][ T3997] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.960812][ T3997] veth0_vlan: entered promiscuous mode
[   46.963356][ T3997] veth1_vlan: entered promiscuous mode
[   46.974108][ T3997] veth0_macvtap: entered promiscuous mode
[   46.975999][ T3997] veth1_macvtap: entered promiscuous mode
[   46.980550][ T3997] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.984797][ T3997] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.002772][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.004015][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.031123][   T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.031516][   T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.138663][ T4130] FAULT_INJECTION: forcing a failure.
[   47.138663][ T4130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.138702][ T4130] CPU: 0 UID: 0 PID: 4130 Comm: syz.0.151 Not tainted syzkaller #0 PREEMPT(lazy) 
[   47.138761][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.138776][ T4130] Call Trace:
[   47.138784][ T4130]  <TASK>
[   47.138792][ T4130]  __dump_stack+0x1d/0x30
[   47.138822][ T4130]  dump_stack_lvl+0x95/0xd0
[   47.138848][ T4130]  dump_stack+0x15/0x1b
[   47.138931][ T4130]  should_fail_ex+0x262/0x280
[   47.138957][ T4130]  should_fail+0xb/0x20
[   47.139051][ T4130]  should_fail_usercopy+0x1a/0x20
[   47.139115][ T4130]  _copy_from_user+0x1c/0xb0
[   47.139144][ T4130]  __se_sys_io_uring_setup+0x11f/0x1e0
[   47.139203][ T4130]  __x64_sys_io_uring_setup+0x31/0x40
[   47.139301][ T4130]  x64_sys_call+0x1fbf/0x2550
[   47.139398][ T4130]  do_syscall_64+0x112/0x360
[   47.139483][ T4130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.139510][ T4130] RIP: 0033:0x7faac60ce159
[   47.139528][ T4130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.139550][ T4130] RSP: 002b:00007faac4b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[   47.139574][ T4130] RAX: ffffffffffffffda RBX: 00007faac6355fa0 RCX: 00007faac60ce159
[   47.139669][ T4130] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000c99
[   47.139685][ T4130] RBP: 00007faac4b27090 R08: 0000000000000000 R09: 0000000000000000
[   47.139700][ T4130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.139758][ T4130] R13: 00007faac6356038 R14: 00007faac6355fa0 R15: 00007ffdc909ebf8
[   47.139778][ T4130]  </TASK>
[   47.184386][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   47.197272][ T4121] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   47.206809][ T4121] 8021q: adding VLAN 0 to HW filter on device bond1
[   47.328347][ T4135] kernel profiling enabled (shift: 63)
[   47.328418][ T4135] profiling shift: 63 too large
[   47.354881][ T4136] kernel profiling enabled (shift: 63)
[   47.355019][ T4136] profiling shift: 63 too large
[   47.356840][ T4135] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   47.376351][ T4136] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   47.499454][ T4148] netlink: 60 bytes leftover after parsing attributes in process `syz.3.159'.
[   47.558634][ T4146] set_capacity_and_notify: 2 callbacks suppressed
[   47.558669][ T4146] loop2: detected capacity change from 0 to 512
[   47.580419][ T4153] FAULT_INJECTION: forcing a failure.
[   47.580419][ T4153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.580454][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.3.161 Not tainted syzkaller #0 PREEMPT(lazy) 
[   47.580556][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.580569][ T4153] Call Trace:
[   47.580577][ T4153]  <TASK>
[   47.580594][ T4153]  __dump_stack+0x1d/0x30
[   47.580622][ T4153]  dump_stack_lvl+0x95/0xd0
[   47.580648][ T4153]  dump_stack+0x15/0x1b
[   47.580706][ T4153]  should_fail_ex+0x262/0x280
[   47.580851][ T4153]  should_fail+0xb/0x20
[   47.580893][ T4153]  should_fail_usercopy+0x1a/0x20
[   47.580918][ T4153]  _copy_from_user+0x1c/0xb0
[   47.580945][ T4153]  __sys_bpf+0x1e2/0xc30
[   47.580970][ T4153]  ? get_pid_task+0x92/0xc0
[   47.581039][ T4153]  ? vfs_write+0x7a0/0x9a0
[   47.581140][ T4153]  __x64_sys_bpf+0x69/0x80
[   47.581163][ T4153]  x64_sys_call+0xf26/0x2550
[   47.581190][ T4153]  do_syscall_64+0x112/0x360
[   47.581224][ T4153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.581272][ T4153] RIP: 0033:0x7f3cc0f9e159
[   47.581289][ T4153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.581310][ T4153] RSP: 002b:00007f3cbf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   47.581393][ T4153] RAX: ffffffffffffffda RBX: 00007f3cc1225fa0 RCX: 00007f3cc0f9e159
[   47.581428][ T4153] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[   47.581444][ T4153] RBP: 00007f3cbf9f7090 R08: 0000000000000000 R09: 0000000000000000
[   47.581458][ T4153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.581473][ T4153] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   47.581503][ T4153]  </TASK>
[   47.738250][ T4150] loop0: detected capacity change from 0 to 512
[   47.774881][   T29] kauditd_printk_skb: 34 callbacks suppressed
[   47.774920][   T29] audit: type=1400 audit(1700006398.960:666): avc:  denied  { getopt } for  pid=4159 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.817015][ T4150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.820028][ T4150] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.826184][   T29] audit: type=1400 audit(1700006399.010:667): avc:  denied  { write } for  pid=4149 comm="syz.0.160" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.828971][   T29] audit: type=1400 audit(1700006399.010:668): avc:  denied  { add_name } for  pid=4149 comm="syz.0.160" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.891092][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.963301][ T4169] FAULT_INJECTION: forcing a failure.
[   47.963301][ T4169] name failslab, interval 1, probability 0, space 0, times 0
[   47.963333][ T4169] CPU: 1 UID: 0 PID: 4169 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(lazy) 
[   47.963412][ T4169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   47.963493][ T4169] Call Trace:
[   47.963500][ T4169]  <TASK>
[   47.963508][ T4169]  __dump_stack+0x1d/0x30
[   47.963537][ T4169]  dump_stack_lvl+0x95/0xd0
[   47.963564][ T4169]  dump_stack+0x15/0x1b
[   47.963587][ T4169]  should_fail_ex+0x262/0x280
[   47.963668][ T4169]  ? bpf_map_meta_alloc+0x13f/0x350
[   47.963706][ T4169]  should_failslab+0x8c/0xb0
[   47.963742][ T4169]  __kmalloc_noprof+0xd0/0x4d0
[   47.963850][ T4169]  ? bpf_map_meta_alloc+0x13f/0x350
[   47.963939][ T4169]  bpf_map_meta_alloc+0x13f/0x350
[   47.963978][ T4169]  htab_of_map_alloc+0x21/0x80
[   47.964021][ T4169]  map_create+0xaf2/0xfe0
[   47.964096][ T4169]  __sys_bpf+0x99a/0xc30
[   47.964162][ T4169]  ? vfs_write+0x7a0/0x9a0
[   47.964196][ T4169]  __x64_sys_bpf+0x69/0x80
[   47.964220][ T4169]  x64_sys_call+0xf26/0x2550
[   47.964258][ T4169]  do_syscall_64+0x112/0x360
[   47.964292][ T4169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.964317][ T4169] RIP: 0033:0x7f3cc0f9e159
[   47.964334][ T4169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.964403][ T4169] RSP: 002b:00007f3cbf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   47.964480][ T4169] RAX: ffffffffffffffda RBX: 00007f3cc1225fa0 RCX: 00007f3cc0f9e159
[   47.964496][ T4169] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000
[   47.964512][ T4169] RBP: 00007f3cbf9f7090 R08: 0000000000000000 R09: 0000000000000000
[   47.964526][ T4169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.964541][ T4169] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   47.964568][ T4169]  </TASK>
[   48.111258][ T4171] loop2: detected capacity change from 0 to 2048
[   48.113089][   T29] audit: type=1400 audit(1700006399.290:669): avc:  denied  { read } for  pid=4159 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   48.158516][ T4171]  loop2: p1 < >
[   48.161812][ T2983]  loop2: p1 < >
[   48.259447][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   48.301827][ T4181] syzkaller0: entered promiscuous mode
[   48.301855][ T4181] syzkaller0: entered allmulticast mode
[   48.398291][ T4188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.173'.
[   48.421137][ T1008] vhci_hcd vhci_hcd.0: vhci_device speed not set
[   48.440400][ T4194] FAULT_INJECTION: forcing a failure.
[   48.440400][ T4194] name failslab, interval 1, probability 0, space 0, times 0
[   48.440437][ T4194] CPU: 1 UID: 0 PID: 4194 Comm: syz.5.174 Not tainted syzkaller #0 PREEMPT(lazy) 
[   48.440469][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   48.440483][ T4194] Call Trace:
[   48.440567][ T4194]  <TASK>
[   48.440576][ T4194]  __dump_stack+0x1d/0x30
[   48.440603][ T4194]  dump_stack_lvl+0x95/0xd0
[   48.440628][ T4194]  dump_stack+0x15/0x1b
[   48.440702][ T4194]  should_fail_ex+0x262/0x280
[   48.440726][ T4194]  ? kernfs_fop_write_iter+0xd4/0x2e0
[   48.440752][ T4194]  should_failslab+0x8c/0xb0
[   48.440825][ T4194]  __kmalloc_noprof+0xd0/0x4d0
[   48.440856][ T4194]  ? kernfs_fop_write_iter+0xd4/0x2e0
[   48.440884][ T4194]  kernfs_fop_write_iter+0xd4/0x2e0
[   48.440972][ T4194]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   48.441003][ T4194]  vfs_write+0x57f/0x9a0
[   48.441036][ T4194]  ksys_write+0xdc/0x1a0
[   48.441067][ T4194]  __x64_sys_write+0x40/0x50
[   48.441101][ T4194]  x64_sys_call+0x154e/0x2550
[   48.441204][ T4194]  do_syscall_64+0x112/0x360
[   48.441233][ T4194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.441259][ T4194] RIP: 0033:0x7f83cceee159
[   48.441276][ T4194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   48.441296][ T4194] RSP: 002b:00007f83cb947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   48.441368][ T4194] RAX: ffffffffffffffda RBX: 00007f83cd175fa0 RCX: 00007f83cceee159
[   48.441384][ T4194] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003
[   48.441438][ T4194] RBP: 00007f83cb947090 R08: 0000000000000000 R09: 0000000000000000
[   48.441453][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.441529][ T4194] R13: 00007f83cd176038 R14: 00007f83cd175fa0 R15: 00007ffd0b2011a8
[   48.441550][ T4194]  </TASK>
[   48.643520][ T4200] loop0: detected capacity change from 0 to 512
[   48.694170][ T4200] netlink: 'syz.0.176': attribute type 4 has an invalid length.
[   48.736035][ T4185] syzkaller0: entered promiscuous mode
[   48.736076][ T4185] syzkaller0: entered allmulticast mode
[   48.783700][   T29] audit: type=1400 audit(1700006399.970:670): avc:  denied  { sqpoll } for  pid=4196 comm="syz.5.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   48.810837][    C0] Clock: inserting leap second 23:59:60 UTC
[   48.837465][   T29] audit: type=1400 audit(1700006399.020:671): avc:  denied  { execute } for  pid=4199 comm="syz.0.176" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   48.859276][ T4205] process 'syz.0.176' launched '/dev/fd/12' with NULL argv: empty string added
[   48.860480][   T29] audit: type=1400 audit(1700006399.050:672): avc:  denied  { execute_no_trans } for  pid=4199 comm="syz.0.176" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   49.076098][ T4202] loop3: detected capacity change from 0 to 512
[   49.123924][ T4211] loop5: detected capacity change from 0 to 1024
[   49.133362][ T4211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   49.133628][ T4211] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   49.137329][ T4211] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   49.137446][ T4211] EXT4-fs (loop5): orphan cleanup on readonly fs
[   49.139128][ T4211] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.175: Invalid inode table block 0 in block_group 0
[   49.139160][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.139222][ T4211] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   49.139241][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.139359][ T4211] EXT4-fs error (device loop5): ext4_quota_write:7458: inode #3: comm syz.5.175: mark_inode_dirty error
[   49.139396][ T4211] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   49.139477][ T4211] Quota error (device loop5): write_blk: dquota write failed
[   49.139556][ T4211] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[   49.139574][ T4211] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.175: Failed to acquire dquot type 0
[   49.139626][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.139730][ T4211] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.175: Invalid inode table block 0 in block_group 0
[   49.139756][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.139833][ T4211] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   49.139852][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.140011][ T4211] EXT4-fs error (device loop5): ext4_ext_truncate:4565: inode #15: comm syz.5.175: mark_inode_dirty error
[   49.140055][ T4211] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.140232][ T4211] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.175: Invalid inode table block 0 in block_group 0
[   49.140321][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.140374][ T4211] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   49.140393][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.140464][ T4211] EXT4-fs error (device loop5) in ext4_orphan_del:304: Corrupt filesystem
[   49.140518][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.140586][ T4211] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.175: Invalid inode table block 0 in block_group 0
[   49.140614][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.140674][ T4211] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   49.140693][ T4211] loop5: lost filesystem error report for type 5 error -117
[   49.140751][ T4211] EXT4-fs error (device loop5): ext4_truncate:4721: inode #15: comm syz.5.175: mark_inode_dirty error
[   49.140940][ T4211] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   49.141022][ T4211] EXT4-fs error (device loop5) in ext4_process_orphan:346: Corrupt filesystem
[   49.141962][ T4211] EXT4-fs (loop5): 1 truncate cleaned up
[   49.144124][ T4211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.198539][ T4216] sctp: [Deprecated]: syz.2.181 (pid 4216) Use of int in max_burst socket option.
[   49.198539][ T4216] Use struct sctp_assoc_value instead
[   49.201548][   T29] audit: type=1400 audit(1700006399.380:673): avc:  denied  { ioctl } for  pid=4215 comm="syz.2.181" path="socket:[8317]" dev="sockfs" ino=8317 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.314326][ T3997] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.574283][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'.
[   49.653258][ T4233] syzkaller0: entered promiscuous mode
[   49.653291][ T4233] syzkaller0: entered allmulticast mode
[   49.660898][ T4235] loop2: detected capacity change from 0 to 512
[   49.673704][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.674926][ T4235] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   49.681803][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'.
[   49.748548][ T4241] kernel profiling enabled (shift: 63)
[   49.748658][ T4241] profiling shift: 63 too large
[   49.759508][ T4241] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   49.822006][ T4220] loop5: detected capacity change from 0 to 512
[   49.852568][ T4239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.190'.
[   49.880178][ T4220] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   49.900457][ T4220] EXT4-fs (loop5): 1 truncate cleaned up
[   49.915763][ T4220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.944086][ T4249] FAULT_INJECTION: forcing a failure.
[   49.944086][ T4249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.944133][ T4249] CPU: 0 UID: 0 PID: 4249 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(lazy) 
[   49.944198][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   49.944212][ T4249] Call Trace:
[   49.944218][ T4249]  <TASK>
[   49.944224][ T4249]  __dump_stack+0x1d/0x30
[   49.944368][ T4249]  dump_stack_lvl+0x95/0xd0
[   49.944394][ T4249]  dump_stack+0x15/0x1b
[   49.944417][ T4249]  should_fail_ex+0x262/0x280
[   49.944580][ T4249]  should_fail+0xb/0x20
[   49.944600][ T4249]  should_fail_usercopy+0x1a/0x20
[   49.944650][ T4249]  _copy_from_user+0x1c/0xb0
[   49.944677][ T4249]  ___sys_sendmsg+0xc1/0x1e0
[   49.944724][ T4249]  __sys_sendmmsg+0x185/0x320
[   49.944837][ T4249]  __x64_sys_sendmmsg+0x57/0x70
[   49.944872][ T4249]  x64_sys_call+0x1fb4/0x2550
[   49.944901][ T4249]  do_syscall_64+0x112/0x360
[   49.944998][ T4249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.945058][ T4249] RIP: 0033:0x7f3cc0f9e159
[   49.945126][ T4249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   49.945208][ T4249] RSP: 002b:00007f3cbf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   49.945231][ T4249] RAX: ffffffffffffffda RBX: 00007f3cc1225fa0 RCX: 00007f3cc0f9e159
[   49.945247][ T4249] RDX: 0000000000000001 RSI: 00002000000028c0 RDI: 0000000000000005
[   49.945322][ T4249] RBP: 00007f3cbf9f7090 R08: 0000000000000000 R09: 0000000000000000
[   49.945338][ T4249] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[   49.945352][ T4249] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   49.945374][ T4249]  </TASK>
[   49.954679][ T4220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.042791][ T4251] loop3: detected capacity change from 0 to 164
[   50.184984][ T4253] FAULT_INJECTION: forcing a failure.
[   50.184984][ T4253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.185161][ T4253] CPU: 0 UID: 0 PID: 4253 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(lazy) 
[   50.185247][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   50.185262][ T4253] Call Trace:
[   50.185270][ T4253]  <TASK>
[   50.185279][ T4253]  __dump_stack+0x1d/0x30
[   50.185309][ T4253]  dump_stack_lvl+0x95/0xd0
[   50.185336][ T4253]  dump_stack+0x15/0x1b
[   50.185356][ T4253]  should_fail_ex+0x262/0x280
[   50.185389][ T4253]  should_fail+0xb/0x20
[   50.185411][ T4253]  should_fail_usercopy+0x1a/0x20
[   50.185477][ T4253]  _copy_from_iter+0xcc/0xe70
[   50.185504][ T4253]  ? copy_page_from_iter+0x138/0x1f0
[   50.185532][ T4253]  ? _copy_from_iter+0xe/0xe70
[   50.185618][ T4253]  copy_page_from_iter+0x15d/0x1f0
[   50.185644][ T4253]  skb_copy_datagram_from_iter+0x22d/0x480
[   50.185705][ T4253]  unix_dgram_sendmsg+0x404/0x1030
[   50.185735][ T4253]  ? selinux_socket_sendmsg+0x2e2/0x410
[   50.185771][ T4253]  unix_seqpacket_sendmsg+0xd1/0x110
[   50.185857][ T4253]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[   50.185885][ T4253]  ____sys_sendmsg+0x532/0x580
[   50.185954][ T4253]  ___sys_sendmsg+0x195/0x1e0
[   50.186000][ T4253]  ? tick_program_event+0x79/0xc0
[   50.186098][ T4253]  __sys_sendmmsg+0x185/0x320
[   50.186165][ T4253]  __x64_sys_sendmmsg+0x57/0x70
[   50.186202][ T4253]  x64_sys_call+0x1fb4/0x2550
[   50.186234][ T4253]  do_syscall_64+0x112/0x360
[   50.186276][ T4253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.186304][ T4253] RIP: 0033:0x7f3cc0f9e159
[   50.186399][ T4253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.186419][ T4253] RSP: 002b:00007f3cbf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   50.186443][ T4253] RAX: ffffffffffffffda RBX: 00007f3cc1225fa0 RCX: 00007f3cc0f9e159
[   50.186461][ T4253] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000005
[   50.186530][ T4253] RBP: 00007f3cbf9f7090 R08: 0000000000000000 R09: 0000000000000000
[   50.186555][ T4253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.186569][ T4253] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   50.186589][ T4253]  </TASK>
[   50.214450][ T4239] loop4: detected capacity change from 0 to 1024
[   50.224874][ T4239] EXT4-fs: Ignoring removed bh option
[   50.245166][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   50.247375][ T4239] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.270699][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 3)
[   50.272871][ T4239] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   50.272953][ T4239] EXT4-fs (loop4): This should not happen!! Data will be lost
[   50.272953][ T4239] 
[   50.277688][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.278276][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.278923][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.279645][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.280206][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.280814][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.282642][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.283446][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.284121][ T4239] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.350371][   T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   50.821604][   T55] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   50.821641][   T55] EXT4-fs (loop4): This should not happen!! Data will be lost
[   50.821641][   T55] 
[   50.834706][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   50.895806][ T4276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   50.895986][ T4276] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   50.896523][ T4276] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   50.896642][ T4276] EXT4-fs (loop0): orphan cleanup on readonly fs
[   50.897004][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.193: Invalid inode table block 0 in block_group 0
[   50.897147][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   50.897206][ T4276] EXT4-fs error (device loop0): ext4_quota_write:7458: inode #3: comm syz.0.193: mark_inode_dirty error
[   50.897230][ T4276] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   50.897319][ T4276] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.193: Failed to acquire dquot type 0
[   50.897399][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.193: Invalid inode table block 0 in block_group 0
[   50.897477][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   50.897535][ T4276] EXT4-fs error (device loop0): ext4_ext_truncate:4565: inode #15: comm syz.0.193: mark_inode_dirty error
[   50.897559][ T4276] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.897653][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.193: Invalid inode table block 0 in block_group 0
[   50.897758][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   50.897822][ T4276] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem
[   50.897882][ T4276] EXT4-fs error (device loop0): __ext4_get_inode_loc:4916: comm syz.0.193: Invalid inode table block 0 in block_group 0
[   50.897976][ T4276] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   50.898035][ T4276] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.193: mark_inode_dirty error
[   50.898131][ T4276] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   50.898207][ T4276] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem
[   50.898329][ T4276] EXT4-fs (loop0): 1 truncate cleaned up
[   50.899367][ T4276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   51.015929][ T4281] netlink: 'syz.5.203': attribute type 7 has an invalid length.
[   51.041997][ T4282] syzkaller0: entered promiscuous mode
[   51.042074][ T4282] syzkaller0: entered allmulticast mode
[   51.063603][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.108832][ T4286] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   51.108868][ T4286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   51.108900][ T4286] vhci_hcd vhci_hcd.0: Device attached
[   51.114887][ T4287] vhci_hcd: connection closed
[   51.115202][   T55] vhci_hcd vhci_hcd.0: stop threads
[   51.115222][   T55] vhci_hcd vhci_hcd.0: release socket
[   51.115248][   T55] vhci_hcd vhci_hcd.0: disconnect device
[   51.208990][ T4292] kernel profiling enabled (shift: 63)
[   51.209051][ T4292] profiling shift: 63 too large
[   51.220880][ T4292] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   51.309557][ T4298] FAULT_INJECTION: forcing a failure.
[   51.309557][ T4298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.309619][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.309650][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.309666][ T4298] Call Trace:
[   51.309673][ T4298]  <TASK>
[   51.309681][ T4298]  __dump_stack+0x1d/0x30
[   51.309742][ T4298]  dump_stack_lvl+0x95/0xd0
[   51.309768][ T4298]  dump_stack+0x15/0x1b
[   51.309791][ T4298]  should_fail_ex+0x262/0x280
[   51.309817][ T4298]  should_fail+0xb/0x20
[   51.309839][ T4298]  should_fail_usercopy+0x1a/0x20
[   51.309927][ T4298]  _copy_to_user+0x20/0xa0
[   51.309956][ T4298]  copy_siginfo_to_user+0x22/0xb0
[   51.310011][ T4298]  x64_setup_rt_frame+0x2b4/0x4e0
[   51.310048][ T4298]  arch_do_signal_or_restart+0x27c/0x480
[   51.310130][ T4298]  exit_to_user_mode_loop+0x15d/0x8c0
[   51.310207][ T4298]  ? ksys_write+0x194/0x1a0
[   51.310240][ T4298]  do_syscall_64+0x212/0x360
[   51.310282][ T4298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.310417][ T4298] RIP: 0033:0x7f3cc0f5e98e
[   51.310436][ T4298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   51.310456][ T4298] RSP: 002b:00007f3cbf9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   51.310480][ T4298] RAX: 0000000000000001 RBX: 00007f3cbf9f76c0 RCX: 00007f3cc0f5e98e
[   51.310497][ T4298] RDX: 0000000000000001 RSI: 00007f3cbf9f7090 RDI: 0000000000000005
[   51.310531][ T4298] RBP: 00007f3cbf9f7090 R08: 0000000000000000 R09: 0000000000000000
[   51.310547][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   51.310595][ T4298] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   51.310618][ T4298]  </TASK>
[   51.406149][ T4300] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   51.424105][ T4300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.595850][ T4300] xt_ecn: cannot match TCP bits for non-tcp packets
[   51.601129][ T4300] netlink: 'syz.3.210': attribute type 10 has an invalid length.
[   51.624940][ T4300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   51.636061][ T4300] team0: Port device netdevsim2 added
[   51.651689][ T4300] netlink: 'syz.3.210': attribute type 10 has an invalid length.
[   51.663673][ T4311] netlink: 56 bytes leftover after parsing attributes in process `syz.2.214'.
[   51.684071][ T4300] team0: Port device netdevsim2 removed
[   51.690751][ T4300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   51.699723][ T4300] bond0: (slave netdevsim2): Enslaving as an active interface with an up link
[   51.947213][ T4319] FAULT_INJECTION: forcing a failure.
[   51.947213][ T4319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   51.947281][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(lazy) 
[   51.947351][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   51.947365][ T4319] Call Trace:
[   51.947370][ T4319]  <TASK>
[   51.947378][ T4319]  __dump_stack+0x1d/0x30
[   51.947402][ T4319]  dump_stack_lvl+0x95/0xd0
[   51.947424][ T4319]  dump_stack+0x15/0x1b
[   51.947449][ T4319]  should_fail_ex+0x262/0x280
[   51.947530][ T4319]  should_fail+0xb/0x20
[   51.947552][ T4319]  should_fail_usercopy+0x1a/0x20
[   51.947579][ T4319]  _copy_from_iter+0xcc/0xe70
[   51.947625][ T4319]  ? __sanitizer_cov_trace_pc+0x8/0x80
[   51.947656][ T4319]  ? __alloc_skb+0x516/0x6f0
[   51.947687][ T4319]  ? __alloc_skb+0x209/0x6f0
[   51.947726][ T4319]  netlink_sendmsg+0x4a4/0x6f0
[   51.947809][ T4319]  ? __pfx_netlink_sendmsg+0x10/0x10
[   51.947922][ T4319]  ____sys_sendmsg+0x532/0x580
[   51.947963][ T4319]  ___sys_sendmsg+0x195/0x1e0
[   51.948019][ T4319]  __x64_sys_sendmsg+0xd4/0x160
[   51.948113][ T4319]  x64_sys_call+0x22ab/0x2550
[   51.948143][ T4319]  do_syscall_64+0x112/0x360
[   51.948201][ T4319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.948224][ T4319] RIP: 0033:0x7faac60ce159
[   51.948241][ T4319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   51.948341][ T4319] RSP: 002b:00007faac4b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.948365][ T4319] RAX: ffffffffffffffda RBX: 00007faac6356090 RCX: 00007faac60ce159
[   51.948383][ T4319] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000007
[   51.948396][ T4319] RBP: 00007faac4b06090 R08: 0000000000000000 R09: 0000000000000000
[   51.948412][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.948428][ T4319] R13: 00007faac6356128 R14: 00007faac6356090 R15: 00007ffdc909ebf8
[   51.948520][ T4319]  </TASK>
[   52.160818][ T4311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   52.162875][ T4311] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   52.167136][ T4311] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   52.167685][ T4311] EXT4-fs (loop2): orphan cleanup on readonly fs
[   52.170533][ T4311] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.214: Invalid inode table block 0 in block_group 0
[   52.170913][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   52.170941][    C0] EXT4-fs (loop2): initial error at time 1700006402: __ext4_get_inode_loc:4916
[   52.171012][    C0] EXT4-fs (loop2): last error at time 1700006402: __ext4_get_inode_loc:4916
[   52.172126][ T4311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   52.173134][ T4311] EXT4-fs error (device loop2): ext4_quota_write:7458: inode #3: comm syz.2.214: mark_inode_dirty error
[   52.173235][ T4311] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   52.173929][ T4311] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.214: Failed to acquire dquot type 0
[   52.174441][ T4311] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.214: Invalid inode table block 0 in block_group 0
[   52.174652][ T4311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   52.175030][ T4311] EXT4-fs error (device loop2): ext4_ext_truncate:4565: inode #15: comm syz.2.214: mark_inode_dirty error
[   52.175097][ T4311] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   52.175666][ T4311] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.214: Invalid inode table block 0 in block_group 0
[   52.176178][ T4311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   52.176575][ T4311] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   52.177111][ T4311] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.214: Invalid inode table block 0 in block_group 0
[   52.177627][ T4311] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   52.178093][ T4311] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.214: mark_inode_dirty error
[   52.178183][ T4311] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   52.178536][ T4311] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   52.179232][ T4311] EXT4-fs (loop2): 1 truncate cleaned up
[   52.184777][ T4311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.436229][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.483512][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.568291][ T4328] syzkaller0: entered promiscuous mode
[   52.568384][ T4328] syzkaller0: entered allmulticast mode
[   52.805782][   T29] kauditd_printk_skb: 29 callbacks suppressed
[   52.805923][   T29] audit: type=1400 audit(1700006402.990:697): avc:  denied  { read write } for  pid=3997 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   52.805963][   T29] audit: type=1400 audit(1700006402.990:698): avc:  denied  { open } for  pid=4335 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[   52.813525][   T29] audit: type=1400 audit(1700006402.990:699): avc:  denied  { create } for  pid=4335 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0
[   52.813553][   T29] audit: type=1400 audit(1700006402.990:700): avc:  denied  { read } for  pid=4335 comm="syz.3.222" dev="nsfs" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[   52.813634][   T29] audit: type=1400 audit(1700006402.990:701): avc:  denied  { create } for  pid=4335 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   52.813668][   T29] audit: type=1400 audit(1700006402.990:702): avc:  denied  { create } for  pid=4335 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   52.813780][   T29] audit: type=1400 audit(1700006402.990:703): avc:  denied  { create } for  pid=4335 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   52.813818][   T29] audit: type=1400 audit(1700006402.990:704): avc:  denied  { mounton } for  pid=4335 comm="syz.3.222" path="/43/my_configfs" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   52.813884][   T29] audit: type=1400 audit(1700006402.990:705): avc:  denied  { read } for  pid=4335 comm="syz.3.222" dev="nsfs" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[   52.813916][   T29] audit: type=1400 audit(1700006402.990:706): avc:  denied  { create } for  pid=4335 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   52.885824][ T4342] FAULT_INJECTION: forcing a failure.
[   52.885824][ T4342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.885856][ T4342] CPU: 1 UID: 0 PID: 4342 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT(lazy) 
[   52.885884][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.885925][ T4342] Call Trace:
[   52.885933][ T4342]  <TASK>
[   52.885942][ T4342]  __dump_stack+0x1d/0x30
[   52.885969][ T4342]  dump_stack_lvl+0x95/0xd0
[   52.885997][ T4342]  dump_stack+0x15/0x1b
[   52.886020][ T4342]  should_fail_ex+0x262/0x280
[   52.886078][ T4342]  should_fail+0xb/0x20
[   52.886099][ T4342]  should_fail_usercopy+0x1a/0x20
[   52.886125][ T4342]  _copy_to_user+0x20/0xa0
[   52.886158][ T4342]  simple_read_from_buffer+0xb5/0x130
[   52.886196][ T4342]  proc_fail_nth_read+0x10e/0x150
[   52.886249][ T4342]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   52.886286][ T4342]  vfs_read+0x18e/0x7c0
[   52.886349][ T4342]  ? __rcu_read_unlock+0x4e/0x70
[   52.886382][ T4342]  ? __fget_files+0x184/0x1c0
[   52.886404][ T4342]  ? mutex_lock+0x57/0x90
[   52.886429][ T4342]  ksys_read+0xdc/0x1a0
[   52.886483][ T4342]  __x64_sys_read+0x40/0x50
[   52.886512][ T4342]  x64_sys_call+0x2135/0x2550
[   52.886540][ T4342]  do_syscall_64+0x112/0x360
[   52.886573][ T4342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.886598][ T4342] RIP: 0033:0x7f3cc0f5e98e
[   52.886696][ T4342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   52.886722][ T4342] RSP: 002b:00007f3cbf9f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   52.886798][ T4342] RAX: ffffffffffffffda RBX: 00007f3cbf9f76c0 RCX: 00007f3cc0f5e98e
[   52.886814][ T4342] RDX: 000000000000000f RSI: 00007f3cbf9f70a0 RDI: 0000000000000004
[   52.886829][ T4342] RBP: 00007f3cbf9f7090 R08: 0000000000000000 R09: 0000000000000000
[   52.886843][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.886858][ T4342] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   52.886879][ T4342]  </TASK>
[   53.001679][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   53.075474][ T4359] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[   53.075571][ T4359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.075623][ T4359] vhci_hcd vhci_hcd.0: Device attached
[   53.089189][ T4359] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8)
[   53.089214][ T4359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.089246][ T4359] vhci_hcd vhci_hcd.0: Device attached
[   53.104913][ T4359] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11)
[   53.105018][ T4359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.105047][ T4359] vhci_hcd vhci_hcd.0: Device attached
[   53.233875][ T3598] Bluetooth: hci1: sending frame failed (-49)
[   53.233904][ T3599] Bluetooth: hci1: Opcode 0x1003 failed: -49
[   53.331018][ T3377] usb 7-1: new high-speed USB device number 3 using vhci_hcd
[   53.334776][ T4378] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9)
[   53.334824][ T4378] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.334857][ T4378] vhci_hcd vhci_hcd.0: Device attached
[   53.338094][ T4374] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[   53.338136][ T4374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.338229][ T4374] vhci_hcd vhci_hcd.0: Device attached
[   53.351765][ T4370] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8)
[   53.351845][ T4370] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   53.351872][ T4370] vhci_hcd vhci_hcd.0: Device attached
[   53.355222][ T4379] vhci_hcd: connection closed
[   53.355506][  T126] vhci_hcd vhci_hcd.0: stop threads
[   53.355525][  T126] vhci_hcd vhci_hcd.0: release socket
[   53.355584][  T126] vhci_hcd vhci_hcd.0: disconnect device
[   53.355607][ T4384] vhci_hcd: connection closed
[   53.355865][  T126] vhci_hcd vhci_hcd.0: stop threads
[   53.355881][  T126] vhci_hcd vhci_hcd.0: release socket
[   53.355958][  T126] vhci_hcd vhci_hcd.0: disconnect device
[   53.359404][ T4377] vhci_hcd: connection closed
[   53.359599][  T126] vhci_hcd vhci_hcd.0: stop threads
[   53.359614][  T126] vhci_hcd vhci_hcd.0: release socket
[   53.359630][  T126] vhci_hcd vhci_hcd.0: disconnect device
[   53.475484][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'.
[   53.747793][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   53.747814][ T4412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.246'.
[   54.209110][ T4429] FAULT_INJECTION: forcing a failure.
[   54.209110][ T4429] name failslab, interval 1, probability 0, space 0, times 0
[   54.209158][ T4429] CPU: 0 UID: 0 PID: 4429 Comm: syz.5.252 Not tainted syzkaller #0 PREEMPT(lazy) 
[   54.209188][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.209199][ T4429] Call Trace:
[   54.209205][ T4429]  <TASK>
[   54.209214][ T4429]  __dump_stack+0x1d/0x30
[   54.209240][ T4429]  dump_stack_lvl+0x95/0xd0
[   54.209297][ T4429]  dump_stack+0x15/0x1b
[   54.209320][ T4429]  should_fail_ex+0x262/0x280
[   54.209342][ T4429]  ? __d_alloc+0x8c/0x320
[   54.209427][ T4429]  should_failslab+0x8c/0xb0
[   54.209458][ T4429]  __kmalloc_noprof+0xd0/0x4d0
[   54.209488][ T4429]  ? __d_alloc+0x34/0x320
[   54.209557][ T4429]  ? __d_alloc+0x8c/0x320
[   54.209583][ T4429]  __d_alloc+0x8c/0x320
[   54.209691][ T4429]  d_alloc+0x2e/0x100
[   54.209716][ T4429]  lookup_one_qstr_excl+0x95/0x240
[   54.209745][ T4429]  filename_create+0x155/0x220
[   54.209776][ T4429]  filename_mkdirat+0x81/0x300
[   54.209848][ T4429]  __se_sys_mkdir+0x31/0xf0
[   54.209880][ T4429]  __x64_sys_mkdir+0x31/0x40
[   54.209948][ T4429]  x64_sys_call+0x18da/0x2550
[   54.209975][ T4429]  do_syscall_64+0x112/0x360
[   54.210008][ T4429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.210033][ T4429] RIP: 0033:0x7f83cceee159
[   54.210107][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.210175][ T4429] RSP: 002b:00007f83cb947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[   54.210199][ T4429] RAX: ffffffffffffffda RBX: 00007f83cd175fa0 RCX: 00007f83cceee159
[   54.210214][ T4429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[   54.210229][ T4429] RBP: 00007f83cb947090 R08: 0000000000000000 R09: 0000000000000000
[   54.210244][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.210320][ T4429] R13: 00007f83cd176038 R14: 00007f83cd175fa0 R15: 00007ffd0b2011a8
[   54.210339][ T4429]  </TASK>
[   54.375798][ T4441] capability: warning: `syz.4.258' uses deprecated v2 capabilities in a way that may be insecure
[   54.407906][ T4444] netlink: 'syz.4.259': attribute type 3 has an invalid length.
[   54.470723][ T4450] syzkaller0: entered promiscuous mode
[   54.470750][ T4450] syzkaller0: entered allmulticast mode
[   54.486667][ T4452] netlink: 116 bytes leftover after parsing attributes in process `syz.2.263'.
[   54.532675][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[   54.765397][ T4481] syzkaller0: entered promiscuous mode
[   54.765429][ T4481] syzkaller0: entered allmulticast mode
[   54.840336][ T4494] xt_policy: output policy not valid in PREROUTING and INPUT
[   54.913341][ T4498] FAULT_INJECTION: forcing a failure.
[   54.913341][ T4498] name failslab, interval 1, probability 0, space 0, times 0
[   54.913416][ T4498] CPU: 0 UID: 0 PID: 4498 Comm: syz.5.285 Not tainted syzkaller #0 PREEMPT(lazy) 
[   54.913451][ T4498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.913462][ T4498] Call Trace:
[   54.913468][ T4498]  <TASK>
[   54.913476][ T4498]  __dump_stack+0x1d/0x30
[   54.913502][ T4498]  dump_stack_lvl+0x95/0xd0
[   54.913560][ T4498]  dump_stack+0x15/0x1b
[   54.913676][ T4498]  should_fail_ex+0x262/0x280
[   54.913700][ T4498]  ? dst_alloc+0xbd/0x100
[   54.913776][ T4498]  should_failslab+0x8c/0xb0
[   54.913841][ T4498]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   54.913880][ T4498]  ? dst_alloc+0xbd/0x100
[   54.913953][ T4498]  dst_alloc+0xbd/0x100
[   54.913985][ T4498]  ip_route_output_key_hash_rcu+0xed9/0x1320
[   54.914022][ T4498]  ip_route_output_flow+0x65/0x110
[   54.914066][ T4498]  udp_sendmsg+0x12ce/0x14e0
[   54.914116][ T4498]  ? avc_has_perm+0x101/0x190
[   54.914146][ T4498]  ? __pfx_udp_sendmsg+0x10/0x10
[   54.914231][ T4498]  inet_sendmsg+0xac/0xd0
[   54.914252][ T4498]  ? __pfx_inet_sendmsg+0x10/0x10
[   54.914274][ T4498]  ____sys_sendmsg+0x4e8/0x580
[   54.914346][ T4498]  ___sys_sendmsg+0x195/0x1e0
[   54.914418][ T4498]  __sys_sendmmsg+0x185/0x320
[   54.914461][ T4498]  __x64_sys_sendmmsg+0x57/0x70
[   54.914494][ T4498]  x64_sys_call+0x1fb4/0x2550
[   54.914539][ T4498]  do_syscall_64+0x112/0x360
[   54.914627][ T4498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.914653][ T4498] RIP: 0033:0x7f83cceee159
[   54.914670][ T4498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   54.914690][ T4498] RSP: 002b:00007f83cb947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   54.914742][ T4498] RAX: ffffffffffffffda RBX: 00007f83cd175fa0 RCX: 00007f83cceee159
[   54.914758][ T4498] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[   54.914773][ T4498] RBP: 00007f83cb947090 R08: 0000000000000000 R09: 0000000000000000
[   54.914788][ T4498] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002
[   54.914802][ T4498] R13: 00007f83cd176038 R14: 00007f83cd175fa0 R15: 00007ffd0b2011a8
[   54.914823][ T4498]  </TASK>
[   54.988597][ T4501] hsr_slave_0: left promiscuous mode
[   54.992772][ T4501] hsr_slave_1: left promiscuous mode
[   54.992867][ T4373] Bluetooth: hci0: command 0x1003 tx timeout
[   54.992888][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   55.002388][ T4363] vhci_hcd: connection closed
[   55.002772][  T126] vhci_hcd vhci_hcd.3: stop threads
[   55.002887][  T126] vhci_hcd vhci_hcd.3: release socket
[   55.002909][  T126] vhci_hcd vhci_hcd.3: disconnect device
[   55.003020][ T4367] vhci_hcd: connection closed
[   55.003167][ T4361] vhci_hcd: connection reset by peer
[   55.003447][  T126] vhci_hcd vhci_hcd.3: stop threads
[   55.003462][  T126] vhci_hcd vhci_hcd.3: release socket
[   55.003481][  T126] vhci_hcd vhci_hcd.3: disconnect device
[   55.006263][  T126] vhci_hcd vhci_hcd.3: stop threads
[   55.006280][  T126] vhci_hcd vhci_hcd.3: release socket
[   55.006301][  T126] vhci_hcd vhci_hcd.3: disconnect device
[   55.037941][ T4502] netlink: 40 bytes leftover after parsing attributes in process `syz.5.286'.
[   55.207647][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   55.228109][ T4517] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.304656][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'.
[   55.399895][ T4545] FAULT_INJECTION: forcing a failure.
[   55.399895][ T4545] name failslab, interval 1, probability 0, space 0, times 0
[   55.399931][ T4545] CPU: 0 UID: 0 PID: 4545 Comm: syz.5.304 Not tainted syzkaller #0 PREEMPT(lazy) 
[   55.400002][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   55.400085][ T4545] Call Trace:
[   55.400092][ T4545]  <TASK>
[   55.400100][ T4545]  __dump_stack+0x1d/0x30
[   55.400127][ T4545]  dump_stack_lvl+0x95/0xd0
[   55.400220][ T4545]  dump_stack+0x15/0x1b
[   55.400242][ T4545]  should_fail_ex+0x262/0x280
[   55.400266][ T4545]  ? copy_ipcs+0xe8/0x460
[   55.400290][ T4545]  should_failslab+0x8c/0xb0
[   55.400355][ T4545]  __kmalloc_cache_noprof+0x7a/0x400
[   55.400389][ T4545]  ? copy_ipcs+0xe8/0x460
[   55.400413][ T4545]  copy_ipcs+0xe8/0x460
[   55.400437][ T4545]  create_new_namespaces+0x121/0x420
[   55.400551][ T4545]  unshare_nsproxy_namespaces+0x115/0x150
[   55.400616][ T4545]  ksys_unshare+0x42b/0x710
[   55.400646][ T4545]  __x64_sys_unshare+0x1f/0x30
[   55.400748][ T4545]  x64_sys_call+0x1e33/0x2550
[   55.400776][ T4545]  do_syscall_64+0x112/0x360
[   55.400809][ T4545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.400834][ T4545] RIP: 0033:0x7f83cceee159
[   55.400878][ T4545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.400923][ T4545] RSP: 002b:00007f83cb947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   55.400945][ T4545] RAX: ffffffffffffffda RBX: 00007f83cd175fa0 RCX: 00007f83cceee159
[   55.400984][ T4545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[   55.400998][ T4545] RBP: 00007f83cb947090 R08: 0000000000000000 R09: 0000000000000000
[   55.401013][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.401027][ T4545] R13: 00007f83cd176038 R14: 00007f83cd175fa0 R15: 00007ffd0b2011a8
[   55.401048][ T4545]  </TASK>
[   55.867307][ T4584] xt_CT: No such helper "syz1"
[   55.958224][ T4593] netlink: 'syz.0.323': attribute type 10 has an invalid length.
[   55.958252][ T4593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'.
[   55.958358][ T4593] bridge0: port 3(team0) entered blocking state
[   55.958388][ T4593] bridge0: port 3(team0) entered disabled state
[   55.958496][ T4593] team0: entered allmulticast mode
[   55.958516][ T4593] team_slave_0: entered allmulticast mode
[   55.958576][ T4593] team_slave_1: entered allmulticast mode
[   55.959120][ T4593] team0: entered promiscuous mode
[   55.959137][ T4593] team_slave_0: entered promiscuous mode
[   55.959227][ T4593] team_slave_1: entered promiscuous mode
[   55.959483][ T4593] bridge0: port 3(team0) entered blocking state
[   55.959566][ T4593] bridge0: port 3(team0) entered forwarding state
[   56.153653][ T4607] FAULT_INJECTION: forcing a failure.
[   56.153653][ T4607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.153690][ T4607] CPU: 0 UID: 0 PID: 4607 Comm: syz.2.329 Not tainted syzkaller #0 PREEMPT(lazy) 
[   56.153760][ T4607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.153770][ T4607] Call Trace:
[   56.153776][ T4607]  <TASK>
[   56.153784][ T4607]  __dump_stack+0x1d/0x30
[   56.153837][ T4607]  dump_stack_lvl+0x95/0xd0
[   56.153863][ T4607]  dump_stack+0x15/0x1b
[   56.153943][ T4607]  should_fail_ex+0x262/0x280
[   56.153967][ T4607]  should_fail+0xb/0x20
[   56.153987][ T4607]  should_fail_usercopy+0x1a/0x20
[   56.154013][ T4607]  _copy_from_user+0x1c/0xb0
[   56.154063][ T4607]  __snd_timer_user_ioctl+0x5e1/0x2ec0
[   56.154090][ T4607]  ? do_vfs_ioctl+0x848/0xe50
[   56.154124][ T4607]  ? __fget_files+0x184/0x1c0
[   56.154145][ T4607]  ? mutex_lock+0x57/0x90
[   56.154169][ T4607]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[   56.154270][ T4607]  snd_timer_user_ioctl+0x41/0x60
[   56.154294][ T4607]  __se_sys_ioctl+0xce/0x140
[   56.154326][ T4607]  __x64_sys_ioctl+0x43/0x50
[   56.154356][ T4607]  x64_sys_call+0x239d/0x2550
[   56.154465][ T4607]  do_syscall_64+0x112/0x360
[   56.154497][ T4607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.154613][ T4607] RIP: 0033:0x7fbd69fde159
[   56.154631][ T4607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.154652][ T4607] RSP: 002b:00007fbd68a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   56.154674][ T4607] RAX: ffffffffffffffda RBX: 00007fbd6a265fa0 RCX: 00007fbd69fde159
[   56.154699][ T4607] RDX: 0000200000000680 RSI: 0000000040485404 RDI: 0000000000000003
[   56.154713][ T4607] RBP: 00007fbd68a37090 R08: 0000000000000000 R09: 0000000000000000
[   56.154726][ T4607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.154738][ T4607] R13: 00007fbd6a266038 R14: 00007fbd6a265fa0 R15: 00007ffd8b4caba8
[   56.154758][ T4607]  </TASK>
[   56.240916][ T4612] FAULT_INJECTION: forcing a failure.
[   56.240916][ T4612] name failslab, interval 1, probability 0, space 0, times 0
[   56.241017][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT(lazy) 
[   56.241042][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.241054][ T4612] Call Trace:
[   56.241060][ T4612]  <TASK>
[   56.241067][ T4612]  __dump_stack+0x1d/0x30
[   56.241154][ T4612]  dump_stack_lvl+0x95/0xd0
[   56.241180][ T4612]  dump_stack+0x15/0x1b
[   56.241376][ T4612]  should_fail_ex+0x262/0x280
[   56.241423][ T4612]  ? tcf_action_init_1+0x12d/0x4d0
[   56.241534][ T4612]  should_failslab+0x8c/0xb0
[   56.241566][ T4612]  __kmalloc_cache_noprof+0x7a/0x400
[   56.241707][ T4612]  ? tcf_action_init_1+0x12d/0x4d0
[   56.241831][ T4612]  tcf_action_init_1+0x12d/0x4d0
[   56.241869][ T4612]  tcf_action_init+0x29d/0x700
[   56.241920][ T4612]  tcf_exts_validate_ex+0x14e/0x2a0
[   56.241972][ T4612]  mall_change+0x29a/0x490
[   56.242002][ T4612]  tc_new_tfilter+0xf87/0x1180
[   56.242027][ T4612]  ? __rcu_read_unlock+0x4e/0x70
[   56.242082][ T4612]  ? __pfx_tc_new_tfilter+0x10/0x10
[   56.242109][ T4612]  rtnetlink_rcv_msg+0x64b/0x720
[   56.242139][ T4612]  netlink_rcv_skb+0x11e/0x220
[   56.242175][ T4612]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   56.242205][ T4612]  rtnetlink_rcv+0x1c/0x30
[   56.242228][ T4612]  netlink_unicast+0x5a9/0x680
[   56.242255][ T4612]  netlink_sendmsg+0x5be/0x6f0
[   56.242349][ T4612]  ? __pfx_netlink_sendmsg+0x10/0x10
[   56.242380][ T4612]  ____sys_sendmsg+0x532/0x580
[   56.242535][ T4612]  ___sys_sendmsg+0x195/0x1e0
[   56.242582][ T4612]  __x64_sys_sendmsg+0xd4/0x160
[   56.242692][ T4612]  x64_sys_call+0x22ab/0x2550
[   56.242722][ T4612]  do_syscall_64+0x112/0x360
[   56.242821][ T4612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.242948][ T4612] RIP: 0033:0x7fbd69fde159
[   56.242966][ T4612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.242987][ T4612] RSP: 002b:00007fbd68a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.243045][ T4612] RAX: ffffffffffffffda RBX: 00007fbd6a265fa0 RCX: 00007fbd69fde159
[   56.243061][ T4612] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006
[   56.243075][ T4612] RBP: 00007fbd68a37090 R08: 0000000000000000 R09: 0000000000000000
[   56.243090][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   56.243105][ T4612] R13: 00007fbd6a266038 R14: 00007fbd6a265fa0 R15: 00007ffd8b4caba8
[   56.243126][ T4612]  </TASK>
[   56.358771][ T4616] FAULT_INJECTION: forcing a failure.
[   56.358771][ T4616] name failslab, interval 1, probability 0, space 0, times 0
[   56.358837][ T4616] CPU: 0 UID: 0 PID: 4616 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(lazy) 
[   56.358938][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.358952][ T4616] Call Trace:
[   56.358959][ T4616]  <TASK>
[   56.358970][ T4616]  __dump_stack+0x1d/0x30
[   56.358997][ T4616]  dump_stack_lvl+0x95/0xd0
[   56.359021][ T4616]  dump_stack+0x15/0x1b
[   56.359160][ T4616]  should_fail_ex+0x262/0x280
[   56.359241][ T4616]  should_failslab+0x8c/0xb0
[   56.359278][ T4616]  __kmalloc_node_track_caller_noprof+0xd6/0x500
[   56.359314][ T4616]  ? sidtab_sid2str_get+0xa0/0x130
[   56.359434][ T4616]  ? sidtab_sid2str_get+0xa0/0x130
[   56.359470][ T4616]  kmemdup_noprof+0x2b/0x70
[   56.359530][ T4616]  sidtab_sid2str_get+0xa0/0x130
[   56.359566][ T4616]  security_sid_to_context_core+0x179/0x2d0
[   56.359603][ T4616]  security_sid_to_context+0x27/0x40
[   56.359663][ T4616]  selinux_lsmprop_to_secctx+0x67/0xf0
[   56.359699][ T4616]  security_lsmprop_to_secctx+0x1a3/0x1c0
[   56.359728][ T4616]  audit_log_subj_ctx+0xa4/0x3e0
[   56.359771][ T4616]  audit_log_task_context+0x48/0x70
[   56.359802][ T4616]  audit_log_task+0xf3/0x240
[   56.359839][ T4616]  audit_seccomp+0x6a/0x110
[   56.359876][ T4616]  __seccomp_filter+0x909/0x1360
[   56.359952][ T4616]  ? __fget_files+0x184/0x1c0
[   56.359975][ T4616]  ? xfd_validate_state+0x45/0xf0
[   56.360058][ T4616]  __seccomp_permit_syscall+0x7d/0x150
[   56.360089][ T4616]  do_syscall_64+0xca/0x360
[   56.360121][ T4616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.360146][ T4616] RIP: 0033:0x7fbd69fde159
[   56.360172][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.360192][ T4616] RSP: 002b:00007fbd68a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.360215][ T4616] RAX: ffffffffffffffda RBX: 00007fbd6a265fa0 RCX: 00007fbd69fde159
[   56.360231][ T4616] RDX: 0000000000008000 RSI: 0000200000000800 RDI: ffffffffffffffff
[   56.360247][ T4616] RBP: 00007fbd68a37090 R08: 0000000000000000 R09: 0000000000000000
[   56.360347][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.360362][ T4616] R13: 00007fbd6a266038 R14: 00007fbd6a265fa0 R15: 00007ffd8b4caba8
[   56.360424][ T4616]  </TASK>
[   56.489158][ T4624] netlink: 'syz.3.336': attribute type 10 has an invalid length.
[   56.489175][ T4624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.336'.
[   56.489348][ T4624] bridge0: port 3(team0) entered blocking state
[   56.489399][ T4624] bridge0: port 3(team0) entered disabled state
[   56.489577][ T4624] team0: entered allmulticast mode
[   56.489594][ T4624] team_slave_0: entered allmulticast mode
[   56.489611][ T4624] team_slave_1: entered allmulticast mode
[   56.492523][ T4624] team0: entered promiscuous mode
[   56.492542][ T4624] team_slave_0: entered promiscuous mode
[   56.492670][ T4624] team_slave_1: entered promiscuous mode
[   56.493057][ T4624] bridge0: port 3(team0) entered blocking state
[   56.493087][ T4624] bridge0: port 3(team0) entered forwarding state
[   56.603488][ T4628] netlink: 288 bytes leftover after parsing attributes in process `syz.3.338'.
[   56.811132][ T4644] FAULT_INJECTION: forcing a failure.
[   56.811132][ T4644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   56.811218][ T4644] CPU: 0 UID: 0 PID: 4644 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(lazy) 
[   56.811294][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   56.811308][ T4644] Call Trace:
[   56.811315][ T4644]  <TASK>
[   56.811323][ T4644]  __dump_stack+0x1d/0x30
[   56.811364][ T4644]  dump_stack_lvl+0x95/0xd0
[   56.811449][ T4644]  dump_stack+0x15/0x1b
[   56.811472][ T4644]  should_fail_ex+0x262/0x280
[   56.811496][ T4644]  should_fail+0xb/0x20
[   56.811575][ T4644]  should_fail_usercopy+0x1a/0x20
[   56.811601][ T4644]  _copy_from_user+0x1c/0xb0
[   56.811628][ T4644]  sctp_setsockopt+0x161/0xea0
[   56.811667][ T4644]  sock_common_setsockopt+0x69/0x80
[   56.811702][ T4644]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   56.811768][ T4644]  __sys_setsockopt+0x184/0x200
[   56.811803][ T4644]  __x64_sys_setsockopt+0x64/0x80
[   56.811836][ T4644]  x64_sys_call+0x248f/0x2550
[   56.811864][ T4644]  do_syscall_64+0x112/0x360
[   56.811916][ T4644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.811942][ T4644] RIP: 0033:0x7f3cc0f9e159
[   56.811959][ T4644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.811979][ T4644] RSP: 002b:00007f3cbf9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   56.812067][ T4644] RAX: ffffffffffffffda RBX: 00007f3cc1225fa0 RCX: 00007f3cc0f9e159
[   56.812084][ T4644] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003
[   56.812098][ T4644] RBP: 00007f3cbf9f7090 R08: 0000000000000090 R09: 0000000000000000
[   56.812113][ T4644] R10: 0000200000001080 R11: 0000000000000246 R12: 0000000000000001
[   56.812128][ T4644] R13: 00007f3cc1226038 R14: 00007f3cc1225fa0 R15: 00007fff43f0ff78
[   56.812230][ T4644]  </TASK>
[   56.823302][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.345'.
[   56.983838][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'.
[   57.089420][ T4643] team0: Port device team_slave_0 removed
[   57.239367][ T4662] FAULT_INJECTION: forcing a failure.
[   57.239367][ T4662] name failslab, interval 1, probability 0, space 0, times 0
[   57.239412][ T4662] CPU: 1 UID: 0 PID: 4662 Comm: syz.5.351 Not tainted syzkaller #0 PREEMPT(lazy) 
[   57.239438][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   57.239450][ T4662] Call Trace:
[   57.239459][ T4662]  <TASK>
[   57.239466][ T4662]  __dump_stack+0x1d/0x30
[   57.239491][ T4662]  dump_stack_lvl+0x95/0xd0
[   57.239511][ T4662]  dump_stack+0x15/0x1b
[   57.239532][ T4662]  should_fail_ex+0x262/0x280
[   57.239556][ T4662]  ? tcf_block_get_ext+0x61f/0xcf0
[   57.239602][ T4662]  should_failslab+0x8c/0xb0
[   57.239697][ T4662]  __kmalloc_cache_noprof+0x7a/0x400
[   57.239731][ T4662]  ? tcf_block_get_ext+0x61f/0xcf0
[   57.239769][ T4662]  tcf_block_get_ext+0x61f/0xcf0
[   57.239876][ T4662]  clsact_init+0x27f/0x5c0
[   57.239908][ T4662]  ? __pfx_clsact_init+0x10/0x10
[   57.239940][ T4662]  qdisc_create+0x57f/0x9c0
[   57.240033][ T4662]  tc_modify_qdisc+0xb12/0x1550
[   57.240071][ T4662]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   57.240102][ T4662]  rtnetlink_rcv_msg+0x6a7/0x720
[   57.240162][ T4662]  netlink_rcv_skb+0x11e/0x220
[   57.240190][ T4662]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   57.240221][ T4662]  rtnetlink_rcv+0x1c/0x30
[   57.240243][ T4662]  netlink_unicast+0x5a9/0x680
[   57.240284][ T4662]  netlink_sendmsg+0x5be/0x6f0
[   57.240384][ T4662]  ? __pfx_netlink_sendmsg+0x10/0x10
[   57.240414][ T4662]  ____sys_sendmsg+0x532/0x580
[   57.240452][ T4662]  ___sys_sendmsg+0x195/0x1e0
[   57.240500][ T4662]  __x64_sys_sendmsg+0xd4/0x160
[   57.240563][ T4662]  x64_sys_call+0x22ab/0x2550
[   57.240591][ T4662]  do_syscall_64+0x112/0x360
[   57.240687][ T4662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.240713][ T4662] RIP: 0033:0x7f83cceee159
[   57.240731][ T4662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.240751][ T4662] RSP: 002b:00007f83cb947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   57.240774][ T4662] RAX: ffffffffffffffda RBX: 00007f83cd175fa0 RCX: 00007f83cceee159
[   57.240843][ T4662] RDX: 0000000000000000 RSI: 0000200000001340 RDI: 0000000000000004
[   57.240933][ T4662] RBP: 00007f83cb947090 R08: 0000000000000000 R09: 0000000000000000
[   57.240947][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   57.240962][ T4662] R13: 00007f83cd176038 R14: 00007f83cd175fa0 R15: 00007ffd0b2011a8
[   57.241034][ T4662]  </TASK>
[   57.810911][   T29] kauditd_printk_skb: 7544 callbacks suppressed
[   57.810936][   T29] audit: type=1400 audit(1700006407.990:8246): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.810965][   T29] audit: type=1400 audit(1700006407.990:8247): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.811044][   T29] audit: type=1400 audit(1700006407.990:8248): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817560][   T29] audit: type=1400 audit(1700006407.990:8249): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817593][   T29] audit: type=1400 audit(1700006408.000:8250): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817676][   T29] audit: type=1400 audit(1700006408.000:8251): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817704][   T29] audit: type=1400 audit(1700006408.000:8252): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817731][   T29] audit: type=1400 audit(1700006408.000:8253): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817827][   T29] audit: type=1400 audit(1700006408.000:8254): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   57.817854][   T29] audit: type=1400 audit(1700006408.000:8255): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   58.224332][ T4752] FAULT_INJECTION: forcing a failure.
[   58.224332][ T4752] name failslab, interval 1, probability 0, space 0, times 0
[   58.224367][ T4752] CPU: 1 UID: 0 PID: 4752 Comm: syz.4.380 Not tainted syzkaller #0 PREEMPT(lazy) 
[   58.224436][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.224448][ T4752] Call Trace:
[   58.224454][ T4752]  <TASK>
[   58.224461][ T4752]  __dump_stack+0x1d/0x30
[   58.224488][ T4752]  dump_stack_lvl+0x95/0xd0
[   58.224568][ T4752]  dump_stack+0x15/0x1b
[   58.224590][ T4752]  should_fail_ex+0x262/0x280
[   58.224612][ T4752]  should_failslab+0x8c/0xb0
[   58.224648][ T4752]  __kvmalloc_node_noprof+0x168/0x5c0
[   58.224721][ T4752]  ? traverse+0x9c/0x3b0
[   58.224752][ T4752]  ? traverse+0x9c/0x3b0
[   58.224782][ T4752]  traverse+0x9c/0x3b0
[   58.224809][ T4752]  ? kstrtoull+0x119/0x150
[   58.224926][ T4752]  seq_read_iter+0x7dc/0x8f0
[   58.224954][ T4752]  seq_read+0x279/0x2c0
[   58.225029][ T4752]  ? __pfx_seq_read+0x10/0x10
[   58.225059][ T4752]  vfs_read+0x18e/0x7c0
[   58.225087][ T4752]  ? __fget_files+0x184/0x1c0
[   58.225105][ T4752]  ? __rcu_read_unlock+0x4e/0x70
[   58.225179][ T4752]  ? __fget_files+0x184/0x1c0
[   58.225201][ T4752]  ? mutex_unlock+0x4e/0x90
[   58.225227][ T4752]  __x64_sys_pread64+0xfd/0x150
[   58.225258][ T4752]  x64_sys_call+0xd2e/0x2550
[   58.225335][ T4752]  do_syscall_64+0x112/0x360
[   58.225369][ T4752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.225393][ T4752] RIP: 0033:0x7f5ffc78e159
[   58.225410][ T4752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.225467][ T4752] RSP: 002b:00007f5ffb1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[   58.225488][ T4752] RAX: ffffffffffffffda RBX: 00007f5ffca15fa0 RCX: 00007f5ffc78e159
[   58.225505][ T4752] RDX: 000000000000000f RSI: 0000200000000140 RDI: 0000000000000003
[   58.225558][ T4752] RBP: 00007f5ffb1e7090 R08: 0000000000000000 R09: 0000000000000000
[   58.225574][ T4752] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[   58.225603][ T4752] R13: 00007f5ffca16038 R14: 00007f5ffca15fa0 R15: 00007ffc4ee5f418
[   58.225647][ T4752]  </TASK>
[   58.349775][ T4756] netlink: 'syz.4.382': attribute type 16 has an invalid length.
[   58.394477][ T4756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4756 comm=syz.4.382
[   58.431028][ T3377] vhci_hcd vhci_hcd.3: vhci_device speed not set
[   58.479314][ T4759] netlink: 48 bytes leftover after parsing attributes in process `syz.4.383'.
[   58.598329][ T4772] netlink: 'syz.0.387': attribute type 1 has an invalid length.
[   58.599887][ T4769] syzkaller0: entered promiscuous mode
[   58.599906][ T4769] syzkaller0: entered allmulticast mode
[   59.010713][ T4806] netlink: 'syz.2.397': attribute type 13 has an invalid length.
[   59.010739][ T4806] netlink: 'syz.2.397': attribute type 17 has an invalid length.
[   59.205742][   T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   59.223862][ T4814] syzkaller0: entered promiscuous mode
[   59.223887][ T4814] syzkaller0: entered allmulticast mode
[   59.669616][ T4840] kernel profiling enabled (shift: 63)
[   59.669636][ T4840] profiling shift: 63 too large
[   59.718720][ T4842] netlink: 'syz.4.412': attribute type 1 has an invalid length.
[   59.736088][ T4842] bond1: entered promiscuous mode
[   59.736229][ T4842] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.766733][ T4849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'.
[   59.785788][ T4842] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.787882][ T4842] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   59.787906][ T4842] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   59.814245][ T4842] bond1: (slave ip6gre1): making interface the new active one
[   59.814268][ T4842] ip6gre1: entered promiscuous mode
[   59.834715][ T4842] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   59.846315][ T4849] geneve2: entered promiscuous mode
[   59.933527][ T4867] kernel profiling enabled (shift: 63)
[   59.933549][ T4867] profiling shift: 63 too large
[   60.124099][ T4873] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[   60.296330][ T4896] kernel profiling enabled (shift: 63)
[   60.296351][ T4896] profiling shift: 63 too large
[   60.851104][ T4914] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[   61.018125][ T4921] can0: slcan on ptm0.
[   61.061021][ T4920] can0 (unregistered): slcan off ptm0.
[   61.097484][ T4927] FAULT_INJECTION: forcing a failure.
[   61.097484][ T4927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.097518][ T4927] CPU: 1 UID: 0 PID: 4927 Comm: syz.0.445 Not tainted syzkaller #0 PREEMPT(lazy) 
[   61.097543][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   61.097561][ T4927] Call Trace:
[   61.097568][ T4927]  <TASK>
[   61.097577][ T4927]  __dump_stack+0x1d/0x30
[   61.097601][ T4927]  dump_stack_lvl+0x95/0xd0
[   61.097627][ T4927]  dump_stack+0x15/0x1b
[   61.097650][ T4927]  should_fail_ex+0x262/0x280
[   61.097675][ T4927]  should_fail+0xb/0x20
[   61.097761][ T4927]  should_fail_usercopy+0x1a/0x20
[   61.097786][ T4927]  _copy_to_user+0x20/0xa0
[   61.097812][ T4927]  simple_read_from_buffer+0xb5/0x130
[   61.097850][ T4927]  proc_fail_nth_read+0x10e/0x150
[   61.097932][ T4927]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   61.097969][ T4927]  vfs_read+0x18e/0x7c0
[   61.097998][ T4927]  ? __rcu_read_unlock+0x4e/0x70
[   61.098075][ T4927]  ? __fget_files+0x184/0x1c0
[   61.098097][ T4927]  ? mutex_lock+0x57/0x90
[   61.098180][ T4927]  ksys_read+0xdc/0x1a0
[   61.098209][ T4927]  __x64_sys_read+0x40/0x50
[   61.098310][ T4927]  x64_sys_call+0x2135/0x2550
[   61.098345][ T4927]  do_syscall_64+0x112/0x360
[   61.098377][ T4927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.098425][ T4927] RIP: 0033:0x7faac608e98e
[   61.098444][ T4927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   61.098464][ T4927] RSP: 002b:00007faac4b26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   61.098487][ T4927] RAX: ffffffffffffffda RBX: 00007faac4b276c0 RCX: 00007faac608e98e
[   61.098524][ T4927] RDX: 000000000000000f RSI: 00007faac4b270a0 RDI: 0000000000000004
[   61.098538][ T4927] RBP: 00007faac4b27090 R08: 0000000000000000 R09: 0000000000000000
[   61.098553][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.098567][ T4927] R13: 00007faac6356038 R14: 00007faac6355fa0 R15: 00007ffdc909ebf8
[   61.098588][ T4927]  </TASK>
[   61.303882][ T4932] netlink: 56 bytes leftover after parsing attributes in process `syz.0.448'.
[   61.388963][ T4934] netlink: 'syz.5.449': attribute type 1 has an invalid length.
[   61.402406][ T4934] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   61.576448][ T4947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.454'.
[   61.593564][ T4947] geneve2: entered promiscuous mode
[   61.611557][ T4949] FAULT_INJECTION: forcing a failure.
[   61.611557][ T4949] name failslab, interval 1, probability 0, space 0, times 0
[   61.611593][ T4949] CPU: 1 UID: 0 PID: 4949 Comm: syz.5.455 Not tainted syzkaller #0 PREEMPT(lazy) 
[   61.611619][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   61.611656][ T4949] Call Trace:
[   61.611664][ T4949]  <TASK>
[   61.611673][ T4949]  __dump_stack+0x1d/0x30
[   61.611699][ T4949]  dump_stack_lvl+0x95/0xd0
[   61.611721][ T4949]  dump_stack+0x15/0x1b
[   61.611747][ T4949]  should_fail_ex+0x262/0x280
[   61.611834][ T4949]  ? radix_tree_node_alloc+0xa0/0x200
[   61.611867][ T4949]  should_failslab+0x8c/0xb0
[   61.611899][ T4949]  kmem_cache_alloc_noprof+0x7c/0x3f0
[   61.611952][ T4949]  ? radix_tree_node_alloc+0xa0/0x200
[   61.611986][ T4949]  radix_tree_node_alloc+0xa0/0x200
[   61.612074][ T4949]  idr_get_free+0x1fc/0x560
[   61.612121][ T4949]  idr_alloc_u32+0xe9/0x1a0
[   61.612181][ T4949]  tcf_idr_check_alloc+0x1fc/0x2e0
[   61.612211][ T4949]  tcf_bpf_init+0x1b5/0x670
[   61.612263][ T4949]  ? __pfx_tcf_bpf_init+0x10/0x10
[   61.612349][ T4949]  tcf_action_init_1+0x395/0x4d0
[   61.612382][ T4949]  tcf_action_init+0x29d/0x700
[   61.612456][ T4949]  tc_ctl_action+0x29e/0x860
[   61.612524][ T4949]  ? __pfx_tc_ctl_action+0x10/0x10
[   61.612556][ T4949]  rtnetlink_rcv_msg+0x6a7/0x720
[   61.612585][ T4949]  netlink_rcv_skb+0x11e/0x220
[   61.612614][ T4949]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   61.612668][ T4949]  rtnetlink_rcv+0x1c/0x30
[   61.612691][ T4949]  netlink_unicast+0x5a9/0x680
[   61.612752][ T4949]  netlink_sendmsg+0x5be/0x6f0
[   61.612791][ T4949]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.612891][ T4949]  ____sys_sendmsg+0x532/0x580
[   61.612928][ T4949]  ___sys_sendmsg+0x195/0x1e0
[   61.613033][ T4949]  __x64_sys_sendmsg+0xd4/0x160
[   61.613070][ T4949]  x64_sys_call+0x22ab/0x2550
[   61.613099][ T4949]  do_syscall_64+0x112/0x360
[   61.613149][ T4949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.613175][ T4949] RIP: 0033:0x7f83cceee159
[   61.613193][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.613268][ T4949] RSP: 002b:00007f83cb947028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.613291][ T4949] RAX: ffffffffffffffda RBX: 00007f83cd175fa0 RCX: 00007f83cceee159
[   61.613308][ T4949] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[   61.613323][ T4949] RBP: 00007f83cb947090 R08: 0000000000000000 R09: 0000000000000000
[   61.613338][ T4949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.613351][ T4949] R13: 00007f83cd176038 R14: 00007f83cd175fa0 R15: 00007ffd0b2011a8
[   61.613418][ T4949]  </TASK>
[   61.877729][ T4958] syz_tun: refused to change device tx_queue_len
[   61.877754][ T4958] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   62.178186][ T4970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4970 comm=syz.2.462
[   62.190921][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'.
[   62.348592][ T4974] SELinux: syz.2.464 (4974) wrote to user. This is no longer supported.
[   62.431702][ T4978] netlink: 56 bytes leftover after parsing attributes in process `syz.3.466'.
[   62.476407][ T4982] kernel profiling enabled (shift: 63)
[   62.476435][ T4982] profiling shift: 63 too large
[   62.547681][ T4985] FAULT_INJECTION: forcing a failure.
[   62.547681][ T4985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.547717][ T4985] CPU: 1 UID: 0 PID: 4985 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(lazy) 
[   62.547743][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   62.547827][ T4985] Call Trace:
[   62.547836][ T4985]  <TASK>
[   62.547845][ T4985]  __dump_stack+0x1d/0x30
[   62.547873][ T4985]  dump_stack_lvl+0x95/0xd0
[   62.547961][ T4985]  dump_stack+0x15/0x1b
[   62.547982][ T4985]  should_fail_ex+0x262/0x280
[   62.548007][ T4985]  should_fail+0xb/0x20
[   62.548028][ T4985]  should_fail_usercopy+0x1a/0x20
[   62.548055][ T4985]  _copy_to_user+0x20/0xa0
[   62.548079][ T4985]  proc_pid_cmdline_read+0x387/0x710
[   62.548160][ T4985]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[   62.548243][ T4985]  vfs_read+0x18e/0x7c0
[   62.548337][ T4985]  ? __rcu_read_unlock+0x4e/0x70
[   62.548372][ T4985]  ? __fget_files+0x184/0x1c0
[   62.548394][ T4985]  ? mutex_lock+0x57/0x90
[   62.548418][ T4985]  ksys_read+0xdc/0x1a0
[   62.548485][ T4985]  __x64_sys_read+0x40/0x50
[   62.548579][ T4985]  x64_sys_call+0x2135/0x2550
[   62.548607][ T4985]  do_syscall_64+0x112/0x360
[   62.548693][ T4985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.548719][ T4985] RIP: 0033:0x7fbd69fde159
[   62.548737][ T4985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.548758][ T4985] RSP: 002b:00007fbd68a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   62.548781][ T4985] RAX: ffffffffffffffda RBX: 00007fbd6a265fa0 RCX: 00007fbd69fde159
[   62.548833][ T4985] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000003
[   62.548848][ T4985] RBP: 00007fbd68a37090 R08: 0000000000000000 R09: 0000000000000000
[   62.548863][ T4985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.548918][ T4985] R13: 00007fbd6a266038 R14: 00007fbd6a265fa0 R15: 00007ffd8b4caba8
[   62.548940][ T4985]  </TASK>
[   62.821113][   T29] kauditd_printk_skb: 21460 callbacks suppressed
[   62.821176][   T29] audit: type=1400 audit(1700006413.010:29410): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   62.823269][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'.
[   62.827421][ T4993] geneve2: entered promiscuous mode
[   62.851185][   T29] audit: type=1400 audit(1700006413.010:29411): avc:  denied  { open } for  pid=4992 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[   62.851215][   T29] audit: type=1400 audit(1700006413.010:29412): avc:  denied  { read write } for  pid=4992 comm="syz.4.471" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0
[   62.853051][   T29] audit: type=1400 audit(1700006413.040:29413): avc:  denied  { allowed } for  pid=4992 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   62.853646][   T29] audit: type=1400 audit(1700006413.040:29414): avc:  denied  { create } for  pid=4992 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0
[   62.870656][   T29] audit: type=1400 audit(1700006413.050:29415): avc:  denied  { read write } for  pid=3303 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   62.876637][   T29] audit: type=1400 audit(1700006413.050:29416): avc:  denied  { name_bind } for  pid=4994 comm="syz.4.472" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0
[   62.877097][   T29] audit: type=1400 audit(1700006413.050:29417): avc:  denied  { create } for  pid=4994 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   62.878907][   T29] audit: type=1400 audit(1700006413.050:29418): avc:  denied  { name_bind } for  pid=4994 comm="syz.4.472" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0
[   62.884248][   T29] audit: type=1400 audit(1700006413.070:29419): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   63.061247][ T4998] FAULT_INJECTION: forcing a failure.
[   63.061247][ T4998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.061283][ T4998] CPU: 0 UID: 0 PID: 4998 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(lazy) 
[   63.061351][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.061378][ T4998] Call Trace:
[   63.061452][ T4998]  <TASK>
[   63.061460][ T4998]  __dump_stack+0x1d/0x30
[   63.061489][ T4998]  dump_stack_lvl+0x95/0xd0
[   63.061516][ T4998]  dump_stack+0x15/0x1b
[   63.061537][ T4998]  should_fail_ex+0x262/0x280
[   63.061633][ T4998]  should_fail+0xb/0x20
[   63.061716][ T4998]  should_fail_usercopy+0x1a/0x20
[   63.061740][ T4998]  _copy_from_user+0x1c/0xb0
[   63.061764][ T4998]  ___sys_sendmsg+0xc1/0x1e0
[   63.061831][ T4998]  __x64_sys_sendmsg+0xd4/0x160
[   63.061880][ T4998]  x64_sys_call+0x22ab/0x2550
[   63.061926][ T4998]  do_syscall_64+0x112/0x360
[   63.061955][ T4998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.062020][ T4998] RIP: 0033:0x7faac60ce159
[   63.062169][ T4998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.062217][ T4998] RSP: 002b:00007faac4b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.062238][ T4998] RAX: ffffffffffffffda RBX: 00007faac6355fa0 RCX: 00007faac60ce159
[   63.062253][ T4998] RDX: 0000000003004080 RSI: 00002000000000c0 RDI: 0000000000000003
[   63.062266][ T4998] RBP: 00007faac4b27090 R08: 0000000000000000 R09: 0000000000000000
[   63.062280][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.062293][ T4998] R13: 00007faac6356038 R14: 00007faac6355fa0 R15: 00007ffdc909ebf8
[   63.062395][ T4998]  </TASK>
[   63.168043][ T5001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.278735][ T5004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[   63.281732][ T5008] kernel profiling enabled (shift: 63)
[   63.281746][ T5008] profiling shift: 63 too large
[   63.310906][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   63.523643][ T5034] ==================================================================
[   63.523676][ T5034] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[   63.523726][ T5034] 
[   63.523732][ T5034] write to 0xffff88810a826100 of 8 bytes by task 5025 on cpu 1:
[   63.523749][ T5034]  mas_wmb_replace+0x242/0x1870
[   63.523768][ T5034]  mas_wr_store_entry+0x54d7/0x5ac0
[   63.523794][ T5034]  mas_store_prealloc+0x421/0x670
[   63.523825][ T5034]  vma_complete+0x3b7/0x830
[   63.523846][ T5034]  __split_vma+0x6be/0x720
[   63.523869][ T5034]  vma_modify+0xc98/0xd50
[   63.523889][ T5034]  vma_modify_flags+0x1be/0x250
[   63.523930][ T5034]  mprotect_fixup+0x382/0x660
[   63.523966][ T5034]  do_mprotect_pkey+0x69f/0x950
[   63.523992][ T5034]  __x64_sys_mprotect+0x48/0x60
[   63.524015][ T5034]  x64_sys_call+0xd54/0x2550
[   63.524040][ T5034]  do_syscall_64+0x112/0x360
[   63.524082][ T5034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.524105][ T5034] 
[   63.524112][ T5034] read to 0xffff88810a826100 of 8 bytes by task 5034 on cpu 0:
[   63.524131][ T5034]  mas_walk+0x15c/0x340
[   63.524158][ T5034]  lock_vma_under_rcu+0xc9/0x210
[   63.524186][ T5034]  do_user_addr_fault+0x239/0x1060
[   63.524213][ T5034]  exc_page_fault+0x62/0xa0
[   63.524235][ T5034]  asm_exc_page_fault+0x26/0x30
[   63.524258][ T5034] 
[   63.524263][ T5034] value changed: 0xffff8881391bbf41 -> 0xffff88810a826100
[   63.524278][ T5034] 
[   63.524282][ T5034] Reported by Kernel Concurrency Sanitizer on:
[   63.524295][ T5034] CPU: 0 UID: 0 PID: 5034 Comm: syz.2.485 Not tainted syzkaller #0 PREEMPT(lazy) 
[   63.524322][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   63.524337][ T5034] ==================================================================
[   67.830885][   T29] kauditd_printk_skb: 46264 callbacks suppressed
[   67.830914][   T29] audit: type=1400 audit(1700006418.010:75684): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.830944][   T29] audit: type=1400 audit(1700006418.020:75685): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837372][   T29] audit: type=1400 audit(1700006418.020:75686): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837474][   T29] audit: type=1400 audit(1700006418.020:75687): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837502][   T29] audit: type=1400 audit(1700006418.020:75688): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837642][   T29] audit: type=1400 audit(1700006418.020:75689): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837687][   T29] audit: type=1400 audit(1700006418.020:75690): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837753][   T29] audit: type=1400 audit(1700006418.020:75691): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837803][   T29] audit: type=1400 audit(1700006418.020:75692): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   67.837882][   T29] audit: type=1400 audit(1700006418.020:75693): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   71.390949][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   72.840867][   T29] kauditd_printk_skb: 52714 callbacks suppressed
[   72.840899][   T29] audit: type=1400 audit(1700006423.020:128408): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.840929][   T29] audit: type=1400 audit(1700006423.030:128409): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841613][   T29] audit: type=1400 audit(1700006423.030:128410): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841670][   T29] audit: type=1400 audit(1700006423.030:128411): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841695][   T29] audit: type=1400 audit(1700006423.030:128412): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841720][   T29] audit: type=1400 audit(1700006423.030:128413): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841821][   T29] audit: type=1400 audit(1700006423.030:128414): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841845][   T29] audit: type=1400 audit(1700006423.030:128415): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841870][   T29] audit: type=1400 audit(1700006423.030:128416): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[   72.841969][   T29] audit: type=1400 audit(1700006423.030:128417): avc:  denied  { read } for  pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0