last executing test programs:

1m43.817098833s ago: executing program 3 (id=3364):
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000140)=@can={{0x2}, 0x6, 0x0, 0x0, 0x0, "a6b5b1cf922ab498"}, 0x10}, 0x1, 0x0, 0x0, 0x2008c814}, 0xd1628f4366deaab4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
setresuid(0x0, 0xee01, 0x0)
keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10)
sendto$inet6(r4, &(0x7f0000000040)='x', 0x1, 0x0, 0x0, 0x0)
close(r4)

1m43.816634653s ago: executing program 3 (id=3365):
mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x2000)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000080000000040000300000085000000bf00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x5f, 0x0, &(0x7f0000000240)="e80ac6c7f9df587fd4cffe3f4e1755975cfa88120ff29d0a7cfde1493bd4c9ef9aad26db45b56d8ed54726ea6431e4628b5f67d1aeca5a96701df74183b75a17b17d9c09a440b02c7aca9d4a82e9bc6ee953fbd349eaf62907712a14d9db24", 0x0, 0x1008, 0x0, 0xffffffffffffff3f, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESHEX=r3], 0xe4}, 0x1, 0x0, 0x0, 0x14044}, 0x2400c850)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000140))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000280)={0x10000, 0x0, 0x13}, 0x18)
sendto$packet(r4, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140), 0x14)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)

1m43.734855384s ago: executing program 3 (id=3366):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4040055)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)

1m43.615439295s ago: executing program 3 (id=3367):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5}]}, 0x24}}, 0x0)
acct(&(0x7f0000000280)='./file1\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_destroy(0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1000, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000240)=""/197, 0xc5}], 0x2, &(0x7f0000000480)=""/59, 0x3b}, 0x2}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/241, 0xf1}], 0x1, &(0x7f0000000680)=""/208, 0xd0}, 0xd}], 0x2, 0x2, &(0x7f0000000a80)={0x0, 0x989680})
fcntl$getflags(r4, 0x401)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0)
unshare(0x22020400)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
open(&(0x7f0000000780)='./bus\x00', 0xc0000, 0x7)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8205, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@grpid}, {@block_validity}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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")
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, <r8=>0x0}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0)

1m43.310281829s ago: executing program 3 (id=3371):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x3a)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000)
recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="0d1bca146844268cb8be14f086dd", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r5 = socket$kcm(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r5})
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

1m41.870591443s ago: executing program 3 (id=3379):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(0x0, 0x0, 0x88003)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1m41.793935224s ago: executing program 32 (id=3379):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(0x0, 0x0, 0x88003)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

29.951848786s ago: executing program 5 (id=3891):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x3a)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700", 0x2c}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000)
recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="0d1bca146844268cb8be14f086dd", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r5 = socket$kcm(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r5})
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

26.649161779s ago: executing program 5 (id=3898):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)

26.58661184s ago: executing program 5 (id=3900):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socket(0xa, 0x3, 0xff)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
read$msr(r2, &(0x7f00000010c0)=""/4096, 0x1000)
vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x1, 0x75)
fchdir(r4)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r6, r6)
setpgid(0x0, r6)
move_mount(r4, 0x0, r5, &(0x7f00000000c0)='./file0\x00', 0x14)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0)

24.906327797s ago: executing program 5 (id=3906):
socket$inet6(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtquqF8qpQqgSokcO25B4o2jtOIqd0oSVyB65I1GJE5w4c0DigNQTdyQOcONSDkgFVqAGCQkjj8eJ88eJu5vYu/HvJ438Zp7j773Mznujz5t5AUysaxGxExGXIuLdiJjLjyf5Fm92t877Pnl4f2n34f2lJNrtd/6RZPWdY9H3Mx3P5J9ZjIjvvRXxg+RQ0D9GNLe27y3WatWN/FC5VV8vN7e2b67WF1eqK9W1SuX2wu3512+9Vjmzvr5U//XHlyPid7/94kd/2PnGjzrNms3r+vtxlrpdn9mLE9HOfsXfOY9gYzAVEdP5v59P7ZF+iLOURsRnIuLl7Pqfi6nsbB508DR9c4StAwDOQ7s9l9+R9vYBgIsuzXJgSVrKcwGzkaalUjeH90JcSWuNZuvG3cbm2nI3V3Y1ZtK7q7XqfJ4rvBozyd3V6epCVu7t16qVQ/u3IuL5iPhp4XK2X1pq1JbHeeMDABPsmUPz/78L3fkfALjgivvFwjjbAQCMTnHcDQAARs78DwCTx/wPAJPH/A8Ak8f8DwCTx/wPABPlu2+/3dnau/nzr5ff29q813jv5nK1ea9U31wqLTU21ksrjcZK9sye+mmfV2s01hdejc33y61qs1Vubm3fqTc211p3sud636nOjKRXAMBJnn/pwz8nEbHzxuVsi77n/Z86V7943q0DzlM67gYAYzM17gYAY3N0tS9gUsjHw+T6X7vdjr61eyPiwV6p72GgA/+L0AdDhUmtGwpPnuuff4z8P/BUk/+HyfVo+X/38nARyP/D5Gq3E2v+A8CEkeMHklPq+7//n2/37Qz3/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcSLPZlqSlfC3w2UjTUini2Yi4GjPJ3dVadT4inouIPxVmCp39hYiwbhAAPM3SvyX5+l/X516ZPVx7qfCfQvYaET/8+Ts/e3+x1dpYiLiU/HPveOuD/HhlHO0HAE7Tm6d783jPJw/vL/W2Ubbn4291FxftxN3Nt27NdExnr8Us13DlX0m+39W5X5k6g/g7DyLic8f1P8lyI1fzlU8Px+/Efnak8dMD8dOsrvva+V189gzaApPmw8748+Zx118a17LX46//YjZCPb7e+Ld7ZPxL98a/qQHj37VhY7z6+28fOdie69Y9iPjCdMRu78P7xp9e/GRA/FeGjP+XF7/08qC69i8irsdx/U8OxCq36uvl5tb2zdX64kp1pbpWqdxeuD3/+q3XKuUsR13uZaqP+vsbN54bFL/T/ysD4hdP6f9Xh+z/L//77ve/fEL8r39lP/6PY//8v3BC/M6c+LUh4y9e+U1xUF0n/vKA/p92/m8MGf+jv24vD/lWAGAEmlvb9xZrterG4xeKJ74nPYsQQxSSiJ1zDrFfKPzqJ2+d/ubCyNrziIUYVDX1pLTwwhQKT0YzhiiMe2QCztv+RT/ulgAAAAAAAAAAAAAAAIOM4s+Jxt1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7/BwAA//8inNZ5")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040))
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x844a}], 0x1, 0x0, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r1, 0x5608, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sched_setscheduler(0x0, 0xe56c1c81ce76b9ec, &(0x7f0000000200)=0x80000001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace$getregset(0x4205, r4, 0x1, &(0x7f00000000c0)={0x0})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lsetxattr(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)=@known='security.apparmor\x00', &(0x7f0000001040)=',+}+\'\x00', 0x6, 0x2)
setpriority(0x2, 0x0, 0x8)

24.122339075s ago: executing program 5 (id=3913):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e}, 0x94)
clock_gettime(0x6, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
clock_adjtime(0x1, &(0x7f0000000240)={0x200000000000, 0x6, 0x8000000000000001, 0x80000000, 0x3, 0x2, 0x5, 0x6, 0x1000, 0x181, 0x81, 0x3, 0xe, 0x7, 0x7, 0x0, 0x4, 0x3, 0x5, 0x8, 0x3, 0x0, 0x2, 0x5, 0x2, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x44088, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xfe)

21.254576134s ago: executing program 5 (id=3923):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$eJzs3T9vW1UUAPDzHPvFJUMyMCEk3tCBhajpyoArFCREJpAH/khQ0VaqYqtSLFkqIKxOfAIGBr4HGzsSC98AiQ/ARoUqXfT8Xmxju3ad4hSlv9+Sq3PP8T3X7yUerHfzxev90zsPBvceffN7tNtZNDrRicdZHEQjzqVaAABXwuOU4s8Lfb43G9vqCQDYrpnP/9ZTUnYXQ+9suy0AYIs++viTD26dnBx/WBTtiP53w24W1c9q/ta9uB+9uBs3Yj+eTL8LSKkav/f+yXE0i9JBXO+Pht2ysv/5r5PUPMb1R7EfB8vrj4rKTP1o2G3FK7uRZRH3O2UjN2M/Xl2oL+ePby6pj24eb7brTZbrH8Z+/PZlPIhe3Bl/pzFd/9s8infT9399/WmZXNZno2F3d5w3lXYu+9oAAAAAAAAAAAAAAAAAAAAAAHB1HRYTB3G9X4bq83d2noznD/81Pz5fpzGer+qziHw8mDsfaJTix/PzdW4URZGyKn9yvs+1ZrzWjOYL2zgAAAAAAAAAAAAAAAAAAAD8jwwefnV6u9e7e/afDOqH/CeP9V/0dTozkTdidfLuRmvFTp1e9jqfc/TLZ/1JpNzERZoftoqIVT23FiLXyn7Wv/LfKaWUZRHPd5laz7LWmsHe6pzyDf75h723Tm9n697D9vmF+2l2Ko+zwcO5axrZJh2mjW6/fEVOXt8xz/Q6e8/5S/T2H9VidSRbs4vWTKRVD+Jpt197o/v58v4GAQAAAAAAAAAAAAAAAAAAlelDv0smH60sbWytKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZNP//z8dxEJkbjCqi5fnpJRGk0geZ4MXvEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeAv8EAAD//yiCbKI=")
acct(&(0x7f0000000280)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0)
fcntl$getflags(r1, 0x401)

20.71297785s ago: executing program 33 (id=3923):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$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")
acct(&(0x7f0000000280)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0)
fcntl$getflags(r1, 0x401)

5.309284657s ago: executing program 6 (id=4053):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x400, 0x92)
lseek(r0, 0x20008, 0x4)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x20000084)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, 0x0, 0x14008010)
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x3, 0x80, 0xfa, 0x8, 0x0, 0x7, 0x0, 0x4, 0x2400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x4}, 0x0, 0x1, 0x3, 0xb, 0x8000000000000000, 0x3, 0x6, 0x0, 0x6, 0x0, 0x1})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x6)

4.95025691s ago: executing program 0 (id=4054):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x61001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x18444, 0xca, 0x0, 0x2, 0x0, 0x4010, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = socket$kcm(0x2, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r4, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020300001600000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x100, 0x4}, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tw\nm'], 0xa)

4.515961685s ago: executing program 0 (id=4057):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)

4.435123826s ago: executing program 0 (id=4058):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000640), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000500)="b9fa030711a5f3", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1809000000000000000000000000000018", @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000002040)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0xa101, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x1, {0xa, 0x4e20, 0x300, @empty, 0x4}}}, 0x80, &(0x7f0000003440)=[{0x0}, {&(0x7f0000000680)="df18288b4f12fd2b62d08eb78f7df4adc7ad5cac6ae87de234fea78f909b203a381e9e16540f708d84affce4ab2cd96629f5593c9821f5a1490564feb04bc79cad57758358ea8b8893d707c91cd5af1597c65d0824c94707d150ad1190a82ed66853f6e22c4c31f54f1acccdb3d83589e0", 0x71}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="55da44cbd6febdb6e53e0014ef62758b1c958e06e5729e5a9871be6dff9ea88a078e606075d5633ab5b9560623231e092a3522f92e0ed55687e5ca1a0d735c0b478240dda8209fe5f95f4365f34a6689bbff833032ae163e7446bba3544af18fe8b8224517c569e59d51c5e7c1a86c84590d01431d255706bdb1b3d825695dd35c21f485bf4f774ffaf7a84093e4a0931bef1dd2d504fa6d92", 0x99}, {&(0x7f0000003240)="0c20b5a0c5", 0x5}, {&(0x7f0000003280)="44bcf13d7fa3de821abc61f57f149cf58a77e4371b55e066c566956caccda9fc622384691cb655c88391bd4c437797531eecbf20ae2c59a0ad50a2b30d26875d371fea20c8451e35eefc856ec487786214e3cbfaf76b952a8f2baff78b2001f094c1cdabd627ea0c5e50c6f25a8bd12120564f6b58c26cb5315f1c56d1f4b33bd9bebfeea737aa1223ed69310e787d41d57bb781b93ed469411b35f36d473f5fe18a14e48c7b079cebdafac180234877ff9003594fd34e73650166baf1fcda2693653d3c09d6b96e64e52b1c416c58786e52", 0xd2}, {&(0x7f0000003380)="e178e4b73750b96b3adbfb1c28fd22f56bd0f84bc1143b31bee153dbe01d975ae2c325d2d17b5800aaa481a5fa7af61df87d81da5d42d44d4d44b72e9203e9ae44dca63b43326203f364d5d8bdd6738aa295760083b0ddd5812b2e34751adc41a5a1588d04001e1d4c4759af218e5d49b6dbfaebe0e761ae66544d75c8e97cbb9ecabcb80cd52ac49ecb433813a182e0356ba91af1a03a1321ae08d5075f284347e5580cfcf851fae9eb3197f6b98a211118", 0xb2}], 0x7}, 0x4000004)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033208120000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, &(0x7f0000000200))
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x6, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)

3.835013561s ago: executing program 6 (id=4063):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xffffff6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=<r2=>0x0)
r3 = getuid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="526eb0e8e5a6d40845f9274dc1a04ea38a5639c06493366c9fc060a5e12f546883f6adffb903c14ae0eb37764d58074cce68e38358544e7c0e86c48ed9ba66a1799e506d7f9b6f51c9be7dac207b6c4652d7e5ba4cff4309764ebbf93efe1d9b27f88b2469efcd2e6c1a40c349165002cfbcd7f1925867bd99a7655828a7ff1fff60", 0x82}, {&(0x7f00000007c0)="c209cf9c24b24026b0775dc315061ca5d7b7e6697d34a2163229f81795f036b015120b344700c33d", 0x28}, {&(0x7f0000000800)="5e2cdefa65d64c7bfcb79c8722ba68e43c53d75be956f3fbff49f00ad5b86b7d42e13a79afc091d41a352cea3e41f338ac13e88c001b27688894ce3db0791e4058dd19f66698b68e89eba31a70db1fe54bee707df785747f39858022783788847254fc8dab88a6e6f12cc9", 0x6b}, {&(0x7f0000000900)="086d7685e9a4253704d9041ba5e9bb444eb4a4a49ded2921c95c56cd040dbf611fdbaa6e4eb8c683ab46225feb1757388c3572af2412c591e661f1adfda31dbcfb325e77360de5c1d59e86beed6075e5a4aaf2e0e24b19916a7ca999adf9a749b8e71a6498dd27731545462cac2b37da6de2ddb7a07233ebe55985ef60502fff876a68aa21a9ab8e036107d0248867812a333a37f28ce6ab607316958a17be40cb60dfc33aa5b602d1d4f1114e47a6b04e12eacf6430ca5a42c665b2bd22e38a54bf825c4fa71834fdb9", 0xca}, {0x0}, {&(0x7f0000000a80)="c1961fd0f962869b8e", 0x9}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x88}}, {{&(0x7f0000000ec0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000f80)}, {0x0}], 0x2, 0x0, 0x0, 0x80}}], 0x2, 0x88c1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840)
set_mempolicy(0x8006, 0x0, 0x5)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, <r5=>0x0}, &(0x7f0000000300)=0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="08000600a7"], 0x24}}, 0x4000)
perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
r11 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x100000009, r0, 'id1\x00'})

3.591792084s ago: executing program 6 (id=4065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000000))
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x4e21, @empty=0x1000000}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
mlockall(0x6)
io_setup(0x81, &(0x7f0000000400))
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r2)
r3 = syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, r3, 0xa, 0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9)
getdents(r5, 0xfffffffffffffffd, 0xbb)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
dup2(r6, r4)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x20000000, 0x2, 0x50000}, 0xfff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x800)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r9, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800)

3.425814006s ago: executing program 0 (id=4068):
mq_open(0x0, 0x1, 0xc, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000040000000800"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x10d)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x39000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="6583000000000000000001000000080001007400"], 0x24}}, 0x0)

3.239409167s ago: executing program 1 (id=4070):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0xc96, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa14}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x19000, &(0x7f0000000240)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@commit={'commit', 0x3d, 0x100}}, {@inlinecrypt}], [{@obj_role={'obj_role', 0x3d, '/-%%%:\\'}}]}, 0x3, 0x4df, &(0x7f0000000680)="$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")
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x5, 0x1a)
r0 = epoll_create(0x3ff)
r1 = epoll_create1(0x0)
unshare(0x20000400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x3c, "5c83276f6c02000000000000000000010000000000335b021f55001d00a2b0e824d1e5afb5042f253784a47879d8f712f87181484eb2240521d51859"}})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000001c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @empty}}}, 0x118)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa0000000, 0x1b54c8})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x2000000})
syz_open_dev$sg(0x0, 0x0, 0x800)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r7, 0x6, 0x2b, 0x0, &(0x7f0000000380))
truncate(&(0x7f0000000000)='./file2\x00', 0x881bfd)
socket$inet6_mptcp(0xa, 0x1, 0x106)

3.234685087s ago: executing program 6 (id=4071):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e}, 0x94)
clock_gettime(0x6, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
clock_adjtime(0x1, &(0x7f0000000240)={0x200000000000, 0x6, 0x8000000000000001, 0x80000000, 0x3, 0x2, 0x5, 0x6, 0x1000, 0x181, 0x81, 0x3, 0xe, 0x7, 0x7, 0x0, 0x4, 0x3, 0x5, 0x8, 0x3, 0x0, 0x2, 0x5, 0x2, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x44088, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x4)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xfe)

3.04449815s ago: executing program 1 (id=4072):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4040055)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)

3.02231978s ago: executing program 1 (id=4073):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x400, 0x92)
lseek(r0, 0x20008, 0x4)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x20000084)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14008010)
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x3, 0x80, 0xfa, 0x8, 0x0, 0x7, 0x0, 0x4, 0x2400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x4}, 0x0, 0x1, 0x3, 0xb, 0x8000000000000000, 0x3, 0x6, 0x0, 0x6, 0x0, 0x1})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x6)

2.240879108s ago: executing program 2 (id=4075):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xffffff6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=<r2=>0x0)
r3 = getuid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="526eb0e8e5a6d40845f9274dc1a04ea38a5639c06493366c9fc060a5e12f546883f6adffb903c14ae0eb37764d58074cce68e38358544e7c0e86c48ed9ba66a1799e506d7f9b6f51c9be7dac207b6c4652d7e5ba4cff4309764ebbf93efe1d9b27f88b2469efcd2e6c1a40c349165002cfbcd7f1925867bd99a7655828a7ff1fff60", 0x82}, {&(0x7f00000007c0)="c209cf9c24b24026b0775dc315061ca5d7b7e6697d34a2163229f81795f036b015120b344700c33d", 0x28}, {&(0x7f0000000800)="5e2cdefa65d64c7bfcb79c8722ba68e43c53d75be956f3fbff49f00ad5b86b7d42e13a79afc091d41a352cea3e41f338ac13e88c001b27688894ce3db0791e4058dd19f66698b68e89eba31a70db1fe54bee707df785747f39858022783788847254fc8dab88a6e6f12cc9", 0x6b}, {&(0x7f0000000900)="086d7685e9a4253704d9041ba5e9bb444eb4a4a49ded2921c95c56cd040dbf611fdbaa6e4eb8c683ab46225feb1757388c3572af2412c591e661f1adfda31dbcfb325e77360de5c1d59e86beed6075e5a4aaf2e0e24b19916a7ca999adf9a749b8e71a6498dd27731545462cac2b37da6de2ddb7a07233ebe55985ef60502fff876a68aa21a9ab8e036107d0248867812a333a37f28ce6ab607316958a17be40cb60dfc33aa5b602d1d4f1114e47a6b04e12eacf6430ca5a42c665b2bd22e38a54bf825c4fa71834fdb9", 0xca}, {0x0}, {&(0x7f0000000a80)="c1961fd0f962869b8e", 0x9}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x88}}, {{&(0x7f0000000ec0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000f80)}, {0x0}], 0x2, 0x0, 0x0, 0x80}}], 0x2, 0x88c1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840)
set_mempolicy(0x8006, 0x0, 0x5)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, <r5=>0x0}, &(0x7f0000000300)=0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="08000600a7"], 0x24}}, 0x4000)
perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
r11 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x100000009, r0, 'id1\x00'})

2.097256509s ago: executing program 1 (id=4076):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote}}}}}}, 0x0)
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b9fd1bf1b9e7835e5bc3c3d9ab54cc2d16ef0d42a7fb75eb3f1a9dd19067bdf499e02fd4457541d3311e", @ANYBLOB="0096d7bee69605fbbd656c7b6f1d42351e3c7d1ce6d6d95720566ec6565f64e99afdacb99666f2851764cc7d7cf72e975ff5bd40b7b97cd4709b78223a69764ad2242a3351a3095f5661d303b8038e92317c75b9ff537674f2c3d457f5fd0aac50398c45eea3a6ce78397f46ae3274b8d9f61c1e0a6adff0ac5ddfe1d93e759ec783a182cb43f642583023a2b47a23c049bfacd1bae4bb02d405476ebed12c58a058afe270779ffe991a17d407b1021d29c6c0c4af7248fa79563558f30070f33626f2ecc28747b0839f6fe13fef7e1fdff15da09c52f1ff330c6525811ab6aa5fd160eb13e3e0d5", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="e308bcef0cf706767687d83f1bf4cbfe71a6e02e6e756303dc1ed91a0e4795097a8d3560e966334d80f2c4c776e0d50c75146f24c8c94536ff2cd2a2c452a255296fbbf00cdbdc8d63afb2"], &(0x7f00000001c0)='syzkaller\x00', 0x5536, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
poll(&(0x7f0000000100)=[{r4, 0x84}], 0x1, 0x3ff)
syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fee9fffffff5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
unshare(0x6a040000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendto$inet(r4, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r4, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
accept4(r4, 0x0, 0x0, 0x0)

2.04884583s ago: executing program 2 (id=4077):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000000))
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x4e21, @empty=0x1000000}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
mlockall(0x6)
io_setup(0x81, &(0x7f0000000400))
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r2)
r3 = syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, r3, 0xa, 0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9)
getdents(r5, 0xfffffffffffffffd, 0xbb)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
dup2(r6, r4)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x20000000, 0x2, 0x50000}, 0xfff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x800)

1.914501581s ago: executing program 2 (id=4078):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000640), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000500)="b9fa030711a5f3", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1809000000000000000000000000000018", @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000002040)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0xa101, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x1, {0xa, 0x4e20, 0x300, @empty, 0x4}}}, 0x80, &(0x7f0000003440)=[{0x0}, {&(0x7f0000000680)="df18288b4f12fd2b62d08eb78f7df4adc7ad5cac6ae87de234fea78f909b203a381e9e16540f708d84affce4ab2cd96629f5593c9821f5a1490564feb04bc79cad57758358ea8b8893d707c91cd5af1597c65d0824c94707d150ad1190a82ed66853f6e22c4c31f54f1acccdb3d83589e0", 0x71}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="55da44cbd6febdb6e53e0014ef62758b1c958e06e5729e5a9871be6dff9ea88a078e606075d5633ab5b9560623231e092a3522f92e0ed55687e5ca1a0d735c0b478240dda8209fe5f95f4365f34a6689bbff833032ae163e7446bba3544af18fe8b8224517c569e59d51c5e7c1a86c84590d01431d255706bdb1b3d825695dd35c21f485bf4f774ffaf7a84093e4a0931bef1dd2d504fa6d92", 0x99}, {&(0x7f0000003240)="0c20b5a0c5", 0x5}, {&(0x7f0000003280)="44bcf13d7fa3de821abc61f57f149cf58a77e4371b55e066c566956caccda9fc622384691cb655c88391bd4c437797531eecbf20ae2c59a0ad50a2b30d26875d371fea20c8451e35eefc856ec487786214e3cbfaf76b952a8f2baff78b2001f094c1cdabd627ea0c5e50c6f25a8bd12120564f6b58c26cb5315f1c56d1f4b33bd9bebfeea737aa1223ed69310e787d41d57bb781b93ed469411b35f36d473f5fe18a14e48c7b079cebdafac180234877ff9003594fd34e73650166baf1fcda2693653d3c09d6b96e64e52b1c416c58786e52", 0xd2}, {&(0x7f0000003380)="e178e4b73750b96b3adbfb1c28fd22f56bd0f84bc1143b31bee153dbe01d975ae2c325d2d17b5800aaa481a5fa7af61df87d81da5d42d44d4d44b72e9203e9ae44dca63b43326203f364d5d8bdd6738aa295760083b0ddd5812b2e34751adc41a5a1588d04001e1d4c4759af218e5d49b6dbfaebe0e761ae66544d75c8e97cbb9ecabcb80cd52ac49ecb433813a182e0356ba91af1a03a1321ae08d5075f284347e5580cfcf851fae9eb3197f6b98a211118", 0xb2}], 0x7}, 0x4000004)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000000f3ff7910900000000000630000000000000095000000000000008d92133deb6af19a615221a5e9c1c30b6e95cc8fea035580b99721396dc8eb6d5df6dc9e699a633176330ff919676a6af14926d2972f96f1b3b7e18b030df52a4f7a1c2f51146019dbb20ca845aa71fa9b92bea75cad145375cd89be1d82fabf57ee85c5e4129f42d848ed23f5b44542fe5be65239e37e6b198ca137e4432993b4576fa1ecf61a856a521d26758e4ddf6730903b5d22548be0ddaae1e6c1233841b2f6c7e7daef09f949ba0db2a1e1c43aba69adbed02c5d6cf115129ee07e25ca8518500d95e5e3ff3e7503dcf5347bee255eeba0f102d4c4c415eb56239c523a4dde580ed459f309797655222077a0442fb4"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close(r7)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033208120000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, &(0x7f0000000200))
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x6, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)

1.827031482s ago: executing program 4 (id=4080):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)

1.809251722s ago: executing program 4 (id=4081):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.771959443s ago: executing program 4 (id=4082):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4040055)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)

1.752660233s ago: executing program 4 (id=4083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000000))
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x4e21, @empty=0x1000000}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
mlockall(0x6)
io_setup(0x81, &(0x7f0000000400))
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r2)
r3 = syz_clone3(&(0x7f0000001880)={0x120000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, r3, 0xa, 0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xe9)
getdents(r5, 0xfffffffffffffffd, 0xbb)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
dup2(r6, r4)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x20000000, 0x2, 0x50000}, 0xfff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x800)

1.614239524s ago: executing program 4 (id=4084):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x400, 0x92)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000084)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x10, 0x2a, 0x503}, 0x10}], 0x1}, 0x14008010)
socket$netlink(0x10, 0x3, 0x8000000004)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x6)

1.100312649s ago: executing program 1 (id=4085):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xffffff6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40))
getuid()
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840)
set_mempolicy(0x8006, 0x0, 0x5)
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, <r3=>0x0}, &(0x7f0000000300)=0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8], 0x24}}, 0x4000)

916.897581ms ago: executing program 2 (id=4086):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x400, 0x92)
lseek(r0, 0x20008, 0x4)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x20000084)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14008010)
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x3, 0x80, 0xfa, 0x8, 0x0, 0x7, 0x0, 0x4, 0x2400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x4}, 0x0, 0x1, 0x3, 0xb, 0x8000000000000000, 0x3, 0x6, 0x0, 0x6, 0x0, 0x1})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000001c0)=0x6)

905.196411ms ago: executing program 1 (id=4087):
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x2, 0x1, 0x1000})
signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy")
r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x0, r7}, 0xc)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x1}, 0x103144, 0x10000, 0x0, 0x6, 0x5, 0x80080, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8, 0x74f8}, 0x108278, 0x9, 0x5, 0x4, 0x6, 0x8000, 0x1f0c}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)

656.953304ms ago: executing program 6 (id=4088):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0xffffff6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)=<r2=>0x0)
r3 = getuid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="526eb0e8e5a6d40845f9274dc1a04ea38a5639c06493366c9fc060a5e12f546883f6adffb903c14ae0eb37764d58074cce68e38358544e7c0e86c48ed9ba66a1799e506d7f9b6f51c9be7dac207b6c4652d7e5ba4cff4309764ebbf93efe1d9b27f88b2469efcd2e6c1a40c349165002cfbcd7f1925867bd99a7655828a7ff1fff60", 0x82}, {&(0x7f00000007c0)="c209cf9c24b24026b0775dc315061ca5d7b7e6697d34a2163229f81795f036b015120b344700c33d", 0x28}, {&(0x7f0000000800)="5e2cdefa65d64c7bfcb79c8722ba68e43c53d75be956f3fbff49f00ad5b86b7d42e13a79afc091d41a352cea3e41f338ac13e88c001b27688894ce3db0791e4058dd19f66698b68e89eba31a70db1fe54bee707df785747f39858022783788847254fc8dab88a6e6f12cc9", 0x6b}, {&(0x7f0000000900)="086d7685e9a4253704d9041ba5e9bb444eb4a4a49ded2921c95c56cd040dbf611fdbaa6e4eb8c683ab46225feb1757388c3572af2412c591e661f1adfda31dbcfb325e77360de5c1d59e86beed6075e5a4aaf2e0e24b19916a7ca999adf9a749b8e71a6498dd27731545462cac2b37da6de2ddb7a07233ebe55985ef60502fff876a68aa21a9ab8e036107d0248867812a333a37f28ce6ab607316958a17be40cb60dfc33aa5b602d1d4f1114e47a6b04e12eacf6430ca5a42c665b2bd22e38a54bf825c4fa71834fdb9", 0xca}, {0x0}, {&(0x7f0000000a80)="c1961fd0f962869b8e", 0x9}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x88}}, {{&(0x7f0000000ec0)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000f80)}, {0x0}], 0x2, 0x0, 0x0, 0x80}}], 0x2, 0x88c1)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000006b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1400000000000000290000000b00006bb69107000000ac4a7300000000ff000000001400000022000000290000000b00000000000000000000001800040000000000290000003900"], 0x48}}], 0x1, 0x20008840)
set_mempolicy(0x8006, 0x0, 0x5)
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@mcast2, <r5=>0x0}, &(0x7f0000000300)=0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="08000600a7"], 0x24}}, 0x4000)
perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
r11 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x100000009, r0, 'id1\x00'})

470.530906ms ago: executing program 4 (id=4089):
prctl$PR_SET_MM_EXE_FILE(0x13, 0xd, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0xdb, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x9a, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff020000000000000000000000000001dffebd72794a5fec1514fffc0ef9ca80c9e2e4a9b38ff355bb2200649078020000000000000000000000676e19d8ff667305eb6922a1cc7960acf1e7de0bc37bc4a0c887b6128c7a238b2a4968a145b9bd2042d08b1e6d1bf376fc15f6d380fdbdae8ffc726884b12a6d860361d3cc0637"], 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
socket(0x10, 0x3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf)
syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[@ANYBLOB="000004bbbba6bb81003800000c00000040050400009ebc4ceca189c72d"], &(0x7f0000000400)={0x1, 0x3, [0xcbc, 0x429, 0x6b8, 0xcdd]})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
r8 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12)

259.621378ms ago: executing program 6 (id=4090):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x9, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x3, @perf_config_ext={0x6, 0x46}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x8814)
mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)

130.201819ms ago: executing program 0 (id=4091):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)

89.132119ms ago: executing program 0 (id=4092):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0xa, 0x2, 0x3a)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
getpid()
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33)
recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1", 0x2d}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000)
recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="0d1bca146844268cb8be14f086dd", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080)
r5 = socket$kcm(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r5})
recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

60.88236ms ago: executing program 2 (id=4093):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4040055)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)

0s ago: executing program 2 (id=4094):
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

554.174799][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'.
[  554.221689][T15083] team0: Port device team_slave_0 removed
[  554.259894][T15088] bio_check_eod: 32 callbacks suppressed
[  554.259958][T15088] syz.5.3500: attempt to access beyond end of device
[  554.259958][T15088] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128
[  554.283445][T15088] syz.5.3500: attempt to access beyond end of device
[  554.283445][T15088] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128
[  554.297877][T15088] buffer_io_error: 18 callbacks suppressed
[  554.297893][T15088] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  554.392272][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.409665][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.450769][T15088] syz.5.3500: attempt to access beyond end of device
[  554.450769][T15088] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128
[  554.488094][T15088] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  554.496890][T15088] syz.5.3500: attempt to access beyond end of device
[  554.496890][T15088] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128
[  554.524935][T15088] syz.5.3500: attempt to access beyond end of device
[  554.524935][T15088] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128
[  554.547392][T15088] Buffer I/O error on dev loop5, logical block 83, lost async page write
[  554.556450][T15088] syz.5.3500: attempt to access beyond end of device
[  554.556450][T15088] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128
[  554.593702][T15088] Buffer I/O error on dev loop5, logical block 84, lost async page write
[  554.615750][T15088] syz.5.3500: attempt to access beyond end of device
[  554.615750][T15088] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128
[  554.897988][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.945344][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.069118][   T28] kauditd_printk_skb: 129 callbacks suppressed
[  555.069147][   T28] audit: type=1326 audit(1778311331.473:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.5.3500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0270ccdd9 code=0x7ffc0000
[  555.101619][T15088] syz.5.3500: attempt to access beyond end of device
[  555.101619][T15088] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128
[  555.123840][   T28] audit: type=1326 audit(1778311331.523:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.5.3500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0270ccdd9 code=0x7ffc0000
[  555.154186][T15101] loop4: detected capacity change from 0 to 1024
[  555.165682][T15088] Buffer I/O error on dev loop5, logical block 95, lost async page write
[  555.206754][T15101] EXT4-fs: Ignoring removed orlov option
[  555.223362][T15088] syz.5.3500: attempt to access beyond end of device
[  555.223362][T15088] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128
[  555.242066][T15088] Buffer I/O error on dev loop5, logical block 96, lost async page write
[  555.251271][T15088] syz.5.3500: attempt to access beyond end of device
[  555.251271][T15088] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128
[  555.271886][T15088] Buffer I/O error on dev loop5, logical block 99, lost async page write
[  555.323397][T15088] Buffer I/O error on dev loop5, logical block 100, lost async page write
[  555.333974][T15088] Buffer I/O error on dev loop5, logical block 111, lost async page write
[  555.343998][T15101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  555.369880][T15088] Buffer I/O error on dev loop5, logical block 112, lost async page write
[  555.383398][   T28] audit: type=1326 audit(1778311331.793:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.5.3500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff0270ccdd9 code=0x7ffc0000
[  555.462453][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.479958][   T28] audit: type=1400 audit(1778311331.843:1615): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  555.504860][   T28] audit: type=1400 audit(1778311331.863:1616): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  555.529685][   T28] audit: type=1400 audit(1778311331.863:1617): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  555.595280][T15115] siw: device registration error -23
[  555.600083][   T28] audit: type=1400 audit(1778311331.863:1618): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  555.657020][   T28] audit: type=1400 audit(1778311331.863:1619): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  555.702023][   T28] audit: type=1400 audit(1778311331.863:1620): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  555.744551][   T28] audit: type=1400 audit(1778311331.863:1621): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  556.716968][T15129] lo speed is unknown, defaulting to 1000
[  556.747167][T15130] syzkaller0: entered promiscuous mode
[  556.762703][T15130] syzkaller0: entered allmulticast mode
[  557.046356][T12181] Bluetooth: hci0: Frame reassembly failed (-84)
[  557.429640][T15151] loop5: detected capacity change from 0 to 512
[  557.447650][T15151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  557.466134][T15147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.479279][T15147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.480500][T15151] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3527: invalid indirect mapped block 4294967295 (level 0)
[  557.504083][T15151] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  557.509224][T15151] EXT4-fs (loop5): Remounting filesystem read-only
[  557.518429][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  557.518453][    C0] EXT4-fs (loop5): initial error at time 1778311333: ext4_free_branches:1023: inode 16
[  557.518498][    C0] EXT4-fs (loop5): last error at time 1778311333: ext4_free_branches:1023: inode 16
[  557.550952][T15151] EXT4-fs (loop5): 1 orphan inode deleted
[  557.556747][T15151] EXT4-fs (loop5): 1 truncate cleaned up
[  557.562972][T15151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.596438][T15157] siw: device registration error -23
[  557.643138][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.756836][T15147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.772314][T15147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.799145][T15163] loop5: detected capacity change from 0 to 256
[  557.818199][T15163] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  557.870959][T15159] openvswitch: netlink: Message has 8 unknown bytes.
[  557.886769][   T10] Process accounting resumed
[  557.891513][   T10] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  557.900253][   T10] FAT-fs (loop5): Filesystem has been set read-only
[  558.195069][T15171] loop5: detected capacity change from 0 to 512
[  558.203426][T15171] EXT4-fs: Ignoring removed oldalloc option
[  558.215801][T15171] EXT4-fs: Ignoring removed nobh option
[  558.230950][T15171] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.3536: iget: bad extra_isize 90 (inode size 256)
[  558.259430][T15171] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  558.259615][T15171] EXT4-fs (loop5): Remounting filesystem read-only
[  558.275631][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  558.275649][    C0] EXT4-fs (loop5): initial error at time 1778311334: ext4_xattr_inode_iget:441: inode 11
[  558.275682][    C0] EXT4-fs (loop5): last error at time 1778311334: ext4_xattr_inode_iget:441: inode 11
[  558.301983][T15171] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  558.312177][T15171] EXT4-fs (loop5): 1 orphan inode deleted
[  558.325171][T15171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  558.373031][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.390813][T15178] netlink: 'syz.2.3538': attribute type 21 has an invalid length.
[  558.392244][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.485385][T15183] loop2: detected capacity change from 0 to 4096
[  558.492554][T15183] EXT4-fs: Invalid want_extra_isize 19
[  558.529189][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.592261][T15178] tmpfs: Unknown parameter 'n'
[  558.607210][T15188] siw: device registration error -23
[  558.648252][T15180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.657240][T15180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.713881][T15196] FAULT_INJECTION: forcing a failure.
[  558.713881][T15196] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  558.728242][T15196] CPU: 0 UID: 0 PID: 15196 Comm: syz.2.3545 Not tainted syzkaller #0 PREEMPT(full) 
[  558.728273][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  558.728288][T15196] Call Trace:
[  558.728326][T15196]  <TASK>
[  558.728336][T15196]  __dump_stack+0x1d/0x30
[  558.728370][T15196]  dump_stack_lvl+0x95/0xd0
[  558.728400][T15196]  dump_stack+0x15/0x1b
[  558.728428][T15196]  should_fail_ex+0x263/0x280
[  558.728524][T15196]  should_fail_alloc_page+0xf2/0x100
[  558.728566][T15196]  __alloc_frozen_pages_noprof+0x108/0x350
[  558.728605][T15196]  alloc_pages_mpol+0xb3/0x260
[  558.728640][T15196]  alloc_pages_noprof+0x8f/0x140
[  558.728766][T15196]  pte_alloc_one+0x1c/0xc0
[  558.728813][T15196]  __pte_alloc+0x32/0x2a0
[  558.728841][T15196]  handle_mm_fault+0x239e/0x2e70
[  558.728892][T15196]  ? lock_mm_and_find_vma+0x8b/0x3d0
[  558.728965][T15196]  do_user_addr_fault+0x3fd/0x1050
[  558.729013][T15196]  exc_page_fault+0x62/0xa0
[  558.729045][T15196]  asm_exc_page_fault+0x26/0x30
[  558.729129][T15196] RIP: 0010:rep_movs_alternative+0x11/0x90
[  558.729177][T15196] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 1e 02 00 66 2e 0f 1f
[  558.729229][T15196] RSP: 0018:ffffc9000216fdd8 EFLAGS: 00050202
[  558.729247][T15196] RAX: ffff8881019fce00 RBX: 0000000000000004 RCX: 0000000000000004
[  558.729265][T15196] RDX: 0000000000000000 RSI: ffffc9000216fe40 RDI: 0000200000bbdffc
[  558.729283][T15196] RBP: 0000000000000000 R08: 0000000000000693 R09: 0000000000000000
[  558.729299][T15196] R10: 0001c9000216fe40 R11: 0001c9000216fe43 R12: 0000200000bbe000
[  558.729319][T15196] R13: 00007ffffffff000 R14: 0000200000bbdffc R15: ffffc9000216fe40
[  558.729375][T15196]  _copy_to_user+0x7c/0xa0
[  558.729464][T15196]  do_timer_create+0x66e/0x960
[  558.729502][T15196]  __x64_sys_timer_create+0xb9/0xe0
[  558.729563][T15196]  x64_sys_call+0x2a3e/0x3020
[  558.729656][T15196]  do_syscall_64+0x12c/0x3b0
[  558.729695][T15196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.729725][T15196] RIP: 0033:0x7f61bf45cdd9
[  558.729802][T15196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.729829][T15196] RSP: 002b:00007f61bdeb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  558.729861][T15196] RAX: ffffffffffffffda RBX: 00007f61bf6d5fa0 RCX: 00007f61bf45cdd9
[  558.729881][T15196] RDX: 0000200000bbdffc RSI: 0000200000533fa0 RDI: 0000000000000002
[  558.729900][T15196] RBP: 00007f61bdeb7090 R08: 0000000000000000 R09: 0000000000000000
[  558.729919][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.729958][T15196] R13: 00007f61bf6d6038 R14: 00007f61bf6d5fa0 R15: 00007ffddeb7af68
[  558.729987][T15196]  </TASK>
[  558.833012][T15192] openvswitch: netlink: Message has 8 unknown bytes.
[  559.211866][T11093] Bluetooth: hci0: command 0x1003 tx timeout
[  559.265417][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  559.273003][  T347] Bluetooth: hci1: Frame reassembly failed (-84)
[  559.740747][T15218] syz_tun: entered allmulticast mode
[  559.747079][T15218] syz_tun: left allmulticast mode
[  560.334423][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  560.334470][   T28] audit: type=1400 audit(1778311336.743:1631): avc:  denied  { ioctl } for  pid=15226 comm="syz.5.3553" path="socket:[54216]" dev="sockfs" ino=54216 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  560.381388][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'.
[  560.411225][T15232] lo speed is unknown, defaulting to 1000
[  560.517458][T15232] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  560.566376][   T28] audit: type=1400 audit(1778311336.933:1632): avc:  denied  { getopt } for  pid=15222 comm="syz.4.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  561.318918][T11093] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  561.318937][   T42] Bluetooth: hci1: command 0x1003 tx timeout
[  562.542848][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.559583][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.570971][T15237] siw: device registration error -23
[  562.789899][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.592960][T15252] FAULT_INJECTION: forcing a failure.
[  563.592960][T15252] name failslab, interval 1, probability 0, space 0, times 0
[  563.605692][T15252] CPU: 1 UID: 0 PID: 15252 Comm: syz.0.3560 Not tainted syzkaller #0 PREEMPT(full) 
[  563.605730][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  563.605744][T15252] Call Trace:
[  563.605751][T15252]  <TASK>
[  563.605759][T15252]  __dump_stack+0x1d/0x30
[  563.605906][T15252]  dump_stack_lvl+0x95/0xd0
[  563.605931][T15252]  dump_stack+0x15/0x1b
[  563.605957][T15252]  should_fail_ex+0x263/0x280
[  563.605996][T15252]  should_failslab+0x8c/0xb0
[  563.606059][T15252]  kmem_cache_alloc_node_noprof+0x6d/0x450
[  563.606105][T15252]  ? __alloc_skb+0x2d6/0x690
[  563.606129][T15252]  ? __dev_mc_del+0x18d/0x1a0
[  563.606155][T15252]  __alloc_skb+0x2d6/0x690
[  563.606242][T15252]  ? __alloc_skb+0x200/0x690
[  563.606266][T15252]  inet_ifmcaddr_notify+0x64/0x120
[  563.606304][T15252]  __ip_mc_dec_group+0x191/0x390
[  563.606347][T15252]  ip_mc_down+0x125/0x190
[  563.606419][T15252]  ip_mc_destroy_dev+0x3c/0x290
[  563.606469][T15252]  inetdev_event+0x5f6/0xba0
[  563.606498][T15252]  ? __pfx_ib_netdevice_event+0x10/0x10
[  563.606625][T15252]  ? ib_netdevice_event+0xeb/0x350
[  563.606655][T15252]  ? __pfx_inetdev_event+0x10/0x10
[  563.606699][T15252]  raw_notifier_call_chain+0x72/0x1a0
[  563.606759][T15252]  call_netdevice_notifiers_info+0x92/0xd0
[  563.606853][T15252]  netif_set_mtu_ext+0x3e3/0x520
[  563.606915][T15252]  netif_set_mtu+0x4a/0xe0
[  563.607014][T15252]  dev_set_mtu+0xc1/0x170
[  563.607118][T15252]  dev_ifsioc+0x46c/0xfd0
[  563.607150][T15252]  ? mutex_lock+0x57/0x90
[  563.607183][T15252]  dev_ioctl+0x709/0x960
[  563.607258][T15252]  sock_do_ioctl+0x1aa/0x230
[  563.607291][T15252]  sock_ioctl+0x41b/0x610
[  563.607337][T15252]  ? mutex_lock+0x57/0x90
[  563.607358][T15252]  ? __pfx_sock_ioctl+0x10/0x10
[  563.607386][T15252]  __se_sys_ioctl+0xce/0x140
[  563.607419][T15252]  __x64_sys_ioctl+0x43/0x50
[  563.607461][T15252]  x64_sys_call+0x1563/0x3020
[  563.607487][T15252]  do_syscall_64+0x12c/0x3b0
[  563.607526][T15252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.607549][T15252] RIP: 0033:0x7f3cad8bcdd9
[  563.607624][T15252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.607650][T15252] RSP: 002b:00007f3cac2d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  563.607675][T15252] RAX: ffffffffffffffda RBX: 00007f3cadb36180 RCX: 00007f3cad8bcdd9
[  563.607772][T15252] RDX: 0000200000000140 RSI: 0000000000008922 RDI: 000000000000000b
[  563.607791][T15252] RBP: 00007f3cac2d5090 R08: 0000000000000000 R09: 0000000000000000
[  563.607902][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.607937][T15252] R13: 00007f3cadb36218 R14: 00007f3cadb36180 R15: 00007fff7b25ec58
[  563.607959][T15252]  </TASK>
[  563.886968][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.997514][T15254] loop2: detected capacity change from 0 to 1024
[  564.005650][T15254] EXT4-fs: Ignoring removed orlov option
[  564.043519][T15254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.076790][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'.
[  564.091514][   T28] audit: type=1400 audit(1778311340.504:1633): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.120587][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.123450][   T28] audit: type=1400 audit(1778311340.524:1634): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.152210][   T28] audit: type=1400 audit(1778311340.524:1635): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.174915][   T28] audit: type=1400 audit(1778311340.524:1636): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.197355][   T28] audit: type=1400 audit(1778311340.524:1637): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.219701][   T28] audit: type=1400 audit(1778311340.534:1638): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.242202][   T28] audit: type=1400 audit(1778311340.534:1639): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.278501][   T28] audit: type=1400 audit(1778311340.534:1640): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  564.509990][T15279] program syz.5.3568 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  564.571164][T12190] Bluetooth: hci1: Frame reassembly failed (-84)
[  564.637249][T15283] siw: device registration error -23
[  564.999340][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3571'.
[  565.016765][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3571'.
[  565.613264][   T28] audit: type=1400 audit(1778311342.024:1641): avc:  denied  { mount } for  pid=15294 comm="syz.2.3574" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  565.635846][   T28] audit: type=1400 audit(1778311342.034:1642): avc:  denied  { setopt } for  pid=15294 comm="syz.2.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  565.639312][T11093] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  565.656367][   T28] audit: type=1400 audit(1778311342.034:1643): avc:  denied  { mounton } for  pid=15294 comm="syz.2.3574" path="/147/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  565.686308][T15295] 9p: Could not find request transport: 0xffffffffffffffff
[  565.707034][   T28] audit: type=1400 audit(1778311342.114:1644): avc:  denied  { unmount } for  pid=12142 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  565.872214][T15303] loop2: detected capacity change from 0 to 1024
[  565.895035][T15303] EXT4-fs: Ignoring removed orlov option
[  565.896875][T15305] FAULT_INJECTION: forcing a failure.
[  565.896875][T15305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  565.925978][T15305] CPU: 1 UID: 0 PID: 15305 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) 
[  565.926008][T15305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  565.926074][T15305] Call Trace:
[  565.926082][T15305]  <TASK>
[  565.926090][T15305]  __dump_stack+0x1d/0x30
[  565.926117][T15305]  dump_stack_lvl+0x95/0xd0
[  565.926188][T15305]  dump_stack+0x15/0x1b
[  565.926210][T15305]  should_fail_ex+0x263/0x280
[  565.926242][T15305]  should_fail+0xb/0x20
[  565.926271][T15305]  should_fail_usercopy+0x1a/0x20
[  565.926367][T15305]  _copy_from_user+0x1c/0xb0
[  565.926431][T15305]  __sys_bpf+0x183/0x7e0
[  565.926464][T15305]  __x64_sys_bpf+0x41/0x50
[  565.926488][T15305]  x64_sys_call+0x10cb/0x3020
[  565.926516][T15305]  do_syscall_64+0x12c/0x3b0
[  565.926591][T15305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.926616][T15305] RIP: 0033:0x7f6aa0ebcdd9
[  565.926634][T15305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.926656][T15305] RSP: 002b:00007f6a9f90f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  565.926750][T15305] RAX: ffffffffffffffda RBX: 00007f6aa1135fa0 RCX: 00007f6aa0ebcdd9
[  565.926766][T15305] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005
[  565.926781][T15305] RBP: 00007f6a9f90f090 R08: 0000000000000000 R09: 0000000000000000
[  565.926796][T15305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.926809][T15305] R13: 00007f6aa1136038 R14: 00007f6aa1135fa0 R15: 00007ffef1401968
[  565.926832][T15305]  </TASK>
[  566.116650][T15307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.129265][T15307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.133018][T15311] program syz.5.3580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  566.150392][T15303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.211122][   T28] audit: type=1400 audit(1778311342.624:1645): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.237687][   T28] audit: type=1400 audit(1778311342.644:1646): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.261091][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.261253][   T28] audit: type=1400 audit(1778311342.644:1647): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.294188][   T28] audit: type=1400 audit(1778311342.644:1648): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.316628][   T28] audit: type=1400 audit(1778311342.644:1649): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.331965][T15323] loop5: detected capacity change from 0 to 512
[  566.339516][   T28] audit: type=1400 audit(1778311342.644:1650): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  566.351170][T15323] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  566.379011][T15307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.379693][T15323] EXT4-fs (loop5): 1 truncate cleaned up
[  566.393883][T15323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.408457][T15307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.598292][T11093] Bluetooth: hci1: command 0x1003 tx timeout
[  566.598332][   T42] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  566.997306][T15335] loop4: detected capacity change from 0 to 128
[  567.514133][T15348] lo speed is unknown, defaulting to 1000
[  567.930584][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.001658][T15354] program syz.5.3592 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  568.076847][T15356] loop2: detected capacity change from 0 to 1024
[  568.086275][T15356] EXT4-fs: Ignoring removed orlov option
[  568.230644][T15356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  568.302511][T15371] FAULT_INJECTION: forcing a failure.
[  568.302511][T15371] name failslab, interval 1, probability 0, space 0, times 0
[  568.315271][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.5.3598 Not tainted syzkaller #0 PREEMPT(full) 
[  568.315379][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  568.315398][T15371] Call Trace:
[  568.315407][T15371]  <TASK>
[  568.315416][T15371]  __dump_stack+0x1d/0x30
[  568.315442][T15371]  dump_stack_lvl+0x95/0xd0
[  568.315494][T15371]  dump_stack+0x15/0x1b
[  568.315514][T15371]  should_fail_ex+0x263/0x280
[  568.315549][T15371]  should_failslab+0x8c/0xb0
[  568.315638][T15371]  __kmalloc_node_noprof+0xc8/0x550
[  568.315675][T15371]  ? __vmalloc_node_range_noprof+0x3f2/0x11c0
[  568.315700][T15371]  __vmalloc_node_range_noprof+0x3f2/0x11c0
[  568.315749][T15371]  ? __rcu_read_unlock+0x4e/0x70
[  568.315777][T15371]  __vmalloc_node_noprof+0x89/0xc0
[  568.315808][T15371]  ? copy_process+0x58e/0x2370
[  568.315837][T15371]  ? copy_process+0x58e/0x2370
[  568.315866][T15371]  dup_task_struct+0x22a/0x660
[  568.315895][T15371]  ? copy_process+0x57d/0x2370
[  568.315983][T15371]  copy_process+0x58e/0x2370
[  568.316016][T15371]  ? __rcu_read_unlock+0x4e/0x70
[  568.316067][T15371]  kernel_clone+0x1a5/0x5e0
[  568.316122][T15371]  ? vfs_write+0x86e/0x9f0
[  568.316153][T15371]  __x64_sys_clone+0x143/0x180
[  568.316223][T15371]  x64_sys_call+0x1222/0x3020
[  568.316249][T15371]  do_syscall_64+0x12c/0x3b0
[  568.316279][T15371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.316376][T15371] RIP: 0033:0x7ff0270ccdd9
[  568.316393][T15371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.316417][T15371] RSP: 002b:00007ff025adcfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  568.316444][T15371] RAX: ffffffffffffffda RBX: 00007ff027346180 RCX: 00007ff0270ccdd9
[  568.316465][T15371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  568.316478][T15371] RBP: 00007ff025add090 R08: 0000000000000000 R09: 0000000000000000
[  568.316494][T15371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.316511][T15371] R13: 00007ff027346218 R14: 00007ff027346180 R15: 00007fff6c2d1f08
[  568.316537][T15371]  </TASK>
[  568.316580][T15371] syz.5.3598: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[  568.545381][T15371] CPU: 1 UID: 0 PID: 15371 Comm: syz.5.3598 Not tainted syzkaller #0 PREEMPT(full) 
[  568.545412][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  568.545435][T15371] Call Trace:
[  568.545442][T15371]  <TASK>
[  568.545451][T15371]  __dump_stack+0x1d/0x30
[  568.545511][T15371]  dump_stack_lvl+0x95/0xd0
[  568.545532][T15371]  dump_stack+0x15/0x1b
[  568.545623][T15371]  warn_alloc+0x145/0x1c0
[  568.545653][T15371]  __vmalloc_node_range_noprof+0x7ef/0x11c0
[  568.545739][T15371]  ? __rcu_read_unlock+0x4e/0x70
[  568.545771][T15371]  __vmalloc_node_noprof+0x89/0xc0
[  568.545798][T15371]  ? copy_process+0x58e/0x2370
[  568.545820][T15371]  ? copy_process+0x58e/0x2370
[  568.545913][T15371]  dup_task_struct+0x22a/0x660
[  568.545935][T15371]  ? copy_process+0x57d/0x2370
[  568.546021][T15371]  copy_process+0x58e/0x2370
[  568.546052][T15371]  ? __rcu_read_unlock+0x4e/0x70
[  568.546077][T15371]  kernel_clone+0x1a5/0x5e0
[  568.546100][T15371]  ? vfs_write+0x86e/0x9f0
[  568.546136][T15371]  __x64_sys_clone+0x143/0x180
[  568.546284][T15371]  x64_sys_call+0x1222/0x3020
[  568.546324][T15371]  do_syscall_64+0x12c/0x3b0
[  568.546363][T15371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.546386][T15371] RIP: 0033:0x7ff0270ccdd9
[  568.546450][T15371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.546473][T15371] RSP: 002b:00007ff025adcfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  568.546504][T15371] RAX: ffffffffffffffda RBX: 00007ff027346180 RCX: 00007ff0270ccdd9
[  568.546524][T15371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  568.546541][T15371] RBP: 00007ff025add090 R08: 0000000000000000 R09: 0000000000000000
[  568.546556][T15371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  568.546569][T15371] R13: 00007ff027346218 R14: 00007ff027346180 R15: 00007fff6c2d1f08
[  568.546594][T15371]  </TASK>
[  568.546626][T15371] Mem-Info:
[  568.743576][T15371] active_anon:17100 inactive_anon:1 isolated_anon:0
[  568.743576][T15371]  active_file:22441 inactive_file:3234 isolated_file:0
[  568.743576][T15371]  unevictable:0 dirty:365 writeback:0
[  568.743576][T15371]  slab_reclaimable:3365 slab_unreclaimable:17076
[  568.743576][T15371]  mapped:41620 shmem:8903 pagetables:3379
[  568.743576][T15371]  sec_pagetables:0 bounce:0
[  568.743576][T15371]  kernel_misc_reclaimable:0
[  568.743576][T15371]  free:1871897 free_pcp:4169 free_cma:0
[  568.788749][T15371] Node 0 active_anon:68400kB inactive_anon:4kB active_file:89764kB inactive_file:12936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166480kB dirty:1460kB writeback:0kB shmem:35612kB kernel_stack:4064kB pagetables:13516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  568.819230][T15371] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  568.849146][T15371] lowmem_reserve[]: 0 2878 7857 7857
[  568.854500][T15371] Node 0 DMA32 free:2944424kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948052kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB
[  568.885897][T15371] lowmem_reserve[]: 0 0 4978 4978
[  568.891185][T15371] Node 0 Normal free:4527804kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68400kB inactive_anon:4kB active_file:89764kB inactive_file:12936kB unevictable:0kB writepending:1460kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:13048kB local_pcp:4548kB free_cma:0kB
[  568.924523][T15371] lowmem_reserve[]: 0 0 0 0
[  568.929470][T15371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  568.942570][T15371] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944424kB
[  568.958906][T15371] Node 0 Normal: 559*4kB (UM) 567*8kB (UME) 6*16kB (UE) 125*32kB (U) 301*64kB (UME) 315*128kB (UM) 249*256kB (UME) 195*512kB (UME) 175*1024kB (UME) 125*2048kB (UM) 942*4096kB (UM) = 4527668kB
[  568.968228][T12182] Bluetooth: hci1: Frame reassembly failed (-84)
[  568.978176][T15371] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  568.993880][T15371] 34618 total pagecache pages
[  568.998632][T15371] 9 pages in swap cache
[  569.002898][T15371] Free swap  = 124644kB
[  569.007155][T15371] Total swap = 124996kB
[  569.011363][T15371] 2097051 pages RAM
[  569.015200][T15371] 0 pages HighMem/MovableOnly
[  569.020006][T15371] 81639 pages reserved
[  569.046513][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.120596][T15380] loop2: detected capacity change from 0 to 512
[  569.202396][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3602'.
[  569.236842][T15390] FAULT_INJECTION: forcing a failure.
[  569.236842][T15390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.250077][T15390] CPU: 1 UID: 0 PID: 15390 Comm: syz.0.3605 Not tainted syzkaller #0 PREEMPT(full) 
[  569.250109][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  569.250122][T15390] Call Trace:
[  569.250150][T15390]  <TASK>
[  569.250162][T15390]  __dump_stack+0x1d/0x30
[  569.250287][T15390]  dump_stack_lvl+0x95/0xd0
[  569.250308][T15390]  dump_stack+0x15/0x1b
[  569.250331][T15390]  should_fail_ex+0x263/0x280
[  569.250370][T15390]  should_fail+0xb/0x20
[  569.250404][T15390]  should_fail_usercopy+0x1a/0x20
[  569.250467][T15390]  copy_folio_from_iter_atomic+0x24d/0x10b0
[  569.250541][T15390]  ? shmem_write_begin+0xfc/0x1f0
[  569.250563][T15390]  ? shmem_write_begin+0x135/0x1f0
[  569.250643][T15390]  generic_perform_write+0x2c1/0x490
[  569.250678][T15390]  shmem_file_write_iter+0xc5/0xf0
[  569.250716][T15390]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  569.250899][T15390]  vfs_write+0x5a6/0x9f0
[  569.250974][T15390]  ksys_write+0xdc/0x1a0
[  569.251005][T15390]  __x64_sys_write+0x40/0x50
[  569.251044][T15390]  x64_sys_call+0x27e1/0x3020
[  569.251077][T15390]  do_syscall_64+0x12c/0x3b0
[  569.251157][T15390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.251261][T15390] RIP: 0033:0x7f3cad8bcdd9
[  569.251280][T15390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.251305][T15390] RSP: 002b:00007f3cac317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  569.251331][T15390] RAX: ffffffffffffffda RBX: 00007f3cadb35fa0 RCX: 00007f3cad8bcdd9
[  569.251351][T15390] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000003
[  569.251365][T15390] RBP: 00007f3cac317090 R08: 0000000000000000 R09: 0000000000000000
[  569.251432][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.251446][T15390] R13: 00007f3cadb36038 R14: 00007f3cadb35fa0 R15: 00007fff7b25ec58
[  569.251466][T15390]  </TASK>
[  569.318123][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  569.323391][ T5274] Bluetooth: hci0: command 0x1003 tx timeout
[  569.705348][T15396] program syz.0.3606 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  570.031786][T15402] tipc: Failed to obtain node identity
[  570.046893][T15402] tipc: Enabling of bearer <ib:netdevsim0> rejected, failed to enable media
[  570.252648][T15406] loop5: detected capacity change from 0 to 1024
[  570.271368][T15406] EXT4-fs: Ignoring removed orlov option
[  570.374788][T15406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.415528][T15413] loop2: detected capacity change from 0 to 512
[  570.423794][T15413] EXT4-fs: Ignoring removed oldalloc option
[  570.430166][T15413] EXT4-fs: Ignoring removed nobh option
[  570.450734][T15413] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3612: iget: bad extra_isize 90 (inode size 256)
[  570.468293][T15413] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  570.469643][T15413] EXT4-fs (loop2): Remounting filesystem read-only
[  570.478855][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  570.478878][    C1] EXT4-fs (loop2): initial error at time 1778311346: ext4_xattr_inode_iget:441: inode 11
[  570.478921][    C1] EXT4-fs (loop2): last error at time 1778311346: ext4_xattr_inode_iget:441: inode 11
[  570.511927][T15413] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  570.522204][T15413] EXT4-fs (loop2): 1 orphan inode deleted
[  570.528577][T15413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.541591][T15414] lo speed is unknown, defaulting to 1000
[  570.547455][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.672208][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.672546][T15418] siw: device registration error -23
[  570.856669][T15427] program syz.2.3617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  570.901597][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'.
[  570.966975][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'.
[  570.967031][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'.
[  570.967084][T15430] netlink: 'syz.2.3618': attribute type 18 has an invalid length.
[  570.967101][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'.
[  570.999151][   T42] Bluetooth: hci1: command 0x1003 tx timeout
[  570.999254][T11093] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  571.089200][T15432] loop4: detected capacity change from 0 to 512
[  571.135776][T15432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.358823][   T28] kauditd_printk_skb: 23 callbacks suppressed
[  572.358841][   T28] audit: type=1400 audit(1778311348.775:1674): avc:  denied  { connect } for  pid=15397 comm="syz.0.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  572.832079][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.108754][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3624'.
[  573.725127][T15461] program syz.0.3628 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  573.988711][T12190] Bluetooth: hci1: Frame reassembly failed (-84)
[  574.025231][T15473] loop2: detected capacity change from 0 to 512
[  574.033746][T15473] EXT4-fs: Ignoring removed oldalloc option
[  574.040144][T15473] EXT4-fs: Ignoring removed nobh option
[  574.054732][T15473] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3633: iget: bad extra_isize 90 (inode size 256)
[  574.068631][T15473] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  574.068824][T15473] EXT4-fs (loop2): Remounting filesystem read-only
[  574.078013][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  574.078036][    C1] EXT4-fs (loop2): initial error at time 1778311350: ext4_xattr_inode_iget:441: inode 11
[  574.078062][    C1] EXT4-fs (loop2): last error at time 1778311350: ext4_xattr_inode_iget:441: inode 11
[  574.111069][T15473] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  574.121919][T15473] EXT4-fs (loop2): 1 orphan inode deleted
[  574.129152][T15473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.157512][   T28] audit: type=1400 audit(1778311350.575:1675): avc:  denied  { write } for  pid=15472 comm="syz.2.3633" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  575.157493][ T5274] Bluetooth: hci0: command 0x1003 tx timeout
[  575.163646][T11093] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  575.422206][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.498381][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3635'.
[  575.595660][T15489] program syz.2.3639 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  575.632957][T15486] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.648436][T15486] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.779073][T15501] siw: device registration error -23
[  575.816267][T15505] loop4: detected capacity change from 0 to 512
[  575.830625][T15505] EXT4-fs: Ignoring removed oldalloc option
[  575.838373][T15505] EXT4-fs: Ignoring removed nobh option
[  575.847737][T15505] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3645: iget: bad extra_isize 90 (inode size 256)
[  575.861321][T15505] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  575.861473][T15505] EXT4-fs (loop4): Remounting filesystem read-only
[  575.870651][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  575.870672][    C0] EXT4-fs (loop4): initial error at time 1778311352: ext4_xattr_inode_iget:441: inode 11
[  575.870703][    C0] EXT4-fs (loop4): last error at time 1778311352: ext4_xattr_inode_iget:441: inode 11
[  575.903705][T15505] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  575.914249][T15505] EXT4-fs (loop4): 1 orphan inode deleted
[  575.922895][T15505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.950829][   T28] audit: type=1400 audit(1778311352.365:1676): avc:  denied  { write } for  pid=15504 comm="syz.4.3645" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  576.037172][   T42] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  576.120014][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'.
[  576.549523][T15519] program syz.2.3651 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  576.586520][   T28] audit: type=1400 audit(1778311352.995:1677): avc:  denied  { read } for  pid=15520 comm="syz.2.3652" path="socket:[55782]" dev="sockfs" ino=55782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  576.637609][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3652'.
[  577.566180][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.701209][   T28] audit: type=1400 audit(1778311354.115:1678): avc:  denied  { write } for  pid=15535 comm="syz.1.3657" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  577.757283][   T28] audit: type=1400 audit(1778311354.175:1679): avc:  denied  { ioctl } for  pid=15535 comm="syz.1.3657" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  577.789689][T15536] FAULT_INJECTION: forcing a failure.
[  577.789689][T15536] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  577.817331][T15536] CPU: 0 UID: 0 PID: 15536 Comm: syz.1.3657 Not tainted syzkaller #0 PREEMPT(full) 
[  577.817369][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  577.817430][T15536] Call Trace:
[  577.817480][T15536]  <TASK>
[  577.817490][T15536]  __dump_stack+0x1d/0x30
[  577.817523][T15536]  dump_stack_lvl+0x95/0xd0
[  577.817556][T15536]  dump_stack+0x15/0x1b
[  577.817583][T15536]  should_fail_ex+0x263/0x280
[  577.817697][T15536]  should_fail_alloc_page+0xf2/0x100
[  577.817823][T15536]  __alloc_frozen_pages_noprof+0x108/0x350
[  577.817921][T15536]  alloc_pages_mpol+0xb3/0x260
[  577.817952][T15536]  ? irqentry_exit+0x7d/0x5b0
[  577.817979][T15536]  vma_alloc_folio_noprof+0x1a9/0x2f0
[  577.818042][T15536]  do_wp_page+0x70e/0x2040
[  577.818072][T15536]  ? __rcu_read_lock+0x36/0x50
[  577.818097][T15536]  handle_mm_fault+0x8b9/0x2e70
[  577.818133][T15536]  ? vma_start_read+0x1c7/0x2c0
[  577.818241][T15536]  do_user_addr_fault+0x62f/0x1050
[  577.818327][T15536]  ? trace_page_fault_user+0x1f/0xa0
[  577.818430][T15536]  exc_page_fault+0x62/0xa0
[  577.818452][T15536]  asm_exc_page_fault+0x26/0x30
[  577.818474][T15536] RIP: 0033:0x7f6aa0d830bd
[  577.818494][T15536] Code: fe ff 48 83 c4 78 5b 5d 41 5c 41 5e c3 48 8b 44 24 20 48 8b 5c 24 08 48 8b b0 88 00 00 00 8b 78 08 48 8d 53 30 e8 93 39 ff ff <48> 89 83 88 00 00 00 e9 35 fe ff ff 0f 1f 80 00 00 00 00 8b 7c 24
[  577.818519][T15536] RSP: 002b:00007f6a9f90f050 EFLAGS: 00010206
[  577.818537][T15536] RAX: 0000000000000008 RBX: 00007f6aa1135fa0 RCX: 00007f6aa0f52d69
[  577.818609][T15536] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 0000000000000003
[  577.818627][T15536] RBP: 00007f6a9f90f090 R08: 000000000000000c R09: 0000000000000000
[  577.818645][T15536] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  577.818694][T15536] R13: 00007f6aa1136038 R14: 00007f6aa1135fa0 R15: 00007ffef1401968
[  577.818716][T15536]  </TASK>
[  577.819263][T15536] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  578.147994][T12192] Bluetooth: hci0: Frame reassembly failed (-84)
[  578.471631][   T28] audit: type=1326 audit(1778311354.885:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.508911][   T28] audit: type=1326 audit(1778311354.885:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.537511][   T28] audit: type=1326 audit(1778311354.885:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.566081][   T28] audit: type=1326 audit(1778311354.885:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.606207][   T28] audit: type=1326 audit(1778311354.885:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.647109][   T28] audit: type=1326 audit(1778311354.885:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.718022][   T28] audit: type=1326 audit(1778311354.885:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.755675][   T28] audit: type=1326 audit(1778311354.885:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.1.3664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  578.800647][T15567] loop2: detected capacity change from 0 to 512
[  579.950832][T15572] loop2: detected capacity change from 0 to 8192
[  579.960044][T15572] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  579.975600][T15567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  579.990146][T15567] FAT-fs (loop2): Filesystem has been set read-only
[  580.000978][T15567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  580.009863][T15567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  580.196705][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  580.196721][T11093] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  580.449316][T15596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.459078][T15596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.450137][T15606] siw: device registration error -23
[  583.252683][T15608] loop4: detected capacity change from 0 to 512
[  583.414609][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3690'.
[  583.426792][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3689'.
[  583.533327][T15625] netlink: 'syz.2.3692': attribute type 1 has an invalid length.
[  583.582355][T15621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15621 comm=syz.0.3690
[  583.671471][T15626] xt_hashlimit: size too large, truncated to 1048576
[  583.679990][T12192] Bluetooth: hci0: Frame reassembly failed (-84)
[  583.975739][T15608] loop4: detected capacity change from 0 to 8192
[  584.003609][T15608] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  585.716028][T11093] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  585.722279][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  586.136663][T15667] tmpfs: Unknown parameter 'n'
[  586.893786][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3704'.
[  586.966584][T15673] program syz.4.3706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  587.020113][  T937] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  587.041696][  T937] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  587.580800][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'.
[  587.817506][T12190] Bluetooth: hci0: Frame reassembly failed (-84)
[  589.875615][T11093] Bluetooth: hci0: command 0x1003 tx timeout
[  589.875688][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  590.631139][T15725] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3724'.
[  590.686506][T15718] loop5: detected capacity change from 0 to 4096
[  590.695662][T15718] EXT4-fs: Invalid want_extra_isize 19
[  590.702135][T15718] tmpfs: Unknown parameter 'n'
[  591.601955][T15754] siw: device registration error -23
[  591.670643][T15758] siw: device registration error -23
[  591.733131][T15763] loop5: detected capacity change from 0 to 512
[  591.836651][T15768] program syz.2.3740 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  591.889639][T15773] loop2: detected capacity change from 0 to 512
[  591.901273][T15773] EXT4-fs: Ignoring removed oldalloc option
[  591.917106][T15773] EXT4-fs: Ignoring removed nobh option
[  591.946797][T15773] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3742: iget: bad extra_isize 90 (inode size 256)
[  591.960904][T15773] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  591.962244][T15773] EXT4-fs (loop2): Remounting filesystem read-only
[  591.971543][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  591.971564][    C1] EXT4-fs (loop2): initial error at time 591: ext4_xattr_inode_iget:441: inode 11
[  591.971596][    C1] EXT4-fs (loop2): last error at time 591: ext4_xattr_inode_iget:441: inode 11
[  592.003143][T15773] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  592.013324][T15773] EXT4-fs (loop2): 1 orphan inode deleted
[  592.019526][T15773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.047094][   T28] kauditd_printk_skb: 449 callbacks suppressed
[  592.047113][   T28] audit: type=1400 audit(592.044:2137): avc:  denied  { write } for  pid=15772 comm="syz.2.3742" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  592.075724][T15763] loop5: detected capacity change from 0 to 8192
[  592.107366][T15763] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  592.258592][T15782] loop5: detected capacity change from 0 to 512
[  592.280589][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.296093][T15784] siw: device registration error -23
[  592.535889][T15796] program syz.2.3752 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  592.737543][   T28] audit: type=1400 audit(592.724:2138): avc:  denied  { mount } for  pid=15805 comm="syz.2.3756" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  592.805227][T15782] loop5: detected capacity change from 0 to 8192
[  592.842577][T15782] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  592.941072][T15817] loop2: detected capacity change from 0 to 512
[  592.950489][T15817] EXT4-fs: Ignoring removed oldalloc option
[  592.957261][T15817] EXT4-fs: Ignoring removed nobh option
[  592.972576][T15817] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3762: iget: bad extra_isize 90 (inode size 256)
[  592.990061][T15817] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  592.990260][T15817] EXT4-fs (loop2): Remounting filesystem read-only
[  592.999671][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  592.999698][    C1] EXT4-fs (loop2): initial error at time 592: ext4_xattr_inode_iget:441: inode 11
[  592.999729][    C1] EXT4-fs (loop2): last error at time 592: ext4_xattr_inode_iget:441: inode 11
[  593.005526][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  593.011543][T15817] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  593.047765][T15817] EXT4-fs (loop2): 1 orphan inode deleted
[  593.056590][T15817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.084761][   T28] audit: type=1400 audit(593.074:2139): avc:  denied  { write } for  pid=15816 comm="syz.2.3762" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  593.287287][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3768'.
[  593.317373][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.413739][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3770'.
[  593.453665][T15840] loop2: detected capacity change from 0 to 1024
[  593.470371][T15844] Cannot find del_set index 1 as target
[  593.476379][   T28] audit: type=1400 audit(593.464:2140): avc:  denied  { connect } for  pid=15843 comm="syz.4.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  593.497351][T15840] EXT4-fs: Ignoring removed orlov option
[  593.521189][   T28] audit: type=1400 audit(593.494:2141): avc:  denied  { write } for  pid=15843 comm="syz.4.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  593.556954][T15840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  594.958931][   T28] audit: type=1400 audit(594.954:2142): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  594.981545][   T28] audit: type=1400 audit(594.984:2143): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  595.003574][   T28] audit: type=1400 audit(594.984:2144): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  595.009421][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.030483][   T28] audit: type=1400 audit(594.984:2145): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  595.056168][   T28] audit: type=1400 audit(594.984:2146): avc:  denied  { write } for  pid=12142 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  595.119310][T15859] loop2: detected capacity change from 0 to 128
[  595.157822][T15859] FAT-fs (loop2): bogus number of reserved sectors
[  595.180206][T15859] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  595.203887][T15859] FAT-fs (loop2): Can't find a valid FAT filesystem
[  595.221627][T15859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3775'.
[  595.241550][T15859] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1013 sclass=netlink_xfrm_socket pid=15859 comm=syz.2.3775
[  595.364590][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'.
[  595.447803][T15880] loop4: detected capacity change from 0 to 512
[  595.459243][T15880] EXT4-fs: Ignoring removed oldalloc option
[  595.478085][T15880] EXT4-fs: Ignoring removed nobh option
[  595.505316][T15880] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3785: iget: bad extra_isize 90 (inode size 256)
[  595.519548][T15880] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  595.520032][T15880] EXT4-fs (loop4): Remounting filesystem read-only
[  595.529348][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  595.529375][    C0] EXT4-fs (loop4): initial error at time 595: ext4_xattr_inode_iget:441: inode 11
[  595.529404][    C0] EXT4-fs (loop4): last error at time 595: ext4_xattr_inode_iget:441: inode 11
[  595.561033][T15880] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  595.571236][T15880] EXT4-fs (loop4): 1 orphan inode deleted
[  595.577498][T15880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.624588][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3787'.
[  595.643243][T15883] EXT4-fs: Invalid want_extra_isize 19
[  595.718871][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.786635][T15892] set_capacity_and_notify: 1 callbacks suppressed
[  595.794084][T15892] loop5: detected capacity change from 0 to 512
[  595.827922][T15892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  595.844124][T15892] FAULT_INJECTION: forcing a failure.
[  595.844124][T15892] name failslab, interval 1, probability 0, space 0, times 0
[  595.857061][T15892] CPU: 1 UID: 0 PID: 15892 Comm: syz.5.3789 Not tainted syzkaller #0 PREEMPT(full) 
[  595.857097][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  595.857192][T15892] Call Trace:
[  595.857200][T15892]  <TASK>
[  595.857211][T15892]  __dump_stack+0x1d/0x30
[  595.857243][T15892]  dump_stack_lvl+0x95/0xd0
[  595.857322][T15892]  dump_stack+0x15/0x1b
[  595.857346][T15892]  should_fail_ex+0x263/0x280
[  595.857381][T15892]  should_failslab+0x8c/0xb0
[  595.857493][T15892]  kmem_cache_alloc_noprof+0x66/0x3f0
[  595.857529][T15892]  ? security_inode_alloc+0x37/0x100
[  595.857566][T15892]  security_inode_alloc+0x37/0x100
[  595.857640][T15892]  inode_init_always_gfp+0x4a0/0x4e0
[  595.857685][T15892]  ? __pfx_sock_alloc_inode+0x10/0x10
[  595.857717][T15892]  alloc_inode+0x58/0x170
[  595.857808][T15892]  __sock_create+0x120/0x580
[  595.857911][T15892]  __sys_socket+0xaf/0x180
[  595.857943][T15892]  __x64_sys_socket+0x3f/0x50
[  595.857977][T15892]  x64_sys_call+0x11fc/0x3020
[  595.858084][T15892]  do_syscall_64+0x12c/0x3b0
[  595.858115][T15892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.858145][T15892] RIP: 0033:0x7ff0270ccdd9
[  595.858225][T15892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.858245][T15892] RSP: 002b:00007ff025b1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  595.858269][T15892] RAX: ffffffffffffffda RBX: 00007ff027345fa0 RCX: 00007ff0270ccdd9
[  595.858293][T15892] RDX: 0000000000000006 RSI: 0000000000080000 RDI: 0000000000000008
[  595.858311][T15892] RBP: 00007ff025b1f090 R08: 0000000000000000 R09: 0000000000000000
[  595.858326][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  595.858339][T15892] R13: 00007ff027346038 R14: 00007ff027345fa0 R15: 00007fff6c2d1f08
[  595.858359][T15892]  </TASK>
[  595.858380][T15892] socket: no more sockets
[  596.068925][    C1] Adjusting tsc more than 11% (6087084 vs 8464875)
[  596.099718][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.148403][T15913] loop5: detected capacity change from 0 to 512
[  596.160635][T15913] EXT4-fs: Ignoring removed oldalloc option
[  596.173041][T15913] EXT4-fs: Ignoring removed nobh option
[  596.195404][T15913] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.3795: iget: bad extra_isize 90 (inode size 256)
[  596.220691][T15913] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  596.229242][T15913] EXT4-fs (loop5): Remounting filesystem read-only
[  596.238609][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  596.238643][    C1] EXT4-fs (loop5): initial error at time 596: ext4_xattr_inode_iget:441: inode 11
[  596.238682][    C1] EXT4-fs (loop5): last error at time 596: ext4_xattr_inode_iget:441: inode 11
[  596.270755][T15913] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  596.280939][T15913] EXT4-fs (loop5): 1 orphan inode deleted
[  596.287399][T15913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  596.352419][T15926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3799'.
[  596.442976][T15926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15926 comm=syz.2.3799
[  596.503999][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3806'.
[  596.524834][T14544] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.566909][T15933] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3804'.
[  596.586375][T15945] FAULT_INJECTION: forcing a failure.
[  596.586375][T15945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  596.600547][T15945] CPU: 1 UID: 0 PID: 15945 Comm: syz.1.3810 Not tainted syzkaller #0 PREEMPT(full) 
[  596.600582][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  596.600658][T15945] Call Trace:
[  596.600667][T15945]  <TASK>
[  596.600677][T15945]  __dump_stack+0x1d/0x30
[  596.600708][T15945]  dump_stack_lvl+0x95/0xd0
[  596.600769][T15945]  dump_stack+0x15/0x1b
[  596.600794][T15945]  should_fail_ex+0x263/0x280
[  596.600832][T15945]  should_fail+0xb/0x20
[  596.600867][T15945]  should_fail_usercopy+0x1a/0x20
[  596.600963][T15945]  _copy_to_user+0x20/0xa0
[  596.601006][T15945]  simple_read_from_buffer+0xb5/0x130
[  596.601055][T15945]  proc_fail_nth_read+0x10e/0x150
[  596.601123][T15945]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  596.601196][T15945]  vfs_read+0x1ab/0x7f0
[  596.601235][T15945]  ? __rcu_read_unlock+0x4e/0x70
[  596.601285][T15945]  ? __fget_files+0x184/0x1c0
[  596.601390][T15945]  ? mutex_lock+0x57/0x90
[  596.601455][T15945]  ksys_read+0xdc/0x1a0
[  596.601531][T15945]  __x64_sys_read+0x40/0x50
[  596.601619][T15945]  x64_sys_call+0x2886/0x3020
[  596.601654][T15945]  do_syscall_64+0x12c/0x3b0
[  596.601764][T15945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.601870][T15945] RIP: 0033:0x7f6aa0e7d60e
[  596.601893][T15945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  596.601919][T15945] RSP: 002b:00007f6a9f90efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  596.601944][T15945] RAX: ffffffffffffffda RBX: 00007f6a9f90f6c0 RCX: 00007f6aa0e7d60e
[  596.601960][T15945] RDX: 000000000000000f RSI: 00007f6a9f90f0a0 RDI: 0000000000000003
[  596.602010][T15945] RBP: 00007f6a9f90f090 R08: 0000000000000000 R09: 0000000000000000
[  596.602029][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.602047][T15945] R13: 00007f6aa1136038 R14: 00007f6aa1135fa0 R15: 00007ffef1401968
[  596.602102][T15945]  </TASK>
[  596.840363][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3811'.
[  597.002961][T15954] program syz.1.3813 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.830046][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3815'.
[  597.856764][T15959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15959 comm=syz.1.3815
[  597.892892][T15965] loop2: detected capacity change from 0 to 512
[  597.901712][T15965] EXT4-fs: Ignoring removed oldalloc option
[  597.910309][T15965] EXT4-fs: Ignoring removed nobh option
[  597.923520][T15965] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3817: iget: bad extra_isize 90 (inode size 256)
[  597.941511][T15965] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  597.948242][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  597.964000][    C0] EXT4-fs (loop2): initial error at time 597: ext4_xattr_inode_iget:441: inode 11
[  597.973312][    C0] EXT4-fs (loop2): last error at time 597: ext4_xattr_inode_iget:441: inode 11
[  597.982621][T15965] EXT4-fs (loop2): Remounting filesystem read-only
[  597.990308][T15965] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  598.000649][T15965] EXT4-fs (loop2): 1 orphan inode deleted
[  598.012520][T15970] loop4: detected capacity change from 0 to 256
[  598.019316][T15965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  598.037843][T15970] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  598.055950][   T28] kauditd_printk_skb: 77 callbacks suppressed
[  598.055970][   T28] audit: type=1400 audit(597.606:2224): avc:  denied  { write } for  pid=15964 comm="syz.2.3817" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  598.104719][T15976] FAULT_INJECTION: forcing a failure.
[  598.104719][T15976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  598.118706][T15976] CPU: 0 UID: 0 PID: 15976 Comm: syz.5.3821 Not tainted syzkaller #0 PREEMPT(full) 
[  598.118741][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  598.118760][T15976] Call Trace:
[  598.118769][T15976]  <TASK>
[  598.118779][T15976]  __dump_stack+0x1d/0x30
[  598.118810][T15976]  dump_stack_lvl+0x95/0xd0
[  598.118838][T15976]  dump_stack+0x15/0x1b
[  598.118932][T15976]  should_fail_ex+0x263/0x280
[  598.119024][T15976]  should_fail+0xb/0x20
[  598.119089][T15976]  should_fail_usercopy+0x1a/0x20
[  598.119164][T15976]  _copy_from_user+0x1c/0xb0
[  598.119238][T15976]  do_sock_getsockopt+0x122/0x570
[  598.119268][T15976]  __x64_sys_getsockopt+0x11d/0x1a0
[  598.119328][T15976]  x64_sys_call+0x2dcf/0x3020
[  598.119362][T15976]  do_syscall_64+0x12c/0x3b0
[  598.119401][T15976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.119491][T15976] RIP: 0033:0x7ff0270ccdd9
[  598.119513][T15976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.119539][T15976] RSP: 002b:00007ff025b1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  598.119620][T15976] RAX: ffffffffffffffda RBX: 00007ff027345fa0 RCX: 00007ff0270ccdd9
[  598.119639][T15976] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004
[  598.119728][T15976] RBP: 00007ff025b1f090 R08: 0000000000000000 R09: 0000000000000000
[  598.119782][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.119795][T15976] R13: 00007ff027346038 R14: 00007ff027345fa0 R15: 00007fff6c2d1f08
[  598.119855][T15976]  </TASK>
[  598.299769][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'.
[  598.320448][T15970] Process accounting resumed
[  598.325322][T15970] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  598.343399][T15970] FAT-fs (loop4): Filesystem has been set read-only
[  598.343687][T15982] program syz.0.3824 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  598.371195][ T9728] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  599.421688][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  599.506943][T16003] FAULT_INJECTION: forcing a failure.
[  599.506943][T16003] name failslab, interval 1, probability 0, space 0, times 0
[  599.521830][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.0.3832 Not tainted syzkaller #0 PREEMPT(full) 
[  599.521862][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  599.521876][T16003] Call Trace:
[  599.521884][T16003]  <TASK>
[  599.521892][T16003]  __dump_stack+0x1d/0x30
[  599.521934][T16003]  dump_stack_lvl+0x95/0xd0
[  599.521997][T16003]  dump_stack+0x15/0x1b
[  599.522024][T16003]  should_fail_ex+0x263/0x280
[  599.522062][T16003]  should_failslab+0x8c/0xb0
[  599.522121][T16003]  kmem_cache_alloc_noprof+0x66/0x3f0
[  599.522237][T16003]  ? skb_clone+0x151/0x1f0
[  599.522262][T16003]  skb_clone+0x151/0x1f0
[  599.522289][T16003]  __netlink_deliver_tap+0x2c9/0x500
[  599.522434][T16003]  netlink_unicast+0x653/0x680
[  599.522470][T16003]  netlink_sendmsg+0x5c8/0x6f0
[  599.522513][T16003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  599.522602][T16003]  ____sys_sendmsg+0x563/0x5b0
[  599.522638][T16003]  ___sys_sendmsg+0x195/0x1e0
[  599.522773][T16003]  __x64_sys_sendmsg+0xd4/0x160
[  599.522802][T16003]  x64_sys_call+0x194c/0x3020
[  599.522833][T16003]  do_syscall_64+0x12c/0x3b0
[  599.522937][T16003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.522992][T16003] RIP: 0033:0x7f3cad8bcdd9
[  599.523009][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.523039][T16003] RSP: 002b:00007f3cac317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  599.523065][T16003] RAX: ffffffffffffffda RBX: 00007f3cadb35fa0 RCX: 00007f3cad8bcdd9
[  599.523099][T16003] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  599.523114][T16003] RBP: 00007f3cac317090 R08: 0000000000000000 R09: 0000000000000000
[  599.523128][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.523145][T16003] R13: 00007f3cadb36038 R14: 00007f3cadb35fa0 R15: 00007fff7b25ec58
[  599.523200][T16003]  </TASK>
[  599.759123][T16000] syzkaller0: entered promiscuous mode
[  599.764634][T16000] syzkaller0: entered allmulticast mode
[  599.796733][   T28] audit: type=1400 audit(599.088:2225): avc:  denied  { mount } for  pid=16005 comm="syz.2.3833" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  599.828877][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3835'.
[  599.878709][T16012] loop4: detected capacity change from 0 to 512
[  599.930543][T16014] program syz.5.3837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  600.222072][T16036] loop5: detected capacity change from 0 to 128
[  600.275326][T16036] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  600.300893][T16046] FAULT_INJECTION: forcing a failure.
[  600.300893][T16046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  600.314281][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.4.3849 Not tainted syzkaller #0 PREEMPT(full) 
[  600.314329][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  600.314346][T16046] Call Trace:
[  600.314355][T16046]  <TASK>
[  600.314364][T16046]  __dump_stack+0x1d/0x30
[  600.314391][T16046]  dump_stack_lvl+0x95/0xd0
[  600.314413][T16046]  dump_stack+0x15/0x1b
[  600.314460][T16046]  should_fail_ex+0x263/0x280
[  600.314494][T16046]  should_fail+0xb/0x20
[  600.314601][T16046]  should_fail_usercopy+0x1a/0x20
[  600.314634][T16046]  _copy_from_user+0x1c/0xb0
[  600.314669][T16046]  ___sys_sendmsg+0xc1/0x1e0
[  600.314759][T16046]  __x64_sys_sendmsg+0xd4/0x160
[  600.314799][T16046]  x64_sys_call+0x194c/0x3020
[  600.314866][T16046]  do_syscall_64+0x12c/0x3b0
[  600.314908][T16046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.314939][T16046] RIP: 0033:0x7feccca7cdd9
[  600.314960][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.314981][T16046] RSP: 002b:00007feccb4d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  600.315056][T16046] RAX: ffffffffffffffda RBX: 00007feccccf5fa0 RCX: 00007feccca7cdd9
[  600.315077][T16046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  600.315102][T16046] RBP: 00007feccb4d7090 R08: 0000000000000000 R09: 0000000000000000
[  600.315121][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  600.315139][T16046] R13: 00007feccccf6038 R14: 00007feccccf5fa0 R15: 00007fff5eb91328
[  600.315196][T16046]  </TASK>
[  601.325575][T16049] loop4: detected capacity change from 0 to 512
[  601.337439][T16051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3851'.
[  601.384533][T14544] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  601.434053][   T28] audit: type=1400 audit(600.515:2226): avc:  denied  { create } for  pid=16054 comm="syz.1.3854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  601.444727][T16060] loop5: detected capacity change from 0 to 512
[  601.467603][T16056] macvlan2: entered promiscuous mode
[  601.474518][T16056] bridge0: entered promiscuous mode
[  601.487658][T16060] ext4: Unknown parameter 'euid>00000000000000000000'
[  601.541179][   T28] audit: type=1400 audit(600.603:2227): avc:  denied  { ioctl } for  pid=16059 comm="syz.5.3853" path="socket:[58069]" dev="sockfs" ino=58069 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  601.602720][   T28] audit: type=1400 audit(600.665:2228): avc:  denied  { name_connect } for  pid=16068 comm="syz.5.3859" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  601.665290][T16077] vxcan1: tx drop: invalid da for name 0x00000000000000f5
[  602.109760][T16076] loop7: detected capacity change from 0 to 7
[  602.118488][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  602.128868][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.138093][    C1] buffer_io_error: 2 callbacks suppressed
[  602.138107][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.152963][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.162188][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.170638][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.179892][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.187992][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.197233][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.205644][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.214886][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.223508][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.232721][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.240882][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.241164][T16076]  loop7: unable to read partition table
[  602.250070][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.267794][T16076] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  602.288434][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.297685][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.306100][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  602.315294][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  602.324398][ T2981]  loop7: unable to read partition table
[  605.050539][   T28] audit: type=1400 audit(603.763:2229): avc:  denied  { mount } for  pid=16111 comm="syz.4.3875" name="/" dev="ramfs" ino=58144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  605.247299][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3880'.
[  605.304140][T16135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16135 comm=syz.5.3880
[  605.326090][T16135] loop5: detected capacity change from 0 to 128
[  605.497705][T16135] xt_hashlimit: size too large, truncated to 1048576
[  605.940855][   T28] audit: type=1400 audit(604.572:2230): avc:  denied  { map } for  pid=16168 comm="syz.2.3892" path="socket:[59142]" dev="sockfs" ino=59142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  606.454673][T16178] loop4: detected capacity change from 0 to 512
[  606.497358][T16178] EXT4-fs: Ignoring removed oldalloc option
[  606.553752][T16178] EXT4-fs: Ignoring removed nobh option
[  606.626066][T16178] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3894: iget: bad extra_isize 90 (inode size 256)
[  606.686417][T16178] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  606.687226][T16178] EXT4-fs (loop4): Remounting filesystem read-only
[  606.696457][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  606.696483][    C0] EXT4-fs (loop4): initial error at time 605: ext4_xattr_inode_iget:441: inode 11
[  606.696518][    C0] EXT4-fs (loop4): last error at time 605: ext4_xattr_inode_iget:441: inode 11
[  607.084635][T16178] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  607.135601][T16178] EXT4-fs (loop4): 1 orphan inode deleted
[  607.165391][T16178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.226153][   T28] audit: type=1400 audit(605.749:2231): avc:  denied  { write } for  pid=16177 comm="syz.4.3894" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  608.326554][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.463095][   T28] audit: type=1400 audit(607.766:2232): avc:  denied  { mount } for  pid=16198 comm="syz.5.3900" name="/" dev="autofs" ino=58356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  609.531418][   T28] audit: type=1326 audit(607.766:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  609.558366][   T28] audit: type=1326 audit(607.766:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  609.592225][   T28] audit: type=1326 audit(607.766:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  609.617624][   T28] audit: type=1326 audit(607.766:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  609.654132][   T28] audit: type=1326 audit(607.766:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  609.681070][   T28] audit: type=1326 audit(607.766:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  610.889104][   T28] kauditd_printk_skb: 472 callbacks suppressed
[  610.889129][   T28] audit: type=1326 audit(609.108:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6aa0ebcdd9 code=0x7ffc0000
[  610.975244][T16218] loop4: detected capacity change from 0 to 512
[  611.000089][T16216] loop5: detected capacity change from 0 to 512
[  611.037252][T16216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  611.062504][   T28] audit: type=1400 audit(609.264:2712): avc:  denied  { write } for  pid=16215 comm="syz.5.3906" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  611.089601][   T28] audit: type=1400 audit(609.264:2713): avc:  denied  { create } for  pid=16215 comm="syz.5.3906" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  611.133003][T16216] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  611.134235][   T28] audit: type=1400 audit(609.338:2714): avc:  denied  { write } for  pid=16215 comm="syz.5.3906" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  611.165084][   T28] audit: type=1400 audit(609.338:2715): avc:  denied  { write } for  pid=16215 comm="syz.5.3906" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  611.184369][T16216] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  611.186440][   T28] audit: type=1400 audit(609.338:2716): avc:  denied  { rename } for  pid=16215 comm="syz.5.3906" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  611.251404][T16216] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3906: Failed to acquire dquot type 0
[  611.430781][T16237] loop4: detected capacity change from 0 to 512
[  611.432443][T16237] EXT4-fs: Ignoring removed oldalloc option
[  611.432485][T16237] EXT4-fs: Ignoring removed nobh option
[  611.449573][T16237] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3911: iget: bad extra_isize 90 (inode size 256)
[  611.449619][T16237] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  611.449822][T16237] EXT4-fs (loop4): Remounting filesystem read-only
[  611.449853][T16237] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  611.449883][T16237] EXT4-fs (loop4): 1 orphan inode deleted
[  611.450326][T16237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.465240][   T28] audit: type=1400 audit(609.632:2717): avc:  denied  { write } for  pid=16236 comm="syz.4.3911" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  611.725940][   T28] audit: type=1400 audit(609.881:2718): avc:  denied  { write } for  pid=14544 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  611.755477][T14544] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 0
[  611.785701][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.978741][T16254] siw: device registration error -23
[  614.533324][T16240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  614.578247][T12192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.277946][T12192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.740745][T12192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.836424][T12192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.908330][T16289] loop4: detected capacity change from 0 to 1024
[  615.953737][T16289] EXT4-fs: Ignoring removed orlov option
[  615.961067][T12192] bridge_slave_1: left allmulticast mode
[  615.979599][T12192] bridge_slave_1: left promiscuous mode
[  615.994770][T12192] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.016342][T12192] bridge_slave_0: left allmulticast mode
[  616.022688][T16289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.030247][T12192] bridge_slave_0: left promiscuous mode
[  616.041176][T12192] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.169448][T12192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  616.170525][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.188949][T12192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.199160][T12192] bond0 (unregistering): Released all slaves
[  616.261900][T12192] hsr_slave_0: left promiscuous mode
[  616.284126][T12192] hsr_slave_1: left promiscuous mode
[  616.297970][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  616.305731][T12192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  616.315672][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  616.324379][T12192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.336926][T12192] veth1_macvtap: left promiscuous mode
[  616.342543][T12192] veth0_macvtap: left promiscuous mode
[  616.348236][T12192] veth1_vlan: left promiscuous mode
[  616.353646][T12192] veth0_vlan: left promiscuous mode
[  616.444261][T12192] team0 (unregistering): Port device team_slave_1 removed
[  616.456931][T12192] team0 (unregistering): Port device team_slave_0 removed
[  616.501246][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5
[  616.534404][T16281] lo speed is unknown, defaulting to 1000
[  616.565975][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'.
[  616.728238][   T28] kauditd_printk_skb: 15 callbacks suppressed
[  616.728254][   T28] audit: type=1400 audit(614.482:2732): avc:  denied  { write } for  pid=16325 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  616.762510][T16339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16339 comm=syz.0.3932
[  616.812039][   T28] audit: type=1400 audit(614.565:2733): avc:  denied  { write } for  pid=16341 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  616.881746][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6
[  616.969211][T16281] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.976392][T16281] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.983904][T16281] bridge_slave_0: entered allmulticast mode
[  616.990797][T16281] bridge_slave_0: entered promiscuous mode
[  616.999762][T16281] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.006906][T16281] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.014545][T16281] bridge_slave_1: entered allmulticast mode
[  617.021235][T16281] bridge_slave_1: entered promiscuous mode
[  617.050037][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.062740][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.084169][T16281] team0: Port device team_slave_0 added
[  617.091078][T16281] team0: Port device team_slave_1 added
[  617.099938][T16327] xt_hashlimit: size too large, truncated to 1048576
[  617.111650][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.118728][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.150982][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.173322][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.194927][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.269263][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.353273][T16281] hsr_slave_0: entered promiscuous mode
[  617.367467][T16281] hsr_slave_1: entered promiscuous mode
[  617.378587][T16281] debugfs: 'hsr0' already exists in 'hsr'
[  617.389259][   T28] audit: type=1400 audit(615.100:2734): avc:  denied  { write } for  pid=16353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.411961][T16281] Cannot create hsr debugfs directory
[  617.463898][   T28] audit: type=1400 audit(615.165:2735): avc:  denied  { write } for  pid=16373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  617.558803][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7
[  617.683804][T16281] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  617.714021][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  617.739323][T16281] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  617.770804][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  617.785389][T16281] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  617.804590][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  617.826817][T16387] loop2: detected capacity change from 0 to 512
[  617.838980][T16281] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  617.842719][T16387] EXT4-fs: Ignoring removed oldalloc option
[  617.863272][T16281] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  617.890741][T16387] EXT4-fs: Ignoring removed nobh option
[  617.938038][T16387] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3941: iget: bad extra_isize 90 (inode size 256)
[  617.962846][T16387] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  617.964721][T16387] EXT4-fs (loop2): Remounting filesystem read-only
[  617.980519][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  617.980549][    C0] EXT4-fs (loop2): initial error at time 615: ext4_xattr_inode_iget:441: inode 11
[  617.980593][    C0] EXT4-fs (loop2): last error at time 615: ext4_xattr_inode_iget:441: inode 11
[  618.006607][T16281] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.020072][T16281] 8021q: adding VLAN 0 to HW filter on device team0
[  618.028497][T16387] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  618.034674][T12190] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.045765][T12190] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.058086][T12184] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.065222][T12184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.106400][T16387] EXT4-fs (loop2): 1 orphan inode deleted
[  618.148430][T16387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  618.209349][   T28] audit: type=1400 audit(615.857:2736): avc:  denied  { write } for  pid=16397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  618.297699][   T28] audit: type=1400 audit(615.894:2737): avc:  denied  { write } for  pid=16386 comm="syz.2.3941" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  618.363368][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8
[  618.375172][   T28] audit: type=1400 audit(615.922:2738): avc:  denied  { write } for  pid=16417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  618.508255][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.561678][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.824380][T16450] loop2: detected capacity change from 0 to 512
[  618.846258][T16450] EXT4-fs: Ignoring removed oldalloc option
[  618.860179][T16281] veth0_vlan: entered promiscuous mode
[  618.868973][T16450] EXT4-fs: Ignoring removed nobh option
[  618.887686][T16281] veth1_vlan: entered promiscuous mode
[  618.900530][T16450] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3947: iget: bad extra_isize 90 (inode size 256)
[  618.935397][T16450] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  618.936486][T16450] EXT4-fs (loop2): Remounting filesystem read-only
[  618.944434][T16281] veth0_macvtap: entered promiscuous mode
[  618.945892][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  618.964554][    C1] EXT4-fs (loop2): initial error at time 616: ext4_xattr_inode_iget:441: inode 11
[  618.973845][    C1] EXT4-fs (loop2): last error at time 616: ext4_xattr_inode_iget:441: inode 11
[  618.983113][T16450] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  618.993635][T16450] EXT4-fs (loop2): 1 orphan inode deleted
[  618.999895][T16450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.017571][T16281] veth1_macvtap: entered promiscuous mode
[  619.030862][   T28] audit: type=1400 audit(616.614:2739): avc:  denied  { write } for  pid=16449 comm="syz.2.3947" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  619.072628][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  619.091797][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.131351][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  619.156087][T12190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.174424][T12190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.190865][T12190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.203811][T12190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.605201][   T28] audit: type=1400 audit(617.150:2740): avc:  denied  { getopt } for  pid=16476 comm="syz.6.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  620.366009][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3958'.
[  620.454304][T16492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16492 comm=syz.2.3958
[  620.462356][T16495] siw: device registration error -23
[  620.487934][T16492] loop2: detected capacity change from 0 to 128
[  620.613635][T16511] siw: device registration error -23
[  620.835110][T16520] FAULT_INJECTION: forcing a failure.
[  620.835110][T16520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  620.855518][T16520] CPU: 1 UID: 0 PID: 16520 Comm: syz.4.3967 Not tainted syzkaller #0 PREEMPT(full) 
[  620.855585][T16520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  620.855646][T16520] Call Trace:
[  620.855655][T16520]  <TASK>
[  620.855664][T16520]  __dump_stack+0x1d/0x30
[  620.855694][T16520]  dump_stack_lvl+0x95/0xd0
[  620.855722][T16520]  dump_stack+0x15/0x1b
[  620.855790][T16520]  should_fail_ex+0x263/0x280
[  620.855825][T16520]  should_fail+0xb/0x20
[  620.855859][T16520]  should_fail_usercopy+0x1a/0x20
[  620.855974][T16520]  _copy_to_user+0x20/0xa0
[  620.856017][T16520]  simple_read_from_buffer+0xb5/0x130
[  620.856100][T16520]  proc_fail_nth_read+0x10e/0x150
[  620.856140][T16520]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  620.856177][T16520]  vfs_read+0x1ab/0x7f0
[  620.856231][T16520]  ? __rcu_read_unlock+0x4e/0x70
[  620.856257][T16520]  ? __fget_files+0x184/0x1c0
[  620.856359][T16520]  ? mutex_lock+0x57/0x90
[  620.856387][T16520]  ksys_read+0xdc/0x1a0
[  620.856430][T16520]  __x64_sys_read+0x40/0x50
[  620.856464][T16520]  x64_sys_call+0x2886/0x3020
[  620.856536][T16520]  do_syscall_64+0x12c/0x3b0
[  620.856571][T16520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.856600][T16520] RIP: 0033:0x7feccca3d60e
[  620.856691][T16520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  620.856715][T16520] RSP: 002b:00007feccb4d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  620.856739][T16520] RAX: ffffffffffffffda RBX: 00007feccb4d76c0 RCX: 00007feccca3d60e
[  620.856781][T16520] RDX: 000000000000000f RSI: 00007feccb4d70a0 RDI: 0000000000000004
[  620.856796][T16520] RBP: 00007feccb4d7090 R08: 0000000000000000 R09: 0000000000000000
[  620.856814][T16520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.856829][T16520] R13: 00007feccccf6038 R14: 00007feccccf5fa0 R15: 00007fff5eb91328
[  620.856857][T16520]  </TASK>
[  621.097739][T16524] loop4: detected capacity change from 0 to 512
[  621.106795][T16524] EXT4-fs: Ignoring removed oldalloc option
[  621.113079][T16524] EXT4-fs: Ignoring removed nobh option
[  621.156546][T16524] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3968: iget: bad extra_isize 90 (inode size 256)
[  621.170204][T16524] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  621.170368][T16524] EXT4-fs (loop4): Remounting filesystem read-only
[  621.186087][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  621.186107][    C1] EXT4-fs (loop4): initial error at time 618: ext4_xattr_inode_iget:441: inode 11
[  621.186151][    C1] EXT4-fs (loop4): last error at time 618: ext4_xattr_inode_iget:441: inode 11
[  621.212089][T16524] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  621.222402][T16524] EXT4-fs (loop4): 1 orphan inode deleted
[  621.229268][T16524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.266939][   T28] audit: type=1400 audit(618.673:2741): avc:  denied  { write } for  pid=16523 comm="syz.4.3968" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  621.348758][T16537] loop6: detected capacity change from 0 to 512
[  621.364472][T16537] EXT4-fs: Ignoring removed oldalloc option
[  621.384336][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.396674][T16537] EXT4-fs: Ignoring removed nobh option
[  621.415911][T16537] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3972: iget: bad extra_isize 90 (inode size 256)
[  621.439553][T16537] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  621.439793][T16537] EXT4-fs (loop6): Remounting filesystem read-only
[  621.449107][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  621.449135][    C1] EXT4-fs (loop6): initial error at time 618: ext4_xattr_inode_iget:441: inode 11
[  621.449175][    C1] EXT4-fs (loop6): last error at time 618: ext4_xattr_inode_iget:441: inode 11
[  621.483797][T16537] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  621.524855][T16537] EXT4-fs (loop6): 1 orphan inode deleted
[  621.538799][T16537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  621.652602][T16545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3975'.
[  621.726977][T16545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16545 comm=syz.4.3975
[  621.761478][T16545] loop4: detected capacity change from 0 to 128
[  621.860356][T16281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.098705][T16569] loop6: detected capacity change from 0 to 512
[  622.109065][T16569] EXT4-fs: Ignoring removed oldalloc option
[  622.125922][T16567] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3982'.
[  622.136736][T16569] EXT4-fs: Ignoring removed nobh option
[  622.145320][T16569] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3983: iget: bad extra_isize 90 (inode size 256)
[  622.161409][T16569] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  622.161733][T16569] EXT4-fs (loop6): Remounting filesystem read-only
[  622.171019][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  622.171043][    C0] EXT4-fs (loop6): initial error at time 619: ext4_xattr_inode_iget:441: inode 11
[  622.171082][    C0] EXT4-fs (loop6): last error at time 619: ext4_xattr_inode_iget:441: inode 11
[  622.213415][T16569] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  622.238550][T16569] EXT4-fs (loop6): 1 orphan inode deleted
[  622.245033][T16569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.267864][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  622.267883][   T28] audit: type=1400 audit(619.606:2745): avc:  denied  { write } for  pid=16568 comm="syz.6.3983" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  622.304067][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'.
[  622.321193][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'.
[  622.333473][T16281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.405330][T16583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3989'.
[  622.480616][T16586] FAULT_INJECTION: forcing a failure.
[  622.480616][T16586] name failslab, interval 1, probability 0, space 0, times 0
[  622.493467][T16586] CPU: 1 UID: 0 PID: 16586 Comm: syz.0.3988 Not tainted syzkaller #0 PREEMPT(full) 
[  622.493564][T16586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  622.493581][T16586] Call Trace:
[  622.493591][T16586]  <TASK>
[  622.493602][T16586]  __dump_stack+0x1d/0x30
[  622.493634][T16586]  dump_stack_lvl+0x95/0xd0
[  622.493663][T16586]  dump_stack+0x15/0x1b
[  622.493689][T16586]  should_fail_ex+0x263/0x280
[  622.493740][T16586]  ? proc_self_get_link+0x96/0x110
[  622.493770][T16586]  should_failslab+0x8c/0xb0
[  622.493805][T16586]  __kmalloc_cache_noprof+0x5f/0x400
[  622.493869][T16586]  ? __pfx_proc_self_get_link+0x10/0x10
[  622.493900][T16586]  proc_self_get_link+0x96/0x110
[  622.493961][T16586]  pick_link+0x514/0x8e0
[  622.493987][T16586]  step_into_slowpath+0x36a/0x4c0
[  622.494015][T16586]  link_path_walk+0x974/0xe30
[  622.494049][T16586]  path_openat+0x1c6/0x2050
[  622.494080][T16586]  ? _parse_integer_limit+0x170/0x190
[  622.494109][T16586]  ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40
[  622.494139][T16586]  ? __perf_event_task_sched_in+0xa65/0xad0
[  622.494250][T16586]  ? css_rstat_updated+0xbb/0x280
[  622.494277][T16586]  do_file_open+0x16c/0x290
[  622.494364][T16586]  do_sys_openat2+0x94/0x130
[  622.494390][T16586]  __x64_sys_openat+0xf2/0x120
[  622.494416][T16586]  x64_sys_call+0x1e39/0x3020
[  622.494446][T16586]  do_syscall_64+0x12c/0x3b0
[  622.494515][T16586]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  622.494549][T16586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.494587][T16586] RIP: 0033:0x7f3cad87d60e
[  622.494604][T16586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  622.494625][T16586] RSP: 002b:00007f3cac2d4f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  622.494647][T16586] RAX: ffffffffffffffda RBX: 00007f3cac2d56c0 RCX: 00007f3cad87d60e
[  622.494713][T16586] RDX: 0000000000000000 RSI: 00007f3cad952400 RDI: ffffffffffffff9c
[  622.494728][T16586] RBP: 00007f3cac2d5090 R08: 0000000000000000 R09: 0000000000000000
[  622.494743][T16586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.494756][T16586] R13: 00007f3cadb36218 R14: 00007f3cadb36180 R15: 00007fff7b25ec58
[  622.494777][T16586]  </TASK>
[  622.828689][T16583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16583 comm=syz.4.3989
[  622.872422][T16583] loop4: detected capacity change from 0 to 128
[  623.074705][T16588] Process accounting resumed
[  623.327662][T12184] Bluetooth: hci0: Frame reassembly failed (-84)
[  623.366247][T16594] loop2: detected capacity change from 0 to 512
[  623.373116][T16612] loop4: detected capacity change from 0 to 512
[  623.405242][T16612] EXT4-fs: Ignoring removed oldalloc option
[  623.428275][T16594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.449297][T16612] EXT4-fs: Ignoring removed nobh option
[  623.487694][T16612] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.3997: iget: bad extra_isize 90 (inode size 256)
[  623.502113][T16612] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  623.509378][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  623.525066][    C1] EXT4-fs (loop4): initial error at time 620: ext4_xattr_inode_iget:441: inode 11
[  623.534385][    C1] EXT4-fs (loop4): last error at time 620: ext4_xattr_inode_iget:441: inode 11
[  623.542081][T16612] EXT4-fs (loop4): Remounting filesystem read-only
[  623.554032][T16612] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  623.554614][T12142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.577063][T16612] EXT4-fs (loop4): 1 orphan inode deleted
[  623.583500][T16612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  623.653733][   T28] audit: type=1400 audit(620.889:2746): avc:  denied  { write } for  pid=16611 comm="syz.4.3997" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  623.705001][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.824360][   T28] audit: type=1400 audit(621.018:2747): avc:  denied  { connect } for  pid=16625 comm="syz.6.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  624.597829][T16645] loop6: detected capacity change from 0 to 512
[  624.616128][T16645] EXT4-fs: Ignoring removed oldalloc option
[  624.628025][T16645] EXT4-fs: Ignoring removed nobh option
[  624.656493][T16645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4008: iget: bad extra_isize 90 (inode size 256)
[  624.689889][T16645] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  624.690349][T16645] EXT4-fs (loop6): Remounting filesystem read-only
[  624.706318][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  624.706345][    C1] EXT4-fs (loop6): initial error at time 621: ext4_xattr_inode_iget:441: inode 11
[  624.706385][    C1] EXT4-fs (loop6): last error at time 621: ext4_xattr_inode_iget:441: inode 11
[  624.776084][T16645] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  624.797228][T16645] EXT4-fs (loop6): 1 orphan inode deleted
[  624.809300][T16645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.853721][   T28] audit: type=1400 audit(621.997:2748): avc:  denied  { write } for  pid=16644 comm="syz.6.4008" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  624.936536][T16281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.022316][T16655] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4011'.
[  625.225973][T16652] loop7: detected capacity change from 0 to 7
[  625.246813][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.256066][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.284813][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.295281][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.304191][T16652]  loop7: unable to read partition table
[  625.315735][T16652] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  625.323842][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.338792][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.353974][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.363213][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.371310][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.380617][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.390224][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.399427][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.410218][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  625.419436][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  625.513256][T11093] Bluetooth: hci0: command 0x1003 tx timeout
[  625.519385][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  625.620777][T16679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4019'.
[  625.630764][T16681] siw: device registration error -23
[  625.638535][ T9728] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  625.660080][ T9728] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  625.717342][T16685] loop6: detected capacity change from 0 to 512
[  625.736920][T16685] EXT4-fs: Ignoring removed oldalloc option
[  625.750615][T16683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16683 comm=syz.1.4019
[  625.770232][T16685] EXT4-fs: Ignoring removed nobh option
[  625.786884][T16685] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4021: iget: bad extra_isize 90 (inode size 256)
[  625.800949][T16687] siw: device registration error -23
[  625.817188][T16685] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  625.819937][T16685] EXT4-fs (loop6): Remounting filesystem read-only
[  625.829172][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  625.829198][    C0] EXT4-fs (loop6): initial error at time 622: ext4_xattr_inode_iget:441: inode 11
[  625.829236][    C0] EXT4-fs (loop6): last error at time 622: ext4_xattr_inode_iget:441: inode 11
[  625.922430][T16685] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  625.932934][T16685] EXT4-fs (loop6): 1 orphan inode deleted
[  625.939445][T16685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.971107][   T28] audit: type=1400 audit(623.031:2749): avc:  denied  { write } for  pid=16684 comm="syz.6.4021" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  626.071497][T16697] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4024'.
[  626.097506][T16281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.738495][T12182] Bluetooth: hci0: Frame reassembly failed (-84)
[  626.779935][   T28] audit: type=1400 audit(623.769:2750): avc:  denied  { write } for  pid=16718 comm="syz.1.4031" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  626.779950][T16721] random: crng reseeded on system resumption
[  626.840338][   T28] audit: type=1400 audit(623.769:2751): avc:  denied  { write } for  pid=16718 comm="syz.1.4031" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  627.055421][T16724] siw: device registration error -23
[  627.097744][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4033'.
[  627.109400][T16726] netlink: 'syz.6.4033': attribute type 21 has an invalid length.
[  627.178176][ T3384] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  627.194595][ T3384] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  627.225403][T16732] loop6: detected capacity change from 0 to 512
[  627.235363][T16732] EXT4-fs: Ignoring removed oldalloc option
[  627.246351][T16732] EXT4-fs: Ignoring removed nobh option
[  627.263115][T16732] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4035: iget: bad extra_isize 90 (inode size 256)
[  627.277014][T16732] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  627.277191][T16732] EXT4-fs (loop6): Remounting filesystem read-only
[  627.286376][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  627.286402][    C0] EXT4-fs (loop6): initial error at time 624: ext4_xattr_inode_iget:441: inode 11
[  627.286454][    C0] EXT4-fs (loop6): last error at time 624: ext4_xattr_inode_iget:441: inode 11
[  627.318546][T16732] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  627.329148][T16732] EXT4-fs (loop6): 1 orphan inode deleted
[  627.335628][T16732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.359512][   T28] audit: type=1400 audit(624.305:2752): avc:  denied  { write } for  pid=16730 comm="syz.6.4035" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  627.411362][T16281] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.451630][T16735] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4036'.
[  627.688222][ T3377] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  627.706553][ T3377] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  628.261527][T16759] siw: device registration error -23
[  628.655683][T16767] syz_tun: entered allmulticast mode
[  628.675966][T16767] syz_tun: left allmulticast mode
[  628.899300][T16773] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4048'.
[  628.968759][T11093] Bluetooth: hci0: command 0x1003 tx timeout
[  628.974895][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  629.135819][T16775] loop4: detected capacity change from 0 to 512
[  629.165463][T16775] EXT4-fs: test_dummy_encryption option not supported
[  630.438757][   T28] audit: type=1400 audit(627.148:2753): avc:  denied  { write } for  pid=16783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  630.478198][T16788] loop4: detected capacity change from 0 to 1024
[  630.575460][T16788] EXT4-fs: Ignoring removed orlov option
[  630.605846][   T28] audit: type=1400 audit(627.305:2754): avc:  denied  { write } for  pid=16796 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  630.634634][T16788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  630.647976][ T3079] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  630.671225][ T3079] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  630.796949][T16771] loop7: detected capacity change from 0 to 7
[  630.809136][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  630.818354][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  630.827747][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  630.837059][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  630.845243][T16771]  loop7: unable to read partition table
[  630.850935][T16771] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  630.867652][   T28] audit: type=1400 audit(627.527:2755): avc:  denied  { recv } for  pid=16787 comm="syz.4.4052" saddr=10.128.0.163 src=49290 daddr=10.128.0.24 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  630.883251][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  630.901571][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  630.918085][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  630.918438][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.927283][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  630.947770][   T28] audit: type=1400 audit(627.582:2756): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  630.972879][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  630.982082][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  630.993050][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.002348][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  631.013053][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.022270][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  631.059254][   T28] audit: type=1400 audit(627.582:2757): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.127987][T16818] loop4: detected capacity change from 0 to 1024
[  631.138795][   T28] audit: type=1400 audit(627.582:2758): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.182479][T16818] EXT4-fs: Ignoring removed orlov option
[  631.210481][   T28] audit: type=1400 audit(627.582:2759): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.262135][T16818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.286345][   T28] audit: type=1400 audit(627.582:2760): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.308895][   T28] audit: type=1400 audit(627.582:2761): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.359221][   T28] audit: type=1400 audit(627.582:2762): avc:  denied  { write } for  pid=13282 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  631.468228][T13282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.646889][T16848] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4060'.
[  631.733509][T12190] Bluetooth: hci0: Frame reassembly failed (-84)
[  631.894482][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4062'.
[  631.967564][T16867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16867 comm=syz.1.4062
[  632.081566][T16867] xt_hashlimit: size too large, truncated to 1048576
[  632.990828][T12190] Bluetooth: hci1: Frame reassembly failed (-84)
[  633.065318][  T937] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  633.144990][  T937] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  633.827209][T16921] lo speed is unknown, defaulting to 1000
[  633.907997][ T5274] Bluetooth: hci0: command 0x1003 tx timeout
[  633.908135][   T42] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  634.956648][ T3377] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  634.974888][ T3377] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  635.121878][T11093] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  635.422748][T16953] syz_tun: entered allmulticast mode
[  635.428510][T16953] syz_tun: left allmulticast mode
[  635.615907][T12182] Bluetooth: hci0: Frame reassembly failed (-84)
[  635.933537][T16972] ==================================================================
[  635.941700][T16972] BUG: KCSAN: data-race in ktime_get_mono_fast_ns / update_fast_timekeeper
[  635.950355][T16972] 
[  635.952710][T16972] write to 0xffffffff86d4fb88 of 56 bytes by interrupt on cpu 1:
[  635.960450][T16972]  update_fast_timekeeper+0x38/0x70
[  635.965735][T16972]  timekeeping_update_from_shadow+0x3ab/0x440
[  635.971855][T16972]  __timekeeping_advance+0xa5d/0xc10
[  635.977172][T16972]  update_wall_time+0x21/0x50
[  635.981900][T16972]  tick_do_update_jiffies64+0x169/0x1c0
[  635.987494][T16972]  tick_nohz_handler+0x8d/0x3d0
[  635.992605][T16972]  __hrtimer_run_queues+0x276/0x4f0
[  635.997855][T16972]  hrtimer_interrupt+0x261/0x850
[  636.002837][T16972]  __sysvec_apic_timer_interrupt+0x5f/0x1c0
[  636.008783][T16972]  sysvec_apic_timer_interrupt+0x6f/0x80
[  636.014457][T16972]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  636.020475][T16972]  __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  636.026509][T16972]  __unix_dgram_recvmsg+0x4c9/0x870
[  636.031854][T16972]  unix_dgram_recvmsg+0x7e/0x90
[  636.036741][T16972]  sock_recvmsg_nosec+0xc2/0xf0
[  636.041700][T16972]  ____sys_recvmsg+0x26f/0x280
[  636.046501][T16972]  ___sys_recvmsg+0x11f/0x3b0
[  636.051212][T16972]  do_recvmmsg+0x1ef/0x560
[  636.055672][T16972]  __x64_sys_recvmmsg+0xe5/0x170
[  636.060657][T16972]  x64_sys_call+0x80f/0x3020
[  636.065288][T16972]  do_syscall_64+0x12c/0x3b0
[  636.069931][T16972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.075864][T16972] 
[  636.078224][T16972] read to 0xffffffff86d4fba8 of 8 bytes by task 16972 on cpu 0:
[  636.085890][T16972]  ktime_get_mono_fast_ns+0xdf/0x1a0
[  636.091234][T16972]  ktime_get_boot_fast_ns+0xf/0x40
[  636.096398][T16972]  bpf_ktime_get_boot_ns+0xe/0x20
[  636.101476][T16972]  bpf_prog_ae25c4385c2fa246+0x28/0x2e
[  636.106989][T16972]  bpf_dispatcher_xdp_func+0x25/0x30
[  636.112334][T16972]  bpf_test_run+0x233/0x620
[  636.116895][T16972]  bpf_prog_test_run_xdp+0x5a9/0xa10
[  636.122233][T16972]  bpf_prog_test_run+0x204/0x340
[  636.127232][T16972]  __sys_bpf+0x52e/0x7e0
[  636.131520][T16972]  __x64_sys_bpf+0x41/0x50
[  636.135976][T16972]  x64_sys_call+0x10cb/0x3020
[  636.140795][T16972]  do_syscall_64+0x12c/0x3b0
[  636.145428][T16972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.151373][T16972] 
[  636.153721][T16972] value changed: 0x000ce65d9ad90a92 -> 0x000d733c1adae5a2
[  636.160901][T16972] 
[  636.163276][T16972] Reported by Kernel Concurrency Sanitizer on:
[  636.169463][T16972] CPU: 0 UID: 0 PID: 16972 Comm: syz.0.4092 Not tainted syzkaller #0 PREEMPT(full) 
[  636.178885][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  636.188983][T16972] ==================================================================
[  637.807388][   T42] Bluetooth: hci0: command 0x1003 tx timeout
[  637.813519][T11093] Bluetooth: hci0: Opcode 0x1003 failed: -110