last executing test programs:

10m48.524621452s ago: executing program 4 (id=314):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@minixdf}], [{@appraise_type}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0)
fstat(r0, &(0x7f0000000380))
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff)
open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401, 0x20208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x94}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000056000528707b528e9a"], 0xfe33)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
unshare(0x60000600)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x4, 0x1, 0x7d8485a2, 0x0, 0x9, "6005a405f7dced38323e0058367fb23603a736"})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)

10m48.201491687s ago: executing program 4 (id=322):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
accept(r0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) (async)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) (async)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000001500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="020025bd7000fcdbdf250c00000008002b00b800000008003900050000000500380001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x80000)
r5 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x40, 0x6f, 0x0, 0x1}, {0x50, 0x1, 0x2}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
readv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1)
ioctl$BLKCLOSEZONE(r3, 0x40101287, &(0x7f00000002c0)={0x3, 0x10001})
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x304}, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) (async)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x304}, '\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) (async)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001540)=@gcm_256={{0x304}, "7b4cddef1bfb8a79", "70989676fa31ded4dc43943c0f4a297f459b036dea84e7243b7d7935b3098674", "31881c93", "da404a340de7efc8"}, 0x38) (async)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001540)=@gcm_256={{0x304}, "7b4cddef1bfb8a79", "70989676fa31ded4dc43943c0f4a297f459b036dea84e7243b7d7935b3098674", "31881c93", "da404a340de7efc8"}, 0x38)

10m47.308413146s ago: executing program 4 (id=333):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x3}, 0x1cc0d, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x1}, 0x4008000)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4)

10m47.284527781s ago: executing program 4 (id=335):
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x4, @perf_bp={0x0, 0x6}, 0x100004, 0x0, 0x10004, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0xc83, r0}, 0x38)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

10m47.23585511s ago: executing program 4 (id=337):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000040))
write(r0, &(0x7f0000000000)='3', 0x4e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000011"], &(0x7f0000001b00)=""/3, 0x1a, 0x3, 0x1, 0x6}, 0x28)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2519040000200001801400020076657468305f6d6163767461700000000800030007"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x80)
setpgid(0x0, r1)
syz_pidfd_open(r1, 0x0)

10m47.133464381s ago: executing program 4 (id=338):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4)
bind$packet(r2, &(0x7f0000000200)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'})
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

10m32.068922905s ago: executing program 32 (id=338):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4)
bind$packet(r2, &(0x7f0000000200)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'})
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

8m34.614767875s ago: executing program 3 (id=1486):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x3}, 0x1cc0d, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
r3 = socket(0x18, 0x800, 0x7)
sendmmsg$sock(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="defc33", 0x3}, {&(0x7f0000000100)="85a7dfe0eab14c0dd77a7e280904ff15066a1a89c1690fe6bd447fcc3013ffac592364d3330e2c185541dc14e52fe3600e036e6c3d", 0x35}, {&(0x7f0000000140)="c9df3ed427ca5c599a1c836b365dfac3e33916fd14a5dd47e43d35fbf193d6cff60e47da98ad351e2a5062afd4beba9981d41ebd1d72e389520ebfb9235b5ca1dc0bbad843c62be11bf010a7a9fb4e2fc0d311964a1ab5cada96526a3d6c61862fa704e1c9b0d96a8c3f99f2833b06e8217525eb2d91aac074a42b5bf52135a1c56d350ac633f01d7d3c02e9e5ad4cd9009bcb403729e027cd", 0x99}, {&(0x7f0000000280)="39140fab3152d8737e9ce240356bcfd5180dbb7eee029562e7b67ae48f81b7060b0b6dc58b3490d0449d0957d419a82cc77e94dd64900815a9e2ca27baeb0556edd283c6d4b9735eb64a7e8e148ee04b67664476", 0x54}, {&(0x7f00000004c0)="569a667978b0e116f1c0e4ca5be631867e89032b3d957b27a5196bb0f057f5cf8f1edd08e93b2174923b1286e84f261f3a850a0dbbe1a70f979cf011ec381c3dc1e155749c26fa374049e3f24259d5d5248c065f85949746a9a4e0800df9", 0x5e}, {&(0x7f0000000540)="beb1b9f4aed1a60bb732c293488ae9ad24ed5c1689b0f5", 0x17}], 0x6, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xf5}}], 0x48}}, {{&(0x7f0000000780)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xdb}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000000940)=@phonet={0x23, 0x6, 0x0, 0x4}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)="a13b91e03302a75f55e75cf543547bb4a09b8ea5a641555dc46157560dcc70103f2416fe33072285ce08541d0cf429394b470ef1de063203ffdd13c63a59640a69a614acdd168960557344619c0e8b8f28c3fd49a231c9b559d2ad2c12d1813be176599ae524f335f203c6d6128d901b025f4487205d62cd4f283e851f1326fb30d000acd6ce31b7e86dd5e002cec08acd6b4e75fb478436eabb546f676d8803038329c8794aec38f2f5e11b0b5410313cdd69b1f6a6cc5f87fe5302354153beace62220b7ce752a20d208863381b80f", 0xd0}, {&(0x7f0000000ac0)="743f32bc3ff0791387690604319b0403b5fbc89b1ef16fcece3e912c81771459927620e297c1583df8ce981c135d31bccd0da00df48b3cfbea1cb5f26dc2257698c85477cc4a827906b5b7f8a71096bcc4476caf8b688a9548738a0873f925d263d734a2", 0x64}, {&(0x7f0000000b40)="323545da74", 0x5}, {&(0x7f0000000b80)="5c1d9c10580b777e7af60670c534df81b4cf2bcb181ec33c2abf452b90439534ce6b0f2e6559869d70b683e6ea2967a8f5ee7749b4fc4b9be691fdcc789571ef32c74ef517d52b0573bd1334a2074697374522173b8f0d82d44e59b3afd67b8e4f19d1e1780ab474be7fadfde9b0a81cefdab8d03fbcc811d2e904467684c477eff09a45", 0x84}, {&(0x7f0000000c40)="0d0860be16e8625548d6340defeab3ec02287d225a7bef4feb5656b7990891637d80720cfe9d4adb40e584c2f4e66935b02188c2ec62d38d2e461c25beaacb45e645990f584911a3a8199434f0e6474fdc525252c8a791137cca2780e988d46dee622dfc2899d94f69efa854ab84db930be60a84e55a72d13e6b32725d60b010080af1ba06cd69f3fa0ccd838cbacb568730a3a9da40666f71", 0x99}], 0x5}}], 0x3, 0x44000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xc, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0xffffffff}, 0x50)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

8m34.512853585s ago: executing program 3 (id=1487):
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0)
setns(0xffffffffffffffff, 0x4000000)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x44045, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x48, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./trace\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x5)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)
write(r0, &(0x7f0000000240)='call_site.function == vfs_read', 0x1e)

8m34.427399282s ago: executing program 3 (id=1489):
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7f, 0x1}, 0x11c0e8, 0x0, 0x0, 0x1, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, r0, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000206050000000000003487000026bdf2130084"], 0x18}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x16, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x6)
ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x2)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0}], 0x2)

8m34.127287332s ago: executing program 3 (id=1493):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
socket$inet_sctp(0x2, 0x1, 0x84)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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")
r4 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x7ff, 0x18}, 0xc)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8000000000000001, 0x1c00000000000000}, 0x105103, 0x0, 0x3, 0x5, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffdb7, &(0x7f0000000180)=[{&(0x7f0000000500)="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", 0x131}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x6000)
fallocate(r4, 0x0, 0x0, 0x8800000)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x43c0, 0x80000000, 0x0, 0x9, 0xae7, 0x43, 0x4c7, 0x0, 0x40000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)

8m33.300847298s ago: executing program 3 (id=1500):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xd1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x894)
r2 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
flock(r2, 0x6)
openat$cgroup_ro(r2, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
listen(r0, 0xe)
r3 = accept$inet(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
cachestat(r3, &(0x7f0000000000)={0x9, 0xbbd1}, &(0x7f0000000080), 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50307, 0x2a2e3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r5, 0x80, 0x7, 0x8, 0x1, {{0x2b, 0x4, 0x1, 0x6, 0xac, 0x64, 0x0, 0x4, 0x2f, 0x0, @empty, @remote, {[@ssrr={0x89, 0xf, 0xf2, [@broadcast, @multicast2, @empty]}, @generic={0x83, 0x7, "19383317fb"}, @noop, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "e4b1e2d166e47d90388947581a"}]}, @timestamp_prespec={0x44, 0xc, 0xe5, 0x3, 0x6, [{@broadcast, 0x7}]}, @timestamp={0x44, 0x1c, 0x9a, 0x0, 0x8, [0x7, 0x0, 0x80, 0x8, 0xfff, 0x6]}, @generic={0x83, 0x11, "7620994fa4144048d46ac9b6d3f910"}, @lsrr={0x83, 0x7, 0x88, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x8, [0x2, 0x0, 0x7]}, @timestamp_addr={0x44, 0x1c, 0x4, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x101}, {@local, 0x9d0}]}]}}}}})

8m32.120925464s ago: executing program 3 (id=1506):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000048c0)=[{0x0}], 0x1, 0x3c, 0x1)

8m32.101762398s ago: executing program 33 (id=1506):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r1, &(0x7f00000048c0)=[{0x0}], 0x1, 0x3c, 0x1)

7m23.544345164s ago: executing program 0 (id=1896):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @local, 0x2}, 0x1c)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f00000008c0), 0x0, 0x4000800)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8ec6, 0x10}, 0xc)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0)
r4 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_mtu=0x44})
r5 = socket(0x2d, 0x2, 0x0)
bind(r5, &(0x7f0000000500)=@generic={0x2d, "00000100000008010800"}, 0x80)
r6 = socket(0x2d, 0x2, 0x0)
sendto(r6, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80180, 0x100)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x5, 0x9, 0x1, 0x4, 0x1, 0x0, [{0x9, 0x1, 0xc, '\x00', 0x808}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="400000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0905000000000000200012800c0001006d6163766c616e00100002800a000400aaaaaaaaaaaa0000"], 0x40}}, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)

7m23.376080178s ago: executing program 0 (id=1899):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
setns(0xc9, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x9, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x804}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x9, 0x0, 0x9, 0xb, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@delchain={0x34, 0x65, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0xfff1}, {0xfff3, 0xfff3}, {0xfffb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x75}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x46706d8788788bba}, 0x24044004)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1}, 0x4)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYBLOB="a79408900a000200aaaaaaaaaa3600000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000000480))
write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0xc}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010000, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='\x00', 0x0, r9)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7c, 0x8045, 0xffffffffffffffff, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r10, 0xfffffffffffffffe, 0x0}, 0x20)
ioctl$int_in(r10, 0x73, &(0x7f0000000140)=0x1)

7m22.053260533s ago: executing program 0 (id=1902):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, 0x0})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000180))
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0))
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-7,shortname=win95,shortname=win95,sys_immutable,shortname=winnt,shortname=winnt,uni_xlate=1,check=normal,codepage=862,iocharset=cp932,nonumtail=0,rodir\x00\x00`\x00\x00\x00\x00\x00et=cp936,shortname=win95,utf8=0,\x00'], 0x2, 0x289, &(0x7f00000001c0)="$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")
syz_emit_ethernet(0x62, &(0x7f0000000c40)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x1001, 0x0, 0x0, {[@window={0x3, 0x3, 0xfe}, @timestamp={0x8, 0xa, 0x37f3, 0x905}, @timestamp={0x8, 0xa, 0xe0, 0x7}]}}}}}}}}, 0x0)

7m21.695247225s ago: executing program 0 (id=1907):
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==")
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xe, 0x11, 0x0, 0x4}, {0x363, 0x99, 0x7, 0x8}]})
syz_emit_ethernet(0x6f, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e5)
write(r2, &(0x7f0000000000)='7', 0x1)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
tee(r1, r0, 0x0, 0x5)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x8c, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @multicast})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xa, 0xd}, {0x47276c24c47c1f2a, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x0, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x2000006, 0xffc, 0x67ae, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0xfff0, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x3, 0x0, 0x5, 0x8, 0x5, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x9, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x10001, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3e, 0x0, 0x247, 0x2, 0x1, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xffffffff, 0x4, 0x1, 0x3, 0x0, 0x7, 0x7, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x204, 0xfffffff0, 0x4, 0x7fff, 0x5036, 0x1, 0x1f1f, 0x7, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x7ff, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x9, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x5, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x770b, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x2, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x0, 0x9f85, 0x65, 0x0, 0x0, 0x2, 0x4, 0x6, 0xb, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x3, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x100003, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x2, 0x10002, 0x5, 0xb, 0x1b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x44800}, 0x8010)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005f00014100"/20, @ANYRES32], 0x1c}], 0x1}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7m21.294564344s ago: executing program 0 (id=1912):
socket$packet(0x11, 0xa, 0x300)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x1000007, 0x30, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@noinit_itable}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x5)
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x20000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2"], 0x4a)

7m19.761251811s ago: executing program 0 (id=1915):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22)
r2 = socket(0x9, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @local}})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000100)={0x28, 0x24, 0x0, r1, &(0x7f00000000c0), 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r2, 0x8}}, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x40, 0x0, @val=0x80}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)

7m19.712106591s ago: executing program 34 (id=1915):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter', 0x22)
r2 = socket(0x9, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @local}})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000100)={0x28, 0x24, 0x0, r1, &(0x7f00000000c0), 0x0, 0x8, 0x3, 0x1, {0x0, 0x0, r2, 0x8}}, 0x1)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x40, 0x0, @val=0x80}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)

8.492635274s ago: executing program 5 (id=4515):
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ea9e, 0x1224, 0xfdfffffe, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
statx(r0, &(0x7f0000000880)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000740))
setgroups(0x0, &(0x7f00000009c0))
chmod(&(0x7f0000000040)='./tracing/events/sched/filter\x00', 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000540)='gfs2meta\x00', 0xc00008, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x2, 0xf1, 0x2, 0xfff})
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/1000, 0x3e8)
read$watch_queue(0xffffffffffffffff, &(0x7f0000000600)=""/255, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[], 0x194}}, 0x0)
writev(r3, &(0x7f00000000c0), 0x0)
read(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})

7.822526428s ago: executing program 5 (id=4519):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = syz_io_uring_complete(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

6.686332155s ago: executing program 5 (id=4525):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120006000e00000000000500160002000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10221, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

5.921472728s ago: executing program 5 (id=4529):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x20404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ptrace(0x10, 0x0)
socket$inet6(0x10, 0x3, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000a40)="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")
setresuid(0x0, 0x0, 0xee01)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x8, 0x0, 0x3, 0x0, 0xff, 0x0, 0x83, 0x0, 0xfe, 0x8, 0x82, 0x0, 0x93}, 0xe)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5bceeff800000000000000000000200", 0x17}, 0x48, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x30, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x30, 0x49b9b7e4dbfa7a3a, 0x35, 0x66, 0x34, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x39, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x52, 0x0, 0x35, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011ddeeff00112233445566778899aabbccddeefffa102233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1f}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x38, 0x31, 0x61, 0x39, 0x66, 0x65, 0x66, 0x36, 0x32, 0x34, 0x65, 0x64, 0x36, 0x36, 0x37, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff001122ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000a00)={'fscrypt:', @auto=[0x33, 0x5a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "0011223344552233445566778899aabbccddeefb00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, 0x0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)

5.695714483s ago: executing program 5 (id=4531):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r3, &(0x7f0000006b00), 0x0, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x16)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0x11)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x103}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
lseek(r4, 0x10001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)

4.394973542s ago: executing program 6 (id=4539):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="440000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="40440900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r4, @ANYBLOB="14ea785c0e919c987c64939b291063d13ac3f3311b4ab1c026e0d638fe3fe807d29b86f34aec51d8fa5f2231acbcb39f1e95dc5386e9eb403d855805da9fea4413f583eb6a1237c15ceceb964516ee4b44c11912bebf4d639a211ffbc337b5e49ab3888112fdbf93f05e63431a3224f08b5b5ef2cd93698064bdd20a5a403f2b71e6ff7b01bd535015b8c3511301e6f5e5"], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.329484575s ago: executing program 7 (id=4540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4.225018636s ago: executing program 6 (id=4541):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

3.534999384s ago: executing program 2 (id=4544):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
getgroups(0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x22, 0x0, 0x0)
chown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff)
mount$bind(0x0, &(0x7f0000000280)='.\x00', 0x0, 0xca3, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x41020000, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3.379439665s ago: executing program 7 (id=4545):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000280)={0x7, 0x21, 0x2}, 0x7)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x4000000, {0x2, 0x4e24}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e1d, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00'/10], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x48800)
r4 = socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0xc, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_config_ext={0x6be2, 0x8000000000000001}, 0x400, 0x0, 0x11000, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x9)
r5 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x10}, 0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, r6, 0x25, 0xf, @val=@iter={&(0x7f0000000300)=@cgroup={0x4, r0, 0x4}, 0x10}}, 0x20)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08001a00", @ANYRES32=r7, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380), 0x4)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814)
write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x18000000, {0x0, 0x0, 0x0, r10, 0x0, 0x404a3}, [@IFLA_GROUP={0xb43f7ffc55343135}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xd8, r1, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xef7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4d2a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x61}}]}, 0xd8}}, 0x400c000)

3.360957779s ago: executing program 1 (id=4546):
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1c6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040))
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd)
unshare(0x60000600)

2.720248697s ago: executing program 1 (id=4547):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
syz_io_uring_complete(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

2.628662255s ago: executing program 7 (id=4548):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = syz_io_uring_complete(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x190}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x8}, 0x102802, 0x2e, 0x0, 0x9, 0x5, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
setns(0xc9, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0xff)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x22, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0xc3}}}, 0xa0)
write(r1, &(0x7f0000000a00)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

2.55541284s ago: executing program 5 (id=4549):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="6a2922a012b22740596d7299efcf7a639bc8eadff85c1eb8ed3faaaa7d8e8d6fa79c370ce9eded3cbda6135a7a2b0f2f6dbbc6c1f6a97764658c65bdf9895deb6f11cb90e0e5530730bb3ee27ce3b6a39cd29b5f8716752462e62124cafa3189f4b607217a7dd28850508d66e2cdd7c9e80c988462980d4d512908e05068cc5c1d3daff2f9", 0x85, 0x4000001, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r1, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000c00)=0x11)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x103}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)

2.520990957s ago: executing program 2 (id=4550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffefffffffffff, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x42000)
setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "cb83ba863c96a22f", "1bd0adb57ddf3002bc5375963548e075791298ea8ad20754c25c16fd1d838416", "9854c258", "c1c06d078bb2aeed"}, 0x38)
close(0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, r0}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
mmap$IORING_OFF_SQ_RING(0x0, 0x401, 0x200000d, 0x10, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@user_xattr}, {@grpquota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@oldalloc}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x58c, &(0x7f0000000c40)="$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")
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x40000000, 0x2, 0x3, 0x7fff, 0x1b, "b0bf2ebb48c849ac0000000003000018bfff40"})
dup3(0xffffffffffffffff, r2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94)
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1")
creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)

1.648190261s ago: executing program 7 (id=4551):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
sched_setscheduler(0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
ftruncate(0xffffffffffffffff, 0x7000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000240)=""/195)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x8008)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x4, 0xa6e, 0x9})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008"], 0x50}}, 0x4000850)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120)
writev(r4, &(0x7f0000001440)=[{&(0x7f0000000100)="ed9c39f57bb49c8fc17473ae839f48c68ecb0ea8f671edc2786bbda713479ae0f6df78919b9bbf1726486db1da6009c34332ab8cad5a997542c3453693ed", 0x3e}, {&(0x7f0000000400)="f0fabbe2a5e5bb39215d230c1c423978634ec33eb65ed13a039ebdb8bc20ab52c9d33a483f784b63c7b57c4aa7cc5d345eb0e64330943e6c8a1d50120c6a84c380b8b3c96fb5e6d7dc5ec4a017ef2c787e5edaaab2ba6a1a23d82c8e1dcf9232ee52063e331adc7f2ed2f837e33f36a53c49b801d4281bbac9b1d5161be1e18141d2e7498f1c5f20ba4cd9eee46f403854754984bc18b633a542ffafa58c45309c8d7ca9fecccb1e17d7002daac51092ec8d780ea54c8b29fc1dec01290bb60d256a4bff99cea3be556d7aa6fc34487d65ef1bfd1ae2a8d481d331dab89c29a5d093c3c5880c5b69f4b0426c3911787f52b91934ce3ecc1ae94447d1ed068f1cd905afdc673abb7592ffc04858bd7e32e4771a3e99437e83c981180b8d2b30ed7a9178759f8b0ba50c69e6cb31eaf0166b1e0b0cb4951fed36eec3c4a46f29ef60daf8a6cdf45d0874871706f3b2beb43c5d1312a5c794561481fcfe8446fac6dac3733214e5d844f5c2eeac62dbf2f67b25d9889d3275458ef065c189a07c862983e1f98de0f70e1e8804baadf1754ed24c283e03e4749be5e6b5238ccee709b3ddc202392efc5c01f1d273d33bb91b93f2f021461454957627c3f2fc74f64c5b06074e056519db7e397a1b9b5a075777ecfcb8b0d52a4748f4694417cc7bcb83926d0bc03b1b2a0d2f79e640b2567bb7c8defa7611d6fdf40a40e23bfbc93259a8aa253d8e4b3cd5647df52e1c73e96877e4dbdf10129a7bc9bcfb5596ab1b6bdaf2cfdb2804f3f67704b85454b9fcfb2287e96362047662b47d2d6612e0cf8efcb9a6ccccbb685be7c824ce68b25c9aed8852404337204dab1a045a47b1afaff73fb9f86001b6b4388d1841bdbf5e149d022a90e51fdce2b27baacd0e2ebbcab56d1901e8953cfa0b3b0d8ee7d4db370fc6118ecb4c822c6e9b112431b5f507851698f3e9bb50f9aa86cd13b84766678d8874bca34820342d80ef43666ea76e9931233c239483676e5fa731321932961308db772020e38d544f95fc7cdc49295f358cd410f5e49421e34eb35705d040cd162a24776ec16c0cdf1e7286e2f3093471ddc6412fedd4f437eba84b8db6c0d1b75071c8b74759c166a700e42a9954b4767daa83cf6807f56fb9309e13110a87d80db284fd86c62751bd547ef98a8fbfe70ff6becbf826a520b63fdf913389a83087e598e6a5aca3b9b62a5e858c6149caef8dfcb8c9200ef473c2d87a9626c936d8fd76e3ca37cc441a4472ab39ef8d12a1b69b8b2c45c97eac94bd2499dad5c222ae20d5cb2abdd0e07cb7d635b52fb69406ebd4c10a44758ec4e3e6f1531b98bb608840cfd2f5a80b140d7e2129dbbf9c5995e83de222dae3cb355de9cd4722ce55b1682273cd30e947aeb943b6770c95bc6f2f3e6b910efc8772cbae95529d397049abdbca4a456f1d9b61b8ad02d0505820d370b33f80b2592ca275e5f955b7f11ad7a51598e633609e98e9bdc820bcb68ba43680d4dc0101073ba185506c2653d4cb175d71398685ab6997a378939848cdae0bb63f0e926fabf9b1526eb95d21cdbcc00267875cb20912eadc34cd6e1530d4bb092998e7d29e47ed034625aaffa0963392dc094a0a6df3e570199912010169da423c85986efd6fa65b77767604ba12ede0c2f6e4bf758db296937c8fee698931b3f3e29e482f1471233d82f6d73e0c226d2448cfd6769295e892d5901b613ef4085f0eeac9d36b93be2b0550827971caf05ecda8f1f9f1279f3b6023b6ebee622eaedbbed11c89f0537c899a6109f15cad06a3322e3c68d333abea91232b99a585511759286401c84636768df3a041079d332fc319c8d4100e171c92da859d3f13754018667ad02efcc6a497ddd66e318acf6ad97edd506401bbdc413748b8603941c0edde8b7ca965baa2b710b78f1b18955d8019519e02e5c44b809f51bb90b53a532fa840c0d2bc93843f37cd782e7c6fd198ccfc379ba17ac4cf2dcf089e29029639e81e7ffe6d48264b96fe88300194f9d9166887fe6643866d35d0b23993007936c450a9175bc71a6127d40e35d46ca90cfdcdbc75baed2d10f28f072d3162980aa7500cb85f1f6ad207ff2c76c14c7a525c740c5b20d1cdbbec0da5b7946f0b62661593cbfc615e0e448cb71920fe8e5876a8523f200911908636cbfba022956816152dbbefcc664a1a64fb6b9b2e5c2c66a7862ba306d3d022dbde242a7816faf876b1a15730e5724343a8110d435f87c71fbd87a5095b60060c15dac399ccf14c498be6b69ef54c8ae22382ab7fb1dd883f432aac350afbd8e427425a9848b7acbbc784fc3b7b3d9a77f7d1289c6db3ce40297e9bdc4f3acbdb03f8025970d2a0089ebceb0ea117a3f9e6660f63891ce552b6237700e16f1945093e70102668851019da6d1fa1a83bf190b5a11b5c2c40d63b854b29353092fc90175f6c547cab44bbc0bbdf972db088c29a0a3baca2789b357dd1f8316cd371d96fb246e4e850cb1b68d29748d275fefb857a8b54cad8f3c82a5e79f14c78cdbe6a0c029dd7888a19757da300e8ce93593820e8f16bdea8aa164ec45d82ac595803cba91826ffd23a4557a856554a94a6cf82f82008f4e99d50ddb7549c5d32a6d6c0e80230a4501010042fa4bd69f868c3e167cbfb2db41dbf92a13019782387a9d4c2d8d9428a088a6023c2fe9b19ecc576895b617f80cbd69c19cd56c238b60b4668b5d42d9f6e25443f732d11390d8ec86c33eeb0f16d9f77c84fd85f5b5920a7d05067a761fc1bdd1ab8f227a86021d3ce903fba2413ff9eb89f41f9f68145eff44a046c00a9f718cf696cfd0a2b0d8730052078e2e05d3a7fafc4fcb926ec9ca07495c1f89aa3c6f844c86b5ca2db03ab20fb51d8ca81ac59057da227388e86f4c1181a810b23f179db1921860392d7b60f9aa54400d362aab3f278d5c08a9bb8f399bbea610936b8966482d9cf1a4f45fc759b0c2e5b1725644263f04c3a3e8d5a861d88b49ab23bc69929154cc6d54f4078d8f790311a15bf2af434f309e676cfe2105b700c8bf9eb4a7d748f23d731ef3f81c8b5ab9033f4e5da7a3d163e8d8353d831222207818b119a6b4ac34fa5f07cf3ea26142ea09f7a392714d127955e7f383bd8233e6c14d9bb83de049f58add8a7eb8ba850e71591d64feababa1b863dfa81a90f3a1af53ab8f0c7aae15da71945957e44d3680a344801032e66f703a528179fcc6bdb9752bee31f364f25bc5ae7771b11a4a8675d0d759a13eb2914a50b6bb237a04e01406e32ddd9a9e32001ee5606564d26a96d15b29e62ff2b32badf6005bcb3fad7637b3b70cac5475b6c35f168330267256ad65c488260342e4d41b67501f25ff7d9415e76c7c59257337ae5b21214a3873e66e77f59c97226c903f26c0dd41afe8dbd4d6c14f1d8e2ad8abb72bed0e87c97a4d5775accf057ee12bb0e0c54e7893e798049c00f5f95783c7681ffda5b1ee94440420aab51d695cd04fb2a43d25d0872a2ebf538f3918b3456fb6ac56f858dfd432cb2c77832ef62af75eccc12e6b1abc2156044157d06bec65745280871b8736efc0e139631d5b8b3bac28447951c6e558fcc9a99e6b39796b71694bab4f7ae1703c7069f8d63bce392f82c5c9a8e066e976ee17c69ceca1f6b50f04090fb36f077cccef4e88c02974e1f26b692a77841bf2593054cab9dbfbd3f3c63bfd31ca2270d6a3add1c64cf952f2b473090c679374b2e81307f250c38225af7dc99017aedfcbc87aa72b48509a38cefbca9c56a7a570fd90ccb0d03c6cfb7870d76637dd808cde5719e98ecc5a877664dfe7073f0c7a0c965f2fb40172531b92aec2fc6bb874d6ae5b200f110343aa1f447fe90071759eccaaf8c5d35163f02fd523c66abd16c08d5a1e7a4628663b0ba03018d6604e3b6b7b3b7185b061fc0f7c02be8d953edc8685537e0e85fc7b4190b24bd324bb4041225bfdec7e96223c2cf438226b662f9191eee6fbaf583a993707a8c1ca31fb478354f488ce2e041ee71def128518a68b96450732fa56be67a48ecfe9a5929760d2d2280dc228731eadaa87b6f251d96ab75c23c8b281bd3b57db73bd976322695c4937fe039d793a53e05618c237543273cebd844d9705c374bcbde5496dfdc8998c9badc56ca355cd25b64cc7a834294eb2c12bf79c98fea89b1d3479d4f2852a790011fc7109cd0245ab9f651fcce16a7a97141098529926b4ba58e8119a59d6098b30325d8c2df5b2e7ee9d08980b5cda1f96b0a303e8fbba0a97a9da94eb5605d5a62336fdf485ed979e733f43ba5ca6fc625b0eda8fe714175a8e8b28340a5cbb9dfc3bae59d5d4b66c8dd9c8b99e029bb090bbcc02c34722e775fa9f3854d74ead97f65093691b3a73fe31c52a3dbe4c43458f5c7f39934f3526c66076e772aa8b857aedc9eedb7e80daeef5b4bc6e1dd4360691d4d583037480abf0349420b7a531fe3d0ca6494ba02e015c08a51a826780d967222abac9ccf6e9fde12f15b5629341900586e3b43ab228bc7698b3017d9020c5ddcd4131a8a5f7fcfed32aaea52fcdd8863072bd9e0b2d82d45b67625304a0f412c979d920425d22c4e3bb3e1939c0162c294e638a24a08c41851e5a1579014956ba5c5a8d5f8aa964cc3d167c822913eb4f33878b147831bed4e4c2202d99abcdeb9d2c94188fc592ea10a86eb576918952e38fcfdf65298354196dced1a64af2c9cee527e22ca663a263d5fd1490db913689b1e00e3677f956cf1d7703d301f0c381e19ab239ad4055bf340cb5418ec871f810d464034cf5ca55813077f0cc7e7c3abe933c2b202800ba4a9c6a6832ced91da57eeab03d82238b1c56fd7c8774044f1b05e22948ef5d99a3408594f84e4009cd5ed59d6594362648afc941a9349446dd69dd59899f58c0c0c396134f73885508240a7f62a45b06e36136ecf93051a42054f13d86df1d936575f07ddb47f32f829b57a68f9693a14f7ba04f838ad8e723acf8127925de10bc2f721c57067c7099222583a3f8178d691e191b27cc766c780160170d5c27d4f6bea13766be13873c81a3e561301d7124c907080fc83e0d3c67e169bf0f8cef49a01c5dc440b5b1ad72307a28034dc1fa86902879d74b31215bca9321ddff3c6540ae01d797de6b1064da05e3f9e752119f0b9fd175dc8942af6f9c37574285e38d6c264aa25322a73c7d04d4ce2aac6aeb48367b06060c052b7989e882597228b45d4e0ff08f3ec30947a743769d99ece8cfd20421d18f3ef42546144d16d0b1ce2aa70b981002d7b848d30e45fd6694f6da37e815068bc998c00ab3f6c512ac155f63e99f79ad545e565d362bf99ffaf64f57aff5f2bcec89855597aebc4903d2bd40450a7e9d11e5d5a49911d8df8e5c4047ea2457be293f2a22828712c63288dbe1a1683f33fa832ee2eb68c38a27fb6f954a3027eca77eded6ba54fb4b9a5e891d242906a18751087dbb341de6f4b2a155b48e9d103f0cfce9eef430543e8cbfb403b91ad2bc45d3fc41f6c2b15c92ea49dfb334faff38e49f98ce0a8fb0c705ad1924596c591214891f9b60a044c523b7290461385a89691378873200998f7c13d7a19fb7ec0351e1734f4176e93c875f3ed37260d98532f4e7a935d1a6923a5eaa7619f25392f7723bde92a81139bee72577c2cea603d378fb0ef047f30f6f0cf6c132abfab448fd8cd781e169a981e6d7edee84b346879f3c93c59ce0809b3795e00fc00bc216eaf9cdd4f4f8dd146674e9515bf6ff3f6f43f1d299a3246f9", 0x1000}, {&(0x7f0000001400)="96fe233be8cc6dd8df6276975c511f31c6f88fbb0b5c208fc38f018794add3d5faa880f256e7d4", 0x27}], 0x3)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$MON_IOCG_STATS(r6, 0xc0109207, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r7, &(0x7f0000000300), 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff00000001, 0xa840)
ioctl$BLKPG(r8, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x98, &(0x7f0000000340)={0x4, 0x200000000001, 0xf}})
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5420, 0x0)

1.468473717s ago: executing program 1 (id=4552):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x381}], 0x1}, 0x84)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x12060)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa6}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.425842575s ago: executing program 2 (id=4553):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000500)='~', 0x1, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x101)
sendfile(r1, r0, 0x0, 0xe3aa6ea)
pread64(r0, 0x0, 0x0, 0x1b)

1.367300307s ago: executing program 7 (id=4554):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17)
write(r0, &(0x7f0000000000)='3', 0x4e) (async)
setns(0xc9, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1, 0x25c) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
syz_ublk_setup_io_uring(0x543a, &(0x7f0000000180)={0x0, 0xe3c1, 0x40, 0x0, 0x207}, &(0x7f0000000340), &(0x7f00000002c0), &(0x7f0000000300)) (async)
r1 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x3, 0x1000004, 0x20010, 0xffffffffffffffff, 0x20000000)
r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x80000001, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_modify_offsets$generic(r1, r2, 0x64, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffdbf}, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x138, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfeb}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write(r7, &(0x7f0000000000)="9c", 0x1)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={<r8=>0x0, 0x3c, "c31aa509ad56cafdc5212e78b55a3a60e5cb7fe9ba621381b8850ec0837299c3c68637dd6f7eaffd355001a9ee63bd9f4a08968cd1cd339ceeef5bb6"}, &(0x7f0000000180)=0x44)
socket$inet6(0xa, 0x800, 0x8) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={r8, 0x6, 0x20}, 0xc)
r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000980)="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", 0x559, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r9}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.088582352s ago: executing program 2 (id=4555):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
sched_setscheduler(0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
ftruncate(0xffffffffffffffff, 0x7000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000240)=""/195)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x8008)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x4, 0xa6e, 0x9})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008"], 0x50}}, 0x4000850)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
writev(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000100)="ed9c39f57bb49c8fc17473ae839f48c68ecb0ea8f671edc2786bbda713479ae0f6df78919b9bbf1726486db1da6009c34332ab8cad5a997542c3453693ed", 0x3e}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="96fe233be8cc6dd8df6276975c511f31c6f88fbb0b5c208fc38f018794add3d5faa880f256e7d4", 0x27}], 0x3)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
ioctl$MON_IOCG_STATS(r5, 0xc0109207, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r6, &(0x7f0000000300), 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff00000001, 0xa840)
ioctl$BLKPG(r7, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x98, &(0x7f0000000340)={0x4, 0x200000000001, 0xf}})
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5420, 0x0)

1.088027373s ago: executing program 7 (id=4556):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="6a2922a012b22740596d7299efcf7a639bc8eadff85c1eb8ed3faaaa7d8e8d6fa79c370ce9eded3cbda6135a7a2b0f2f6dbbc6c1f6a97764658c65bdf9895deb6f11cb90e0e5530730bb3ee27ce3b6a39cd29b5f8716752462e62124cafa3189f4b607217a7dd28850508d66e2cdd7c9e80c988462980d4d512908e05068cc5c1d3daff2f9", 0x85, 0x4000001, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/79, 0x4f}, 0x40}], 0x1, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x16)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000c00)=0x11)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
lseek(r3, 0x10001, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)

743.650161ms ago: executing program 6 (id=4557):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
getuid()
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf/file0\x00', 0x1, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
syz_usb_connect$cdc_ncm(0x2, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x2, 0x1, 0x7, 0xe0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a8e8fc0d27e4"}, {0x5, 0x24, 0x0, 0x2dd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x3, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xa, 0x9, [0x8, 0x7]}, @mdlm_detail={0x6f, 0x24, 0x13, 0x7, "9c2b9c3ced8384820bc7421c2c61c07a2ca06af2cabb17b75a84d5aba39788b3e8bb70e2ab241cc2d60e15bac0ac810de95c57f1a5aec317c8d48b2c152fb4ef1842a7c9c573cd13f3dcd9af52766f3253d43cc8b8817d3fac4602de7250f797b9a6df448cbeb877856160"}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8305, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0xfc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x6ff, 0x4, 0x79, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x8a, 0x1, 0x2, 0x20, 0x2c}, 0x63, &(0x7f0000000500)={0x5, 0xf, 0x63, 0x1, [@generic={0x5e, 0x10, 0xb, "a311a2dc93c802fe8d5a1b6d0d952ff5fee3462b7b9ff128e0dfe705370e6b627a6d4d950e6c0b687d21d24ecc2fd5eb3641caa0416526cfd1cc2e63cc9bcebe69343aa48c3ed8abc0936af2041ae1f3395d386da722f1568f6f59"}]}, 0x1, [{0x74, &(0x7f0000000580)=@string={0x74, 0x3, "4c690507f73b8aabb2da4e807738a3a330456652cf57789ca5ab1c412335ca9c0f9508632db478e7bec5c06850e98d7d91d248ce20709df71f20caa1ae9b7805dfe828e991fcb07775934e0cc5cb228266c83e0769a9c2e87f27ac99a575753851e4911c5f5804db7eea24d9be003f33178c"}}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket(0x2, 0x80805, 0x0)
msgsnd(0x0, &(0x7f0000001880)=ANY=[], 0x1008, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140))
msgctl$IPC_RMID(0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
write(r0, 0x0, 0x0)

445.921651ms ago: executing program 1 (id=4558):
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1c6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040))
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd)
unshare(0x60000600)

402.10133ms ago: executing program 1 (id=4559):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0001010000200001000000000000000000000000000000000000000075efc77c"], 0x50)

312.383197ms ago: executing program 1 (id=4560):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
getuid()
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x40000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf/file0\x00', 0x1, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
syz_usb_connect$cdc_ncm(0x2, 0x100, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x2, 0x1, 0x7, 0xe0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a8e8fc0d27e4"}, {0x5, 0x24, 0x0, 0x2dd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x3, 0x1}, @country_functional={0xa, 0x24, 0x7, 0xa, 0x9, [0x8, 0x7]}, @mdlm_detail={0x6f, 0x24, 0x13, 0x7, "9c2b9c3ced8384820bc7421c2c61c07a2ca06af2cabb17b75a84d5aba39788b3e8bb70e2ab241cc2d60e15bac0ac810de95c57f1a5aec317c8d48b2c152fb4ef1842a7c9c573cd13f3dcd9af52766f3253d43cc8b8817d3fac4602de7250f797b9a6df448cbeb877856160"}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8305, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0xfc, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x6ff, 0x4, 0x79, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x8a, 0x1, 0x2, 0x20, 0x2c}, 0x63, &(0x7f0000000500)={0x5, 0xf, 0x63, 0x1, [@generic={0x5e, 0x10, 0xb, "a311a2dc93c802fe8d5a1b6d0d952ff5fee3462b7b9ff128e0dfe705370e6b627a6d4d950e6c0b687d21d24ecc2fd5eb3641caa0416526cfd1cc2e63cc9bcebe69343aa48c3ed8abc0936af2041ae1f3395d386da722f1568f6f59"}]}, 0x1, [{0x74, &(0x7f0000000580)=@string={0x74, 0x3, "4c690507f73b8aabb2da4e807738a3a330456652cf57789ca5ab1c412335ca9c0f9508632db478e7bec5c06850e98d7d91d248ce20709df71f20caa1ae9b7805dfe828e991fcb07775934e0cc5cb228266c83e0769a9c2e87f27ac99a575753851e4911c5f5804db7eea24d9be003f33178c"}}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = socket(0x2, 0x80805, 0x0)
msgsnd(0x0, 0x0, 0x1008, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140))
msgctl$IPC_RMID(0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
write(r0, 0x0, 0x0)

173.789865ms ago: executing program 2 (id=4561):
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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")
lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x15, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080))

167.225017ms ago: executing program 6 (id=4562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xd0}}, 0x0)

140.578482ms ago: executing program 6 (id=4563):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="6a2922a012b22740596d7299efcf7a639bc8eadff85c1eb8ed3faaaa7d8e8d6fa79c370ce9eded3cbda6135a7a2b0f2f6dbbc6c1f6a97764658c65bdf9895deb6f11cb90e0e5530730bb3ee27ce3b6a39cd29b5f8716752462e62124cafa3189f4b607217a7dd28850508d66e2cdd7c9e80c988462980d4d512908e05068cc5c1d3daff2f9", 0x85, 0x4000001, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/79, 0x4f}, 0x40}], 0x1, 0x12103, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0x11)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
lseek(r4, 0x10001, 0x0)

67.421676ms ago: executing program 2 (id=4564):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0x11, 0x148, 0x150, 0x0, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 'tunl0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x21, 0x0, 0x62}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2, [0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4620, 0x4e21, 0x4e21, 0x4e21, 0x4e25, 0x4e22, 0x4e22, 0x2, 0x4620, 0x4e21, 0x4e23], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}, @common=@inet=@length={{0x28}, {0x7, 0x7, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8001, 0xfffffff2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'wg0\x00', 'netdevsim0\x00', {}, {}, 0x62, 0x0, 0x41}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x40000000)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0xd, 0x4, 0x145d, 0x1, 0x0, 0x3fc, 0x0, 0xff}, 0x0, 0x0, r1, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000c00)=0x11)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x103}, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000200)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x0)

0s ago: executing program 6 (id=4565):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

0-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.666516][T17711] FAULT_INJECTION: forcing a failure.
[  643.666516][T17711] name failslab, interval 1, probability 0, space 0, times 0
[  643.666548][T17711] CPU: 1 UID: 0 PID: 17711 Comm: syz.7.4100 Not tainted syzkaller #0 PREEMPT(lazy) 
[  643.666577][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  643.666645][T17711] Call Trace:
[  643.666652][T17711]  <TASK>
[  643.666659][T17711]  __dump_stack+0x1d/0x30
[  643.666682][T17711]  dump_stack_lvl+0x95/0xd0
[  643.666703][T17711]  dump_stack+0x15/0x1b
[  643.666743][T17711]  should_fail_ex+0x262/0x280
[  643.666815][T17711]  ? copy_pid_ns+0x1b8/0x640
[  643.666879][T17711]  should_failslab+0x8c/0xb0
[  643.666922][T17711]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  643.666965][T17711]  ? copy_pid_ns+0x1b8/0x640
[  643.667025][T17711]  copy_pid_ns+0x1b8/0x640
[  643.667065][T17711]  ? copy_mnt_ns+0xee/0x720
[  643.667090][T17711]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  643.667154][T17711]  ? create_new_namespaces+0x38/0x420
[  643.667220][T17711]  create_new_namespaces+0x168/0x420
[  643.667341][T17711]  unshare_nsproxy_namespaces+0x115/0x150
[  643.667387][T17711]  ksys_unshare+0x42b/0x710
[  643.667500][T17711]  __x64_sys_unshare+0x1f/0x30
[  643.667526][T17711]  x64_sys_call+0x1e33/0x2550
[  643.667552][T17711]  do_syscall_64+0x112/0x360
[  643.667575][T17711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.667671][T17711] RIP: 0033:0x7f200dcfe159
[  643.667686][T17711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.667728][T17711] RSP: 002b:00007f200c757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  643.667747][T17711] RAX: ffffffffffffffda RBX: 00007f200df85fa0 RCX: 00007f200dcfe159
[  643.667761][T17711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  643.667773][T17711] RBP: 00007f200dd9506b R08: 0000000000000000 R09: 0000000000000000
[  643.667807][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  643.667819][T17711] R13: 00007f200df86038 R14: 00007f200df85fa0 R15: 00007fff07f20198
[  643.667873][T17711]  </TASK>
[  643.896889][T17723] netlink: 'syz.6.4103': attribute type 3 has an invalid length.
[  644.189093][ T1043] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  644.414170][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.415348][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  645.326860][T13559] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  645.354425][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.404085][   T29] audit: type=1400 audit(1790809718.614:20969): avc:  denied  { listen } for  pid=17753 comm="syz.6.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  645.423616][T17754] __nla_validate_parse: 23 callbacks suppressed
[  645.423666][T17754] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4114'.
[  645.429665][   T29] audit: type=1400 audit(1790809718.632:20970): avc:  denied  { setattr } for  pid=17753 comm="syz.6.4114" name="NETLINK" dev="sockfs" ino=56265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  645.434596][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4114'.
[  645.483099][   T22] process 17736 (syz.7.4107) no longer affine to cpu1
[  645.500263][T17752] smpboot: CPU 1 is now offline
[  645.514219][T17755] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  645.669669][T17761] smpboot: CPU 1 is now offline
[  645.676389][ T5219] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  645.702169][T17761] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  645.739315][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.829950][T17765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4119'.
[  645.832024][T17767] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4120'.
[  645.983177][T17773] loop1: detected capacity change from 0 to 512
[  646.003660][T17773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  646.012367][T17773] EXT4-fs (loop1): 1 truncate cleaned up
[  646.015069][T17773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  646.073166][ T5379] Bluetooth: hci0: Frame reassembly failed (-84)
[  646.554838][T17779] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4124'.
[  646.819700][T17792] netlink: 'syz.5.4130': attribute type 3 has an invalid length.
[  646.819755][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4130'.
[  646.846906][T17790] loop2: detected capacity change from 0 to 512
[  646.869314][T17790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  646.896117][T17790] EXT4-fs (loop2): 1 truncate cleaned up
[  646.910060][T17790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.020912][ T5379] Bluetooth: hci1: Frame reassembly failed (-84)
[  647.066700][T17802] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4133'.
[  647.176105][T17808] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4136'.
[  647.493439][T17816] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4137'.
[  648.129343][T17823] netlink: 'syz.5.4140': attribute type 1 has an invalid length.
[  648.146628][T17823] 8021q: adding VLAN 0 to HW filter on device bond2
[  648.181920][   T29] audit: type=1400 audit(1790809721.171:20971): avc:  denied  { accept } for  pid=17818 comm="syz.6.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  648.273275][T13559] Bluetooth: hci0: command 0x1003 tx timeout
[  648.273282][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  648.289229][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.585211][T17830] loop1: detected capacity change from 0 to 512
[  648.630227][T17830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  648.673825][T17830] EXT4-fs (loop1): 1 truncate cleaned up
[  648.686201][T17830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  648.762148][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.911784][T17842] netlink: 'syz.5.4147': attribute type 1 has an invalid length.
[  648.926960][T17842] 8021q: adding VLAN 0 to HW filter on device bond3
[  648.979362][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4148'.
[  649.116171][T17856] netlink: 'syz.1.4150': attribute type 3 has an invalid length.
[  649.147663][T17859] loop1: detected capacity change from 0 to 256
[  649.173560][   T29] audit: type=1400 audit(1790809722.085:20972): avc:  denied  { bind } for  pid=17858 comm="syz.1.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  649.226461][ T3545] Bluetooth: hci1: command 0x1003 tx timeout
[  649.226837][ T5219] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  649.264493][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.293209][T17862] loop2: detected capacity change from 0 to 512
[  649.309271][T17862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.309470][T17862] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  649.417363][   T29] audit: type=1400 audit(1790809722.306:20973): avc:  denied  { write } for  pid=17861 comm="syz.2.4152" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.502513][T17862] blktrace: Concurrent blktraces are not allowed on sg0
[  649.613020][   T29] audit: type=1400 audit(1790809722.491:20974): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.613141][   T29] audit: type=1400 audit(1790809722.491:20975): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.613177][   T29] audit: type=1400 audit(1790809722.491:20976): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.613210][   T29] audit: type=1400 audit(1790809722.491:20977): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.613325][   T29] audit: type=1400 audit(1790809722.491:20978): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.613358][   T29] audit: type=1400 audit(1790809722.491:20979): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.613392][   T29] audit: type=1400 audit(1790809722.491:20980): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  649.641248][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.120611][T17879] smpboot: CPU 1 is now offline
[  650.122595][T17879] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  650.385957][T17885] FAULT_INJECTION: forcing a failure.
[  650.385957][T17885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.385993][T17885] CPU: 1 UID: 0 PID: 17885 Comm: syz.1.4158 Not tainted syzkaller #0 PREEMPT(lazy) 
[  650.386041][T17885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.386057][T17885] Call Trace:
[  650.386066][T17885]  <TASK>
[  650.386097][T17885]  __dump_stack+0x1d/0x30
[  650.386201][T17885]  dump_stack_lvl+0x95/0xd0
[  650.386360][T17885]  dump_stack+0x15/0x1b
[  650.386379][T17885]  should_fail_ex+0x262/0x280
[  650.386403][T17885]  should_fail+0xb/0x20
[  650.386495][T17885]  should_fail_usercopy+0x1a/0x20
[  650.386661][T17885]  _copy_from_iter+0xcc/0xe70
[  650.386726][T17885]  ? __alloc_skb+0x516/0x6f0
[  650.386749][T17885]  ? __alloc_skb+0x209/0x6f0
[  650.386822][T17885]  netlink_sendmsg+0x4a4/0x6f0
[  650.386843][T17885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  650.386862][T17885]  ____sys_sendmsg+0x532/0x580
[  650.386918][T17885]  ___sys_sendmsg+0x195/0x1e0
[  650.386958][T17885]  __x64_sys_sendmsg+0xd4/0x160
[  650.387005][T17885]  x64_sys_call+0x22ab/0x2550
[  650.387098][T17885]  do_syscall_64+0x112/0x360
[  650.387126][T17885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.387156][T17885] RIP: 0033:0x7f231cdee159
[  650.387215][T17885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.387241][T17885] RSP: 002b:00007f231b847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.387308][T17885] RAX: ffffffffffffffda RBX: 00007f231d075fa0 RCX: 00007f231cdee159
[  650.387327][T17885] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003
[  650.387346][T17885] RBP: 00007f231b847090 R08: 0000000000000000 R09: 0000000000000000
[  650.387364][T17885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.387382][T17885] R13: 00007f231d076038 R14: 00007f231d075fa0 R15: 00007ffddb865898
[  650.387535][T17885]  </TASK>
[  650.569447][T17888] loop2: detected capacity change from 0 to 512
[  650.609308][T17888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.609387][T17888] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  650.690733][T17894] loop1: detected capacity change from 0 to 512
[  650.738623][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.794677][T17894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.794915][T17894] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.905946][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.008832][T17881] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.008875][T17881] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.008974][T17881] bridge_slave_0: entered allmulticast mode
[  651.040088][T17881] bridge_slave_0: entered promiscuous mode
[  651.051714][T17881] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.054888][T17881] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.054986][T17881] bridge_slave_1: entered allmulticast mode
[  651.055478][T17881] bridge_slave_1: entered promiscuous mode
[  651.142160][T17881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.156775][T17881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.230757][T17881] team0: Port device team_slave_0 added
[  651.231685][T17881] team0: Port device team_slave_1 added
[  651.258728][T17904] loop5: detected capacity change from 0 to 512
[  651.309474][T17881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  651.309495][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.309560][T17881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  651.310163][T17881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.310176][T17881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  651.310204][T17881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.320933][T17904] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  651.424508][T17919] smpboot: CPU 1 is now offline
[  651.445242][T17919] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  651.493601][T17904] EXT4-fs (loop5): 1 truncate cleaned up
[  651.500220][T17904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  651.540025][T17881] hsr_slave_0: entered promiscuous mode
[  651.553710][T17881] hsr_slave_1: entered promiscuous mode
[  651.558113][T17881] debugfs: 'hsr0' already exists in 'hsr'
[  651.558145][T17881] Cannot create hsr debugfs directory
[  651.796994][   T51] Bluetooth: hci0: Frame reassembly failed (-84)
[  652.085374][T17881] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.159747][T17881] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.220747][T17881] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.269650][T17930] loop2: detected capacity change from 0 to 512
[  652.278637][T17930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  652.291378][T17932] loop1: detected capacity change from 0 to 512
[  652.296031][T17930] EXT4-fs (loop2): 1 truncate cleaned up
[  652.297609][T17930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.304001][T17932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  652.344578][T17881] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.352002][T17932] EXT4-fs (loop1): 1 truncate cleaned up
[  652.356896][T17932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  652.409403][   T51] Bluetooth: hci1: Frame reassembly failed (-84)
[  652.446899][T17881] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  652.451313][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  652.451971][T17881] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  652.455486][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  652.456404][T17881] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  652.469493][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  652.471454][T17881] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  652.472850][   T51] Bluetooth: hci2: Frame reassembly failed (-84)
[  652.481476][T17881] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  652.549482][T17881] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.558445][T17881] 8021q: adding VLAN 0 to HW filter on device team0
[  652.566738][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.566829][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.575050][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.575183][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.720138][T17881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  652.853436][T17881] veth0_vlan: entered promiscuous mode
[  652.860752][T17881] veth1_vlan: entered promiscuous mode
[  652.876195][T17881] veth0_macvtap: entered promiscuous mode
[  652.883695][T17881] veth1_macvtap: entered promiscuous mode
[  652.892832][T17881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.898165][T17881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.921432][ T6053] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.921678][ T6053] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.921796][ T6053] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.922331][ T6053] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.990275][T17965] loop6: detected capacity change from 0 to 512
[  653.013560][T17965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  653.013733][T17965] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  653.057240][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.057452][T17969] netlink: 'syz.7.4170': attribute type 3 has an invalid length.
[  653.057575][T17969] __nla_validate_parse: 2 callbacks suppressed
[  653.057627][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4170'.
[  653.123119][T17974] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4172'.
[  653.993004][ T5219] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  654.019488][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.045725][T17978] netlink: 'syz.7.4174': attribute type 3 has an invalid length.
[  654.045855][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4174'.
[  654.196335][T17983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.198600][T17983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.300394][T17985] FAULT_INJECTION: forcing a failure.
[  654.300394][T17985] name failslab, interval 1, probability 0, space 0, times 0
[  654.300437][T17985] CPU: 0 UID: 0 PID: 17985 Comm: syz.6.4176 Not tainted syzkaller #0 PREEMPT(lazy) 
[  654.300465][T17985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  654.300478][T17985] Call Trace:
[  654.300556][T17985]  <TASK>
[  654.300564][T17985]  __dump_stack+0x1d/0x30
[  654.300718][T17985]  dump_stack_lvl+0x95/0xd0
[  654.300740][T17985]  dump_stack+0x15/0x1b
[  654.300760][T17985]  should_fail_ex+0x262/0x280
[  654.300811][T17985]  ? copy_pid_ns+0x1b8/0x640
[  654.300857][T17985]  should_failslab+0x8c/0xb0
[  654.300890][T17985]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  654.300920][T17985]  ? copy_pid_ns+0x1b8/0x640
[  654.301006][T17985]  copy_pid_ns+0x1b8/0x640
[  654.301117][T17985]  ? copy_mnt_ns+0xee/0x720
[  654.301136][T17985]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  654.301166][T17985]  ? create_new_namespaces+0x38/0x420
[  654.301274][T17985]  create_new_namespaces+0x168/0x420
[  654.301307][T17985]  unshare_nsproxy_namespaces+0x115/0x150
[  654.301385][T17985]  ksys_unshare+0x42b/0x710
[  654.301415][T17985]  __x64_sys_unshare+0x1f/0x30
[  654.301493][T17985]  x64_sys_call+0x1e33/0x2550
[  654.301519][T17985]  do_syscall_64+0x112/0x360
[  654.301543][T17985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.301623][T17985] RIP: 0033:0x7f0c671de159
[  654.301638][T17985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.301688][T17985] RSP: 002b:00007f0c65c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  654.301709][T17985] RAX: ffffffffffffffda RBX: 00007f0c67465fa0 RCX: 00007f0c671de159
[  654.301744][T17985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  654.301757][T17985] RBP: 00007f0c6727506b R08: 0000000000000000 R09: 0000000000000000
[  654.301770][T17985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  654.301783][T17985] R13: 00007f0c67466038 R14: 00007f0c67465fa0 R15: 00007fff3b23f9f8
[  654.301877][T17985]  </TASK>
[  654.599760][ T3545] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  654.620486][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.697843][ T3545] Bluetooth: hci2: command 0x1003 tx timeout
[  654.698672][T13559] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  654.752277][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.479141][T17993] loop5: detected capacity change from 0 to 512
[  655.515138][T17993] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  655.538869][T17993] EXT4-fs (loop5): 1 truncate cleaned up
[  655.605206][T17993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  655.731357][T18012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4182'.
[  655.949780][ T6053] Bluetooth: hci0: Frame reassembly failed (-84)
[  656.203246][T18018] loop2: detected capacity change from 0 to 512
[  656.241631][T18018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.241774][T18018] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  656.299530][T18018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4185'.
[  656.346768][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  656.346783][   T29] audit: type=1400 audit(1790809728.703:20985): avc:  denied  { write } for  pid=18017 comm="syz.2.4185" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  656.411436][T18018] blktrace: Concurrent blktraces are not allowed on sg0
[  656.444417][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  656.760114][T18034] loop6: detected capacity change from 0 to 512
[  656.775079][T18034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  656.775149][T18034] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  656.832708][T18034] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4189'.
[  656.877021][   T29] audit: type=1400 audit(1790809729.192:20986): avc:  denied  { write } for  pid=18033 comm="syz.6.4189" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  657.012273][T18034] blktrace: Concurrent blktraces are not allowed on sg0
[  657.126328][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.607823][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4192'.
[  658.153210][T13559] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  658.198928][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.620684][T18061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4199'.
[  658.620960][T18055] loop5: detected capacity change from 0 to 512
[  658.685084][T18055] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  658.734160][T18055] EXT4-fs (loop5): 1 truncate cleaned up
[  658.748362][T18055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  658.801504][T18065] loop6: detected capacity change from 0 to 512
[  658.826921][T18065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.827097][T18065] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  658.870009][   T29] audit: type=1400 audit(1790809731.039:20987): avc:  denied  { write } for  pid=18064 comm="syz.6.4200" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  658.915460][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.955758][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.019078][T18071] netlink: 'syz.5.4202': attribute type 3 has an invalid length.
[  659.019220][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4202'.
[  659.170928][T18078] netlink: 'syz.6.4205': attribute type 1 has an invalid length.
[  659.185642][T18078] 8021q: adding VLAN 0 to HW filter on device bond1
[  659.286577][T18076] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  659.286668][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  659.286793][T18076] vhci_hcd vhci_hcd.0: Device attached
[  659.345331][T18076] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10)
[  659.345383][T18076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  659.345611][T18076] vhci_hcd vhci_hcd.0: Device attached
[  659.439995][T18090] loop1: detected capacity change from 0 to 256
[  659.465139][T18083] loop6: detected capacity change from 0 to 512
[  659.512767][T18083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  659.542596][T15487] usb 11-1: new high-speed USB device number 9 using vhci_hcd
[  659.552962][T18083] EXT4-fs (loop6): 1 truncate cleaned up
[  659.558592][T18083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  659.742242][T18086] vhci_hcd: connection closed
[  659.742565][   T71] vhci_hcd vhci_hcd.5: stop threads
[  659.742668][   T71] vhci_hcd vhci_hcd.5: release socket
[  659.742699][   T71] vhci_hcd vhci_hcd.5: disconnect device
[  659.743407][T18084] vhci_hcd: connection reset by peer
[  659.743700][   T71] vhci_hcd vhci_hcd.5: stop threads
[  659.743720][   T71] vhci_hcd vhci_hcd.5: release socket
[  659.743744][   T71] vhci_hcd vhci_hcd.5: disconnect device
[  659.952026][ T6053] Bluetooth: hci0: Frame reassembly failed (-84)
[  660.102445][T18095] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4208'.
[  660.413373][T18103] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4212'.
[  660.578168][T18105] netlink: 'syz.1.4213': attribute type 3 has an invalid length.
[  660.578299][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4213'.
[  660.871766][T18113] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  660.871819][T18113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  660.873274][T18113] vhci_hcd vhci_hcd.0: Device attached
[  660.883313][T18113] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  660.883474][T18113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  660.883637][T18113] vhci_hcd vhci_hcd.0: Device attached
[  661.066992][T18118] vhci_hcd: connection closed
[  661.067221][   T51] vhci_hcd vhci_hcd.1: stop threads
[  661.067242][   T51] vhci_hcd vhci_hcd.1: release socket
[  661.067281][   T51] vhci_hcd vhci_hcd.1: disconnect device
[  661.067305][T18116] vhci_hcd: connection closed
[  661.069697][   T51] vhci_hcd vhci_hcd.1: stop threads
[  661.069717][   T51] vhci_hcd vhci_hcd.1: release socket
[  661.069738][   T51] vhci_hcd vhci_hcd.1: disconnect device
[  661.088934][T15373] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  661.104657][T18123] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4218'.
[  661.313708][T18126] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4219'.
[  662.141018][T13559] Bluetooth: hci0: command 0x1003 tx timeout
[  662.141050][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  662.200492][T18156] loop5: detected capacity change from 0 to 512
[  662.211890][T18156] EXT4-fs: Ignoring removed nobh option
[  662.222064][T18156] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  662.222534][T18156] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4228: attempt to clear invalid blocks 1 len 1
[  662.222643][T18156] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  662.222947][T18156] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  662.223105][T18156] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4228: invalid indirect mapped block 1819239214 (level 0)
[  662.223144][T18156] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  662.223489][T18156] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4228: invalid indirect mapped block 1819239214 (level 1)
[  662.223529][T18156] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  662.224004][T18156] EXT4-fs (loop5): 1 truncate cleaned up
[  662.224474][T18156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  662.256616][   T29] audit: type=1400 audit(1790809734.159:20988): avc:  denied  { write } for  pid=18144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  662.323123][T18158] loop2: detected capacity change from 0 to 256
[  662.368082][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.389661][   T29] audit: type=1400 audit(1790809734.288:20989): avc:  denied  { write } for  pid=18163 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  662.525332][T18167] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4229'.
[  662.534320][   T29] audit: type=1400 audit(1790809734.417:20990): avc:  denied  { write } for  pid=18168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  662.608492][   T29] audit: type=1400 audit(1790809734.491:20991): avc:  denied  { write } for  pid=18181 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  662.923806][T18190] loop1: detected capacity change from 0 to 512
[  662.947519][T18190] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  662.977435][T18190] EXT4-fs (loop1): 1 truncate cleaned up
[  662.987187][T18190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.123385][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.411945][T18203] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4238'.
[  663.926035][T18217] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4243'.
[  664.148242][   T29] audit: type=1400 audit(1790809735.913:20992): avc:  denied  { write } for  pid=18220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.208443][   T29] audit: type=1400 audit(1790809735.959:20993): avc:  denied  { write } for  pid=18234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.356424][T18240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.358543][T18240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.395153][   T29] audit: type=1400 audit(1790809736.143:20994): avc:  denied  { write } for  pid=18236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  664.439863][   T29] audit: type=1400 audit(1790809736.180:20995): avc:  denied  { write } for  pid=18249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  665.075348][T15487] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  665.214681][T18265] loop5: detected capacity change from 0 to 512
[  665.235514][T18265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  665.235602][T18265] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  665.263343][   T29] audit: type=1400 audit(1790809736.919:20996): avc:  denied  { write } for  pid=18264 comm="syz.5.4252" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  665.316950][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.348118][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  665.398489][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  665.495266][T18272] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[  665.495292][T18272] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  665.495636][T18272] vhci_hcd vhci_hcd.0: Device attached
[  665.515315][T18272] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10)
[  665.515387][T18272] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  665.515549][T18272] vhci_hcd vhci_hcd.0: Device attached
[  665.746933][   T11] usb 15-1: new high-speed USB device number 8 using vhci_hcd
[  665.995917][T18277] vhci_hcd: connection reset by peer
[  665.997330][T18279] vhci_hcd: connection closed
[  666.003438][   T51] vhci_hcd vhci_hcd.7: stop threads
[  666.003463][   T51] vhci_hcd vhci_hcd.7: release socket
[  666.003490][   T51] vhci_hcd vhci_hcd.7: disconnect device
[  666.003629][   T51] vhci_hcd vhci_hcd.7: stop threads
[  666.003648][   T51] vhci_hcd vhci_hcd.7: release socket
[  666.003672][   T51] vhci_hcd vhci_hcd.7: disconnect device
[  666.025582][T18285] loop1: detected capacity change from 0 to 256
[  666.440167][T18293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.440342][T18293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.488108][T18289] loop1: detected capacity change from 0 to 512
[  666.517294][T18289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  666.542693][T18289] EXT4-fs (loop1): 1 truncate cleaned up
[  666.556665][T18289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  667.221714][T18311] loop6: detected capacity change from 0 to 1024
[  667.222201][T18311] EXT4-fs: Ignoring removed oldalloc option
[  667.222609][T18311] EXT4-fs: Invalid want_extra_isize 132
[  667.474781][T18311] loop6: detected capacity change from 0 to 512
[  667.499485][T18311] EXT4-fs: Ignoring removed bh option
[  667.500379][T18311] EXT4-fs: quotafile must be on filesystem root
[  668.073240][T18323] loop6: detected capacity change from 0 to 512
[  668.104494][T18323] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  668.160766][T18323] EXT4-fs (loop6): 1 truncate cleaned up
[  668.182460][T18329] FAULT_INJECTION: forcing a failure.
[  668.182460][T18329] name failslab, interval 1, probability 0, space 0, times 0
[  668.182500][T18329] CPU: 1 UID: 0 PID: 18329 Comm: syz.7.4271 Not tainted syzkaller #0 PREEMPT(lazy) 
[  668.182583][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  668.182602][T18329] Call Trace:
[  668.182656][T18329]  <TASK>
[  668.182665][T18329]  __dump_stack+0x1d/0x30
[  668.182693][T18329]  dump_stack_lvl+0x95/0xd0
[  668.182840][T18329]  dump_stack+0x15/0x1b
[  668.182871][T18329]  should_fail_ex+0x262/0x280
[  668.182910][T18329]  ? alloc_fdtable+0x8c/0x1d0
[  668.182992][T18329]  should_failslab+0x8c/0xb0
[  668.183038][T18329]  __kmalloc_cache_noprof+0x7a/0x400
[  668.183153][T18329]  ? alloc_fdtable+0x8c/0x1d0
[  668.183175][T18329]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  668.183215][T18329]  alloc_fdtable+0x8c/0x1d0
[  668.183302][T18329]  dup_fd+0x4ae/0x530
[  668.183410][T18329]  ? _raw_spin_unlock+0x9/0x30
[  668.183450][T18329]  ksys_unshare+0x36c/0x710
[  668.183500][T18329]  __x64_sys_unshare+0x1f/0x30
[  668.183541][T18329]  x64_sys_call+0x1e33/0x2550
[  668.183660][T18329]  do_syscall_64+0x112/0x360
[  668.183685][T18329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.183781][T18329] RIP: 0033:0x7f200dcfe159
[  668.183856][T18329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  668.183950][T18329] RSP: 002b:00007f200c757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  668.183979][T18329] RAX: ffffffffffffffda RBX: 00007f200df85fa0 RCX: 00007f200dcfe159
[  668.184000][T18329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  668.184083][T18329] RBP: 00007f200dd9506b R08: 0000000000000000 R09: 0000000000000000
[  668.184097][T18329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  668.184192][T18329] R13: 00007f200df86038 R14: 00007f200df85fa0 R15: 00007fff07f20198
[  668.184221][T18329]  </TASK>
[  668.351736][T18323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  668.502859][T18333] loop2: detected capacity change from 0 to 512
[  668.526006][T18333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  668.526113][T18333] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  668.580098][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.600407][T18333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4273'.
[  668.671768][   T29] audit: type=1400 audit(1790809740.076:20997): avc:  denied  { write } for  pid=18332 comm="syz.2.4273" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.732778][T18333] blktrace: Concurrent blktraces are not allowed on sg0
[  668.778902][T18342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  668.784731][T18342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  668.819779][   T29] audit: type=1400 audit(1790809740.224:20998): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.819818][   T29] audit: type=1400 audit(1790809740.224:20999): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.819904][   T29] audit: type=1400 audit(1790809740.224:21000): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.819933][   T29] audit: type=1400 audit(1790809740.224:21001): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.819959][   T29] audit: type=1400 audit(1790809740.224:21002): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.822415][   T29] audit: type=1400 audit(1790809740.224:21003): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.822515][   T29] audit: type=1400 audit(1790809740.224:21004): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.822654][   T29] audit: type=1400 audit(1790809740.224:21005): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.854451][   T29] audit: type=1400 audit(1790809740.251:21006): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  668.893137][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.904630][ T3545] Bluetooth: hci0: command 0x1003 tx timeout
[  668.904718][T13559] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  669.068307][T18346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4277'.
[  669.113080][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.163475][T18348] loop1: detected capacity change from 0 to 512
[  669.185640][T18348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.185697][T18348] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  669.247029][T18348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4278'.
[  669.538808][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.565539][T18358] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.565721][T18358] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.565980][T18358] bridge0: entered allmulticast mode
[  669.579593][T18358] bridge_slave_1: left allmulticast mode
[  669.579619][T18358] bridge_slave_1: left promiscuous mode
[  669.580014][T18358] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.599423][T18358] bridge_slave_0: left allmulticast mode
[  669.599502][T18358] bridge_slave_0: left promiscuous mode
[  669.599749][T18358] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.752160][T18360] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  669.752185][T18360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  669.752626][T18360] vhci_hcd vhci_hcd.0: Device attached
[  669.793426][T18360] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  669.793454][T18360] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  669.793632][T18360] vhci_hcd vhci_hcd.0: Device attached
[  670.005239][T15487] usb 3-1: new high-speed USB device number 7 using vhci_hcd
[  670.482192][T18364] vhci_hcd: connection reset by peer
[  670.482413][  T364] vhci_hcd vhci_hcd.1: stop threads
[  670.482431][  T364] vhci_hcd vhci_hcd.1: release socket
[  670.482455][  T364] vhci_hcd vhci_hcd.1: disconnect device
[  670.482504][T18368] vhci_hcd: connection closed
[  670.482816][  T364] vhci_hcd vhci_hcd.1: stop threads
[  670.482830][  T364] vhci_hcd vhci_hcd.1: release socket
[  670.482849][  T364] vhci_hcd vhci_hcd.1: disconnect device
[  670.839504][T18381] loop2: detected capacity change from 0 to 512
[  670.910103][T18381] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  670.953673][T18381] EXT4-fs (loop2): 1 truncate cleaned up
[  670.974022][T18381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  671.199066][  T364] Bluetooth: hci0: Frame reassembly failed (-84)
[  671.310180][T18388] loop1: detected capacity change from 0 to 1024
[  671.316352][   T11] vhci_hcd vhci_hcd.7: vhci_device speed not set
[  671.360104][T18388] EXT4-fs: Ignoring removed oldalloc option
[  671.378541][T18388] EXT4-fs: Invalid want_extra_isize 132
[  671.452248][T18394] netlink: 'syz.6.4293': attribute type 1 has an invalid length.
[  671.983342][T18395] FAULT_INJECTION: forcing a failure.
[  671.983342][T18395] name fail_futex, interval 1, probability 0, space 0, times 0
[  671.983380][T18395] CPU: 0 UID: 0 PID: 18395 Comm: syz.1.4291 Not tainted syzkaller #0 PREEMPT(lazy) 
[  671.983414][T18395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  671.983431][T18395] Call Trace:
[  671.983440][T18395]  <TASK>
[  671.983450][T18395]  __dump_stack+0x1d/0x30
[  671.983510][T18395]  dump_stack_lvl+0x95/0xd0
[  671.983540][T18395]  dump_stack+0x15/0x1b
[  671.983641][T18395]  should_fail_ex+0x262/0x280
[  671.983680][T18395]  should_fail+0xb/0x20
[  671.983704][T18395]  get_futex_key+0x12d/0xb10
[  671.983738][T18395]  ? rcu_segcblist_enqueue+0x9b/0xb0
[  671.983775][T18395]  futex_wake+0x89/0x400
[  671.983817][T18395]  ? perf_lock_task_context+0x24b/0x2c0
[  671.983891][T18395]  do_futex+0x3f8/0x460
[  671.983964][T18395]  mm_exit_exec_release+0xab/0x190
[  671.983997][T18395]  exit_mm+0x37/0x1b0
[  671.984049][T18395]  do_exit+0x438/0x1510
[  671.984083][T18395]  do_group_exit+0xfe/0x140
[  671.984144][T18395]  ? get_signal+0xe00/0xf10
[  671.984191][T18395]  get_signal+0xe07/0xf10
[  671.984241][T18395]  arch_do_signal_or_restart+0x96/0x480
[  671.984340][T18395]  exit_to_user_mode_loop+0x15d/0x8c0
[  671.984421][T18395]  do_syscall_64+0x212/0x360
[  671.984454][T18395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.984485][T18395] RIP: 0033:0x7f231cdee159
[  671.984507][T18395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.984528][T18395] RSP: 002b:00007f231b8260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  671.984589][T18395] RAX: fffffffffffffe00 RBX: 00007f231d076098 RCX: 00007f231cdee159
[  671.984681][T18395] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f231d076098
[  671.984699][T18395] RBP: 00007f231d076090 R08: 0000000000000000 R09: 0000000000000000
[  671.984795][T18395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.984811][T18395] R13: 00007f231d076128 R14: 00007ffddb8657b0 R15: 00007ffddb865898
[  671.984837][T18395]  </TASK>
[  672.409388][T18408] loop1: detected capacity change from 0 to 512
[  672.486648][T18408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  672.489117][T18408] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  672.500560][T18412] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  672.500645][T18412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  672.500746][T18412] vhci_hcd vhci_hcd.0: Device attached
[  672.519053][T18412] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10)
[  672.519135][T18412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  672.519174][T18412] vhci_hcd vhci_hcd.0: Device attached
[  672.674499][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  672.710890][T18417] vhci_hcd: connection closed
[  672.711038][T18419] vhci_hcd: connection closed
[  672.711409][   T51] vhci_hcd vhci_hcd.5: stop threads
[  672.711431][   T51] vhci_hcd vhci_hcd.5: release socket
[  672.711456][   T51] vhci_hcd vhci_hcd.5: disconnect device
[  672.711591][   T51] vhci_hcd vhci_hcd.5: stop threads
[  672.711685][   T51] vhci_hcd vhci_hcd.5: release socket
[  672.711707][   T51] vhci_hcd vhci_hcd.5: disconnect device
[  672.728092][T18424] loop1: detected capacity change from 0 to 512
[  672.749306][T18424] EXT4-fs: Ignoring removed nobh option
[  672.759103][T18424] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  672.760144][T18424] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4302: attempt to clear invalid blocks 1 len 1
[  672.760234][T18424] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  672.760990][T18424] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  672.761341][T18424] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4302: invalid indirect mapped block 1819239214 (level 0)
[  672.761434][T18424] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  672.762184][T18424] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4302: invalid indirect mapped block 1819239214 (level 1)
[  672.762341][T18424] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  672.763442][T18424] EXT4-fs (loop1): 1 truncate cleaned up
[  672.764251][T18424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  672.778439][T15373] usb 11-1: new high-speed USB device number 10 using vhci_hcd
[  672.778612][T15373] usb 11-1: enqueue for inactive port 0
[  672.778672][T15373] usb 11-1: enqueue for inactive port 0
[  672.778721][T15373] usb 11-1: enqueue for inactive port 0
[  672.864283][T15373] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  672.905098][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.020804][T18433] loop1: detected capacity change from 0 to 256
[  673.357439][T18438] smpboot: CPU 1 is now offline
[  673.366187][T18438] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  673.415160][ T3545] Bluetooth: hci0: command 0x1003 tx timeout
[  673.415258][T13559] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  673.494579][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.575788][T18445] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4311'.
[  673.751267][T18465] loop5: detected capacity change from 0 to 512
[  673.767193][T18465] EXT4-fs: Ignoring removed nobh option
[  673.784791][T18465] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  673.791296][T18465] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4315: attempt to clear invalid blocks 1 len 1
[  673.791500][T18465] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  673.793294][T18465] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  673.793538][T18465] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4315: invalid indirect mapped block 1819239214 (level 0)
[  673.793716][T18465] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  673.796815][    C0] EXT4-fs (loop5): error count since last fsck: 3
[  673.796868][    C0] EXT4-fs (loop5): initial error at time 1790809744: ext4_clear_blocks:876: inode 13
[  673.796968][    C0] EXT4-fs (loop5): last error at time 1790809744: ext4_free_branches:1023: inode 13
[  673.809741][T18465] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4315: invalid indirect mapped block 1819239214 (level 1)
[  673.809983][T18465] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  673.819292][T18465] EXT4-fs (loop5): 1 truncate cleaned up
[  673.820328][T18465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  673.889140][T18460] loop1: detected capacity change from 0 to 512
[  674.002570][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.031834][T18460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.032420][T18460] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  674.151357][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.178970][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  674.178988][   T29] audit: type=1400 audit(1790809745.171:21020): avc:  denied  { write } for  pid=18468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  674.277250][   T29] audit: type=1400 audit(1790809745.264:21021): avc:  denied  { write } for  pid=18496 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  674.344991][T18494] netlink: 'syz.5.4320': attribute type 3 has an invalid length.
[  674.345045][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4320'.
[  674.517270][T18488] loop2: detected capacity change from 0 to 512
[  674.525709][T18502] FAULT_INJECTION: forcing a failure.
[  674.525709][T18502] name failslab, interval 1, probability 0, space 0, times 0
[  674.525809][T18502] CPU: 0 UID: 0 PID: 18502 Comm: syz.5.4322 Not tainted syzkaller #0 PREEMPT(lazy) 
[  674.525895][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  674.525969][T18502] Call Trace:
[  674.525999][T18502]  <TASK>
[  674.526029][T18502]  __dump_stack+0x1d/0x30
[  674.526129][T18502]  dump_stack_lvl+0x95/0xd0
[  674.526261][T18502]  dump_stack+0x15/0x1b
[  674.526332][T18502]  should_fail_ex+0x262/0x280
[  674.526427][T18502]  ? copy_pid_ns+0x1b8/0x640
[  674.526592][T18502]  should_failslab+0x8c/0xb0
[  674.526689][T18502]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  674.526839][T18502]  ? copy_pid_ns+0x1b8/0x640
[  674.526952][T18502]  copy_pid_ns+0x1b8/0x640
[  674.527073][T18502]  ? copy_mnt_ns+0xee/0x720
[  674.527186][T18502]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  674.527305][T18502]  ? create_new_namespaces+0x38/0x420
[  674.527426][T18502]  create_new_namespaces+0x168/0x420
[  674.527542][T18502]  unshare_nsproxy_namespaces+0x115/0x150
[  674.527655][T18502]  ksys_unshare+0x42b/0x710
[  674.527850][T18502]  __x64_sys_unshare+0x1f/0x30
[  674.527957][T18502]  x64_sys_call+0x1e33/0x2550
[  674.528011][T18502]  do_syscall_64+0x112/0x360
[  674.528171][T18502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.528325][T18502] RIP: 0033:0x7fd4cc57e159
[  674.528417][T18502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.528480][T18502] RSP: 002b:00007fd4cafd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  674.528544][T18502] RAX: ffffffffffffffda RBX: 00007fd4cc805fa0 RCX: 00007fd4cc57e159
[  674.528597][T18502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  674.528646][T18502] RBP: 00007fd4cc61506b R08: 0000000000000000 R09: 0000000000000000
[  674.528697][T18502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  674.528739][T18502] R13: 00007fd4cc806038 R14: 00007fd4cc805fa0 R15: 00007ffde13033b8
[  674.528808][T18502]  </TASK>
[  674.617403][T18488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.617702][T18488] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  674.774781][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.224567][T18516] loop1: detected capacity change from 0 to 512
[  675.228147][T18516] EXT4-fs: Ignoring removed nobh option
[  675.270135][T18516] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  675.270570][T18516] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4326: attempt to clear invalid blocks 1 len 1
[  675.270620][T18516] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  675.270990][T18516] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  675.271067][T18516] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4326: invalid indirect mapped block 1819239214 (level 0)
[  675.271093][T18516] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  675.271486][T18516] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4326: invalid indirect mapped block 1819239214 (level 1)
[  675.271519][T18516] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  675.272471][T18516] EXT4-fs (loop1): 1 truncate cleaned up
[  675.272983][T18516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  675.366257][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.406424][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4325'.
[  675.562392][T15487] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  676.146370][T18524] smpboot: CPU 1 is now offline
[  676.160264][T18525] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  676.737637][T18535] loop1: detected capacity change from 0 to 512
[  676.744452][T18539] loop6: detected capacity change from 0 to 512
[  676.802530][T18531] loop5: detected capacity change from 0 to 1024
[  676.817275][T18535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  676.834431][T18531] EXT4-fs: Ignoring removed oldalloc option
[  676.844946][T18531] EXT4-fs: Invalid want_extra_isize 132
[  676.852977][T18539] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  676.898890][T18535] EXT4-fs (loop1): 1 truncate cleaned up
[  676.920904][T18535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.947291][T18539] EXT4-fs (loop6): 1 truncate cleaned up
[  677.034117][T18539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  677.129281][   T71] Bluetooth: hci0: Frame reassembly failed (-84)
[  677.442480][T18555] loop6: detected capacity change from 0 to 256
[  678.088037][T18561] FAULT_INJECTION: forcing a failure.
[  678.088037][T18561] name failslab, interval 1, probability 0, space 0, times 0
[  678.088088][T18561] CPU: 1 UID: 0 PID: 18561 Comm: syz.5.4340 Not tainted syzkaller #0 PREEMPT(lazy) 
[  678.088133][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  678.088152][T18561] Call Trace:
[  678.088162][T18561]  <TASK>
[  678.088173][T18561]  __dump_stack+0x1d/0x30
[  678.088207][T18561]  dump_stack_lvl+0x95/0xd0
[  678.088235][T18561]  dump_stack+0x15/0x1b
[  678.088263][T18561]  should_fail_ex+0x262/0x280
[  678.088354][T18561]  ? copy_pid_ns+0x1b8/0x640
[  678.088399][T18561]  should_failslab+0x8c/0xb0
[  678.088437][T18561]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  678.088545][T18561]  ? copy_pid_ns+0x1b8/0x640
[  678.088595][T18561]  copy_pid_ns+0x1b8/0x640
[  678.088655][T18561]  ? copy_mnt_ns+0xee/0x720
[  678.088684][T18561]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  678.088726][T18561]  ? create_new_namespaces+0x38/0x420
[  678.088776][T18561]  create_new_namespaces+0x168/0x420
[  678.088872][T18561]  unshare_nsproxy_namespaces+0x115/0x150
[  678.088920][T18561]  ksys_unshare+0x42b/0x710
[  678.089011][T18561]  __x64_sys_unshare+0x1f/0x30
[  678.089050][T18561]  x64_sys_call+0x1e33/0x2550
[  678.089130][T18561]  do_syscall_64+0x112/0x360
[  678.089166][T18561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.089222][T18561] RIP: 0033:0x7fd4cc57e159
[  678.089241][T18561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  678.089268][T18561] RSP: 002b:00007fd4cafd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  678.089311][T18561] RAX: ffffffffffffffda RBX: 00007fd4cc805fa0 RCX: 00007fd4cc57e159
[  678.089332][T18561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  678.089346][T18561] RBP: 00007fd4cc61506b R08: 0000000000000000 R09: 0000000000000000
[  678.089417][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  678.089435][T18561] R13: 00007fd4cc806038 R14: 00007fd4cc805fa0 R15: 00007ffde13033b8
[  678.089462][T18561]  </TASK>
[  678.885929][T18563] loop5: detected capacity change from 0 to 1024
[  678.901091][T18563] EXT4-fs: Ignoring removed oldalloc option
[  678.908553][T18563] EXT4-fs: Invalid want_extra_isize 132
[  679.160605][T18570] loop5: detected capacity change from 0 to 512
[  679.165180][T18570] EXT4-fs: Ignoring removed bh option
[  679.168827][T18570] EXT4-fs: quotafile must be on filesystem root
[  679.299355][ T3545] Bluetooth: hci0: command 0x1003 tx timeout
[  679.299809][T13559] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  679.299985][T18570] FAULT_INJECTION: forcing a failure.
[  679.299985][T18570] name fail_futex, interval 1, probability 0, space 0, times 0
[  679.300048][T18570] CPU: 0 UID: 0 PID: 18570 Comm: syz.5.4341 Not tainted syzkaller #0 PREEMPT(lazy) 
[  679.300078][T18570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  679.300094][T18570] Call Trace:
[  679.300100][T18570]  <TASK>
[  679.300157][T18570]  __dump_stack+0x1d/0x30
[  679.300196][T18570]  dump_stack_lvl+0x95/0xd0
[  679.300228][T18570]  dump_stack+0x15/0x1b
[  679.300253][T18570]  should_fail_ex+0x262/0x280
[  679.300290][T18570]  should_fail+0xb/0x20
[  679.300370][T18570]  get_futex_key+0x12d/0xb10
[  679.300399][T18570]  ? __rcu_read_unlock+0x4e/0x70
[  679.300538][T18570]  ? hrtimer_start_range_ns_common+0x4c5/0x7d0
[  679.300685][T18570]  futex_wake+0x89/0x400
[  679.300712][T18570]  ? perf_lock_task_context+0x24b/0x2c0
[  679.300776][T18570]  do_futex+0x3f8/0x460
[  679.300813][T18570]  mm_exit_exec_release+0xab/0x190
[  679.300926][T18570]  exit_mm+0x37/0x1b0
[  679.300956][T18570]  do_exit+0x438/0x1510
[  679.301034][T18570]  do_group_exit+0xfe/0x140
[  679.301074][T18570]  ? get_signal+0xe00/0xf10
[  679.301114][T18570]  get_signal+0xe07/0xf10
[  679.301207][T18570]  arch_do_signal_or_restart+0x96/0x480
[  679.301242][T18570]  exit_to_user_mode_loop+0x15d/0x8c0
[  679.301362][T18570]  do_syscall_64+0x212/0x360
[  679.301387][T18570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.301481][T18570] RIP: 0033:0x7fd4cc57e159
[  679.301505][T18570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.301568][T18570] RSP: 002b:00007fd4cafb60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  679.301594][T18570] RAX: fffffffffffffe00 RBX: 00007fd4cc806098 RCX: 00007fd4cc57e159
[  679.301614][T18570] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4cc806098
[  679.301679][T18570] RBP: 00007fd4cc806090 R08: 0000000000000000 R09: 0000000000000000
[  679.301697][T18570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.301715][T18570] R13: 00007fd4cc806128 R14: 00007ffde13032d0 R15: 00007ffde13033b8
[  679.301739][T18570]  </TASK>
[  679.447327][T12968] EXT4-fs unmount: 1 callbacks suppressed
[  679.447377][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.728646][T18585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4348'.
[  681.145251][T18589] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4349'.
[  681.224578][T18593] FAULT_INJECTION: forcing a failure.
[  681.224578][T18593] name failslab, interval 1, probability 0, space 0, times 0
[  681.224619][T18593] CPU: 1 UID: 0 PID: 18593 Comm: syz.5.4351 Not tainted syzkaller #0 PREEMPT(lazy) 
[  681.224645][T18593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  681.224664][T18593] Call Trace:
[  681.224673][T18593]  <TASK>
[  681.224684][T18593]  __dump_stack+0x1d/0x30
[  681.224767][T18593]  dump_stack_lvl+0x95/0xd0
[  681.224791][T18593]  dump_stack+0x15/0x1b
[  681.224818][T18593]  should_fail_ex+0x262/0x280
[  681.224852][T18593]  ? copy_pid_ns+0x1b8/0x640
[  681.225007][T18593]  should_failslab+0x8c/0xb0
[  681.225054][T18593]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  681.225100][T18593]  ? copy_pid_ns+0x1b8/0x640
[  681.225219][T18593]  copy_pid_ns+0x1b8/0x640
[  681.225264][T18593]  ? copy_mnt_ns+0xee/0x720
[  681.225297][T18593]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  681.225340][T18593]  ? create_new_namespaces+0x38/0x420
[  681.225381][T18593]  create_new_namespaces+0x168/0x420
[  681.225489][T18593]  unshare_nsproxy_namespaces+0x115/0x150
[  681.225527][T18593]  ksys_unshare+0x42b/0x710
[  681.225630][T18593]  __x64_sys_unshare+0x1f/0x30
[  681.225659][T18593]  x64_sys_call+0x1e33/0x2550
[  681.225736][T18593]  do_syscall_64+0x112/0x360
[  681.225764][T18593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.225796][T18593] RIP: 0033:0x7fd4cc57e159
[  681.225816][T18593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.225867][T18593] RSP: 002b:00007fd4cafd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  681.225892][T18593] RAX: ffffffffffffffda RBX: 00007fd4cc805fa0 RCX: 00007fd4cc57e159
[  681.225913][T18593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  681.226005][T18593] RBP: 00007fd4cc61506b R08: 0000000000000000 R09: 0000000000000000
[  681.226020][T18593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  681.226038][T18593] R13: 00007fd4cc806038 R14: 00007fd4cc805fa0 R15: 00007ffde13033b8
[  681.226147][T18593]  </TASK>
[  681.295361][T18597] netlink: 'syz.5.4352': attribute type 1 has an invalid length.
[  681.454106][T18597] 8021q: adding VLAN 0 to HW filter on device bond4
[  681.566681][T18603] loop5: detected capacity change from 0 to 512
[  681.648754][T18603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  681.649596][T18603] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  681.676683][T18605] loop1: detected capacity change from 0 to 512
[  681.702525][T18605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  681.722580][T18605] EXT4-fs (loop1): 1 truncate cleaned up
[  681.729285][T18605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  681.749675][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.884083][ T5379] Bluetooth: hci0: Frame reassembly failed (-84)
[  681.896319][T18610] loop5: detected capacity change from 0 to 512
[  681.917062][T18610] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  681.941322][T18610] EXT4-fs (loop5): 1 truncate cleaned up
[  681.954634][T18610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  682.003939][T18613] loop2: detected capacity change from 0 to 256
[  682.084490][ T6053] Bluetooth: hci1: Frame reassembly failed (-84)
[  682.275438][T18620] loop6: detected capacity change from 0 to 512
[  682.334654][T18620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  682.334794][T18620] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  682.405895][T18620] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4358'.
[  682.464293][   T29] audit: type=1400 audit(1790809752.815:21022): avc:  denied  { write } for  pid=18619 comm="syz.6.4358" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  682.561431][T18623] blktrace: Concurrent blktraces are not allowed on sg0
[  682.654548][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.741271][   T22] process 18594 (syz.7.4350) no longer affine to cpu1
[  682.838804][T18625] smpboot: CPU 1 is now offline
[  682.853828][T18626] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  683.065278][T18630] loop6: detected capacity change from 0 to 512
[  683.177177][T18630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.178700][T18630] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  683.290652][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.294951][T18628] loop2: detected capacity change from 0 to 1024
[  683.304766][T18628] EXT4-fs: Ignoring removed oldalloc option
[  683.327750][T18628] EXT4-fs: Invalid want_extra_isize 132
[  683.385931][T18634] smpboot: CPU 1 is now offline
[  683.403498][T18634] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  683.423392][T18635] loop2: detected capacity change from 0 to 512
[  683.423729][T18635] EXT4-fs: Ignoring removed bh option
[  683.425361][T18635] EXT4-fs: quotafile must be on filesystem root
[  683.771964][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4365'.
[  683.902342][T18650] loop2: detected capacity change from 0 to 512
[  683.931411][T18650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.931518][T18650] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  683.947227][T18650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4368'.
[  683.967510][   T29] audit: type=1400 audit(1790809754.199:21023): avc:  denied  { write } for  pid=18649 comm="syz.2.4368" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  683.990791][T18650] blktrace: Concurrent blktraces are not allowed on sg0
[  684.021580][   T29] audit: type=1400 audit(1790809754.255:21024): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.021981][   T29] audit: type=1400 audit(1790809754.255:21025): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.044326][   T29] audit: type=1400 audit(1790809754.255:21026): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.044357][   T29] audit: type=1400 audit(1790809754.264:21027): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.044450][   T29] audit: type=1400 audit(1790809754.264:21028): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.044484][   T29] audit: type=1400 audit(1790809754.264:21029): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.044512][   T29] audit: type=1400 audit(1790809754.264:21030): avc:  denied  { write } for  pid=13957 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  684.067383][T12779] Bluetooth: hci0: command 0x1003 tx timeout
[  684.067482][T13559] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  684.070376][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.183729][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.242872][T18656] loop1: detected capacity change from 0 to 256
[  684.327149][T13559] Bluetooth: hci1: command 0x1003 tx timeout
[  684.327183][ T3545] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  684.415790][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  684.741067][T18664] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  684.741101][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  684.741150][T18664] vhci_hcd vhci_hcd.0: Device attached
[  684.784641][T18660] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10)
[  684.784726][T18660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  684.784980][T18660] vhci_hcd vhci_hcd.0: Device attached
[  684.994890][T18662] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  684.999231][ T3382] usb 11-1: new high-speed USB device number 11 using vhci_hcd
[  685.041769][T18662] EXT4-fs (loop2): 1 truncate cleaned up
[  685.063758][T18662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  685.256958][T18667] vhci_hcd: connection closed
[  685.257121][T18665] vhci_hcd: connection reset by peer
[  685.261210][ T5379] vhci_hcd vhci_hcd.5: stop threads
[  685.261270][ T5379] vhci_hcd vhci_hcd.5: release socket
[  685.261398][ T5379] vhci_hcd vhci_hcd.5: disconnect device
[  685.266640][ T5379] vhci_hcd vhci_hcd.5: stop threads
[  685.266689][ T5379] vhci_hcd vhci_hcd.5: release socket
[  685.266762][ T5379] vhci_hcd vhci_hcd.5: disconnect device
[  685.995476][T18681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  685.995541][T18681] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  686.049803][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  686.090391][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4377'.
[  686.216705][T18687] FAULT_INJECTION: forcing a failure.
[  686.216705][T18687] name failslab, interval 1, probability 0, space 0, times 0
[  686.216749][T18687] CPU: 1 UID: 0 PID: 18687 Comm: syz.5.4378 Not tainted syzkaller #0 PREEMPT(lazy) 
[  686.216783][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  686.216867][T18687] Call Trace:
[  686.216878][T18687]  <TASK>
[  686.216890][T18687]  __dump_stack+0x1d/0x30
[  686.216927][T18687]  dump_stack_lvl+0x95/0xd0
[  686.216968][T18687]  dump_stack+0x15/0x1b
[  686.216997][T18687]  should_fail_ex+0x262/0x280
[  686.217092][T18687]  ? copy_pid_ns+0x1b8/0x640
[  686.217138][T18687]  should_failslab+0x8c/0xb0
[  686.217172][T18687]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  686.217300][T18687]  ? copy_pid_ns+0x1b8/0x640
[  686.217341][T18687]  copy_pid_ns+0x1b8/0x640
[  686.217422][T18687]  ? copy_mnt_ns+0xee/0x720
[  686.217451][T18687]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  686.217573][T18687]  ? create_new_namespaces+0x38/0x420
[  686.217611][T18687]  create_new_namespaces+0x168/0x420
[  686.217663][T18687]  unshare_nsproxy_namespaces+0x115/0x150
[  686.217746][T18687]  ksys_unshare+0x42b/0x710
[  686.217777][T18687]  __x64_sys_unshare+0x1f/0x30
[  686.217808][T18687]  x64_sys_call+0x1e33/0x2550
[  686.217846][T18687]  do_syscall_64+0x112/0x360
[  686.217936][T18687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.217968][T18687] RIP: 0033:0x7fd4cc57e159
[  686.217990][T18687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.218017][T18687] RSP: 002b:00007fd4cafd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  686.218102][T18687] RAX: ffffffffffffffda RBX: 00007fd4cc805fa0 RCX: 00007fd4cc57e159
[  686.218117][T18687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  686.218131][T18687] RBP: 00007fd4cc61506b R08: 0000000000000000 R09: 0000000000000000
[  686.218148][T18687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.218166][T18687] R13: 00007fd4cc806038 R14: 00007fd4cc805fa0 R15: 00007ffde13033b8
[  686.218194][T18687]  </TASK>
[  686.686795][T18691] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4380'.
[  686.787189][T18693] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  686.808023][T18693] EXT4-fs (loop1): 1 truncate cleaned up
[  686.813596][T18693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  686.905374][   T51] Bluetooth: hci1: Frame reassembly failed (-84)
[  687.159695][T18705] set_capacity_and_notify: 4 callbacks suppressed
[  687.159725][T18705] loop6: detected capacity change from 0 to 512
[  687.177801][T18705] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  687.190143][T18705] EXT4-fs (loop6): 1 truncate cleaned up
[  687.192234][T18705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  687.242181][ T5379] Bluetooth: hci2: Frame reassembly failed (-84)
[  687.422501][T18708] netlink: 'syz.5.4386': attribute type 3 has an invalid length.
[  687.422544][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4386'.
[  687.532163][ T5219] Bluetooth: hci0: command 0x1003 tx timeout
[  687.532157][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  687.555634][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.592692][T18718] loop2: detected capacity change from 0 to 512
[  687.610241][T18718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  687.610323][T18718] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  687.617138][T18718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4390'.
[  687.652567][T18718] blktrace: Concurrent blktraces are not allowed on sg0
[  687.678136][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.780078][T18729] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4393'.
[  688.793667][T18743] netlink: 'syz.7.4398': attribute type 3 has an invalid length.
[  688.793840][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4398'.
[  688.904497][   T29] kauditd_printk_skb: 14 callbacks suppressed
[  688.904553][   T29] audit: type=1400 audit(1790809758.750:21045): avc:  denied  { read } for  pid=18739 comm="syz.2.4397" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  689.095332][T13559] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  689.128633][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.439176][ T3545] Bluetooth: hci2: command 0x1003 tx timeout
[  689.439245][T12779] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  689.477599][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.660441][T18759] smpboot: CPU 1 is now offline
[  689.680758][T18759] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  689.927464][T18767] smpboot: CPU 1 is now offline
[  689.934923][T18767] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  690.192826][T18771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4408'.
[  690.386133][T18774] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4409'.
[  690.554618][ T3382] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  690.566671][T18776] loop6: detected capacity change from 0 to 512
[  690.572089][T18776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  690.601551][T18776] EXT4-fs (loop6): 1 truncate cleaned up
[  690.622065][T18776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  690.672460][T18781] loop2: detected capacity change from 0 to 512
[  690.689976][T18781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  690.690119][T18781] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  690.750069][  T364] Bluetooth: hci0: Frame reassembly failed (-84)
[  690.759251][T18781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4411'.
[  690.820998][   T29] audit: type=1400 audit(1790809760.532:21046): avc:  denied  { write } for  pid=18780 comm="syz.2.4411" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  690.926048][T18781] blktrace: Concurrent blktraces are not allowed on sg0
[  690.951594][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.066903][T18791] loop1: detected capacity change from 0 to 256
[  691.294111][   T29] audit: type=1400 audit(1790809760.966:21047): avc:  denied  { write } for  pid=18795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  691.376178][   T29] audit: type=1400 audit(1790809761.039:21048): avc:  denied  { write } for  pid=18810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  691.410149][   T29] audit: type=1400 audit(1790809761.067:21049): avc:  denied  { map } for  pid=18811 comm="syz.5.4416" path="/proc/339/task/340/pagemap" dev="proc" ino=60091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  691.569708][   T22] process 18821 (syz.7.4418) no longer affine to cpu1
[  691.585428][T18814] smpboot: CPU 1 is now offline
[  691.626178][T18824] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  691.732781][   T29] audit: type=1400 audit(1790809761.372:21050): avc:  denied  { write } for  pid=18816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  691.817637][T18834] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  691.817748][T18834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  691.817786][T18834] vhci_hcd vhci_hcd.0: Device attached
[  691.818855][T18834] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[  691.818936][T18834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  691.818970][T18834] vhci_hcd vhci_hcd.0: Device attached
[  691.877421][   T29] audit: type=1400 audit(1790809761.510:21051): avc:  denied  { write } for  pid=18835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  692.082069][ T1043] usb 5-1: new high-speed USB device number 7 using vhci_hcd
[  692.124712][T18812] loop5: detected capacity change from 0 to 2048
[  692.166189][T18812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  692.193328][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.220818][T18846] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4421'.
[  692.255597][T18848] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4422'.
[  692.615970][T18838] vhci_hcd: connection closed
[  692.616233][T18836] vhci_hcd: connection reset by peer
[  692.616939][   T51] vhci_hcd vhci_hcd.2: stop threads
[  692.616963][   T51] vhci_hcd vhci_hcd.2: release socket
[  692.617051][   T51] vhci_hcd vhci_hcd.2: disconnect device
[  692.617256][   T51] vhci_hcd vhci_hcd.2: stop threads
[  692.617272][   T51] vhci_hcd vhci_hcd.2: release socket
[  692.617290][   T51] vhci_hcd vhci_hcd.2: disconnect device
[  692.992019][T12779] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  693.029505][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.122205][T18853] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4424'.
[  693.256293][T18865] loop2: detected capacity change from 0 to 256
[  693.375693][T18867] smpboot: CPU 1 is now offline
[  693.410829][T18867] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  694.389384][T18875] loop6: detected capacity change from 0 to 512
[  694.486225][T18875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  694.491871][T18875] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  694.598198][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.706478][T18886] netlink: 'syz.5.4436': attribute type 1 has an invalid length.
[  694.819349][T18884] loop6: detected capacity change from 0 to 512
[  694.870794][T18890] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  694.870902][T18890] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  694.870941][T18890] vhci_hcd vhci_hcd.0: Device attached
[  694.875522][T18884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  694.877862][T18890] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[  694.877928][T18890] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  694.878078][T18890] vhci_hcd vhci_hcd.0: Device attached
[  694.939049][T18884] EXT4-fs (loop6): 1 truncate cleaned up
[  694.943518][T18884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  695.028420][ T6053] Bluetooth: hci0: Frame reassembly failed (-84)
[  695.073252][T18901] netlink: 'syz.5.4439': attribute type 21 has an invalid length.
[  695.608126][T18912] loop5: detected capacity change from 0 to 512
[  695.630985][T18912] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  695.680256][T18891] vhci_hcd: connection closed
[  695.680557][  T364] vhci_hcd vhci_hcd.2: stop threads
[  695.680583][  T364] vhci_hcd vhci_hcd.2: release socket
[  695.680659][  T364] vhci_hcd vhci_hcd.2: disconnect device
[  695.680711][T18893] vhci_hcd: connection closed
[  695.682419][  T364] vhci_hcd vhci_hcd.2: stop threads
[  695.682440][  T364] vhci_hcd vhci_hcd.2: release socket
[  695.682464][  T364] vhci_hcd vhci_hcd.2: disconnect device
[  695.694486][T18912] EXT4-fs (loop5): 1 truncate cleaned up
[  695.695852][T18912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  695.807725][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.855068][T18920] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4446'.
[  695.886058][T18927] netlink: 'syz.1.4449': attribute type 1 has an invalid length.
[  696.521930][T18956] loop1: detected capacity change from 0 to 512
[  696.548652][T18956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  696.575505][T18956] EXT4-fs (loop1): 1 truncate cleaned up
[  696.596759][T18956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  696.602883][T18941] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.602992][T18941] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.603294][T18941] bridge_slave_0: entered allmulticast mode
[  696.606283][T18941] bridge_slave_0: entered promiscuous mode
[  696.614652][T18941] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.614764][T18941] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.615060][T18941] bridge_slave_1: entered allmulticast mode
[  696.618132][T18941] bridge_slave_1: entered promiscuous mode
[  696.673881][T18941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  696.676885][T18941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  696.704270][T18941] team0: Port device team_slave_0 added
[  696.705257][T18941] team0: Port device team_slave_1 added
[  696.726318][T18941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  696.726337][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.726439][T18941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  696.727028][T18941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  696.727125][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  696.727238][T18941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  696.778160][T18941] hsr_slave_0: entered promiscuous mode
[  696.779313][T18941] hsr_slave_1: entered promiscuous mode
[  696.779897][T18941] debugfs: 'hsr0' already exists in 'hsr'
[  696.779947][T18941] Cannot create hsr debugfs directory
[  696.980843][ T5379] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.003698][ T5379] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.060178][ T5379] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.115006][ T5379] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.148030][T18967] loop5: detected capacity change from 0 to 512
[  697.178755][T18967] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  697.209683][T18972] netlink: 'syz.2.4461': attribute type 1 has an invalid length.
[  697.212700][T18967] EXT4-fs (loop5): 1 truncate cleaned up
[  697.222995][T18967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  697.243841][T13559] Bluetooth: hci0: command 0x1003 tx timeout
[  697.244462][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  697.308519][ T5379] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.332480][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.419913][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.528700][T18988] loop5: detected capacity change from 0 to 256
[  697.576261][   T29] audit: type=1400 audit(1790809766.772:21052): avc:  denied  { write } for  pid=18976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  697.662081][ T1043] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  697.664232][   T29] audit: type=1400 audit(1790809766.846:21053): avc:  denied  { write } for  pid=18992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  697.710067][ T5379] bond0 (unregistering): (slave geneve2): Releasing active interface
[  697.789111][ T5379] bond0 (unregistering): Released all slaves
[  697.820236][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13
[  697.837787][ T5379] hsr_slave_0: left promiscuous mode
[  697.839248][ T5379] hsr_slave_1: left promiscuous mode
[  697.839891][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.839925][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.840647][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  697.840668][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  697.885585][ T5379] veth1_macvtap: left promiscuous mode
[  697.885618][ T5379] veth0_macvtap: left promiscuous mode
[  697.885761][ T5379] veth1_vlan: left promiscuous mode
[  697.885879][ T5379] veth0_vlan: left promiscuous mode
[  698.169323][ T5379] team0 (unregistering): Port device team_slave_1 removed
[  698.180285][ T5379] team0 (unregistering): Port device team_slave_0 removed
[  698.554257][T19002] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  698.554283][T19002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  698.554326][T19002] vhci_hcd vhci_hcd.0: Device attached
[  698.555412][T19002] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9)
[  698.555442][T19002] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  698.555489][T19002] vhci_hcd vhci_hcd.0: Device attached
[  698.651790][   T29] audit: type=1400 audit(1790809767.760:21054): avc:  denied  { write } for  pid=18998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  698.697918][   T29] audit: type=1400 audit(1790809767.797:21055): avc:  denied  { write } for  pid=19015 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  698.725625][T18941] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  698.729752][T18941] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  698.730596][T18941] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  698.750067][T18941] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  698.754626][T18941] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  698.770226][T18941] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  698.772718][T18941] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  698.788516][T18941] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  698.821781][ T3398] usb 11-1: new high-speed USB device number 12 using vhci_hcd
[  698.873780][T18941] 8021q: adding VLAN 0 to HW filter on device bond0
[  698.895844][T18941] 8021q: adding VLAN 0 to HW filter on device team0
[  698.905532][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.905576][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.920609][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.920722][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  699.057100][   T29] audit: type=1400 audit(1790809768.129:21056): avc:  denied  { write } for  pid=19025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.072513][T12779] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  699.112501][T19039] netlink: 'syz.2.4467': attribute type 1 has an invalid length.
[  699.145470][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.182822][T19045] loop6: detected capacity change from 0 to 256
[  699.223026][   T29] audit: type=1400 audit(1790809768.286:21057): avc:  denied  { write } for  pid=19047 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.287412][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16
[  699.310849][T19039] loop2: detected capacity change from 0 to 512
[  699.377513][T19039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  699.378467][T19039] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  699.379493][T19003] vhci_hcd: connection reset by peer
[  699.379621][   T71] vhci_hcd vhci_hcd.5: stop threads
[  699.379639][   T71] vhci_hcd vhci_hcd.5: release socket
[  699.379719][   T71] vhci_hcd vhci_hcd.5: disconnect device
[  699.379725][T19005] vhci_hcd: connection closed
[  699.379910][   T71] vhci_hcd vhci_hcd.5: stop threads
[  699.379930][   T71] vhci_hcd vhci_hcd.5: release socket
[  699.379954][   T71] vhci_hcd vhci_hcd.5: disconnect device
[  699.471801][   T29] audit: type=1400 audit(1790809768.507:21058): avc:  denied  { write } for  pid=19038 comm="syz.2.4467" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  699.531846][T18941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.609703][   T29] audit: type=1400 audit(1790809768.637:21059): avc:  denied  { write } for  pid=19054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.674124][T19039] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.777407][   T29] audit: type=1400 audit(1790809768.803:21060): avc:  denied  { write } for  pid=19082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  699.911574][T18941] veth0_vlan: entered promiscuous mode
[  699.925823][T18941] veth1_vlan: entered promiscuous mode
[  699.959550][T18941] veth0_macvtap: entered promiscuous mode
[  699.961075][T18941] veth1_macvtap: entered promiscuous mode
[  699.965825][T18941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.991854][T18941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  700.055354][   T71] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.055842][   T71] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.055950][   T71] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.066915][ T6053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.144743][T19095] loop5: detected capacity change from 0 to 512
[  700.245655][   T29] audit: type=1400 audit(1790809769.227:21061): avc:  denied  { write } for  pid=19096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  700.451771][ T6053] bond2 (unregistering): (slave geneve3): Releasing active interface
[  700.454920][T19095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  700.459727][T19095] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  700.479300][T19106] loop1: detected capacity change from 0 to 512
[  700.499478][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.511560][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.512866][ T6053] bond0 (unregistering): Released all slaves
[  700.517442][ T6053] bond1 (unregistering): Released all slaves
[  700.528095][ T6053] bond2 (unregistering): Released all slaves
[  700.531370][T19106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  700.576143][T19106] EXT4-fs (loop1): 1 truncate cleaned up
[  700.580539][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.601393][T19125] loop6: detected capacity change from 0 to 512
[  700.616323][T19106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  700.649148][ T6053] hsr_slave_0: left promiscuous mode
[  700.665117][ T6053] hsr_slave_1: left promiscuous mode
[  700.670743][ T6053] veth1_macvtap: left promiscuous mode
[  700.670778][ T6053] veth0_macvtap: left promiscuous mode
[  700.670880][ T6053] veth1_vlan: left promiscuous mode
[  700.670924][ T6053] veth0_vlan: left promiscuous mode
[  700.674961][T19125] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  700.679893][T19125] EXT4-fs (loop6): 1 truncate cleaned up
[  700.686487][T19125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  700.744509][T19139] loop2: detected capacity change from 0 to 512
[  700.760864][T19135] loop5: detected capacity change from 0 to 512
[  700.790280][T19139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  700.790407][T19139] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  700.791443][T19135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  700.791493][T19135] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  700.884942][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.924192][T19139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4475'.
[  700.959619][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.004394][ T6053] team0 (unregistering): Port device team_slave_1 removed
[  701.013846][T19146] blktrace: Concurrent blktraces are not allowed on sg0
[  701.016390][ T6053] team0 (unregistering): Port device team_slave_0 removed
[  701.077798][T19147] loop5: detected capacity change from 0 to 512
[  701.126110][T19147] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  701.172517][T19147] EXT4-fs (loop5): 1 truncate cleaned up
[  701.174702][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.244497][T19147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.267174][ T6053] IPVS: stop unused estimator thread 0...
[  701.407296][T19165] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  701.407329][T19165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  701.407375][T19165] vhci_hcd vhci_hcd.0: Device attached
[  701.434883][T19165] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(9)
[  701.434910][T19165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  701.435010][T19165] vhci_hcd vhci_hcd.0: Device attached
[  701.509294][T19171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.515094][T19171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.555663][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.671701][T18990] usb 13-1: new high-speed USB device number 8 using vhci_hcd
[  702.220956][T19166] vhci_hcd: connection reset by peer
[  702.221064][T19168] vhci_hcd: connection closed
[  702.221401][  T364] vhci_hcd vhci_hcd.6: stop threads
[  702.221425][  T364] vhci_hcd vhci_hcd.6: release socket
[  702.221451][  T364] vhci_hcd vhci_hcd.6: disconnect device
[  702.221612][  T364] vhci_hcd vhci_hcd.6: stop threads
[  702.221630][  T364] vhci_hcd vhci_hcd.6: release socket
[  702.221648][  T364] vhci_hcd vhci_hcd.6: disconnect device
[  702.588589][T19191] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.589041][T19191] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.591695][T19191] bridge0: entered allmulticast mode
[  702.621503][T19191] bridge_slave_1: left allmulticast mode
[  702.621831][T19191] bridge_slave_1: left promiscuous mode
[  702.624368][T19191] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.640740][T19191] bridge_slave_0: left allmulticast mode
[  702.640805][T19191] bridge_slave_0: left promiscuous mode
[  702.645272][T19191] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.764753][T19193] smpboot: CPU 1 is now offline
[  702.793762][T19193] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  703.089309][T12779] Bluetooth: hci0: command 0x1003 tx timeout
[  703.089921][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  703.130368][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.229644][T19206] loop1: detected capacity change from 0 to 512
[  703.255799][T19206] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  703.271342][T19208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.272101][T19208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.299395][T19206] EXT4-fs (loop1): 1 truncate cleaned up
[  703.312799][T19206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  703.369315][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.431647][T19211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4498'.
[  703.469638][T19215] loop7: detected capacity change from 0 to 256
[  704.089540][T19225] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4504'.
[  704.335931][ T3398] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  704.423417][    C0] select_fallback_rq: 18 callbacks suppressed
[  704.423441][    C0] process 19220 (syz.2.4502) no longer affine to cpu1
[  704.449218][T19229] smpboot: CPU 1 is now offline
[  704.485102][T19230] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  704.840050][T19239] loop1: detected capacity change from 0 to 512
[  704.850657][T19239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  704.877682][T19239] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  704.878429][T19239] System zones: 1-12
[  704.882346][T19239] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.4508: bad orphan inode 131072
[  704.882681][T19239] loop1: lost filesystem error report for type 5 error -117
[  704.888824][T19239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  704.902238][   T29] audit: type=1400 audit(1790809773.529:21080): avc:  denied  { write } for  pid=19238 comm="syz.1.4508" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  704.972351][T19239] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11280 sclass=netlink_xfrm_socket pid=19239 comm=syz.1.4508
[  705.022834][T12968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.084504][T19245] loop5: detected capacity change from 0 to 512
[  705.108057][T19245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8846c11c, mo2=0002]
[  705.108427][T19245] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  705.108496][T19245] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  705.108528][T19245] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4510: Corrupt directory, running e2fsck is recommended
[  705.113371][T19245] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  705.114045][T19245] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.4510: corrupted in-inode xattr: invalid ea_ino
[  705.114134][T19245] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  705.134265][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4511'.
[  705.156710][T19258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4512'.
[  705.209465][T19245] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.4510: couldn't read orphan inode 15 (err -117)
[  705.209533][T19245] loop5: lost filesystem error report for type 5 error -117
[  705.226875][T19245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  705.230330][T19245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  705.340513][T19264] loop2: detected capacity change from 0 to 256
[  705.385354][T19266] loop5: detected capacity change from 0 to 512
[  705.427062][T19266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  705.427212][T19266] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  705.520902][T19266] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4515'.
[  705.558734][T19272] loop1: detected capacity change from 0 to 512
[  705.634828][T19274] loop6: detected capacity change from 0 to 512
[  705.639789][T19274] EXT4-fs: Ignoring removed bh option
[  705.640634][T19274] EXT4-fs: quotafile must be on filesystem root
[  705.691179][   T29] audit: type=1400 audit(1790809774.258:21081): avc:  denied  { write } for  pid=19265 comm="syz.5.4515" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  705.753928][T19275] blktrace: Concurrent blktraces are not allowed on sg0
[  705.787051][   T29] audit: type=1326 audit(1790809774.351:21082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.1.4517" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f231cdee159 code=0x0
[  705.873522][T19279] loop6: detected capacity change from 0 to 512
[  705.904210][T19279] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  705.937396][   T29] audit: type=1400 audit(1790809774.480:21083): avc:  denied  { create } for  pid=19276 comm="syz.1.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  705.939677][T19279] EXT4-fs (loop6): 1 truncate cleaned up
[  705.942711][T19279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  706.070755][   T29] audit: type=1400 audit(1790809774.609:21084): avc:  denied  { write } for  pid=16266 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  706.070827][   T29] audit: type=1400 audit(1790809774.609:21085): avc:  denied  { write } for  pid=16266 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  706.072383][   T29] audit: type=1400 audit(1790809774.609:21086): avc:  denied  { write } for  pid=16266 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  706.072483][   T29] audit: type=1400 audit(1790809774.609:21087): avc:  denied  { write } for  pid=16266 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  706.072576][   T29] audit: type=1400 audit(1790809774.609:21088): avc:  denied  { write } for  pid=16266 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  706.079210][T16266] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.107227][  T364] Bluetooth: hci0: Frame reassembly failed (-84)
[  706.229058][T19285] loop5: detected capacity change from 0 to 256
[  706.810677][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4523'.
[  707.194264][T18990] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  708.099932][T19349] loop7: detected capacity change from 0 to 256
[  708.332537][T12779] Bluetooth: hci0: command 0x1003 tx timeout
[  708.335045][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  708.367608][T19353] loop5: detected capacity change from 0 to 512
[  708.405674][T19353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  708.431628][T19353] EXT4-fs (loop5): 1 truncate cleaned up
[  708.437295][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.445367][T19353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  708.599340][T19358] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  708.711740][T19363] smpboot: CPU 1 is now offline
[  708.748720][T19356] EXT4-fs: Ignoring removed oldalloc option
[  708.766380][T19356] EXT4-fs: Invalid want_extra_isize 132
[  708.769287][T19364] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  708.938762][T19367] EXT4-fs: Ignoring removed bh option
[  708.947126][T19367] EXT4-fs: quotafile must be on filesystem root
[  709.358010][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4538'.
[  709.382087][T19367] FAULT_INJECTION: forcing a failure.
[  709.382087][T19367] name fail_futex, interval 1, probability 0, space 0, times 0
[  709.382124][T19367] CPU: 1 UID: 0 PID: 19367 Comm: syz.6.4532 Not tainted syzkaller #0 PREEMPT(lazy) 
[  709.382204][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  709.382219][T19367] Call Trace:
[  709.382227][T19367]  <TASK>
[  709.382236][T19367]  __dump_stack+0x1d/0x30
[  709.382269][T19367]  dump_stack_lvl+0x95/0xd0
[  709.382293][T19367]  dump_stack+0x15/0x1b
[  709.382350][T19367]  should_fail_ex+0x262/0x280
[  709.382386][T19367]  should_fail+0xb/0x20
[  709.382417][T19367]  get_futex_key+0x12d/0xb10
[  709.382483][T19367]  ? __rcu_read_unlock+0x4e/0x70
[  709.382516][T19367]  ? hrtimer_start_range_ns_common+0x4c5/0x7d0
[  709.382543][T19367]  futex_wake+0x89/0x400
[  709.382565][T19367]  ? perf_lock_task_context+0x24b/0x2c0
[  709.382609][T19367]  do_futex+0x3f8/0x460
[  709.382709][T19367]  mm_exit_exec_release+0xab/0x190
[  709.382834][T19367]  exit_mm+0x37/0x1b0
[  709.382869][T19367]  do_exit+0x438/0x1510
[  709.382901][T19367]  do_group_exit+0xfe/0x140
[  709.383002][T19367]  ? get_signal+0xe00/0xf10
[  709.383052][T19367]  get_signal+0xe07/0xf10
[  709.383093][T19367]  arch_do_signal_or_restart+0x96/0x480
[  709.383133][T19367]  exit_to_user_mode_loop+0x15d/0x8c0
[  709.383260][T19367]  do_syscall_64+0x212/0x360
[  709.383291][T19367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.383322][T19367] RIP: 0033:0x7f0c671de159
[  709.383344][T19367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.383396][T19367] RSP: 002b:00007f0c65c160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  709.383476][T19367] RAX: fffffffffffffe00 RBX: 00007f0c67466098 RCX: 00007f0c671de159
[  709.383493][T19367] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c67466098
[  709.383512][T19367] RBP: 00007f0c67466090 R08: 0000000000000000 R09: 0000000000000000
[  709.383530][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  709.383568][T19367] R13: 00007f0c67466128 R14: 00007fff3b23f910 R15: 00007fff3b23f9f8
[  709.383589][T19367]  </TASK>
[  710.263071][T19386] set_capacity_and_notify: 4 callbacks suppressed
[  710.263097][T19386] loop1: detected capacity change from 0 to 512
[  710.298237][T19386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  710.321246][T19386] EXT4-fs (loop1): 1 truncate cleaned up
[  710.540254][T19393] netlink: 6028 bytes leftover after parsing attributes in process `syz.7.4545'.
[  711.014126][T19397] FAULT_INJECTION: forcing a failure.
[  711.014126][T19397] name failslab, interval 1, probability 0, space 0, times 0
[  711.014211][T19397] CPU: 0 UID: 0 PID: 19397 Comm: syz.1.4546 Not tainted syzkaller #0 PREEMPT(lazy) 
[  711.014255][T19397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  711.014350][T19397] Call Trace:
[  711.014360][T19397]  <TASK>
[  711.014371][T19397]  __dump_stack+0x1d/0x30
[  711.014404][T19397]  dump_stack_lvl+0x95/0xd0
[  711.014444][T19397]  dump_stack+0x15/0x1b
[  711.014475][T19397]  should_fail_ex+0x262/0x280
[  711.014514][T19397]  ? copy_pid_ns+0x1b8/0x640
[  711.014566][T19397]  should_failslab+0x8c/0xb0
[  711.014612][T19397]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  711.014711][T19397]  ? copy_pid_ns+0x1b8/0x640
[  711.014820][T19397]  copy_pid_ns+0x1b8/0x640
[  711.014856][T19397]  ? copy_mnt_ns+0xee/0x720
[  711.014949][T19397]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  711.014990][T19397]  ? create_new_namespaces+0x38/0x420
[  711.015115][T19397]  create_new_namespaces+0x168/0x420
[  711.015162][T19397]  unshare_nsproxy_namespaces+0x115/0x150
[  711.015212][T19397]  ksys_unshare+0x42b/0x710
[  711.015301][T19397]  __x64_sys_unshare+0x1f/0x30
[  711.015337][T19397]  x64_sys_call+0x1e33/0x2550
[  711.015375][T19397]  do_syscall_64+0x112/0x360
[  711.015470][T19397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.015577][T19397] RIP: 0033:0x7f231cdee159
[  711.015593][T19397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.015613][T19397] RSP: 002b:00007f231b847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  711.015639][T19397] RAX: ffffffffffffffda RBX: 00007f231d075fa0 RCX: 00007f231cdee159
[  711.015696][T19397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  711.015711][T19397] RBP: 00007f231ce8506b R08: 0000000000000000 R09: 0000000000000000
[  711.015730][T19397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  711.015749][T19397] R13: 00007f231d076038 R14: 00007f231d075fa0 R15: 00007ffddb865898
[  711.015778][T19397]  </TASK>
[  711.021899][ T3545] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  711.277101][T19401] loop7: detected capacity change from 0 to 256
[  711.321326][T19402] loop1: detected capacity change from 0 to 256
[  711.862288][T19406] loop5: detected capacity change from 0 to 512
[  711.896928][T19406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  711.970067][T19406] EXT4-fs (loop5): 1 truncate cleaned up
[  712.004191][T19406] EXT4-fs mount: 5 callbacks suppressed
[  712.004359][T19406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  712.006825][T19404] loop2: detected capacity change from 0 to 1024
[  712.085440][T19404] EXT4-fs: Ignoring removed oldalloc option
[  712.104017][T19404] EXT4-fs: Invalid want_extra_isize 132
[  712.276053][T19410] loop2: detected capacity change from 0 to 512
[  712.276265][T19410] EXT4-fs: Ignoring removed bh option
[  712.276412][T19410] EXT4-fs: quotafile must be on filesystem root
[  712.349894][T19412] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4551'.
[  712.364713][  T313] Bluetooth: hci0: Frame reassembly failed (-84)
[  712.425913][T19410] FAULT_INJECTION: forcing a failure.
[  712.425913][T19410] name fail_futex, interval 1, probability 0, space 0, times 0
[  712.425962][T19410] CPU: 1 UID: 0 PID: 19410 Comm: syz.2.4550 Not tainted syzkaller #0 PREEMPT(lazy) 
[  712.425988][T19410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.426002][T19410] Call Trace:
[  712.426008][T19410]  <TASK>
[  712.426029][T19410]  __dump_stack+0x1d/0x30
[  712.426070][T19410]  dump_stack_lvl+0x95/0xd0
[  712.426100][T19410]  dump_stack+0x15/0x1b
[  712.426128][T19410]  should_fail_ex+0x262/0x280
[  712.426201][T19410]  should_fail+0xb/0x20
[  712.426226][T19410]  get_futex_key+0x12d/0xb10
[  712.426254][T19410]  ? hrtimer_start_range_ns_common+0x4c5/0x7d0
[  712.426323][T19410]  futex_wake+0x89/0x400
[  712.426359][T19410]  ? perf_lock_task_context+0x24b/0x2c0
[  712.426394][T19410]  do_futex+0x3f8/0x460
[  712.426477][T19410]  mm_exit_exec_release+0xab/0x190
[  712.426555][T19410]  exit_mm+0x37/0x1b0
[  712.426702][T19410]  do_exit+0x438/0x1510
[  712.426778][T19410]  do_group_exit+0xfe/0x140
[  712.426813][T19410]  ? get_signal+0xe00/0xf10
[  712.426847][T19410]  get_signal+0xe07/0xf10
[  712.426886][T19410]  arch_do_signal_or_restart+0x96/0x480
[  712.426950][T19410]  exit_to_user_mode_loop+0x15d/0x8c0
[  712.427015][T19410]  do_syscall_64+0x212/0x360
[  712.427040][T19410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.427068][T19410] RIP: 0033:0x7f44ec0fe159
[  712.427120][T19410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.427175][T19410] RSP: 002b:00007f44eab360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  712.427204][T19410] RAX: fffffffffffffe00 RBX: 00007f44ec386098 RCX: 00007f44ec0fe159
[  712.427224][T19410] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f44ec386098
[  712.427242][T19410] RBP: 00007f44ec386090 R08: 0000000000000000 R09: 0000000000000000
[  712.427261][T19410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.427325][T19410] R13: 00007f44ec386128 R14: 00007ffdf338eb70 R15: 00007ffdf338ec58
[  712.427373][T19410]  </TASK>
[  712.561797][T19415] loop2: detected capacity change from 0 to 512
[  712.628499][T19415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  712.628788][T19415] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  712.655146][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  712.655288][   T29] audit: type=1400 audit(1790809780.683:21098): avc:  denied  { write } for  pid=19413 comm="syz.2.4553" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  712.765916][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.840900][   T29] audit: type=1400 audit(1790809780.858:21099): avc:  denied  { write } for  pid=19426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  712.859712][T19438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4555'.
[  712.886436][T19441] loop7: detected capacity change from 0 to 512
[  712.899738][T19441] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  712.928996][T19441] EXT4-fs (loop7): 1 truncate cleaned up
[  712.936308][T19441] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  712.962588][   T29] audit: type=1400 audit(1790809780.969:21100): avc:  denied  { write } for  pid=19445 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  713.159616][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.160437][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.454716][T19452] FAULT_INJECTION: forcing a failure.
[  713.454716][T19452] name failslab, interval 1, probability 0, space 0, times 0
[  713.454753][T19452] CPU: 1 UID: 0 PID: 19452 Comm: syz.1.4558 Not tainted syzkaller #0 PREEMPT(lazy) 
[  713.454826][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  713.454839][T19452] Call Trace:
[  713.454847][T19452]  <TASK>
[  713.454854][T19452]  __dump_stack+0x1d/0x30
[  713.454879][T19452]  dump_stack_lvl+0x95/0xd0
[  713.454901][T19452]  dump_stack+0x15/0x1b
[  713.454921][T19452]  should_fail_ex+0x262/0x280
[  713.455015][T19452]  ? copy_pid_ns+0x1b8/0x640
[  713.455048][T19452]  should_failslab+0x8c/0xb0
[  713.455079][T19452]  kmem_cache_alloc_noprof+0x7c/0x3f0
[  713.455154][T19452]  ? copy_pid_ns+0x1b8/0x640
[  713.455254][T19452]  copy_pid_ns+0x1b8/0x640
[  713.455286][T19452]  ? copy_mnt_ns+0xee/0x720
[  713.455330][T19452]  ? kmem_cache_alloc_noprof+0x1f5/0x3f0
[  713.455360][T19452]  ? create_new_namespaces+0x38/0x420
[  713.455397][T19452]  create_new_namespaces+0x168/0x420
[  713.455443][T19452]  unshare_nsproxy_namespaces+0x115/0x150
[  713.455477][T19452]  ksys_unshare+0x42b/0x710
[  713.455506][T19452]  __x64_sys_unshare+0x1f/0x30
[  713.455567][T19452]  x64_sys_call+0x1e33/0x2550
[  713.455613][T19452]  do_syscall_64+0x112/0x360
[  713.455664][T19452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.455697][T19452] RIP: 0033:0x7f231cdee159
[  713.455725][T19452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.455749][T19452] RSP: 002b:00007f231b847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  713.455830][T19452] RAX: ffffffffffffffda RBX: 00007f231d075fa0 RCX: 00007f231cdee159
[  713.455844][T19452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600
[  713.455856][T19452] RBP: 00007f231ce8506b R08: 0000000000000000 R09: 0000000000000000
[  713.455869][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  713.455881][T19452] R13: 00007f231d076038 R14: 00007f231d075fa0 R15: 00007ffddb865898
[  713.455976][T19452]  </TASK>
[  713.560373][T19456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.563396][T19456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.727148][T19458] loop2: detected capacity change from 0 to 512
[  713.750502][T19458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  713.750644][T19458] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  713.776365][T19464] loop6: detected capacity change from 0 to 512
[  713.780025][T19464] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  713.788338][T19464] EXT4-fs (loop6): 1 truncate cleaned up
[  713.789784][T19464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.823261][T13957] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.837639][ T2982] ==================================================================
[  713.837675][ T2982] BUG: KCSAN: data-race in d_delete / lookup_fast
[  713.837726][ T2982] 
[  713.837734][ T2982] read-write to 0xffff888105aa9cc0 of 4 bytes by task 17596 on cpu 1:
[  713.837757][ T2982]  d_delete+0x15a/0x180
[  713.837796][ T2982]  d_delete_notify+0x32/0x100
[  713.837820][ T2982]  vfs_unlink+0x287/0x490
[  713.837839][ T2982]  filename_unlinkat+0x1dc/0x410
[  713.837857][ T2982]  __se_sys_unlink+0x2b/0xe0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  713.837874][ T2982]  __x64_sys_unlink+0x1f/0x30
[  713.837892][ T2982]  x64_sys_call+0x18ee/0x2550
[  713.837925][ T2982]  do_syscall_64+0x112/0x360
[  713.837953][ T2982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.837976][ T2982] 
[  713.837982][ T2982] read to 0xffff888105aa9cc0 of 4 bytes by task 2982 on cpu 0:
[  713.837999][ T2982]  lookup_fast+0xf1/0x320
[  713.838024][ T2982]  path_lookupat+0x120/0x4c0
[  713.838053][ T2982]  filename_lookup+0x18f/0x390
[  713.838084][ T2982]  do_readlinkat+0x74/0x2f0
[  713.838120][ T2982]  __x64_sys_readlink+0x47/0x60
[  713.838151][ T2982]  x64_sys_call+0x1d41/0x2550
[  713.838184][ T2982]  do_syscall_64+0x112/0x360
[  713.838211][ T2982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.838238][ T2982] 
[  713.838245][ T2982] value changed: 0x00300180 -> 0x00004080
[  713.838260][ T2982] 
[  713.838266][ T2982] Reported by Kernel Concurrency Sanitizer on:
[  713.838281][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  713.838319][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  713.838337][ T2982] ==================================================================
[  713.896559][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.902366][   T29] audit: type=1400 audit(1790809781.828:21101): avc:  denied  { write } for  pid=3285 comm="syz-executor" path="pipe:[500]" dev="pipefs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  714.091999][T19467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  714.114789][T19467] EXT4-fs (loop2): 1 truncate cleaned up
[  714.132113][T19467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.571501][T13559] Bluetooth: hci0: command 0x1003 tx timeout
[  714.571570][T12779] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  714.656200][ T5379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.695662][T19467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.745473][ T5379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.796211][ T5379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.826037][T19405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.847662][ T5379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.991174][ T5379] bond1 (unregistering): (slave geneve2): Releasing active interface
[  715.002842][ T5379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  715.004018][ T5379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  715.005053][ T5379] bond0 (unregistering): Released all slaves
[  715.033175][ T5379] bond1 (unregistering): Released all slaves
[  715.037726][ T5379] bond2 (unregistering): Released all slaves
[  715.076639][ T5379] IPVS: stopping backup sync thread 17086 ...
[  715.085959][ T5379] hsr_slave_0: left promiscuous mode
[  715.086365][ T5379] hsr_slave_1: left promiscuous mode
[  715.086834][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.086854][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.087328][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.087347][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.090463][ T5379] veth1_macvtap: left promiscuous mode
[  715.090515][ T5379] veth0_macvtap: left promiscuous mode
[  715.090568][ T5379] veth1_vlan: left promiscuous mode
[  715.090636][ T5379] veth0_vlan: left promiscuous mode
[  715.179198][ T3545] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  715.198102][ T5379] team0 (unregistering): Port device team_slave_1 removed
[  715.236066][   T29] audit: type=1400 audit(1790809783.074:21102): avc:  denied  { write } for  pid=19473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  715.242692][T19440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.297836][   T29] audit: type=1400 audit(1790809783.129:21103): avc:  denied  { write } for  pid=19484 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  715.332872][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13
[  715.413025][   T29] audit: type=1400 audit(1790809783.231:21104): avc:  denied  { write } for  pid=19487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  715.448420][   T29] audit: type=1400 audit(1790809783.258:21105): avc:  denied  { write } for  pid=19498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  715.486990][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14
[  715.597512][   T29] audit: type=1400 audit(1790809783.397:21106): avc:  denied  { write } for  pid=19501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  715.628333][ T5379] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.643636][   T29] audit: type=1400 audit(1790809783.443:21107): avc:  denied  { write } for  pid=19512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  715.668859][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15
[  715.687140][ T5379] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.778683][ T5379] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.802224][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17
[  715.820283][ T5379] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.898731][ T5379] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.951524][ T5379] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.994392][ T5379] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.029798][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18
[  716.048327][ T5379] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.125028][ T5379] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.167385][ T5379] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.170825][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19
[  716.210765][ T5379] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.254693][ T5379] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.310176][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20
[  716.330263][ T5379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.385034][ T5379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.427357][ T5379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.465264][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21
[  716.477699][ T5379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.675407][ T5379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.676803][ T5379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.677697][ T5379] bond0 (unregistering): Released all slaves
[  716.710928][ T5379] bond1 (unregistering): (slave geneve2): Releasing active interface
[  716.725162][ T5379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.726583][ T5379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.744673][ T5379] bond0 (unregistering): Released all slaves
[  716.747766][ T5379] bond1 (unregistering): Released all slaves
[  716.751893][ T5379] bond2 (unregistering): Released all slaves
[  716.758048][ T5379] bond3 (unregistering): Released all slaves
[  716.765570][ T5379] bond4 (unregistering): Released all slaves
[  716.795817][ T5379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.797102][ T5379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.798089][ T5379] bond0 (unregistering): Released all slaves
[  716.799487][ T5379] bond1 (unregistering): Released all slaves
[  716.843448][ T5379] bond1 (unregistering): (slave geneve2): Releasing active interface
[  716.855357][ T5379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.856739][ T5379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.860958][ T5379] bond0 (unregistering): Released all slaves
[  716.864839][ T5379] bond1 (unregistering): Released all slaves
[  716.892954][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22
[  716.917320][ T5379] tipc: Left network mode
[  716.926043][ T5379] hsr_slave_0: left promiscuous mode
[  716.926531][ T5379] hsr_slave_1: left promiscuous mode
[  716.927062][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.927081][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.927508][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.927525][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.929732][ T5379] hsr_slave_0: left promiscuous mode
[  716.929989][ T5379] hsr_slave_1: left promiscuous mode
[  716.930326][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.930342][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.930834][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.930880][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.938823][ T5379] hsr_slave_0: left promiscuous mode
[  716.944374][ T5379] hsr_slave_1: left promiscuous mode
[  716.945576][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.945626][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.952672][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.952723][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.984520][ T5379] hsr_slave_0: left promiscuous mode
[  716.991891][ T5379] hsr_slave_1: left promiscuous mode
[  716.993020][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.993071][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.999899][ T5379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.999950][ T5379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  717.042882][ T5379] veth1_macvtap: left promiscuous mode
[  717.042953][ T5379] veth0_macvtap: left promiscuous mode
[  717.043047][ T5379] veth1_vlan: left promiscuous mode
[  717.043191][ T5379] veth0_vlan: left promiscuous mode
[  717.065359][ T5379] veth1_macvtap: left promiscuous mode
[  717.065459][ T5379] veth0_macvtap: left promiscuous mode
[  717.065653][ T5379] veth1_vlan: left promiscuous mode
[  717.065705][ T5379] veth0_vlan: left promiscuous mode
[  717.089455][ T5379] veth1_macvtap: left promiscuous mode
[  717.089535][ T5379] veth0_macvtap: left promiscuous mode
[  717.089744][ T5379] veth1_vlan: left promiscuous mode
[  717.089849][ T5379] veth0_vlan: left promiscuous mode
[  717.106785][ T5379] veth1_macvtap: left promiscuous mode
[  717.106867][ T5379] veth0_macvtap: left promiscuous mode
[  717.107004][ T5379] veth1_vlan: left promiscuous mode
[  717.107150][ T5379] veth0_vlan: left promiscuous mode
[  717.322543][ T5379] team0 (unregistering): Port device team_slave_1 removed
[  717.331162][ T5379] team0 (unregistering): Port device team_slave_0 removed
[  717.388862][ T5379] team0 (unregistering): Port device team_slave_1 removed
[  717.390943][ T5379] team0 (unregistering): Port device team_slave_0 removed
[  717.452545][ T5379] team0 (unregistering): Port device team_slave_1 removed
[  717.463131][ T5379] team0 (unregistering): Port device team_slave_0 removed
[  717.519183][ T5379] team0 (unregistering): Port device team_slave_1 removed
[  717.521670][ T5379] team0 (unregistering): Port device team_slave_0 removed
[  717.557891][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23
[  717.675946][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24
[  717.787805][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25
[  717.914538][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26
[  718.026180][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27
[  718.121905][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  718.121929][   T29] audit: type=1400 audit(1790809785.732:21130): avc:  denied  { write } for  pid=19683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.161543][   T29] audit: type=1400 audit(1790809785.769:21131): avc:  denied  { write } for  pid=19694 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.192648][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28
[  718.274890][   T29] audit: type=1400 audit(1790809785.871:21132): avc:  denied  { write } for  pid=19697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.308139][   T29] audit: type=1400 audit(1790809785.898:21133): avc:  denied  { write } for  pid=19708 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.343446][ T3021] 8021q: adding VLAN 0 to HW filter on device eth29
[  718.424287][   T29] audit: type=1400 audit(1790809786.009:21134): avc:  denied  { write } for  pid=19711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.459485][   T29] audit: type=1400 audit(1790809786.037:21135): avc:  denied  { write } for  pid=19722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.500769][ T3021] 8021q: adding VLAN 0 to HW filter on device eth30
[  718.584009][   T29] audit: type=1400 audit(1790809786.157:21136): avc:  denied  { write } for  pid=19726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.623333][   T29] audit: type=1400 audit(1790809786.203:21137): avc:  denied  { write } for  pid=19737 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.658546][ T3021] 8021q: adding VLAN 0 to HW filter on device eth31
[  718.758576][   T29] audit: type=1400 audit(1790809786.323:21138): avc:  denied  { write } for  pid=19745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.797502][   T29] audit: type=1400 audit(1790809786.360:21139): avc:  denied  { write } for  pid=19756 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  718.831705][ T3021] 8021q: adding VLAN 0 to HW filter on device eth32
[  718.955857][ T3021] 8021q: adding VLAN 0 to HW filter on device eth33