last executing test programs:

4m11.26470954s ago: executing program 32 (id=61):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000430, &(0x7f0000000000)={[{@bsdgroups}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@mblk_io_submit}]}, 0x4, 0x500, &(0x7f0000000a40)="$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")
r0 = open$dir(&(0x7f0000000380)='.\x00', 0x480, 0x10)
fcntl$notify(r0, 0x402, 0x80000023)
socket$can_raw(0x1d, 0x3, 0x1)
semget$private(0x0, 0x3, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0x9c1bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x12}, 0xf882, 0x8, 0x43a1bd76, 0x9, 0xb, 0xa, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$inet(0x2, 0x3, 0x87)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@ipv4_newroute={0x38, 0x18, 0x1, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xbf50908f34263107, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}}}}]}, 0x38}}, 0x0)
syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f0000001280)='./file1\x00', 0x3000000, &(0x7f00000012c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000001300)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=")
bind$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0x4)
close(0x3)
socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f0000001880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x0, 0x790, 0x4, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

4m5.514332429s ago: executing program 33 (id=90):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfdfffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(0x0, 0x440, 0x800)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x0, 0xf21, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @val={0x6, 0x99, {0xbf, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r1, &(0x7f0000000200)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd09", 0x30, 0x0, &(0x7f00000002c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m58.064890675s ago: executing program 1 (id=147):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xd, 0xc, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa210000000000007020000f8ffffffb703000008000000b70400eb1107e0652f329b0a1716ba13000000000085000000030000009500000000000000"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x40, 0xfd, 0x0, 0x0, 0x5, 0x82004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x116614, 0x8, 0x9, 0x8, 0x2, 0x90000011, 0x0, 0x0, 0xfffffffe, 0x0, 0x40000000000c0}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000700)={0x1, 'vlan0\x00'})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pselect6(0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000780)={0x8}, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e1d, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0x80df, &(0x7f00000003c0)='ipvlan1\x00', 0x0, 0x8000000000000001, 0x7})

3m57.653390597s ago: executing program 1 (id=149):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x40104d01, &(0x7f0000000340))

3m57.501394503s ago: executing program 1 (id=150):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x80000001, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x80078b, &(0x7f0000000200)={[{@nodioread_nolock}, {@dioread_lock}, {@delalloc}, {@debug}, {@resgid}, {@jqfmt_vfsv1}, {@barrier}]}, 0x1, 0x47f, &(0x7f00000006c0)="$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")
socket(0x10, 0x803, 0x0)
epoll_create(0x7d95)
r0 = syz_clone(0x0, 0x0, 0x4d, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001340)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000001380)='.\x00', &(0x7f00000013c0)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000001400)='stat\x00')
pread64(r2, &(0x7f0000001440)=""/15, 0xf, 0x4)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89b0, &(0x7f0000001480)={'ip6gre0\x00', &(0x7f00000014c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @empty, @empty, 0x700, 0x20}})
socket$nl_netfilter(0x10, 0x3, 0xc)

3m55.915230548s ago: executing program 1 (id=165):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x204001, &(0x7f00000002c0), 0x1, 0xb9f, &(0x7f0000000980)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000015c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'u.rjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)

3m55.563745475s ago: executing program 1 (id=171):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
capget(0x0, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x200008, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x39a, &(0x7f0000000480)="$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")
mkdir(0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup2(r3, r3)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000840)={0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x20000014)
brk(0x7ff877c47fff)
accept4$phonet_pipe(r4, &(0x7f0000000300), 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
listen(r2, 0xfffffffe)

3m55.235456149s ago: executing program 1 (id=173):
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x4000, 0x80000000, 0x2, 0x8, 0x800000, 0x40, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='100', 0x3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xe7)
syz_open_dev$tty1(0xc, 0x4, 0x4)

3m55.206875382s ago: executing program 34 (id=173):
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x4000, 0x80000000, 0x2, 0x8, 0x800000, 0x40, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='100', 0x3)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xe7)
syz_open_dev$tty1(0xc, 0x4, 0x4)

3m39.733527773s ago: executing program 3 (id=275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfdfffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$hidraw(0x0, 0x440, 0x800)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x0, 0xf21, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @val={0x6, 0x99, {0xbf, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

3m39.514684996s ago: executing program 3 (id=279):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@flag='nolazytime'}]}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_pidfd_open(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x528, &(0x7f0000000200)="$eJzs3c9vI1cdAPDvzK6T7G7abEsPgKBd2sKCVutsvO2q6gHKCSFUCdEjSNuQeKPV2usodkoTViI9c0WiEic48gcgceuJOxcENy7lgMSPCNQgcZhqxpOsm9iJ90fsyP58pJHnzXP8fW+z897464xfAFPrSkTsRMRMRLwbEQvl8aTc4q3ulj/vk90HK3u7D1aSyLJ3/pUU9fmx6PmZ3KXyNeci4gffifhxcjRue2v73nKjUd8oy4ud5vpie2v7+t3m8lp9rX6/Vru1dOvGGzdfrz1Cb+aOrX2pOVPuffnjP+5846d5s+bLI739eJq6Xa8cxMmdj4jvnUawMThX9mdm3A3hsaQR8XxEvFyc/wtxrvhtAgCTLMsWIlvoLQMAky4tcmBJWi1zAfORptVqN4f3QlxMG61259qd1ub91W6u7HJU0jt3G/UbZa7wclSSvLxU7D8s1w6Vb0bEcxHxi9kLRbm60mqsjvPCBwCm2KVD8/9/Z7vzPwAw4Y7/sxkAYBKZ/wFg+pj/AWD6DJ7/f9/n1l0AYBJ05/8Lj/pjWZb97DSaAwCMgPw/AEyfQfP/7RG3AwAYie+//Xa+ZXvl91+vvre1ea/13vXVevtetbm5Ul1pbaxX11qtteI7e5onvV6j1Vpfei0237/8zfV2Z7G9tX272dq837ldfK/37XqleNbOCHoGAAzy3Esf/SXJZ+Q3LxRb9KzlUBlry4DTlo67AcDYnBt3A4CxsdoXTK+H7/Ef+Y8ApQdgQpx0n+9cvxuEsizLTq9JwCm7+gX5f5hWPfl/dwHBlDkp/1+sDexDQphI8v8wvbIsGXbN/xj2iQDA2XZMjv/yKK9DgPEZ8Pn/8+Xjb8sPB360evgZH55mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBs21//t1ou8zsfaVqtRjxTLABUSe7cbdRvRMSzEfHn2cpsXl4ac5sBgCeV/j0p1/+6uvDq/GeqXrx0sDsTET/51Tu/fH+509n4U8RM8u/Z/eOdD8vjtRODzZ1GDwCA4+3P08Vjzxv5T3YfrOxvo2zPP77dvSrI4+7tzsTeQfzzcb54nItKRFz8T1KWu5Ke3MWT2PkgIj7fr/9JzBc5kO4ly+H4eexnRho//Uz8tFygOS3/LT73FNoC0+ajfPx5q9/5l8aV4rH/+T9XjFBPrhz/8pda2SvGwIfx98e/cwPGvyvDxnjtD9/t7l04WvdBxBfPR+zH3usZf/bjJwPivzpk/L9+6cWXB9Vlv464Gv3j98Za7DTXF9tb29fvNpfX6mv1+7XaraVbN964+XptschRLw6eDf755rVnB9Xl/b84IP7cCf3/6pD9/83/3/3hV46J//VX+sVP44Vj4udz4teGjL988XcD33fn8VeP9j8Z5vd/bcj4H/9t+8iy4QDA+LS3tu8tNxr1DTt2zv5O/l/2DDSj7863RhVrJvpX/fyV7jl9qCrLHivWoBHjaWTdgLPg4KSPiP+NuzEAAAAAAAAAAAAAAEBfo7hjadx9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHJ9GgAA//85rtTx")
syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4000001)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7)
r2 = syz_open_dev$MSR(&(0x7f00000009c0), 0x0, 0x0)
clock_adjtime(0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)
read$msr(r2, &(0x7f0000001100)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001a100)=0x410000002)
r4 = openat(0xffffffffffffff9c, &(0x7f000001a140)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f000001a180)='a', 0x200000c1, 0x9000)

3m38.536549528s ago: executing program 3 (id=288):
mkdir(&(0x7f0000000080)='./mytrace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./mytrace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0)
write(r0, 0x0, 0xff0f)

3m38.22691699s ago: executing program 3 (id=295):
getsockopt(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001000)=""/37, &(0x7f0000001040)=0x25)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/file0\x00', 0x0, 0x2125099, 0x0)
unshare(0x20400)
r0 = syz_open_procfs(0x0, &(0x7f0000000900)='mountinfo\x00')
ppoll(&(0x7f0000000940)=[{r0, 0x208}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='ramfs\x00', 0x10010, 0x0)
syz_mount_image$ext4(&(0x7f0000000a00)='ext3\x00', &(0x7f0000000a40)='./file0\x00', 0x40c040, &(0x7f0000000a80), 0x3e, 0x515, &(0x7f0000000ac0)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000001200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r1, 0x0, 0xe, 0x0, &(0x7f00000012c0)="e0b9547a28b27eb2cd7232624615", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff}, 0x22)
perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b20000000000000000000000000040000000000e59448bff09f3bfea34233c9f0488982894e9f619b73910ee9d046110e45e616d88ad52b02c7dc78b298fe30fb6bfc9a49451db966a792990b89cf3d81267f18d5b2295d1fc4ea73c361bb3a4ea646a5dd4a1e3c70f970d53717aca478648e2a6b4064f42adf968ba6d73a2680e854cd6599ed4d66dfe2cf29f5fcf5b47830e2bf9488578ae25f75f8211663a0b717a573398de7b6fdc9ba691466aa01", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000400d30000820c52daff01000000180000000000f5000670c15f3c3351337d784a00", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000000001018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000500000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000540)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x7ffc0000)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000280)=0xfffffffd, 0x4)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="d3f34746b238", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1}, {0x4e21, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x0, @val=0x80}}}}}}}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x31, 0x1, 0x0, 0xfc, 0x0, 0x7, 0x30520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffbffffffffffffb, 0xfffffffffffffffa}, 0x10ece8, 0xc, 0x48, 0x4, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0x3, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000000100000c8fdf3ce46ac3d006404009f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="05", 0x1}, {&(0x7f0000000200)="d9", 0x1}], 0x2)

3m37.442504792s ago: executing program 3 (id=310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x4c, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

3m37.240526453s ago: executing program 3 (id=318):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffffffffffffff8d)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x3, 0x37, 0xd, 0x8000, 0x2, "9fcec26d02b1b705000000000004000300", 0x5, 0x8001})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x4000004, 0x200000000000f60e}, 0xb093, 0x800001, 0x2, 0x2, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000240))
r1 = inotify_init()
inotify_rm_watch(r1, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x31, 0x1)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x80000001, 0x3, 0x1, 0x8001, 0x7fff}, 0x0, 0xff6fbffffffffffc, 0xffffffffffffffff, 0x11)
syz_open_pts(0xffffffffffffffff, 0x20002)
unshare(0x22020400)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100800, &(0x7f0000000140)=[{0xd, 0xfffffffffffffa85, 0x7}], 0x1, 0xa00, 0x0, 0x0, 0x4d, 0x5f})

3m37.201010877s ago: executing program 35 (id=318):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffffffffffffff8d)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x3, 0x37, 0xd, 0x8000, 0x2, "9fcec26d02b1b705000000000004000300", 0x5, 0x8001})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x4000004, 0x200000000000f60e}, 0xb093, 0x800001, 0x2, 0x2, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000240))
r1 = inotify_init()
inotify_rm_watch(r1, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x31, 0x1)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x80000001, 0x3, 0x1, 0x8001, 0x7fff}, 0x0, 0xff6fbffffffffffc, 0xffffffffffffffff, 0x11)
syz_open_pts(0xffffffffffffffff, 0x20002)
unshare(0x22020400)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100800, &(0x7f0000000140)=[{0xd, 0xfffffffffffffa85, 0x7}], 0x1, 0xa00, 0x0, 0x0, 0x4d, 0x5f})

3m1.15440115s ago: executing program 8 (id=676):
timer_create(0x0, 0x0, &(0x7f0000000300))
syz_clone3(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
write(r1, &(0x7f0000000100)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, r1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x10002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb921b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000340)={0x0, 0xcc1a, 0x130c8, 0x6, 0x30e}, 0x0, &(0x7f0000000400), &(0x7f0000000440))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x84, 0x3, 0x10005, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x38, 0x0, 0x0)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000580)=0x2, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000600)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000640)={0xa, 0x4e24, 0x3, @private2, 0x2}, 0x1c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000680)={0x20000001})

3m0.733096864s ago: executing program 8 (id=679):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000600)={0x1, &(0x7f0000000900)=[{0x6, 0x9, 0x7, 0x7ffc0001}]})
r1 = gettid()
rt_sigtimedwait(&(0x7f0000000940)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x100022, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x181002, 0x0)
ioctl$TCSETS(r2, 0x40045431, 0x0)
r3 = syz_open_pts(r2, 0x20800)
read(r3, 0x0, 0x0)

2m59.881206772s ago: executing program 8 (id=690):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x9, 0x5, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10)
mkdir(&(0x7f00000004c0)='./myproc\x00', 0x91)
mount(0x0, &(0x7f0000000500)='./myproc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myproc/scsi/device_info\x00', 0x1, 0x3)
write(r1, &(0x7f00000005c0)="223bbf7772753a", 0x7)

2m59.760263805s ago: executing program 8 (id=692):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x900}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000480)='GPL\x00', 0x2, 0x3, &(0x7f00000004c0)=""/222, 0x0, 0xc}, 0x94)
mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2a5b091, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000a80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x366, 0x10, &(0x7f0000000bc0), 0x1dd}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x0) (async)
openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_iommufd/times\x00', 0x1, 0x0)

2m59.693246572s ago: executing program 8 (id=694):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7c3a56a447054af8, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000002c0))
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010010000900000005000000cbee41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
fsetxattr$security_selinux(r0, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x3)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, 0xfffffffffffffffe, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000))
ioctl$KDSETMODE(r5, 0x4b45, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000fdffffff03000000840001800d0001007564703a73797a32000000000c00028008000300030000001500010069623a76657468315f746f5f7465616d000000004400028008000100"], 0x98}}, 0x0)

2m59.51758676s ago: executing program 8 (id=699):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7c3a56a447054af8, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000002c0))
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010010000900000005000000cbee41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
fsetxattr$security_selinux(r0, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x3)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, 0xfffffffffffffffe, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000))
ioctl$KDSETMODE(r5, 0x4b45, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000fdffffff03000000840001800d0001007564703a73797a32000000000c00028008000300030000001500010069623a76657468315f746f5f7465616d000000004400028008000100"], 0x98}}, 0x0)

2m59.509659691s ago: executing program 36 (id=699):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7c3a56a447054af8, 0x10, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000002c0))
timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010010000900000005000000cbee41000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
fsetxattr$security_selinux(r0, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x3)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, 0xfffffffffffffffe, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000))
ioctl$KDSETMODE(r5, 0x4b45, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000fdffffff03000000840001800d0001007564703a73797a32000000000c00028008000300030000001500010069623a76657468315f746f5f7465616d000000004400028008000100"], 0x98}}, 0x0)

1m41.709869731s ago: executing program 2 (id=1336):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_getscheduler(r1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x4)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000840)=""/102384, 0x18ff0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019840)=0x410000002)
perf_event_open(&(0x7f0000019880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x9, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000100)={'/sys/block/md', @num=0x0, '/md/', @array='resync_start\x00'}, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f0000000340))
close(0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=""/84, &(0x7f00000001c0)=0x54)

1m41.267268227s ago: executing program 2 (id=1339):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x42200, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x50}}, 0x0)

1m41.04865149s ago: executing program 2 (id=1343):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f00009c2000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a55000/0x2000)=nil, &(0x7f00009cd000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a5d000/0x4000)=nil, &(0x7f0000044000/0x4000)=nil, &(0x7f0000395000/0x1000)=nil, &(0x7f0000931000/0x4000)=nil, &(0x7f0000001380)="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", 0x1000}, 0x68)
r0 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x6, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002400)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000001808000400000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0)
perf_event_open(&(0x7f0000002540)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x120020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001, 0x4}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat2$dir(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x2adc0, 0x1c1, 0x6}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = fsopen(&(0x7f0000002640)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
syz_clone3(&(0x7f0000002680)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000002700)=[{&(0x7f0000002740)=""/54, 0x7ffff000}, {&(0x7f0000002780)=""/152, 0x98}], 0x2, &(0x7f0000002840)=[{&(0x7f0000002880)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_mount_image$ext4(&(0x7f0000002900)='ext4\x00', &(0x7f0000002940)='./file1\x00', 0x210000, &(0x7f0000002980)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000002a40)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==")
syz_mount_image$msdos(&(0x7f0000002fc0), &(0x7f0000003000)='./bus\x00', 0x8584b4, &(0x7f0000003040)=ANY=[], 0x1, 0x0, &(0x7f0000003080))
r7 = openat(0xffffffffffffff9c, &(0x7f00000030c0)='.\x00', 0x0, 0x0)
mkdirat(r7, &(0x7f0000003100)='./bus/file0\x00', 0x2)
renameat2(r7, &(0x7f0000003140)='./bus/file0\x00', r7, &(0x7f0000003180)='./file0\x00', 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m38.156058191s ago: executing program 2 (id=1358):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000, &(0x7f0000000180), 0x1, 0x50a, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc_mnt/kcore\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/45, 0x2d}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='(al\'', 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, 0x0)

1m37.480677222s ago: executing program 2 (id=1365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) (async, rerun: 32)
write(0xffffffffffffffff, &(0x7f0000000080)='1', 0x1) (rerun: 32)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'veth1\x00', 0x200}) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="51b27b7b6eff56cdde16a21c4447c46a3447fb800000fe5dbae50fbe0649e33a28d08f96e980d90000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) (async)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
unshare(0x26020400) (async, rerun: 32)
r4 = fsopen(0x0, 0x0) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000400000000000000000000a3400000003de9522110a0102000000000000000002000006010073797a300000000011000300ed4d011edf8b721100010000000000000000800000000a"], 0x5c}}, 0x40000000)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r4, 0x1, 0x84) (async)
openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x5000000, 0x0) (async)
mmap(&(0x7f000008c000/0x2000)=nil, 0x2000, 0x3000003, 0x10010, 0xffffffffffffffff, 0x76714000) (async)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3445, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x80000000, 0x4, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x2d, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x3000000, &(0x7f0000000740)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000780)="$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")
open(&(0x7f0000000cc0)='./file0\x00', 0x402, 0xa27b734c1a0bdb7) (async, rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async, rerun: 64)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000001540)='syzkaller\x00', 0x6, 0x87, &(0x7f0000001580)=""/135, 0x41000}, 0x94)

1m36.748891708s ago: executing program 2 (id=1372):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
perf_event_open(&(0x7f0000001f80)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x2, 0xcb5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000a80)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x84)

1m36.640603309s ago: executing program 37 (id=1372):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
perf_event_open(&(0x7f0000001f80)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x2, 0xcb5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000a80)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x84)

15.682192028s ago: executing program 4 (id=1875):
syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (fail_nth: 3)

15.595422827s ago: executing program 4 (id=1876):
socket$packet(0x11, 0xa, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010)
write(r0, &(0x7f0000000ec0)="ffffffffffffc011223344554305", 0xe)

15.363929781s ago: executing program 4 (id=1879):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x2ef41000)
mkdir(&(0x7f00000004c0)='./myproc\x00', 0x91)
mount(0x0, &(0x7f0000000500)='./myproc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myproc/scsi/device_info\x00', 0x1, 0x3)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xd0, r2, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x7, 0x101100)
write(r0, &(0x7f00000005c0)="223bbf7772753a56fb228cfae2b64ceb98afb018911bf668604144f236e32a9c6a2e362411460ef27bd78bcc098650066692ced9390afa433982df71a58f8f25fa8e351796a6fd9cb5d11e0a7e8732ab483b69ffc5ecf37275fb093b5ff1162b1440d8acb124c3fc6f4cdd775508b08a16307f37e0786555c08d8ae916e422cb", 0x80)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x1, 0x4, 0x1, 'queue1\x00', 0x6})

15.059923433s ago: executing program 4 (id=1881):
preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008080)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='source\x00', 0x0, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='retrans\x00', &(0x7f0000000400)='10\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='e:my_read_msr1 msr/read_', 0x18)
write(r5, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$peek(0x2, r6, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mbind(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x425, 0x3)
get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f0000000000/0x4000)=nil, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0)
write(r4, &(0x7f00000002c0)="3112ad7f4c6edcd3aafb29400585367c7b2e8010aada0fb76b90a998240fb44123a3417b2f3cb372da085a5b820300000000000000bc4d3f65a85c6611505c922eab7aef5567925687759ef7dca43d02410257d2bec84c9dfa8c6bb2641bf68b2fedbbff48f41d2de58369da5e6b9b7ea7422f6a98708d0a23c45a0d34c74cc54d199350d43b7316204357a45279d02a78cf4a2bb60ab688403fbb634fd9de501cbc5c14fa0efbdee24b90634add2e5a6c9afa963e9d9946cb208c71b029957de9ed46884114ef12a68c42c35b9d1e410374b89cbf76ef47ce4033bb17e7f02d0b9fff3d32", 0xe5)

13.490794526s ago: executing program 4 (id=1899):
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x5}, 0x9679149b910765de, 0x80000000, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x200000102fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwrite64(r0, &(0x7f0000000100)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a3124", 0x46, 0x200000000000d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0xc)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000280)='7', 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)

13.399412605s ago: executing program 4 (id=1900):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, 0x0, &(0x7f0000000180)=r1}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
creat(&(0x7f0000000300)='./file0\x00', 0x148)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000510000000083ef040000000009000e0c"], &(0x7f00000003c0), 0x600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000880)='memory.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000980)={0x0, 0x8, 0x0, 0x4, 0x7f})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000009c0), &(0x7f0000000a00)=0x4)
flistxattr(r5, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x80000001, @mcast2, 0x1}, 0x1c)
read(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x28532, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

13.35736649s ago: executing program 38 (id=1900):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_int(r0, 0x1, 0x38, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, 0x0, &(0x7f0000000180)=r1}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3d, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
creat(&(0x7f0000000300)='./file0\x00', 0x148)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000510000000083ef040000000009000e0c"], &(0x7f00000003c0), 0x600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000880)='memory.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = openat$nsim_del_device(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000980)={0x0, 0x8, 0x0, 0x4, 0x7f})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000009c0), &(0x7f0000000a00)=0x4)
flistxattr(r5, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e22, 0x80000001, @mcast2, 0x1}, 0x1c)
read(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x28532, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

4.056674838s ago: executing program 5 (id=1984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0)

4.053155039s ago: executing program 5 (id=1985):
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403021780300a06082a864ece3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x5fb, &(0x7f0000000740)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./dev/mapper/control\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000020c0)={&(0x7f0000a6f000/0x2000)=nil, &(0x7f000051f000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000553000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00009d4000/0x3000)=nil, &(0x7f0000bd2000/0x4000)=nil, &(0x7f00003a4000/0x4000)=nil, &(0x7f0000e5c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002040)="5eb9cda2c6a42110105cba7cb53be3db31345f665171fb7d3aae1ebec3384c5be2408ca995e572bdf624d25f43a65806e732b9b10d0928853413184ffa6796e01ada7061875cff93cbf8fb946ccab05fd8fc11be1385f1ca1dd7c276b19694f0c3e82a7650172329c5cc30ca258d8cf648fd121e589d", 0x76, r0}, 0x68)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r3)
sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x14, r4, 0x1, 0x70bd29, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf250e0000000c009900060000005b0000003d000e002a01068cdcb86d4f18ac0f000000100000322e981dd4e9e4dccdb2eceabeb57be800000000a3"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10020000", @ANYRES16=r5, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r7 = syz_open_dev$sg(&(0x7f0000000f00), 0x0, 0x0)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000f40)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000fc0)="1c3513000000", &(0x7f0000001000)=""/4103, 0x8, 0x30520cf7f25f0c64, 0x0, 0x0})
ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0)

4.04308844s ago: executing program 6 (id=1986):
perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x825, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000100)={[{@map_off}, {@check_strict}, {@check_strict}, {@nojoliet}, {@unhide}, {}, {@hide}, {@nojoliet}, {@check_strict}]}, 0x2, 0x571, &(0x7f0000001280)="$eJzs3V1v00oawPHHpV2irNRFywqhqsBQdqUileCkEBRx5XUmqSGxI9tB7RWqaIoqUlhRVtr2hu0Nuyvt+RCcy/MhzjdC53yDc+Sx07e8AX1D5f+LYCb22PM4BD+aJB4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63adtGShue3l9VwbjUMmvtPs637FsjdQ8WIfkWs5I/kcnI9XXT9L/urryV/zcls+mxWckmRk50/Xrvy+OrkRG/7EQF/kR+/ck9b2zuvVrvdztuTCuQbdOPy8HV17XtR4DWdulZeFKhKuWzfX6pFquY1dLQSxbqp3FA7cRCqefeuKlYqi0oXVoK2X686Dd1b+OheybbL6kmhpZ0wCvz7TwqRu+Q1Gp5fN22S1UmbR8kb8akXq1g7TaXWN7qdxXEHkDQqfk6j0rhGJbtUKhZLpWL5YeXhI9ue7FtgHyF9LfbftFbffyJ8D07ozA0c30SW/6UhnvjSlmVRAx+uVCWUQJpD1md6+f9v9/XIfg/m/16Wv76/ekZM/r+ZPrs5LP8PieXsHluyLTvySlalK13pyNtDa/Ny/hGe7qMuWnzxJJJAPGmKY5aobImSipSlLLY8lyWpTSX/iDXxpCFaIlmRSGLR5h3lSihaHIklkFCUzIsrd0VJUSpSkUVRoqUgKxJIW3ypS1Ucs5d12TCv+6Ioa1iMe42KQw8j33vfdaQ04mhPLv9Pk/W/Wyd5+gaO5bde/gcAAAAAABeWZT59T8b/U3LD1GpeQ9vnHRYAAAAAADhB5pv/2aQwv866IRbjfwAAAAAALhrLXGNniUhebqW1dbHM5VJ8CAAAAAAAwAVhvv+/mRRmDpRbYu1Nl8L4HwAAAACAC+K/Y+fYj1qXrZ9/kTCcsnZby3+1Ns3cvM7mpXS7S0f3GNdmrOlsJ6Yop8XkpKtnrVzaaG8SzE9ZsT4uDms/AGcvgH9/SQBXJ+X/cjttc3stLdeyNX9Ke8nXvIYuuEHjcVEcZ3oi1svxP19v/EvM4f/Pb05bOdnodgov3nTXTCy7yV52N7MJFPvmURwRyzsz34K55mLgEU+ZCzGyfvOWrG90O3Zr+XK2Z2dzIq1MHO7x/fSIPj/IXNpqLpvxNt9bk/aZS/osFoYdfRZF8ZhH/kHupG3uzN9JiwFRlMZFUToYxeDX4vhRLI6LYvGYUQDAeVkfk4Us6cu7X3GW+7rsbhp+QS8fZN406eWiyZkDZ/Qr2RndHndGt4+Z3X7quwfSsByb9PvDkaz6Mdng49B+o0bJSl6US+82/yHXtrZ37m1srr7svOy8LpUWy/YD235YkilzGFlB7gEADHDwHjvWwPw/9i481oNsVL17dFSdZbw/7/2koCAv5I10ZU0WzNUG5hcHA/eaN9uIyK+2LIwZteZNmkzv8LIwYlT3B3OVQy+W0si2+zGkt5cBAOAimRuThz8n/y9k426ZnzGDykPj7kN5NMnlo0fH+QN3awMAAKdDh5+sfPwfKwy91vNipVJ04iWtwsB9qkKvWtfK82MdukuOX9eqFQZx4AaNpPLMq+pIRe1WKwhjVQtC1Qoib9lMH6iyW79Huun4sedGrYZ2Iq3cwI8dN1ZVL3JVq/33hhct6dBsHLW069U814m9wFdR0A5dXVAq0vpAQ6+q/direUnVV63QazphTj0LGu2mVlUduaHXioN0h72+PL8WhE2z28J5v9gAAHwjtrZ3Xq12u523p1gZ2HH/N/sAAOCMjMnSR/T91h4AAAAAAAAAAAAAAAAAAAAAAJyBs7j+j8oFr/Smgv5W4qFyApWxp473p35yAnCqfg8AAP//cuBNcA==")
mkdir(0x0, 0x0)
getdents(r0, &(0x7f0000001800)=""/59, 0x3b)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000018c0)={0x1, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x1000}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffffff, 0x0, 0x802, 0x84)
syz_mount_image$vfat(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x2808080, &(0x7f00000019c0)=ANY=[@ANYBLOB='iocharset=cp865,rodir,uni_xlate=0,uni_xrrors=remount-ro,iocharset=cp850,shortname=mixed,rodir,nonumtail=0,nfs=stale_rw,iocharset=cp437,flush,nonumtail=0,\x00'], 0x81, 0x2b2, &(0x7f0000001a80)="$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")
fsopen(&(0x7f0000001d40)='nfs\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0xc, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_bp={&(0x7f0000001e00), 0x4}, 0x400, 0x0, 0x11000, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x9)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x121f7000)
listen(0xffffffffffffffff, 0x787)
unshare(0xc040480)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001e40)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33326d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000002e80)={0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002f00)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x801)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000002f40)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000002fc0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
socket(0x5, 0x803, 0x6)
write(0xffffffffffffffff, 0x0, 0x0)

3.621607264s ago: executing program 5 (id=1992):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'ovf\x00', 0x0, 0x4, 0x72}, 0x2c)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x175)
mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0xa, 0x50, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8008, 0x20000008b}, 0x0)
pipe2(&(0x7f00000002c0), 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0004)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

3.17232558s ago: executing program 7 (id=2000):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x43}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/protocols\x00')
perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x400000, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x84e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
preadv(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000940))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000980)={'syzkaller1\x00', 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000c00)="080000e1ff000000000000000000", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x2000000000000216, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x7, 0xc, &(0x7f0000000e00)=ANY=[], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="b702000000000000b703000000000000b70400000a0000040000007800"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001000)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0xa}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.130304065s ago: executing program 5 (id=2001):
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1)
mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000001, 0x4000010, r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30)
write(r2, &(0x7f00000000c0)="6c0000002c003f060200000000000000000000000100000000110000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c)
fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000001, 0x4000010, r1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
write(r2, &(0x7f0000000080)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) (async)
write(r2, &(0x7f00000000c0)="6c0000002c003f060200000000000000000000000100000000110000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) (async)

2.178418814s ago: executing program 5 (id=2003):
syz_emit_ethernet(0x3e, &(0x7f0000010c40)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @local}}}}}}, 0x0)
socket$inet6(0xa, 0x80003, 0x6)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
iopl(0x3)
r0 = creat(&(0x7f0000000900)='./file0\x00', 0xdafbe5d6891b6e4)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000940)='.\x00', 0x20000000)
write$binfmt_elf32(r0, 0x0, 0x69)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x8, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x14, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd62f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e00)={r3, r2}, 0xc)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18110000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000b80)=r4, 0x4)
sendmsg$inet(r6, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4000)
execve(&(0x7f0000010a80)='./file0\x00', 0x0, &(0x7f0000010ac0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2804f1e, &(0x7f0000000100)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f00000003c0)="$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")
file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f0000000c00)={'syztnl0\x00', 0x0})
unshare(0x2040400)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x161)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1a7)
mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./dev\x00', &(0x7f0000000300)='mqueue\x00', 0x8410, 0x0)

2.037679679s ago: executing program 7 (id=2004):
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x8000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000000003}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = syz_open_dev$usbfs(&(0x7f00000012c0), 0x1ff, 0xa001)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000001300)={0x1, 0x1})
write$binfmt_register(0xffffffffffffffff, &(0x7f00000005c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xd142, 0x3a, '*', 0x3a, 'hash:ip,port,net\x00', 0x3a, './file0'}, 0x39)

2.013490781s ago: executing program 0 (id=2005):
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x200006, 0x7fe2, 0x42, 0x149, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x2}, 0x50)

1.849627168s ago: executing program 7 (id=2006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050)

1.842593309s ago: executing program 9 (id=2007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) (fail_nth: 3)

1.776140676s ago: executing program 7 (id=2008):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000680)={0x4, &(0x7f00000005c0)=[{}, {}, {}, {}]})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = fcntl$dupfd(r2, 0x406, r2)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x24000094, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
write$binfmt_elf64(r3, &(0x7f00000005c0)=ANY=[], 0x540)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x4, 0x7f})
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050)

1.64018728s ago: executing program 6 (id=2009):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}}, {{&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="1f", 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0x10}}], 0x2, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000006c0)={0x0, 0x38, &(0x7f0000000700)={&(0x7f0000000d00)={0x14, r2, 0x5, 0x70bd25, 0xfffffffd, {0x5, 0x1}}, 0x14}}, 0x40)

1.622869052s ago: executing program 0 (id=2010):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000351ee2a77d26153405000100280000000a0002000000000000000000", 0x90) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x10, 0x1200001, 0x200002f3}, &(0x7f0000000040), &(0x7f0000002080), &(0x7f0000002140))

1.612803063s ago: executing program 9 (id=2011):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000c80)={0x2, 0x5e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}, 0x4044010)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
socket(0x2c, 0x2, 0xe5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x1000000, 0x2000003})
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x6a, 0x1, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0)
sendmsg$sock(r4, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x2, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x0)
bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x6, 0x1}, 0x20)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x260000, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r0, r6, 0x17, 0x4, r7, @void, @value=r8}, 0x20)

1.608471313s ago: executing program 5 (id=2012):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f00009c2000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000a55000/0x2000)=nil, &(0x7f00009cd000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a5d000/0x4000)=nil, &(0x7f0000044000/0x4000)=nil, &(0x7f0000395000/0x1000)=nil, &(0x7f0000931000/0x4000)=nil, &(0x7f0000001380)="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", 0x1000}, 0x68)
r0 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0)
preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x6, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002400)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000001808000400000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}}, 0x0)
perf_event_open(&(0x7f0000002540)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x120020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001, 0x4}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat2$dir(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x2adc0, 0x1c1, 0x6}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = fsopen(&(0x7f0000002640)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002680)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000002700)=[{&(0x7f0000002740)=""/54, 0x7ffff000}, {&(0x7f0000002780)=""/152, 0x98}], 0x2, &(0x7f0000002840)=[{&(0x7f0000002880)=""/95, 0x7ffff000}], 0x286, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000030c0)='.\x00', 0x0, 0x0)
mkdirat(r6, &(0x7f0000003100)='./bus/file0\x00', 0x2)
renameat2(r6, &(0x7f0000003140)='./bus/file0\x00', r6, &(0x7f0000003180)='./file0\x00', 0x2)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000031c0), 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.54524597s ago: executing program 7 (id=2013):
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'})
syz_emit_ethernet(0x36, &(0x7f0000000d40)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

1.54469727s ago: executing program 6 (id=2014):
inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xe000000e)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006fb56fa76f3047954d89f88aa6922af253569a38a55f8c8f14e7a2b0bda436bfab610c3e8526fe520b5d839ffa9d8d177599dbeed6e984fa594c89e0f6272d6b3357b6"], 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'veth1\x00', &(0x7f0000000280)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x1, 0xc1, 0x4, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x1000, 0x5, 0x100000, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x6, 0x3c02, 0xb, 0x800, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0xffffff2d, 0x4000008, 0x5, 0x79b, 0x2, 0xab, 0x7f, 0x4, 0xa, 0x7, 0x12, 0x4000101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100002, 0x4, 0x752, 0x0, 0x3, 0x2, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x7f, 0xb, 0x5, 0x800, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x1000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x400009, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00')
preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000540)=""/160, 0xa0}], 0x1, 0xc03, 0x0)
mount(0x0, &(0x7f0000000600)='./tracing\x00', &(0x7f0000000640)='tracefs\x00', 0x0, 0x0)
poll(&(0x7f0000000680), 0x20000000000000b5, 0x9)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRESHEX=r1], &(0x7f0000000840)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x8}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000008c0), 0x0)
close(r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1a, 0xf, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000a80)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r7, &(0x7f0000000ac0)='y\r', 0x2, 0x2404c081, &(0x7f0000000b00)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c)
shutdown(r7, 0x1)
ptrace$pokeuser(0x6, r0, 0x388, 0x132)
ptrace$pokeuser(0x6, r0, 0x388, 0xb000003)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

1.54439696s ago: executing program 0 (id=2015):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/102400, 0x19000}], 0x1, 0x0, 0x1)
read$qrtrtun(r0, &(0x7f0000019080)=""/85, 0x55)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

1.530190661s ago: executing program 7 (id=2016):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac14142600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009cdbe420aabdb91659667a4611afeaa8773a68af8a1ec938508ad26d1c8ca01cb80525661c344c4799950f7e1a11753a03f66577a4e3d016c37d23cc63d460377a6eb493a82ee6677efe35756f9f7ea78ceb2d32aae93d3fee6cd2cce6ca3e1166964eb77bf0b0b865197fb4589d05c5f4b2ec06446e3bcd38666852e3ab51393644794b959e62dad1fe4c5783f34eabcba1c177b58f3ceefffb4a73d96e7fc4c5efa6295e37d02dab6a0c11a6e3b9e31b7d2d03733be3d8329a40aac3d27dede72b21ca0e6500033b1e418ed00c07ee72c364"], 0x210)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fe"], 0x48)
r2 = socket$unix(0x1, 0x5, 0x0)
io_setup(0x8, &(0x7f00000006c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000a00)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}])
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "ce7bbd7d7072ea7a", "8613b53d80a00871a45c9701dd3697d7", "22f2cfee", "a23a7c17d192acdb"}, 0x28)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f00000004c0), 0x4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000540)={@multicast1=0xe0000300, @local}, 0x8)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000580), 0x4)
syz_emit_ethernet(0x85, &(0x7f0000000600)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x77, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x15, 0x4, 0x3, 0x6, 0x4, 0x65, 0x6, 0x6, 0x1, 0x9, @multicast1, @empty, {[@lsrr={0x83, 0x1f, 0xa5, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @private=0xa010101]}, @generic={0x88, 0x8, "ef86c8410c35"}, @lsrr={0x83, 0x17, 0xf6, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, @remote, @remote, @empty]}]}}, "4e504473bb92a2"}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000005c0)={@broadcast, @local, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x80000040, 0x40000006}, 0x3c)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9400000010000100000000000000000003007bdfe7d00000020900010073795a7a3100000000140000001100010000000000de0000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28)
pipe(&(0x7f0000000480))

1.377771877s ago: executing program 6 (id=2017):
r0 = socket(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x200000100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000814000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x7, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000", @ANYRES64], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
r5 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @empty}, 0x11}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e1e, 0x0, @empty}, 0x1c)
write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)

1.291002776s ago: executing program 9 (id=2018):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x65520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb08143e, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0xe, &(0x7f0000000640)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x452, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000b00)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000b80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000c80)={[0xfffffffffffffffd]}, 0x0, 0x8)
r4 = getpid()
r5 = gettid()
rt_tgsigqueueinfo(r4, r5, 0x3a, &(0x7f0000000cc0)={0x20, 0xfffffffd, 0x7})
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000d40)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r6, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/148, 0x94}], 0x1)
close(r3)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000440)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000004c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000500)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r11)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r13=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r12, 0x21, 0x70bd25, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x18)

1.288448697s ago: executing program 6 (id=2019):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000380)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4c", 0xa3)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r4, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000000880)=""/102396, &(0x7f0000019880)=0x18ffc)
perf_event_open(&(0x7f00000198c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000019a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019a80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000019ac0)={0x0, 0x0, &(0x7f0000019b00)={0x0, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000019b40)={0x0, 0x0, &(0x7f0000019b80)={&(0x7f0000019bc0)=ANY=[], 0xc4}}, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="37eee1212da2d8c2d7045eedfe6f", 0xe, 0x20000080, &(0x7f0000019c40)={0x2, 0x1234, @local}, 0x10)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000019c80)={0xffff, 0x1, 0x0, 0x0, 0x9}, 0xc)
r6 = add_key$keyring(&(0x7f0000019cc0), &(0x7f0000019d00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = add_key$keyring(&(0x7f0000019d40), &(0x7f0000019d80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000019dc0)='asymmetric\x00', &(0x7f0000019e00)=@chain={'key_or_keyring:', r7})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000001a080)={0x0, 0x0, &(0x7f000001a0c0)={&(0x7f000001a100)=ANY=[@ANYBLOB="14000000140001032db57000fedbdf250c"], 0x20}}, 0x20008080)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f000001a140), &(0x7f000001a180)=0x10)

1.142102752s ago: executing program 0 (id=2020):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
dup(r0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
syz_pidfd_open(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x528, &(0x7f0000000200)="$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")
syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000880)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4000001)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000009c0), 0x0, 0x0)
clock_adjtime(0x0, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r2, 0x402c542c, 0x0)
ioctl$TIOCSTI(r2, 0x5412, 0x0)
read$msr(r1, &(0x7f0000001100)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f000001a140)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f000001a180)='a', 0x200000c1, 0x9000)

458.809783ms ago: executing program 9 (id=2021):
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x200006, 0x7fe2, 0x42, 0x149, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x2}, 0x50)

372.404372ms ago: executing program 6 (id=2022):
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0xb)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
wait4(r3, 0x0, 0x2, 0x0)
ptrace$poke(0x1b, r3, 0x0, 0xe)
sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000840)={@remote, 0x2, 0x1, 0xff, 0x9, 0x0, 0xffff}, 0x20)
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x3000040, &(0x7f0000000900), 0x4, 0x524, &(0x7f0000000940)="$eJzs3e9rI2kdAPDvTJtee9uzORVZD7w7vJPdQzdpr55WkbsTRF8dqOf7tbZpKU2b0qTnthzawz9AEFHBP8A3gi98Kcj+CSIs6HtRUUR39aXuyCRT7Y+kjW3arOnnA9M8T56Z5/t9hmaSmTxMAri2XoyINyNiLCJeiYiZ4vm0WGK/s+TrPXr47lK+JJFlb/81iaR47qCvvD4eETeKzSYj4qtfivhGcjJuc3dvfbFer20X9WprY6va3N27s7axuFpbrW3Oz8/9PCJeW5jNChcaZzkiXv/CH3/w3Z988fVffuKbv7v759vfytP63Ic6eUfE0oUC9NDpu9TeFwfyfbR9GcGGJB9PaWzYWQAA0I/8M/77I+Kj7c//MzHW/jQHAAAAjJLsjen4ZxKRAQAAACMrjYjpSNJKMRdgOtK0UunM4f1gPJ3WG83Wx1caO5vLeVtEOUrpylq9NlvMFS5HKcnrc8Uc24P6q8fq8xHxbER8f2aqXa8sNerLw774AQAAANfEjReOnv//YyZtlwEAAIARU+5ZAQAAAEaFU34AAAAYfc7/AQAAYKR9+a238iU7+B3v5Xd2d9Yb79xZrjXXKxs7S5WlxvZWZbXRWG3fs2/jrP7qjcbWJ2Nz5161VWu2qs3dvbsbjZ3N1t21Iz+BDQAAAFyhZ1+4/9skIvY/O9VeorgPIMARfxh2AsAgjQ07AWBoxoedADA0pTPXcISAUZec0X5y8k7nWmH86nLyAQAABu/Wh09+/z9RtJ19bQD4f2auDwBcP0e/3ZsaWh7A1SuddwbgzUFnAgzL+zoPT/Vq73nzjj6+/+9cY8iycyUGAAAMzHR7SdJKcQ4wHWlaqUQ8E4+zcpSSlbV6bbZo+81M6am8PtfeMjlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcWvm5emjVweO/erXj9/+4b3FVmt7LmIi+dtM/tRERLR+VDz/auYnAQAAAGC4pvI/nfP04nFu2CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEqejohHD99dOliuMvZfPh8R5W7xx2Oy/TgZpTzHvycxfmi7JCLGBhB//72IuNktfhKPsywrF1l0iz91yfHL7V3TPX4aETcGEB+us/v58efNbq+/NF5sP3Z//Y0Xy0X1Pv6l/zn+jfU4/jxzrN7Lcw9+Vu0Z/72I58a7H38O4ied+EdC5JWX+hzj17+2t9e14VCX3eIfjlVtbWxVm7t7d9Y2Fldrq7XN+fm5Ty18euG1hdnqylq9VvztGuZ7H/nF49PG3/39r3P8PTT+E/v/5b5Gn8W/Htx7+IFOpdQt/u2Xur//3uwRPy3e+z5WlPP2Wwfl/U75sOd/+uvnTxv/co/xT54x/tt9jT8+88pXvvP7ri0n9gYAcBWau3vri/V6bfuUwmQf6/xPhYiL9vPGQPN5Egpx9jqTT0iql1HIvt35f7xYPxfc/EQhu8jm4zGANCZOvE7H4rwdJhH7eV99/kMCAAAj5r8f+k/7BgkAAAAAAAAAAAAAAAAAAAC4TOe8LdlkRPS98vGY+8MZKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqf4dAAD///G60iU=")
syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5004, 0x0, 0x7, 0x0, &(0x7f0000000100))
symlink(&(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001000)='.\x02\x00')
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x10040, 0x0)
r6 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r6, 0x0, 0x0, 0x4800)
io_submit(0x0, 0x3, &(0x7f0000001140)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x8}, 0x0, 0x0])
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r9=>0x0)
timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

318.492138ms ago: executing program 9 (id=2023):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x3c, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x830)

231.373427ms ago: executing program 0 (id=2024):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040850}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 3)

154.940424ms ago: executing program 9 (id=2025):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400000010004b040000000000001e5d094f0000", @ANYRES32=0x0, @ANYBLOB="0040000020000000240012800b0001006272696467650000140002800800080088a8ffff0600270007000000"], 0x44}}, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8400, &(0x7f0000000200)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031372507000037773756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db857091a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcd9e94e5c255b5e8c90613e6b598b3b7a2c05de53dab700000000"], 0xfe, 0x2a1, &(0x7f0000000300)="$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")
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, 0x0, 0x0)
bind$tipc(r3, &(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
rt_sigsuspend(0xffffffffffffffff, 0x8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000006c0)={0x9}, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0)
fcntl$lock(r5, 0x25, &(0x7f0000000940)={0x2, 0x2, 0x3a, 0x8, 0xffffffffffffffff})
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0)

0s ago: executing program 0 (id=2026):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000000080)={0xb, 0x0, 0x80000}, 0x20)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xbc8ddc50c9d0a44d, 0xff, 0x2, 0x4, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x30, 0x1, 0x4, 0x8, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24a, 0x4e0e7b2abb8edb28, @perf_bp={&(0x7f00000002c0), 0xa}, 0x1ccc8, 0x201224, 0xfffffffd, 0x6, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(0xffffffffffffffff, 0xf5f)
r3 = accept(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000580)=0x1, 0xfffa)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000005c0)={0x12})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000640)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000680)=0x8, 0x4)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000006c0)={0x0, 0x3, 0x9, 0x9, 0x4, 0x0, 0x4, 0x6, 0x0, 0xfb}, 0xe)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000700)={0x0, 0xffffffff}, 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000740)={0x8b, 0x5, 0x201, 0x2, 0x90000000, 0x800, 0x5}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x6, &(0x7f00000007c0)=[{0x200000000006, 0x0, 0x0, 0x1}, {0x7, 0xb5, 0x3, 0x8}, {0xffff, 0x4, 0x4, 0x1}, {0xe, 0x1, 0x1, 0x7}, {0x7f, 0x6, 0x6, 0x6}, {0x9, 0x6, 0x6, 0x1ff}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)

kernel console output (not intermixed with test programs):

481] Call Trace:
[  258.359393][T10481]  <TASK>
[  258.359461][T10481]  __dump_stack+0x1d/0x30
[  258.359493][T10481]  dump_stack_lvl+0x95/0xd0
[  258.359519][T10481]  dump_stack+0x15/0x1b
[  258.359555][T10481]  should_fail_ex+0x259/0x270
[  258.359618][T10481]  should_fail+0xb/0x20
[  258.359668][T10481]  get_futex_key+0x12c/0xc40
[  258.359693][T10481]  ? irqentry_exit_to_kernel_mode_preempt+0x55/0x80
[  258.359760][T10481]  futex_wake+0x89/0x400
[  258.359806][T10481]  do_futex+0x3f8/0x460
[  258.359836][T10481]  ? rep_movs_alternative+0x1e/0xa0
[  258.359870][T10481]  __se_sys_futex+0x2f6/0x370
[  258.359922][T10481]  __x64_sys_futex+0x78/0x90
[  258.359955][T10481]  x64_sys_call+0x22e2/0x2550
[  258.359996][T10481]  do_syscall_64+0x112/0x360
[  258.360104][T10481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.360137][T10481] RIP: 0033:0x7fb4c389fb19
[  258.360157][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.360180][T10481] RSP: 002b:00007fb4c22ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  258.360233][T10481] RAX: ffffffffffffffda RBX: 00007fb4c3b25fa8 RCX: 00007fb4c389fb19
[  258.360271][T10481] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4c3b25fac
[  258.360292][T10481] RBP: 00007fb4c3b25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  258.360313][T10481] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  258.360334][T10481] R13: 00007fb4c3b26038 R14: 00007ffcebafe980 R15: 00007ffcebafea68
[  258.360364][T10481]  </TASK>
[  258.527099][   T29] audit: type=1400 audit(1794158726.375:1668): avc:  denied  { write } for  pid=10464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.589854][T10481] netlink: 'syz.7.1682': attribute type 1 has an invalid length.
[  258.633766][   T29] audit: type=1400 audit(1794158726.485:1669): avc:  denied  { write } for  pid=10496 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  258.711259][T10490] bond1: (slave bridge13): making interface the new active one
[  258.712080][T10490] bond1: (slave bridge13): Enslaving as an active interface with an up link
[  258.747726][T10500] bond1: (slave bridge14): Enslaving as a backup interface with an up link
[  258.843435][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.924251][   T29] audit: type=1400 audit(1794158726.775:1670): avc:  denied  { write } for  pid=10502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.016011][   T29] audit: type=1400 audit(1794158726.865:1671): avc:  denied  { write } for  pid=10525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  259.141511][T10529] loop9: detected capacity change from 0 to 512
[  259.153086][T10529] EXT4-fs: Ignoring removed nomblk_io_submit option
[  259.163343][T10529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.163487][T10529] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  259.195702][T10520] loop6: detected capacity change from 0 to 1024
[  259.197820][T10520] EXT4-fs: Ignoring removed bh option
[  259.237168][T10520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  259.237319][T10520] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.238558][T10539] scsi_strcpy_devinfo: model string 'V�"���L똯���h`AD�6�*�j.6$F�{׋�	�Pf���9
[  259.238558][T10539] �C9��q���%��5������
[  259.238558][T10539] ~�2�H;i����ru�	;_�+@ج�$��oL�wU��07�xeU�����"�ڧ��R^�l�!�L��3' is too long
[  259.292398][   T29] audit: type=1400 audit(1794158727.145:1672): avc:  denied  { write } for  pid=10518 comm="syz.6.1688" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  259.294613][T10520] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 3)
[  259.297187][T10520] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  259.297289][T10520] EXT4-fs (loop6): This should not happen!! Data will be lost
[  259.297289][T10520] 
[  259.300098][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.303640][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.304421][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.305117][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.308027][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.308682][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.309414][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.311272][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.313921][T10520] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1688: lblock 3 mapped to illegal pblock 3 (length 1)
[  259.375717][   T29] audit: type=1400 audit(1794158727.225:1673): avc:  denied  { write } for  pid=10527 comm="syz.9.1691" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  259.901708][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  259.949089][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.734935][T10577] FAULT_INJECTION: forcing a failure.
[  260.734935][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.734965][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.6.1705 Not tainted syzkaller #0 PREEMPT(lazy) 
[  260.734998][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  260.735016][T10577] Call Trace:
[  260.735041][T10577]  <TASK>
[  260.735051][T10577]  __dump_stack+0x1d/0x30
[  260.735116][T10577]  dump_stack_lvl+0x95/0xd0
[  260.735145][T10577]  dump_stack+0x15/0x1b
[  260.735183][T10577]  should_fail_ex+0x259/0x270
[  260.735219][T10577]  should_fail+0xb/0x20
[  260.735244][T10577]  should_fail_usercopy+0x1a/0x20
[  260.735279][T10577]  _copy_to_user+0x20/0xa0
[  260.735394][T10577]  simple_read_from_buffer+0xb5/0x130
[  260.735429][T10577]  proc_fail_nth_read+0x10e/0x150
[  260.735458][T10577]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  260.735531][T10577]  vfs_read+0x18e/0x7c0
[  260.735606][T10577]  ksys_read+0xdc/0x1a0
[  260.735649][T10577]  __x64_sys_read+0x40/0x50
[  260.735681][T10577]  x64_sys_call+0x2135/0x2550
[  260.735767][T10577]  do_syscall_64+0x112/0x360
[  260.735796][T10577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.735818][T10577] RIP: 0033:0x7f2149a1034e
[  260.735834][T10577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  260.735854][T10577] RSP: 002b:00007f214849efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  260.735949][T10577] RAX: ffffffffffffffda RBX: 00007f214849f6c0 RCX: 00007f2149a1034e
[  260.735968][T10577] RDX: 000000000000000f RSI: 00007f214849f0a0 RDI: 0000000000000004
[  260.735984][T10577] RBP: 00007f214849f090 R08: 0000000000000000 R09: 0000000000000000
[  260.735997][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.736009][T10577] R13: 00007f2149cd6038 R14: 00007f2149cd5fa0 R15: 00007ffd396b01f8
[  260.736100][T10577]  </TASK>
[  260.972038][T10580] syzkaller1: entered promiscuous mode
[  260.972063][T10580] syzkaller1: entered allmulticast mode
[  261.087183][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1710'.
[  261.206665][T10591] loop6: detected capacity change from 0 to 1024
[  261.209026][T10591] EXT4-fs: Ignoring removed bh option
[  261.265091][T10591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  261.265173][T10591] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.268474][T10591] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 3)
[  261.268747][T10591] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  261.268781][T10591] EXT4-fs (loop6): This should not happen!! Data will be lost
[  261.268781][T10591] 
[  261.269704][T10591] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.333093][   T29] audit: type=1400 audit(1794158729.115:1674): avc:  denied  { write } for  pid=10590 comm="syz.6.1711" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  261.377050][T10591] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.378521][T10591] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.379644][T10591] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.425984][T10591] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.445278][T10591] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.447382][T10590] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.447607][T10590] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.447919][T10590] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1711: lblock 3 mapped to illegal pblock 3 (length 1)
[  261.706254][T10612] ip_tables: iptables: counters copy to user failed while replacing table
[  261.726625][T10612] syzkaller1: entered promiscuous mode
[  261.726645][T10612] syzkaller1: entered allmulticast mode
[  261.979939][T10609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=135 sclass=netlink_route_socket pid=10609 comm=syz.9.1716
[  262.017426][   T32] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  262.017506][   T32] EXT4-fs (loop6): This should not happen!! Data will be lost
[  262.017506][   T32] 
[  262.018750][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  262.194225][   T29] audit: type=1400 audit(1794158730.045:1675): avc:  denied  { bind } for  pid=10628 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  262.297072][   T29] audit: type=1400 audit(1794158730.145:1676): avc:  denied  { create } for  pid=10628 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  262.771088][T10658] FAULT_INJECTION: forcing a failure.
[  262.771088][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.771125][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.6.1725 Not tainted syzkaller #0 PREEMPT(lazy) 
[  262.771241][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  262.771260][T10658] Call Trace:
[  262.771269][T10658]  <TASK>
[  262.771279][T10658]  __dump_stack+0x1d/0x30
[  262.771313][T10658]  dump_stack_lvl+0x95/0xd0
[  262.771343][T10658]  dump_stack+0x15/0x1b
[  262.771374][T10658]  should_fail_ex+0x259/0x270
[  262.771468][T10658]  should_fail+0xb/0x20
[  262.771501][T10658]  should_fail_usercopy+0x1a/0x20
[  262.771541][T10658]  _copy_from_iter+0xcc/0xe80
[  262.771583][T10658]  ? __alloc_skb+0x516/0x6f0
[  262.771626][T10658]  ? __alloc_skb+0x209/0x6f0
[  262.771670][T10658]  netlink_sendmsg+0x4d6/0x740
[  262.771777][T10658]  ? __pfx_netlink_sendmsg+0x10/0x10
[  262.771806][T10658]  ____sys_sendmsg+0x54a/0x590
[  262.771837][T10658]  ___sys_sendmsg+0x195/0x1e0
[  262.771916][T10658]  __x64_sys_sendmsg+0xd4/0x160
[  262.771948][T10658]  x64_sys_call+0x22ab/0x2550
[  262.772024][T10658]  do_syscall_64+0x112/0x360
[  262.772054][T10658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.772096][T10658] RIP: 0033:0x7f2149a4fb19
[  262.772117][T10658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.772221][T10658] RSP: 002b:00007f214849f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  262.772248][T10658] RAX: ffffffffffffffda RBX: 00007f2149cd5fa0 RCX: 00007f2149a4fb19
[  262.772286][T10658] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  262.772327][T10658] RBP: 00007f214849f090 R08: 0000000000000000 R09: 0000000000000000
[  262.772345][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.772362][T10658] R13: 00007f2149cd6038 R14: 00007f2149cd5fa0 R15: 00007ffd396b01f8
[  262.772389][T10658]  </TASK>
[  263.534458][T10669] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  263.631217][T10680] loop7: detected capacity change from 0 to 512
[  263.633038][T10680] EXT4-fs: Ignoring removed mblk_io_submit option
[  263.656287][T10677] loop4: detected capacity change from 0 to 512
[  263.661544][T10680] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  263.671138][T10680] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  263.671424][T10680] EXT4-fs (loop7): orphan cleanup on readonly fs
[  263.675542][T10680] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.1734: Invalid block bitmap block 0 in block_group 0
[  263.675640][T10680] loop7: lost filesystem error report for type 5 error -117
[  263.676170][T10680] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.1734: Invalid block bitmap block 0 in block_group 0
[  263.676298][T10680] loop7: lost filesystem error report for type 5 error -117
[  263.676520][T10680] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.1734: Invalid block bitmap block 0 in block_group 0
[  263.676556][T10680] loop7: lost filesystem error report for type 5 error -117
[  263.676740][T10680] Quota error (device loop7): write_blk: dquota write failed
[  263.676793][T10680] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  263.676813][T10680] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.1734: Failed to acquire dquot type 1
[  263.676834][T10680] loop7: lost filesystem error report for type 5 error -28
[  263.677199][T10680] EXT4-fs (loop7): 1 orphan inode deleted
[  263.678847][   T72] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5
[  263.678921][   T72] EXT4-fs error (device loop7): ext4_release_dquot:7156: comm kworker/u8:4: Failed to release dquot type 1
[  263.679014][   T72] loop7: lost filesystem error report for type 5 error -117
[  263.716152][T10680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.767105][T10677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.767315][T10677] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.770176][T10678] loop9: detected capacity change from 0 to 1024
[  263.780713][T10678] EXT4-fs: Ignoring removed bh option
[  263.818115][T10678] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  263.822219][T10678] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.854862][   T29] audit: type=1400 audit(1794158731.695:1677): avc:  denied  { write } for  pid=10676 comm="syz.9.1733" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  263.885167][T10678] EXT4-fs error (device loop9): ext4_map_blocks:951: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 3)
[  263.889872][T10678] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  263.889979][T10678] EXT4-fs (loop9): This should not happen!! Data will be lost
[  263.889979][T10678] 
[  263.910590][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.917740][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.921165][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.921993][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.922635][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.922968][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.923243][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.923647][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.926639][T10678] EXT4-fs error (device loop9): ext4_map_blocks:867: inode #15: block 3: comm syz.9.1733: lblock 3 mapped to illegal pblock 3 (length 1)
[  263.974021][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.073180][T10690] loop6: detected capacity change from 0 to 512
[  264.085690][T10690] EXT4-fs: Ignoring removed mblk_io_submit option
[  264.090910][T10690] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  264.100016][T10690] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  264.105049][T10690] EXT4-fs (loop6): orphan cleanup on readonly fs
[  264.110428][T10690] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.1735: Invalid block bitmap block 0 in block_group 0
[  264.110549][T10690] loop6: lost filesystem error report for type 5 error -117
[  264.113372][T10690] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.1735: Invalid block bitmap block 0 in block_group 0
[  264.113524][T10690] loop6: lost filesystem error report for type 5 error -117
[  264.114118][T10690] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.1735: Invalid block bitmap block 0 in block_group 0
[  264.114234][T10690] loop6: lost filesystem error report for type 5 error -117
[  264.115769][T10690] Quota error (device loop6): write_blk: dquota write failed
[  264.115823][T10690] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  264.115968][T10690] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.1735: Failed to acquire dquot type 1
[  264.116052][T10690] loop6: lost filesystem error report for type 5 error -28
[  264.118021][T10690] EXT4-fs (loop6): 1 orphan inode deleted
[  264.120558][    C1] EXT4-fs (loop6): error count since last fsck: 4
[  264.120611][    C1] EXT4-fs (loop6): last error at time 1794158731: ext4_acquire_dquot:7120
[  264.121022][   T39] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5
[  264.121176][   T39] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1
[  264.121245][   T39] loop6: lost filesystem error report for type 5 error -117
[  264.125105][T10690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  264.165185][T10692] loop4: detected capacity change from 0 to 512
[  264.173456][T10692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  264.216715][T10694] loop5: detected capacity change from 0 to 512
[  264.244721][T10692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.257951][T10692] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.275988][T10694] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.1736: iget: bad i_size value: 38620345925642
[  264.276060][T10694] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  264.278433][T10694] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1736: couldn't read orphan inode 15 (err -117)
[  264.281792][T10694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.376857][   T29] audit: type=1400 audit(1794158732.225:1678): avc:  denied  { write } for  pid=10689 comm="syz.5.1736" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.432559][   T29] audit: type=1400 audit(1794158732.285:1679): avc:  denied  { write } for  pid=10691 comm="syz.4.1737" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.486596][   T29] audit: type=1400 audit(1794158732.335:1680): avc:  denied  { write } for  pid=10689 comm="syz.5.1736" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  264.487233][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.777630][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  265.397816][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.508962][T10711] loop6: detected capacity change from 0 to 512
[  265.517000][T10711] EXT4-fs: Ignoring removed nomblk_io_submit option
[  265.533703][   T72] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm kworker/u8:4: bg 0: block 5: invalid block bitmap
[  265.535086][T10711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.535423][   T72] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  265.535462][   T72] EXT4-fs (loop5): This should not happen!! Data will be lost
[  265.535462][   T72] 
[  265.535498][   T72] EXT4-fs (loop5): Total free blocks count 0
[  265.535583][   T72] EXT4-fs (loop5): Free/Dirty block details
[  265.535602][   T72] EXT4-fs (loop5): free_blocks=0
[  265.535621][   T72] EXT4-fs (loop5): dirty_blocks=1
[  265.535640][   T72] EXT4-fs (loop5): Block reservation details
[  265.535739][   T72] EXT4-fs (loop5): i_reserved_data_blocks=1
[  265.537253][ T3764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.610601][T10711] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.901401][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.935183][T10726] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  266.311032][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1743'.
[  266.616339][T10737] loop9: detected capacity change from 0 to 512
[  266.650347][T10737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.650544][T10737] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.655957][T10741] loop7: detected capacity change from 0 to 512
[  266.718366][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.731367][T10741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.731520][T10741] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.774175][T10749] loop4: detected capacity change from 0 to 512
[  266.783681][T10749] EXT4-fs: Ignoring removed mblk_io_submit option
[  266.798496][T10749] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  266.808466][T10749] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  266.808698][T10749] EXT4-fs (loop4): orphan cleanup on readonly fs
[  266.810991][T10749] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1750: Invalid block bitmap block 0 in block_group 0
[  266.811366][T10749] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1750: Invalid block bitmap block 0 in block_group 0
[  266.819326][T10749] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1750: Invalid block bitmap block 0 in block_group 0
[  266.830104][    C1] EXT4-fs (loop4): error count since last fsck: 3
[  266.830166][    C1] EXT4-fs (loop4): last error at time 1794158734: ext4_read_block_bitmap_nowait:487
[  266.879319][T10753] loop9: detected capacity change from 0 to 512
[  266.896503][T10749] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.1750: Failed to acquire dquot type 1
[  266.896916][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.897540][T10749] EXT4-fs (loop4): 1 orphan inode deleted
[  266.909499][ T3422] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 1
[  266.912547][T10749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  266.924731][T10753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  266.924832][T10753] System zones: 0-7
[  266.925914][T10753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.209557][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.227217][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.375359][T10782] loop6: detected capacity change from 0 to 512
[  268.479331][T10786] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  268.491963][T10786] loop5: detected capacity change from 0 to 512
[  268.492378][T10786] EXT4-fs: Ignoring removed nomblk_io_submit option
[  268.495052][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.522569][T10786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.522766][T10786] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  269.018624][T10782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.018797][T10782] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.039216][ T3764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.088325][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.472157][T10815] loop4: detected capacity change from 0 to 512
[  269.488872][T10815] EXT4-fs: Ignoring removed mblk_io_submit option
[  269.506849][T10815] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  269.509190][T10815] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  269.509337][T10815] EXT4-fs (loop4): orphan cleanup on readonly fs
[  269.510929][T10815] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1769: Invalid block bitmap block 0 in block_group 0
[  269.510965][T10815] fserror_report: 6 callbacks suppressed
[  269.511003][T10815] loop4: lost filesystem error report for type 5 error -117
[  269.511339][T10815] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1769: Invalid block bitmap block 0 in block_group 0
[  269.511382][T10815] loop4: lost filesystem error report for type 5 error -117
[  269.512105][T10815] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1769: Invalid block bitmap block 0 in block_group 0
[  269.512191][T10815] loop4: lost filesystem error report for type 5 error -117
[  269.513016][T10815] __quota_error: 5 callbacks suppressed
[  269.513067][T10815] Quota error (device loop4): write_blk: dquota write failed
[  269.513119][T10815] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  269.513179][T10815] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.1769: Failed to acquire dquot type 1
[  269.513267][T10815] loop4: lost filesystem error report for type 5 error -28
[  269.516293][T10815] EXT4-fs (loop4): 1 orphan inode deleted
[  269.516609][ T3422] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  269.516683][ T3422] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 1
[  269.516804][ T3422] loop4: lost filesystem error report for type 5 error -117
[  269.520217][    C0] EXT4-fs (loop4): error count since last fsck: 5
[  269.520271][    C0] EXT4-fs (loop4): last error at time 1794158737: ext4_release_dquot:7156
[  269.597452][T10815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  269.604760][T10819] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  269.651946][T10819] loop6: detected capacity change from 0 to 512
[  269.656569][T10819] EXT4-fs: Ignoring removed nomblk_io_submit option
[  269.681817][T10819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.684412][T10819] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  269.812329][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.982630][T10831] loop6: detected capacity change from 0 to 512
[  270.014202][T10831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.014351][T10831] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.045770][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.066846][T10839] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  270.282272][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.492803][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'.
[  271.041432][T10859] loop5: detected capacity change from 0 to 1024
[  271.043455][T10859] EXT4-fs: Ignoring removed bh option
[  271.065364][T10872] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294967240
[  271.098600][T10859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  271.098666][T10859] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.102434][   T29] audit: type=1400 audit(1794158738.955:1683): avc:  denied  { write } for  pid=10858 comm="syz.5.1781" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  271.109736][T10859] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 3)
[  271.111165][T10859] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  271.111227][T10859] EXT4-fs (loop5): This should not happen!! Data will be lost
[  271.111227][T10859] 
[  271.129271][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.131680][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.138683][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.139570][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.140635][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.141619][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.144352][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.144880][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.145649][T10859] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1781: lblock 3 mapped to illegal pblock 3 (length 1)
[  271.326440][T10876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.326591][T10876] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.372225][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.057997][T10909] set_capacity_and_notify: 1 callbacks suppressed
[  272.058014][T10909] loop6: detected capacity change from 0 to 512
[  272.103111][T10909] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1799: iget: bad i_size value: 38620345925642
[  272.103244][T10909] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  272.103469][T10909] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1799: couldn't read orphan inode 15 (err -117)
[  272.103564][T10909] loop6: lost filesystem error report for type 5 error -117
[  272.105663][T10909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.190228][   T29] audit: type=1400 audit(1794158740.025:1684): avc:  denied  { write } for  pid=10908 comm="syz.6.1799" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  272.305103][   T72] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  272.305210][   T72] EXT4-fs (loop5): This should not happen!! Data will be lost
[  272.305210][   T72] 
[  272.307916][ T3764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  272.342150][   T29] audit: type=1400 audit(1794158740.185:1685): avc:  denied  { write } for  pid=10908 comm="syz.6.1799" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  272.346046][T10912] loop4: detected capacity change from 0 to 512
[  272.346718][T10912] EXT4-fs: Ignoring removed nomblk_io_submit option
[  272.384254][T10912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.385913][T10912] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  272.458100][T10920] loop5: detected capacity change from 0 to 512
[  272.500811][T10920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.500933][T10920] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.538387][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.566695][ T3764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.586700][  T328] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm kworker/u8:6: bg 0: block 5: invalid block bitmap
[  272.589983][  T328] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  272.590689][  T328] EXT4-fs (loop6): This should not happen!! Data will be lost
[  272.590689][  T328] 
[  272.590784][  T328] EXT4-fs (loop6): Total free blocks count 0
[  272.590901][  T328] EXT4-fs (loop6): Free/Dirty block details
[  272.590943][  T328] EXT4-fs (loop6): free_blocks=0
[  272.590977][  T328] EXT4-fs (loop6): dirty_blocks=1
[  272.591017][  T328] EXT4-fs (loop6): Block reservation details
[  272.591051][  T328] EXT4-fs (loop6): i_reserved_data_blocks=1
[  272.601862][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.332177][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1803'.
[  274.597711][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'.
[  274.914435][T10953] FAULT_INJECTION: forcing a failure.
[  274.914435][T10953] name failslab, interval 1, probability 0, space 0, times 0
[  274.914502][T10953] CPU: 0 UID: 0 PID: 10953 Comm: syz.4.1809 Not tainted syzkaller #0 PREEMPT(lazy) 
[  274.914566][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  274.914579][T10953] Call Trace:
[  274.914587][T10953]  <TASK>
[  274.914598][T10953]  __dump_stack+0x1d/0x30
[  274.914626][T10953]  dump_stack_lvl+0x95/0xd0
[  274.914667][T10953]  dump_stack+0x15/0x1b
[  274.914693][T10953]  should_fail_ex+0x259/0x270
[  274.914793][T10953]  ? alloc_tty_struct+0x4b/0x3d0
[  274.914818][T10953]  should_failslab+0x8c/0xb0
[  274.914869][T10953]  __kmalloc_cache_noprof+0x5d/0x3e0
[  274.914914][T10953]  ? alloc_tty_struct+0x4b/0x3d0
[  274.914946][T10953]  alloc_tty_struct+0x4b/0x3d0
[  274.915027][T10953]  tty_init_dev+0x39/0x320
[  274.915056][T10953]  ptmx_open+0xda/0x240
[  274.915100][T10953]  chrdev_open+0x2eb/0x3a0
[  274.915124][T10953]  do_dentry_open+0x496/0xa40
[  274.915207][T10953]  ? __pfx_chrdev_open+0x10/0x10
[  274.915233][T10953]  ? may_open+0x1f4/0x350
[  274.915264][T10953]  vfs_open_consume+0x46/0x1f0
[  274.915369][T10953]  path_openat+0xc16/0x11c0
[  274.915413][T10953]  do_file_open+0x16c/0x290
[  274.915466][T10953]  do_sys_openat2+0xa1/0x140
[  274.915580][T10953]  __x64_sys_openat+0xf2/0x120
[  274.915611][T10953]  x64_sys_call+0x1f72/0x2550
[  274.915712][T10953]  do_syscall_64+0x112/0x360
[  274.915737][T10953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.915838][T10953] RIP: 0033:0x7fe52dbefb19
[  274.915860][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.915885][T10953] RSP: 002b:00007fe52c647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  274.915982][T10953] RAX: ffffffffffffffda RBX: 00007fe52de75fa0 RCX: 00007fe52dbefb19
[  274.916060][T10953] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  274.916074][T10953] RBP: 00007fe52dc87b70 R08: 0000000000000000 R09: 0000000000000000
[  274.916087][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.916105][T10953] R13: 00007fe52de76038 R14: 00007fe52de75fa0 R15: 00007fff6d04e388
[  274.916171][T10953]  </TASK>
[  275.129380][T10961] loop7: detected capacity change from 0 to 512
[  275.131404][T10961] EXT4-fs: Ignoring removed nomblk_io_submit option
[  275.154092][T10961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.154427][T10961] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  275.340097][   T29] audit: type=1400 audit(1794158743.155:1686): avc:  denied  { write } for  pid=10960 comm="syz.7.1813" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  275.390604][T10971] loop5: detected capacity change from 0 to 2048
[  275.407829][T10971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.434583][   T29] audit: type=1400 audit(1794158743.285:1687): avc:  denied  { write } for  pid=10970 comm="syz.5.1816" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  275.643295][ T5948] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  275.643412][ T5948] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28
[  275.643444][ T5948] EXT4-fs (loop5): This should not happen!! Data will be lost
[  275.643444][ T5948] 
[  275.643461][ T5948] EXT4-fs (loop5): Total free blocks count 0
[  275.643477][ T5948] EXT4-fs (loop5): Free/Dirty block details
[  275.643493][ T5948] EXT4-fs (loop5): free_blocks=66060288
[  275.643521][ T5948] EXT4-fs (loop5): dirty_blocks=32
[  275.643537][ T5948] EXT4-fs (loop5): Block reservation details
[  275.643551][ T5948] EXT4-fs (loop5): i_reserved_data_blocks=2
[  275.655068][   T72] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  275.678960][ T3764] EXT4-fs warning (device loop5): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost
[  275.930306][T10980] loop4: detected capacity change from 0 to 512
[  275.930713][T10980] EXT4-fs: Ignoring removed mblk_io_submit option
[  275.954726][T10980] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  275.965176][T10980] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  275.965444][T10980] EXT4-fs (loop4): orphan cleanup on readonly fs
[  275.974201][T10980] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1818: Invalid block bitmap block 0 in block_group 0
[  275.974362][T10980] loop4: lost filesystem error report for type 5 error -117
[  275.981456][T10980] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1818: Invalid block bitmap block 0 in block_group 0
[  275.981551][T10980] loop4: lost filesystem error report for type 5 error -117
[  275.986910][T10980] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.1818: Invalid block bitmap block 0 in block_group 0
[  275.986954][T10980] loop4: lost filesystem error report for type 5 error -117
[  275.990156][    C1] EXT4-fs (loop4): error count since last fsck: 3
[  275.990227][    C1] EXT4-fs (loop4): last error at time 1794158743: ext4_read_block_bitmap_nowait:487
[  275.991258][T10980] Quota error (device loop4): write_blk: dquota write failed
[  275.991325][T10980] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  275.991381][T10980] EXT4-fs error (device loop4): ext4_acquire_dquot:7120: comm syz.4.1818: Failed to acquire dquot type 1
[  275.991455][T10980] loop4: lost filesystem error report for type 5 error -28
[  275.992350][T10980] EXT4-fs (loop4): 1 orphan inode deleted
[  275.999768][   T13] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  275.999855][   T13] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:0: Failed to release dquot type 1
[  275.999928][   T13] loop4: lost filesystem error report for type 5 error -117
[  276.002278][T10980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  276.311860][T10989] futex_wake_op: syz.6.1821 tries to shift op by 144; fix this program
[  276.547642][T11009] futex_wake_op: syz.9.1827 tries to shift op by 144; fix this program
[  276.835879][ T8961] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.854456][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.014699][T11017] FAULT_INJECTION: forcing a failure.
[  277.014699][T11017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.014733][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.7.1830 Not tainted syzkaller #0 PREEMPT(lazy) 
[  277.014768][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  277.014845][T11017] Call Trace:
[  277.014854][T11017]  <TASK>
[  277.014864][T11017]  __dump_stack+0x1d/0x30
[  277.014891][T11017]  dump_stack_lvl+0x95/0xd0
[  277.014957][T11017]  dump_stack+0x15/0x1b
[  277.014987][T11017]  should_fail_ex+0x259/0x270
[  277.015029][T11017]  should_fail+0xb/0x20
[  277.015064][T11017]  should_fail_usercopy+0x1a/0x20
[  277.015157][T11017]  _copy_to_user+0x20/0xa0
[  277.015198][T11017]  simple_read_from_buffer+0xb5/0x130
[  277.015294][T11017]  proc_fail_nth_read+0x10e/0x150
[  277.015339][T11017]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  277.015375][T11017]  vfs_read+0x18e/0x7c0
[  277.015436][T11017]  ? __rcu_read_unlock+0x4e/0x70
[  277.015466][T11017]  ? __fget_files+0x184/0x1c0
[  277.015500][T11017]  ? mutex_lock+0x52/0x90
[  277.015573][T11017]  ksys_read+0xdc/0x1a0
[  277.015662][T11017]  __x64_sys_read+0x40/0x50
[  277.015706][T11017]  x64_sys_call+0x2135/0x2550
[  277.015798][T11017]  do_syscall_64+0x112/0x360
[  277.015892][T11017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.015920][T11017] RIP: 0033:0x7fb4c386034e
[  277.015940][T11017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  277.015964][T11017] RSP: 002b:00007fb4c22eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  277.016041][T11017] RAX: ffffffffffffffda RBX: 00007fb4c22ef6c0 RCX: 00007fb4c386034e
[  277.016055][T11017] RDX: 000000000000000f RSI: 00007fb4c22ef0a0 RDI: 0000000000000005
[  277.016068][T11017] RBP: 00007fb4c22ef090 R08: 0000000000000000 R09: 0000000000000000
[  277.016084][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.016099][T11017] R13: 00007fb4c3b26038 R14: 00007fb4c3b25fa0 R15: 00007ffcebafea68
[  277.016151][T11017]  </TASK>
[  277.258188][T11023] loop7: detected capacity change from 0 to 1024
[  277.265898][T11023] EXT4-fs: Ignoring removed bh option
[  277.283125][T11023] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.287063][   T29] audit: type=1400 audit(1794158745.135:1688): avc:  denied  { write } for  pid=11022 comm="syz.7.1833" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  277.303870][T11023] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 3)
[  277.304749][T11023] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  277.304831][T11023] EXT4-fs (loop7): This should not happen!! Data will be lost
[  277.304831][T11023] 
[  277.309221][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.309713][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.312540][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.313513][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.314271][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.315013][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.316097][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.318994][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.319988][T11023] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1833: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.405966][T11028] loop5: detected capacity change from 0 to 1024
[  277.417294][T11028] EXT4-fs: Ignoring removed bh option
[  277.427685][T11032] loop6: detected capacity change from 0 to 1024
[  277.428318][T11032] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  277.514353][T11028] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.552868][   T29] audit: type=1400 audit(1794158745.405:1689): avc:  denied  { write } for  pid=11025 comm="syz.5.1834" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  277.568115][   T29] audit: type=1400 audit(1794158745.405:1690): avc:  denied  { bind } for  pid=11024 comm="syz.6.1832" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  277.569845][   T29] audit: type=1400 audit(1794158745.405:1691): avc:  denied  { name_bind } for  pid=11024 comm="syz.6.1832" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  277.570019][   T29] audit: type=1400 audit(1794158745.405:1692): avc:  denied  { node_bind } for  pid=11024 comm="syz.6.1832" saddr=fe88::7 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  277.598822][T11028] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 3)
[  277.619287][T11028] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  277.619396][T11028] EXT4-fs (loop5): This should not happen!! Data will be lost
[  277.619396][T11028] 
[  277.673971][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.678417][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.683420][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.686813][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.689755][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.698774][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.702001][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.706597][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.713752][T11028] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #15: block 3: comm syz.5.1834: lblock 3 mapped to illegal pblock 3 (length 1)
[  277.808915][T11040] loop9: detected capacity change from 0 to 512
[  277.817916][T11040] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  277.818015][T11040] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  277.824002][T11040] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  277.824054][T11040] System zones: 0-2, 18-18, 34-34
[  277.830867][T11040] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1836: inode #15: comm syz.9.1836: iget: illegal inode #
[  277.830964][T11040] loop9: lost filesystem error report for type 5 error -117
[  277.831348][T11040] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.1836: couldn't read orphan inode 15 (err -117)
[  277.832262][T11040] loop9: lost filesystem error report for type 5 error -117
[  277.904950][T11040] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #2: block 3: comm syz.9.1836: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  278.136971][   T39] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  278.137007][   T39] EXT4-fs (loop7): This should not happen!! Data will be lost
[  278.137007][   T39] 
[  278.146544][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1836'.
[  278.247484][T11048] loop4: detected capacity change from 0 to 512
[  278.247889][T11048] EXT4-fs: Ignoring removed nomblk_io_submit option
[  278.275532][T11048] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  278.388396][  T328] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  278.388435][  T328] EXT4-fs (loop5): This should not happen!! Data will be lost
[  278.388435][  T328] 
[  278.558941][T11064] loop4: detected capacity change from 0 to 128
[  278.784663][T11068] Cannot find add_set index 0 as target
[  279.398230][T11074] loop5: detected capacity change from 0 to 128
[  280.501656][T11102] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  280.847203][T11118] loop6: detected capacity change from 0 to 1024
[  280.858145][T11118] EXT4-fs: Ignoring removed bh option
[  280.921208][T11118] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.924324][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  280.924339][   T29] audit: type=1400 audit(1794158748.775:1697): avc:  denied  { write } for  pid=11116 comm="syz.6.1859" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  280.926736][T11118] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 3)
[  280.927083][T11118] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  280.927108][T11118] EXT4-fs (loop6): This should not happen!! Data will be lost
[  280.927108][T11118] 
[  281.159199][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.159941][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.191387][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.192477][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.193790][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.194725][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.195736][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.197110][T11118] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.294334][T11116] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1859: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.657865][   T39] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  281.657895][   T39] EXT4-fs (loop6): This should not happen!! Data will be lost
[  281.657895][   T39] 
[  281.672556][   T29] audit: type=1400 audit(1794158749.515:1698): avc:  denied  { nlmsg_read } for  pid=11132 comm="syz.4.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  281.807893][T11145] loop7: detected capacity change from 0 to 512
[  281.848197][T11145] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.862665][   T29] audit: type=1400 audit(1794158749.715:1699): avc:  denied  { write } for  pid=11144 comm="syz.7.1868" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  281.863408][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.863873][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.864028][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.865131][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.865581][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.868238][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.870269][   T29] audit: type=1400 audit(1794158749.715:1700): avc:  denied  { read write } for  pid=11144 comm="syz.7.1868" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  281.870378][   T29] audit: type=1400 audit(1794158749.715:1701): avc:  denied  { open } for  pid=11144 comm="syz.7.1868" path="/330/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  281.879456][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.883344][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.883719][   T29] audit: type=1400 audit(1794158749.735:1702): avc:  denied  { ioctl } for  pid=11144 comm="syz.7.1868" path="/330/file1/file1" dev="loop7" ino=15 ioctlcmd=0x40106e8c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  281.888812][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.889130][   T29] audit: type=1400 audit(1794158749.735:1703): avc:  denied  { setattr } for  pid=11144 comm="syz.7.1868" path="/330/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  281.889599][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.889712][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.890489][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.925388][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.939953][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.940182][T11145] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.1868: corrupted xattr block 33: invalid ea_ino
[  281.941093][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop7 ino=15
[  281.951501][T11145] EXT4-fs (loop7): shut down requested (2)
[  281.963821][   T29] audit: type=1400 audit(1794158749.815:1704): avc:  denied  { read } for  pid=2960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  281.963915][   T29] audit: type=1400 audit(1794158749.815:1705): avc:  denied  { search } for  pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  281.963998][   T29] audit: type=1400 audit(1794158749.815:1706): avc:  denied  { write search } for  pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  281.966090][T11145] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop7 ino=15
[  282.487602][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1870'.
[  282.737795][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'.
[  283.035689][T11176] batman_adv: batadv0: Adding interface: syzkaller0
[  283.035706][T11176] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  283.035741][T11176] batman_adv: batadv0: Interface activated: syzkaller0
[  283.054056][T11175] batman_adv: batadv0: Interface deactivated: syzkaller0
[  283.143516][T11175] batman_adv: batadv0: Removing interface: syzkaller0
[  283.267547][T11185] scsi_dev_info_list_add_str: bad dev info string ';�wru' 'V�"���L똯���h`AD�6�*�j.6$F�{׋�	�Pf���9
[  283.267547][T11185] �C9��q���%��5������
[  283.267547][T11185] ~�2�H;i����ru�	;_�+@ج�$��oL�wU��07�xeU�����"�' ''
[  283.313227][T11187] loop6: detected capacity change from 0 to 512
[  283.314804][T11187] EXT4-fs: Ignoring removed mblk_io_submit option
[  283.315460][T11187] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  283.316197][T11187] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  283.316348][T11187] EXT4-fs (loop6): orphan cleanup on readonly fs
[  283.317058][T11187] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.1880: Invalid block bitmap block 0 in block_group 0
[  283.317135][T11187] loop6: lost filesystem error report for type 5 error -117
[  283.317403][T11187] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.1880: Invalid block bitmap block 0 in block_group 0
[  283.317440][T11187] loop6: lost filesystem error report for type 5 error -117
[  283.317758][T11187] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.1880: Invalid block bitmap block 0 in block_group 0
[  283.317913][T11187] loop6: lost filesystem error report for type 5 error -117
[  283.318152][T11187] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.1880: Failed to acquire dquot type 1
[  283.318196][T11187] loop6: lost filesystem error report for type 5 error -28
[  283.318471][T11187] EXT4-fs (loop6): 1 orphan inode deleted
[  283.325132][    C0] EXT4-fs (loop6): error count since last fsck: 4
[  283.325160][    C0] EXT4-fs (loop6): last error at time 1794158751: ext4_acquire_dquot:7120
[  283.325538][  T328] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:6: Failed to release dquot type 1
[  283.325560][  T328] loop6: lost filesystem error report for type 5 error -117
[  283.495254][T11187] EXT4-fs mount: 12 callbacks suppressed
[  283.495277][T11187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  283.767380][T11195] loop7: detected capacity change from 0 to 1024
[  283.767884][T11195] EXT4-fs: Ignoring removed bh option
[  283.782996][T11195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  283.784172][T11195] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.830918][T11195] EXT4-fs error (device loop7): ext4_map_blocks:951: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 3)
[  283.832052][T11195] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  283.832136][T11195] EXT4-fs (loop7): This should not happen!! Data will be lost
[  283.832136][T11195] 
[  283.874576][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.875154][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.875505][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.876223][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.878033][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.878298][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.878632][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.878960][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  283.879275][T11195] EXT4-fs error (device loop7): ext4_map_blocks:867: inode #15: block 3: comm syz.7.1883: lblock 3 mapped to illegal pblock 3 (length 1)
[  284.126990][T11216] loop9: detected capacity change from 0 to 512
[  284.145419][T11216] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.145505][T11216] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.190931][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.268882][   T13] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  284.268919][   T13] EXT4-fs (loop7): This should not happen!! Data will be lost
[  284.268919][   T13] 
[  284.269791][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  284.321807][T11228] scsi_dev_info_list_add_str: bad dev info string ';�wru' 'V�"���L똯���h`AD�6�*�j.6$F�{׋�	�Pf���9
[  284.321807][T11228] �C9��q���%��5������
[  284.321807][T11228] ~�2�H;i����ru�	;_�+@ج�$��oL�wU��07�xeU�����"�' ''
[  284.464307][T11236] FAULT_INJECTION: forcing a failure.
[  284.464307][T11236] name failslab, interval 1, probability 0, space 0, times 0
[  284.464372][T11236] CPU: 1 UID: 0 PID: 11236 Comm: syz.6.1896 Not tainted syzkaller #0 PREEMPT(lazy) 
[  284.464402][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  284.464461][T11236] Call Trace:
[  284.464468][T11236]  <TASK>
[  284.464477][T11236]  __dump_stack+0x1d/0x30
[  284.464557][T11236]  dump_stack_lvl+0x95/0xd0
[  284.464637][T11236]  dump_stack+0x15/0x1b
[  284.464704][T11236]  should_fail_ex+0x259/0x270
[  284.464738][T11236]  ? __alloc_skb+0x2e0/0x6f0
[  284.464774][T11236]  should_failslab+0x8c/0xb0
[  284.464921][T11236]  kmem_cache_alloc_node_noprof+0x60/0x3e0
[  284.464959][T11236]  ? __alloc_skb+0x2e0/0x6f0
[  284.464996][T11236]  __alloc_skb+0x2e0/0x6f0
[  284.465052][T11236]  ? __alloc_skb+0x209/0x6f0
[  284.465099][T11236]  alloc_skb_with_frags+0x7e/0x3d0
[  284.465137][T11236]  ? __rcu_read_unlock+0x4e/0x70
[  284.465166][T11236]  ? avc_has_perm_noaudit+0xac/0x160
[  284.465239][T11236]  sock_alloc_send_pskb+0x640/0x700
[  284.465280][T11236]  tun_get_user+0x9ab/0x2970
[  284.465327][T11236]  ? ref_tracker_alloc+0x236/0x340
[  284.465370][T11236]  tun_chr_write_iter+0x15a/0x210
[  284.465405][T11236]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  284.465447][T11236]  vfs_write+0x57a/0x990
[  284.465494][T11236]  ksys_write+0xdc/0x1a0
[  284.465587][T11236]  __x64_sys_write+0x40/0x50
[  284.465624][T11236]  x64_sys_call+0x154e/0x2550
[  284.465654][T11236]  do_syscall_64+0x112/0x360
[  284.465678][T11236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.465734][T11236] RIP: 0033:0x7f2149a4fb19
[  284.465753][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.465777][T11236] RSP: 002b:00007f214849f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  284.465801][T11236] RAX: ffffffffffffffda RBX: 00007f2149cd5fa0 RCX: 00007f2149a4fb19
[  284.465818][T11236] RDX: 0000000000000034 RSI: 0000200000000080 RDI: 0000000000000003
[  284.465879][T11236] RBP: 00007f214849f090 R08: 0000000000000000 R09: 0000000000000000
[  284.465894][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.465909][T11236] R13: 00007f2149cd6038 R14: 00007f2149cd5fa0 R15: 00007ffd396b01f8
[  284.465933][T11236]  </TASK>
[  285.112875][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1889'.
[  285.188393][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1889'.
[  285.188420][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1889'.
[  285.213218][   T72] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.249411][   T72] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.312407][   T72] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.416519][   T72] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.448668][T11253] loop6: detected capacity change from 0 to 1024
[  285.459593][T11253] EXT4-fs: Ignoring removed bh option
[  285.497662][T11253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  285.497939][T11253] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.540116][T11253] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 3)
[  285.556049][T11253] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  285.556095][T11253] EXT4-fs (loop6): This should not happen!! Data will be lost
[  285.556095][T11253] 
[  285.740727][T11271] loop7: detected capacity change from 0 to 512
[  285.800221][T11271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  285.801001][T11251] loop5: detected capacity change from 0 to 512
[  285.808168][   T72] bridge_slave_1: left allmulticast mode
[  285.808191][   T72] bridge_slave_1: left promiscuous mode
[  285.808330][   T72] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.812183][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.818467][   T72] bridge_slave_0: left allmulticast mode
[  285.818490][   T72] bridge_slave_0: left promiscuous mode
[  285.818751][   T72] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.857399][T11271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.857644][T11271] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.882344][T11253] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.883302][T11253] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.883959][T11253] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.887667][T11253] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.889976][T11253] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.892338][T11253] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.894554][T11252] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.903362][T11252] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  285.904024][T11252] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #15: block 3: comm syz.6.1903: lblock 3 mapped to illegal pblock 3 (length 1)
[  286.115137][   T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  286.118075][   T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  286.141202][   T72] bond0 (unregistering): Released all slaves
[  286.169840][T11254] rxe_eth0 speed is unknown, defaulting to 1000
[  286.189097][T11251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.208710][   T29] kauditd_printk_skb: 500 callbacks suppressed
[  286.208739][   T29] audit: type=1400 audit(1794158754.055:1787): avc:  denied  { write } for  pid=11250 comm="syz.5.1902" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  286.239649][   T29] audit: type=1400 audit(1794158754.075:1788): avc:  denied  { write } for  pid=11273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.240296][T11126] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[  286.277692][T11126] EXT4-fs (loop7): Remounting filesystem read-only
[  286.301814][   T29] audit: type=1400 audit(1794158754.145:1789): avc:  denied  { kexec_image_load } for  pid=11250 comm="syz.5.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  286.322764][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.364778][   T29] audit: type=1400 audit(1794158754.215:1790): avc:  denied  { write } for  pid=11292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.501662][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1
[  286.537600][ T5948] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  286.537634][ T5948] EXT4-fs (loop6): This should not happen!! Data will be lost
[  286.537634][ T5948] 
[  286.539585][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  286.576275][   T72] hsr_slave_0: left promiscuous mode
[  286.577243][   T72] hsr_slave_1: left promiscuous mode
[  286.577753][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.577767][   T72] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.578205][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.578221][   T72] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.583993][T11299] FAULT_INJECTION: forcing a failure.
[  286.583993][T11299] name failslab, interval 1, probability 0, space 0, times 0
[  286.584181][T11299] CPU: 0 UID: 0 PID: 11299 Comm: syz.7.1910 Not tainted syzkaller #0 PREEMPT(lazy) 
[  286.584253][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  286.584295][T11299] Call Trace:
[  286.584317][T11299]  <TASK>
[  286.584339][T11299]  __dump_stack+0x1d/0x30
[  286.584494][T11299]  dump_stack_lvl+0x95/0xd0
[  286.584569][T11299]  dump_stack+0x15/0x1b
[  286.584659][T11299]  should_fail_ex+0x259/0x270
[  286.584782][T11299]  ? tty_alloc_file+0x31/0x70
[  286.584975][T11299]  should_failslab+0x8c/0xb0
[  286.585076][T11299]  __kmalloc_cache_noprof+0x5d/0x3e0
[  286.585268][T11299]  ? tty_alloc_file+0x31/0x70
[  286.585383][T11299]  tty_alloc_file+0x31/0x70
[  286.585490][T11299]  ptmx_open+0x46/0x240
[  286.585779][T11299]  chrdev_open+0x2eb/0x3a0
[  286.585862][T11299]  do_dentry_open+0x496/0xa40
[  286.585946][T11299]  ? __pfx_chrdev_open+0x10/0x10
[  286.586060][T11299]  ? may_open+0x1f4/0x350
[  286.586164][T11299]  vfs_open_consume+0x46/0x1f0
[  286.586260][T11299]  path_openat+0xc16/0x11c0
[  286.586325][T11299]  do_file_open+0x16c/0x290
[  286.586499][T11299]  do_sys_openat2+0xa1/0x140
[  286.586616][T11299]  __x64_sys_openat+0xf2/0x120
[  286.586711][T11299]  x64_sys_call+0x1f72/0x2550
[  286.586813][T11299]  do_syscall_64+0x112/0x360
[  286.586885][T11299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.586961][T11299] RIP: 0033:0x7fb4c389fb19
[  286.587016][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.587100][T11299] RSP: 002b:00007fb4c22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  286.587180][T11299] RAX: ffffffffffffffda RBX: 00007fb4c3b25fa0 RCX: 00007fb4c389fb19
[  286.587248][T11299] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  286.587298][T11299] RBP: 00007fb4c3937b70 R08: 0000000000000000 R09: 0000000000000000
[  286.587341][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.587383][T11299] R13: 00007fb4c3b26038 R14: 00007fb4c3b25fa0 R15: 00007ffcebafea68
[  286.587525][T11299]  </TASK>
[  286.592108][   T72] veth1_macvtap: left promiscuous mode
[  286.592182][   T72] veth0_macvtap: left promiscuous mode
[  286.593214][   T72] veth1_vlan: left promiscuous mode
[  286.593338][   T72] veth0_vlan: left promiscuous mode
[  286.901834][ T3764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.905785][   T29] audit: type=1400 audit(1794158754.755:1791): avc:  denied  { write } for  pid=11300 comm="syz.6.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  286.991608][   T72] team0 (unregistering): Port device team_slave_1 removed
[  286.998476][   T72] team0 (unregistering): Port device team_slave_0 removed
[  287.215251][T11254] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.215382][T11254] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.215444][T11254] bridge_slave_0: entered allmulticast mode
[  287.215888][T11254] bridge_slave_0: entered promiscuous mode
[  287.245542][T11254] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.245579][T11254] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.245670][T11254] bridge_slave_1: entered allmulticast mode
[  287.246160][T11254] bridge_slave_1: entered promiscuous mode
[  287.269219][T11335] futex_wake_op: syz.5.1915 tries to shift op by 144; fix this program
[  287.295938][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.299523][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.317167][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.317524][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.323958][   T72] IPVS: stop unused estimator thread 0...
[  287.364758][   T29] audit: type=1400 audit(1794158755.215:1792): avc:  denied  { write } for  pid=11324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  287.367782][T11254] team0: Port device team_slave_0 added
[  287.399536][T11254] team0: Port device team_slave_1 added
[  287.419265][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.419283][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.419344][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.441337][   T29] audit: type=1400 audit(1794158755.285:1793): avc:  denied  { write } for  pid=11345 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  287.486108][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.486127][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.486210][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.526767][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2
[  287.544749][T11254] hsr_slave_0: entered promiscuous mode
[  287.545247][T11254] hsr_slave_1: entered promiscuous mode
[  287.545681][T11254] debugfs: 'hsr0' already exists in 'hsr'
[  287.545697][T11254] Cannot create hsr debugfs directory
[  287.737208][   T29] audit: type=1400 audit(1794158755.585:1794): avc:  denied  { write } for  pid=11354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  287.750206][T11361] loop6: detected capacity change from 0 to 128
[  287.792415][   T29] audit: type=1400 audit(1794158755.645:1795): avc:  denied  { write } for  pid=11369 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  287.828631][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3
[  287.973730][T11254] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  287.977505][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  287.984127][T11254] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  287.998673][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  288.003032][T11254] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  288.023841][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  288.047483][T11381] tipc: Started in network mode
[  288.047538][T11381] tipc: Node identity ac14140f, cluster identity 4711
[  288.047857][T11381] tipc: Enabled bearer <udp:syz2>, priority 10
[  288.047986][T11254] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  288.057012][T11254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  288.061044][T11373] FAULT_INJECTION: forcing a failure.
[  288.061044][T11373] name failslab, interval 1, probability 0, space 0, times 0
[  288.061135][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.7.1923 Not tainted syzkaller #0 PREEMPT(lazy) 
[  288.061218][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  288.061261][T11373] Call Trace:
[  288.061282][T11373]  <TASK>
[  288.061311][T11373]  __dump_stack+0x1d/0x30
[  288.061396][T11373]  dump_stack_lvl+0x95/0xd0
[  288.061481][T11373]  dump_stack+0x15/0x1b
[  288.061564][T11373]  should_fail_ex+0x259/0x270
[  288.061661][T11373]  ? tty_alloc_file+0x31/0x70
[  288.061777][T11373]  should_failslab+0x8c/0xb0
[  288.061984][T11373]  __kmalloc_cache_noprof+0x5d/0x3e0
[  288.062125][T11373]  ? tty_alloc_file+0x31/0x70
[  288.062249][T11373]  tty_alloc_file+0x31/0x70
[  288.062389][T11373]  ptmx_open+0x46/0x240
[  288.062484][T11373]  chrdev_open+0x2eb/0x3a0
[  288.062557][T11373]  do_dentry_open+0x496/0xa40
[  288.062643][T11373]  ? __pfx_chrdev_open+0x10/0x10
[  288.062779][T11373]  ? may_open+0x1f4/0x350
[  288.062895][T11373]  vfs_open_consume+0x46/0x1f0
[  288.063048][T11373]  path_openat+0xc16/0x11c0
[  288.063220][T11373]  do_file_open+0x16c/0x290
[  288.063412][T11373]  do_sys_openat2+0xa1/0x140
[  288.063501][T11373]  __x64_sys_openat+0xf2/0x120
[  288.063574][T11373]  x64_sys_call+0x1f72/0x2550
[  288.063691][T11373]  do_syscall_64+0x112/0x360
[  288.063764][T11373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.063898][T11373] RIP: 0033:0x7fb4c389fb19
[  288.063958][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.064021][T11373] RSP: 002b:00007fb4c22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  288.064090][T11373] RAX: ffffffffffffffda RBX: 00007fb4c3b25fa0 RCX: 00007fb4c389fb19
[  288.064141][T11373] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  288.064185][T11373] RBP: 00007fb4c3937b70 R08: 0000000000000000 R09: 0000000000000000
[  288.064228][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.064335][T11373] R13: 00007fb4c3b26038 R14: 00007fb4c3b25fa0 R15: 00007ffcebafea68
[  288.064403][T11373]  </TASK>
[  288.078181][T11364] loop9: detected capacity change from 0 to 512
[  288.129339][T11364] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  288.129403][T11364] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  288.143865][T11364] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended
[  288.149010][T11364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  288.149090][T11364] System zones: 0-2, 18-18, 34-34
[  288.152839][T11364] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.1922: bad orphan inode 15
[  288.152914][T11364] loop9: lost filesystem error report for type 5 error -117
[  288.158299][T11364] ext4_test_bit(bit=14, block=18) = 1
[  288.158352][T11364] is_bad_inode(inode)=0
[  288.158374][T11364] NEXT_ORPHAN(inode)=2264924160
[  288.158414][T11364] max_ino=32
[  288.158435][T11364] i_nlink=0
[  288.160179][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  288.160264][    C0] EXT4-fs (loop9): initial error at time 1794158756: ext4_orphan_get:1430
[  288.160359][    C0] EXT4-fs (loop9): last error at time 1794158756: ext4_orphan_get:1430
[  288.166079][T11364] EXT4-fs error (device loop9): ext4_do_update_inode:6707: inode #15: comm syz.9.1922: corrupted inode contents
[  288.166234][T11364] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.176500][T11364] EXT4-fs error (device loop9): ext4_dirty_inode:7679: inode #15: comm syz.9.1922: mark_inode_dirty error
[  288.176597][T11364] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.177308][T11364] EXT4-fs error (device loop9): ext4_do_update_inode:6707: inode #15: comm syz.9.1922: corrupted inode contents
[  288.177499][T11364] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.181116][T11364] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2962: inode #15: comm syz.9.1922: mark_inode_dirty error
[  288.181207][T11364] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.188098][T11364] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2965: inode #15: comm syz.9.1922: mark inode dirty (error -117)
[  288.188191][T11364] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.189162][T11364] EXT4-fs warning (device loop9): ext4_evict_inode:355: xattr delete (err -117)
[  288.203088][T11364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.363529][   T29] audit: type=1400 audit(1794158756.215:1796): avc:  denied  { write } for  pid=11362 comm="syz.9.1922" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  288.365766][T11364] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1922: bg 0: block 80: padding at end of block bitmap is not set
[  288.393447][T11381] loop5: detected capacity change from 0 to 2048
[  288.436074][T11381]  loop5: p1 < > p4 < >
[  288.574182][T11254] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.593704][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1925'.
[  288.597335][T11395] bond0: Unable to set up delay as MII monitoring is disabled
[  288.632313][T11254] 8021q: adding VLAN 0 to HW filter on device team0
[  288.657062][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.680638][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.680746][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.707704][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.707737][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.727050][T11398] syzkaller1: entered promiscuous mode
[  288.727133][T11398] syzkaller1: entered allmulticast mode
[  288.728975][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4
[  288.775640][T11408] loop9: detected capacity change from 0 to 2048
[  288.800161][T11408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.862633][   T13] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  288.862722][   T13] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  288.862745][   T13] EXT4-fs (loop9): This should not happen!! Data will be lost
[  288.862745][   T13] 
[  288.862757][   T13] EXT4-fs (loop9): Total free blocks count 0
[  288.862769][   T13] EXT4-fs (loop9): Free/Dirty block details
[  288.862780][   T13] EXT4-fs (loop9): free_blocks=66060288
[  288.862794][   T13] EXT4-fs (loop9): dirty_blocks=16
[  288.862810][   T13] EXT4-fs (loop9): Block reservation details
[  288.862893][   T13] EXT4-fs (loop9): i_reserved_data_blocks=1
[  288.865178][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.954086][T11415] loop7: detected capacity change from 0 to 512
[  288.982740][T11415] EXT4-fs error (device loop7): ext4_orphan_get:1404: inode #15: comm syz.7.1930: iget: bad i_size value: 38620345925642
[  288.982854][T11415] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.983835][T11415] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.1930: couldn't read orphan inode 15 (err -117)
[  288.983872][T11415] loop7: lost filesystem error report for type 5 error -117
[  288.984950][T11415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.160405][ T3514] tipc: Node number set to 2886997007
[  289.316245][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.333533][T11450] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  289.333635][T11450] SELinux: failed to load policy
[  289.461183][ T5948] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm kworker/u8:9: bg 0: block 5: invalid block bitmap
[  289.461540][ T5948] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  289.461574][ T5948] EXT4-fs (loop7): This should not happen!! Data will be lost
[  289.461574][ T5948] 
[  289.461592][ T5948] EXT4-fs (loop7): Total free blocks count 0
[  289.461610][ T5948] EXT4-fs (loop7): Free/Dirty block details
[  289.461625][ T5948] EXT4-fs (loop7): free_blocks=0
[  289.461641][ T5948] EXT4-fs (loop7): dirty_blocks=1
[  289.461656][ T5948] EXT4-fs (loop7): Block reservation details
[  289.461705][ T5948] EXT4-fs (loop7): i_reserved_data_blocks=1
[  289.463218][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.483765][T11254] veth0_vlan: entered promiscuous mode
[  289.507595][T11254] veth1_vlan: entered promiscuous mode
[  289.553560][T11456] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1933'.
[  289.579396][T11456] ip_tables: iptables: counters copy to user failed while replacing table
[  289.591843][T11254] veth0_macvtap: entered promiscuous mode
[  289.594487][T11254] veth1_macvtap: entered promiscuous mode
[  289.617410][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.626325][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.653993][T11475] FAULT_INJECTION: forcing a failure.
[  289.653993][T11475] name failslab, interval 1, probability 0, space 0, times 0
[  289.654281][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.7.1938 Not tainted syzkaller #0 PREEMPT(lazy) 
[  289.654308][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  289.654323][T11475] Call Trace:
[  289.654375][T11475]  <TASK>
[  289.654385][T11475]  __dump_stack+0x1d/0x30
[  289.654421][T11475]  dump_stack_lvl+0x95/0xd0
[  289.654447][T11475]  dump_stack+0x15/0x1b
[  289.654468][T11475]  should_fail_ex+0x259/0x270
[  289.654557][T11475]  ? alloc_tty_struct+0x4b/0x3d0
[  289.654669][T11475]  should_failslab+0x8c/0xb0
[  289.654710][T11475]  __kmalloc_cache_noprof+0x5d/0x3e0
[  289.654803][T11475]  ? alloc_tty_struct+0x4b/0x3d0
[  289.654847][T11475]  alloc_tty_struct+0x4b/0x3d0
[  289.654871][T11475]  tty_init_dev+0x39/0x320
[  289.654981][T11475]  ptmx_open+0xda/0x240
[  289.655024][T11475]  chrdev_open+0x2eb/0x3a0
[  289.655054][T11475]  do_dentry_open+0x496/0xa40
[  289.655146][T11475]  ? __pfx_chrdev_open+0x10/0x10
[  289.655174][T11475]  ? may_open+0x1f4/0x350
[  289.655217][T11475]  vfs_open_consume+0x46/0x1f0
[  289.655294][T11475]  path_openat+0xc16/0x11c0
[  289.655330][T11475]  do_file_open+0x16c/0x290
[  289.655442][T11475]  do_sys_openat2+0xa1/0x140
[  289.655516][T11475]  __x64_sys_openat+0xf2/0x120
[  289.655555][T11475]  x64_sys_call+0x1f72/0x2550
[  289.655628][T11475]  do_syscall_64+0x112/0x360
[  289.655730][T11475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.655761][T11475] RIP: 0033:0x7fb4c389fb19
[  289.655783][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.655805][T11475] RSP: 002b:00007fb4c22ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  289.655898][T11475] RAX: ffffffffffffffda RBX: 00007fb4c3b25fa0 RCX: 00007fb4c389fb19
[  289.656005][T11475] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c
[  289.656025][T11475] RBP: 00007fb4c3937b70 R08: 0000000000000000 R09: 0000000000000000
[  289.656045][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.656063][T11475] R13: 00007fb4c3b26038 R14: 00007fb4c3b25fa0 R15: 00007ffcebafea68
[  289.656158][T11475]  </TASK>
[  289.707014][   T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.741501][ T5948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.742364][ T5948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.742455][ T5948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.226009][T11509] loop5: detected capacity change from 0 to 512
[  290.315049][T11509] EXT4-fs: Ignoring removed nomblk_io_submit option
[  290.351783][T11509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.352217][T11509] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  290.552216][T11520] netlink: 'syz.0.1946': attribute type 5 has an invalid length.
[  290.581248][T11520] loop0: detected capacity change from 0 to 512
[  290.588579][T11520] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  290.588888][T11520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  290.604965][T11520] EXT4-fs (loop0): 1 truncate cleaned up
[  290.611244][T11520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.174372][T11539] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  291.223700][ T3764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.342245][T11254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.386778][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  291.386798][   T29] audit: type=1400 audit(1794158759.235:1815): avc:  denied  { cpu } for  pid=11556 comm="syz.7.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  291.437603][   T29] audit: type=1400 audit(1794158759.285:1816): avc:  denied  { write } for  pid=11538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.480805][T11568] ip_tables: iptables: counters copy to user failed while replacing table
[  291.481037][   T29] audit: type=1400 audit(1794158759.335:1817): avc:  denied  { mounton } for  pid=11556 comm="syz.7.1953" path="/349/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  291.531242][   T29] audit: type=1400 audit(1794158759.385:1818): avc:  denied  { write } for  pid=11571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  291.580989][T11579] FAULT_INJECTION: forcing a failure.
[  291.580989][T11579] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.581034][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.7.1958 Not tainted syzkaller #0 PREEMPT(lazy) 
[  291.581106][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  291.581125][T11579] Call Trace:
[  291.581134][T11579]  <TASK>
[  291.581145][T11579]  __dump_stack+0x1d/0x30
[  291.581201][T11579]  dump_stack_lvl+0x95/0xd0
[  291.581325][T11579]  dump_stack+0x15/0x1b
[  291.581361][T11579]  should_fail_ex+0x259/0x270
[  291.581401][T11579]  should_fail+0xb/0x20
[  291.581436][T11579]  should_fail_usercopy+0x1a/0x20
[  291.581513][T11579]  _copy_from_iter+0xcc/0xe80
[  291.581547][T11579]  ? __alloc_skb+0x516/0x6f0
[  291.581626][T11579]  ? __alloc_skb+0x209/0x6f0
[  291.581681][T11579]  netlink_sendmsg+0x4d6/0x740
[  291.581750][T11579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.581779][T11579]  ____sys_sendmsg+0x54a/0x590
[  291.581812][T11579]  ___sys_sendmsg+0x195/0x1e0
[  291.581888][T11579]  __x64_sys_sendmsg+0xd4/0x160
[  291.581921][T11579]  x64_sys_call+0x22ab/0x2550
[  291.581956][T11579]  do_syscall_64+0x112/0x360
[  291.581984][T11579]  ? generic_smp_call_function_single_interrupt+0x13/0x20
[  291.582095][T11579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.582125][T11579] RIP: 0033:0x7fb4c389fb19
[  291.582147][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.582181][T11579] RSP: 002b:00007fb4c22ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.582261][T11579] RAX: ffffffffffffffda RBX: 00007fb4c3b25fa0 RCX: 00007fb4c389fb19
[  291.582281][T11579] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003
[  291.582375][T11579] RBP: 00007fb4c22ef090 R08: 0000000000000000 R09: 0000000000000000
[  291.582392][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.582409][T11579] R13: 00007fb4c3b26038 R14: 00007fb4c3b25fa0 R15: 00007ffcebafea68
[  291.582435][T11579]  </TASK>
[  292.417647][   T29] audit: type=1400 audit(1794158760.265:1819): avc:  denied  { write } for  pid=11588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.476838][T11603] FAULT_INJECTION: forcing a failure.
[  292.476838][T11603] name failslab, interval 1, probability 0, space 0, times 0
[  292.476870][T11603] CPU: 0 UID: 0 PID: 11603 Comm: syz.9.1961 Not tainted syzkaller #0 PREEMPT(lazy) 
[  292.476926][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  292.476996][T11603] Call Trace:
[  292.477005][T11603]  <TASK>
[  292.477015][T11603]  __dump_stack+0x1d/0x30
[  292.477049][T11603]  dump_stack_lvl+0x95/0xd0
[  292.477080][T11603]  dump_stack+0x15/0x1b
[  292.477172][T11603]  should_fail_ex+0x259/0x270
[  292.477203][T11603]  ? ipv6_flowlabel_opt+0x8dc/0x1b30
[  292.477299][T11603]  should_failslab+0x8c/0xb0
[  292.477341][T11603]  __kmalloc_cache_noprof+0x5d/0x3e0
[  292.477375][T11603]  ? should_fail_ex+0xdb/0x270
[  292.477489][T11603]  ? ipv6_flowlabel_opt+0x8dc/0x1b30
[  292.477575][T11603]  ipv6_flowlabel_opt+0x8dc/0x1b30
[  292.477608][T11603]  ? avc_has_perm+0x101/0x190
[  292.477771][T11603]  ? selinux_file_open+0x2e9/0x340
[  292.477873][T11603]  ? lock_sock_nested+0x7f/0x110
[  292.477911][T11603]  do_ipv6_setsockopt+0x75d/0x1d30
[  292.477938][T11603]  ? kstrtoull+0x119/0x150
[  292.477958][T11603]  ? __rcu_read_unlock+0x4e/0x70
[  292.478033][T11603]  ? avc_has_perm_noaudit+0xac/0x160
[  292.478069][T11603]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  292.478142][T11603]  ipv6_setsockopt+0x59/0x130
[  292.478173][T11603]  tcp_setsockopt+0x98/0xb0
[  292.478210][T11603]  sock_common_setsockopt+0x69/0x80
[  292.478288][T11603]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  292.478434][T11603]  __sys_setsockopt+0x184/0x200
[  292.478463][T11603]  __x64_sys_setsockopt+0x64/0x80
[  292.478491][T11603]  x64_sys_call+0x248f/0x2550
[  292.478557][T11603]  do_syscall_64+0x112/0x360
[  292.478586][T11603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.478610][T11603] RIP: 0033:0x7f6bd40cfb19
[  292.478652][T11603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.478678][T11603] RSP: 002b:00007f6bd2b1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  292.478700][T11603] RAX: ffffffffffffffda RBX: 00007f6bd4355fa0 RCX: 00007f6bd40cfb19
[  292.478714][T11603] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  292.478727][T11603] RBP: 00007f6bd2b1f090 R08: 0000000000000020 R09: 0000000000000000
[  292.478799][T11603] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001
[  292.478816][T11603] R13: 00007f6bd4356038 R14: 00007f6bd4355fa0 R15: 00007ffc0e38b2b8
[  292.478836][T11603]  </TASK>
[  292.513094][   T29] audit: type=1400 audit(1794158760.335:1820): avc:  denied  { write } for  pid=11601 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  292.645108][T11608] FAULT_INJECTION: forcing a failure.
[  292.645108][T11608] name failslab, interval 1, probability 0, space 0, times 0
[  292.645167][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.9.1963 Not tainted syzkaller #0 PREEMPT(lazy) 
[  292.645344][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  292.645381][T11608] Call Trace:
[  292.645404][T11608]  <TASK>
[  292.645433][T11608]  __dump_stack+0x1d/0x30
[  292.645537][T11608]  dump_stack_lvl+0x95/0xd0
[  292.645664][T11608]  dump_stack+0x15/0x1b
[  292.645735][T11608]  should_fail_ex+0x259/0x270
[  292.645890][T11608]  ? ip6mr_mfc_add+0x509/0x16f0
[  292.645974][T11608]  should_failslab+0x8c/0xb0
[  292.646091][T11608]  kmem_cache_alloc_noprof+0x5e/0x3d0
[  292.646266][T11608]  ? ip6mr_mfc_add+0x509/0x16f0
[  292.646330][T11608]  ip6mr_mfc_add+0x509/0x16f0
[  292.646425][T11608]  ? should_fail_ex+0xdb/0x270
[  292.646576][T11608]  ip6_mroute_setsockopt+0x8af/0xbd0
[  292.646794][T11608]  do_ipv6_setsockopt+0x20d/0x1d30
[  292.646875][T11608]  ? kstrtoull+0x119/0x150
[  292.646942][T11608]  ? __rcu_read_unlock+0x4e/0x70
[  292.647026][T11608]  ? avc_has_perm_noaudit+0xac/0x160
[  292.647244][T11608]  ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0
[  292.647381][T11608]  ipv6_setsockopt+0x59/0x130
[  292.647461][T11608]  rawv6_setsockopt+0x1cc/0x3f0
[  292.647636][T11608]  sock_common_setsockopt+0x69/0x80
[  292.647737][T11608]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  292.647858][T11608]  __sys_setsockopt+0x184/0x200
[  292.647993][T11608]  __x64_sys_setsockopt+0x64/0x80
[  292.648066][T11608]  x64_sys_call+0x248f/0x2550
[  292.648302][T11608]  do_syscall_64+0x112/0x360
[  292.648375][T11608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.648489][T11608] RIP: 0033:0x7f6bd40cfb19
[  292.648552][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.648624][T11608] RSP: 002b:00007f6bd2b1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  292.648689][T11608] RAX: ffffffffffffffda RBX: 00007f6bd4355fa0 RCX: 00007f6bd40cfb19
[  292.648726][T11608] RDX: 00000000000000cc RSI: 0000000000000029 RDI: 0000000000000003
[  292.648813][T11608] RBP: 00007f6bd2b1f090 R08: 000000000000005c R09: 0000000000000000
[  292.648856][T11608] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001
[  292.648897][T11608] R13: 00007f6bd4356038 R14: 00007f6bd4355fa0 R15: 00007ffc0e38b2b8
[  292.648976][T11608]  </TASK>
[  292.676326][T11610] loop6: detected capacity change from 0 to 164
[  292.849453][T11610] Unsupported NM flag settings (240)
[  292.849644][T11610] Unsupported NM flag settings (240)
[  293.005803][T11614] loop0: detected capacity change from 0 to 1024
[  293.006807][T11614] EXT4-fs: Ignoring removed bh option
[  293.071104][T11614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  293.071210][T11614] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.092202][   T29] audit: type=1400 audit(1794158760.935:1821): avc:  denied  { write } for  pid=11612 comm="syz.0.1966" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  293.117146][T11614] EXT4-fs error (device loop0): ext4_map_blocks:951: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 3)
[  293.141918][T11614] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  293.141965][T11614] EXT4-fs (loop0): This should not happen!! Data will be lost
[  293.141965][T11614] 
[  293.197765][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.204651][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.219447][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.233612][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.247781][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.278104][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.283778][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.284499][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.286778][T11614] EXT4-fs error (device loop0): ext4_map_blocks:867: inode #15: block 3: comm syz.0.1966: lblock 3 mapped to illegal pblock 3 (length 1)
[  293.398647][   T29] audit: type=1400 audit(1794158761.245:1822): avc:  denied  { mounton } for  pid=11637 comm="syz.5.1969" path="/396/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  293.460289][T11644] 9pnet_virtio: no channels available for device 127.0.0.1
[  293.522449][   T29] audit: type=1400 audit(1794158761.375:1823): avc:  denied  { write } for  pid=11627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  293.670164][   T29] audit: type=1400 audit(1794158761.515:1824): avc:  denied  { write } for  pid=11649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  293.670561][T11644] ptp ptp0: new virtual clock ptp1
[  293.680914][T11644] ptp ptp0: new virtual clock ptp2
[  293.687448][T11644] ptp ptp0: new virtual clock ptp3
[  293.714142][T11644] ptp ptp0: new virtual clock ptp4
[  293.714204][T11644] ptp ptp0: guarantee physical clock free running
[  293.745298][T11644] ptp ptp0: delete virtual clock ptp4
[  293.790178][T11644] ptp ptp0: delete virtual clock ptp3
[  293.803661][T11644] ptp ptp0: delete virtual clock ptp2
[  293.815551][T11663] loop7: detected capacity change from 0 to 512
[  293.821644][T11663] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.825081][T11663] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  293.829108][T11663] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  293.829429][T11663] EXT4-fs (loop7): orphan cleanup on readonly fs
[  293.830710][T11663] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.1973: Invalid block bitmap block 0 in block_group 0
[  293.830890][T11663] loop7: lost filesystem error report for type 5 error -117
[  293.834334][T11663] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.1973: Invalid block bitmap block 0 in block_group 0
[  293.834446][T11663] loop7: lost filesystem error report for type 5 error -117
[  293.835671][T11663] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:487: comm syz.7.1973: Invalid block bitmap block 0 in block_group 0
[  293.835785][T11663] loop7: lost filesystem error report for type 5 error -117
[  293.836852][T11663] EXT4-fs error (device loop7): ext4_acquire_dquot:7120: comm syz.7.1973: Failed to acquire dquot type 1
[  293.836947][T11663] loop7: lost filesystem error report for type 5 error -28
[  293.839915][T11663] EXT4-fs (loop7): 1 orphan inode deleted
[  293.840159][    C0] EXT4-fs (loop7): error count since last fsck: 4
[  293.840205][    C0] EXT4-fs (loop7): last error at time 1794158761: ext4_acquire_dquot:7120
[  293.840758][ T5948] EXT4-fs error (device loop7): ext4_release_dquot:7156: comm kworker/u8:9: Failed to release dquot type 1
[  293.840841][ T5948] loop7: lost filesystem error report for type 5 error -117
[  293.844948][T11663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  294.007094][T11644] ptp ptp0: guarantee physical clock free running
[  294.037630][   T39] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  294.037668][   T39] EXT4-fs (loop0): This should not happen!! Data will be lost
[  294.037668][   T39] 
[  294.038586][T11254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  294.525734][T11714] batadv_slave_0: Caught tx_queue_len zero misconfig
[  294.576222][T11722] loop5: detected capacity change from 0 to 736
[  294.584815][T11725] loop6: detected capacity change from 0 to 164
[  294.806780][ T4403] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.876432][T11744] loop7: detected capacity change from 0 to 512
[  294.891115][T11742] tipc: Started in network mode
[  294.891150][T11742] tipc: Node identity ac14140f, cluster identity 4711
[  294.891384][T11742] tipc: Enabled bearer <udp:syz2>, priority 10
[  295.033768][T11749] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  295.033843][    C0] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  295.232936][T11770] loop0: detected capacity change from 0 to 164
[  295.280424][T11776] FAULT_INJECTION: forcing a failure.
[  295.280424][T11776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.280458][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.7.1998 Not tainted syzkaller #0 PREEMPT(lazy) 
[  295.280489][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  295.280512][T11776] Call Trace:
[  295.280520][T11776]  <TASK>
[  295.280530][T11776]  __dump_stack+0x1d/0x30
[  295.280623][T11776]  dump_stack_lvl+0x95/0xd0
[  295.280652][T11776]  dump_stack+0x15/0x1b
[  295.280681][T11776]  should_fail_ex+0x259/0x270
[  295.280747][T11776]  should_fail+0xb/0x20
[  295.280785][T11776]  should_fail_usercopy+0x1a/0x20
[  295.280854][T11776]  _copy_from_iter+0xcc/0xe80
[  295.280966][T11776]  ? __alloc_skb+0x516/0x6f0
[  295.281009][T11776]  ? __alloc_skb+0x209/0x6f0
[  295.281076][T11776]  netlink_sendmsg+0x4d6/0x740
[  295.281111][T11776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.281210][T11776]  ____sys_sendmsg+0x54a/0x590
[  295.281254][T11776]  ___sys_sendmsg+0x195/0x1e0
[  295.281309][T11776]  __x64_sys_sendmsg+0xd4/0x160
[  295.281339][T11776]  x64_sys_call+0x22ab/0x2550
[  295.281380][T11776]  do_syscall_64+0x112/0x360
[  295.281409][T11776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.281449][T11776] RIP: 0033:0x7fb4c389fb19
[  295.281470][T11776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.281495][T11776] RSP: 002b:00007fb4c22ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.281517][T11776] RAX: ffffffffffffffda RBX: 00007fb4c3b25fa0 RCX: 00007fb4c389fb19
[  295.281594][T11776] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  295.281612][T11776] RBP: 00007fb4c22ef090 R08: 0000000000000000 R09: 0000000000000000
[  295.281630][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.281647][T11776] R13: 00007fb4c3b26038 R14: 00007fb4c3b25fa0 R15: 00007ffcebafea68
[  295.281674][T11776]  </TASK>
[  295.285937][T11758] netlink: 'syz.9.1995': attribute type 7 has an invalid length.
[  295.285998][T11758] netlink: 'syz.9.1995': attribute type 8 has an invalid length.
[  295.286501][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1995'.
[  295.472900][T11758] vlan2: entered promiscuous mode
[  295.472962][T11758] bridge0: entered promiscuous mode
[  295.549657][T11782] loop0: detected capacity change from 0 to 512
[  295.704922][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2001'.
[  295.719683][T11782] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1999: iget: bad i_size value: 38620345925642
[  295.719727][T11782] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  295.719960][T11782] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1999: couldn't read orphan inode 15 (err -117)
[  295.719988][T11782] loop0: lost filesystem error report for type 5 error -117
[  295.720068][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  295.720090][    C1] EXT4-fs (loop0): initial error at time 1794158763: ext4_orphan_get:1404: inode 15
[  295.720132][    C1] EXT4-fs (loop0): last error at time 1794158763: ext4_orphan_get:1409
[  295.721001][T11782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.962474][   T10] tipc: Node number set to 2886997007
[  296.017203][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2000'.
[  296.459455][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  296.459531][   T29] audit: type=1400 audit(1794158764.305:1840): avc:  denied  { write } for  pid=11821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  296.585579][ T3422] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm kworker/u8:7: bg 0: block 5: invalid block bitmap
[  296.586011][ T3422] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  296.586046][ T3422] EXT4-fs (loop0): This should not happen!! Data will be lost
[  296.586046][ T3422] 
[  296.586064][ T3422] EXT4-fs (loop0): Total free blocks count 0
[  296.586130][ T3422] EXT4-fs (loop0): Free/Dirty block details
[  296.586145][ T3422] EXT4-fs (loop0): free_blocks=0
[  296.586162][ T3422] EXT4-fs (loop0): dirty_blocks=1
[  296.586177][ T3422] EXT4-fs (loop0): Block reservation details
[  296.586192][ T3422] EXT4-fs (loop0): i_reserved_data_blocks=1
[  296.587388][T11254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.628511][T11822] loop5: detected capacity change from 0 to 512
[  296.663492][T11822] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2003: iget: bad extended attribute block 134217728
[  296.663702][T11822] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  296.665708][T11822] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2003: couldn't read orphan inode 15 (err -117)
[  296.665824][T11822] loop5: lost filesystem error report for type 5 error -117
[  296.668466][T11822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.675227][T11822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.721760][T11830] xt_LOG: level 115 >= 8
[  296.754830][T11832] FAULT_INJECTION: forcing a failure.
[  296.754830][T11832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  296.754866][T11832] CPU: 0 UID: 0 PID: 11832 Comm: syz.9.2007 Not tainted syzkaller #0 PREEMPT(lazy) 
[  296.754953][T11832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  296.754970][T11832] Call Trace:
[  296.754979][T11832]  <TASK>
[  296.754989][T11832]  __dump_stack+0x1d/0x30
[  296.755058][T11832]  dump_stack_lvl+0x95/0xd0
[  296.755163][T11832]  dump_stack+0x15/0x1b
[  296.755185][T11832]  should_fail_ex+0x259/0x270
[  296.755224][T11832]  should_fail+0xb/0x20
[  296.755268][T11832]  should_fail_usercopy+0x1a/0x20
[  296.755377][T11832]  _copy_from_iter+0xcc/0xe80
[  296.755406][T11832]  ? __alloc_skb+0x516/0x6f0
[  296.755465][T11832]  ? __alloc_skb+0x209/0x6f0
[  296.755510][T11832]  netlink_sendmsg+0x4d6/0x740
[  296.755566][T11832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  296.755602][T11832]  ____sys_sendmsg+0x54a/0x590
[  296.755631][T11832]  ___sys_sendmsg+0x195/0x1e0
[  296.755677][T11832]  __x64_sys_sendmsg+0xd4/0x160
[  296.755712][T11832]  x64_sys_call+0x22ab/0x2550
[  296.755747][T11832]  do_syscall_64+0x112/0x360
[  296.755777][T11832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.755833][T11832] RIP: 0033:0x7f6bd40cfb19
[  296.755850][T11832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.755873][T11832] RSP: 002b:00007f6bd2b1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.755901][T11832] RAX: ffffffffffffffda RBX: 00007f6bd4355fa0 RCX: 00007f6bd40cfb19
[  296.755921][T11832] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  296.755973][T11832] RBP: 00007f6bd2b1f090 R08: 0000000000000000 R09: 0000000000000000
[  296.755991][T11832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.756009][T11832] R13: 00007f6bd4356038 R14: 00007f6bd4355fa0 R15: 00007ffc0e38b2b8
[  296.756114][T11832]  </TASK>
[  296.982288][T11837] ip_tables: iptables: counters copy to user failed while replacing table
[  297.160420][   T29] audit: type=1400 audit(1794158765.015:1841): avc:  denied  { name_bind } for  pid=11850 comm="syz.6.2014" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  297.479070][T11866] loop0: detected capacity change from 0 to 512
[  297.481977][T11866] EXT4-fs: Ignoring removed nomblk_io_submit option
[  297.514197][T11866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.514415][T11866] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  297.606902][T11873] loop9: detected capacity change from 0 to 512
[  297.620786][   T29] audit: type=1400 audit(1794158765.465:1842): avc:  denied  { write } for  pid=11865 comm="syz.0.2020" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  297.654131][T11873] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  297.654200][T11873] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  297.691302][T11873] EXT4-fs (loop9): 1 truncate cleaned up
[  297.711014][T11873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.765199][   T29] audit: type=1400 audit(1794158765.615:1843): avc:  denied  { write } for  pid=11872 comm="syz.9.2018" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  297.765284][   T29] audit: type=1400 audit(1794158765.615:1844): avc:  denied  { write } for  pid=11872 comm="syz.9.2018" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  297.765325][   T29] audit: type=1400 audit(1794158765.615:1845): avc:  denied  { rename } for  pid=11872 comm="syz.9.2018" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  297.768964][T11873] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 156 vs 220 free clusters
[  297.853623][T11873] EXT4-fs (loop9): Remounting filesystem read-only
[  297.853909][T11873] EXT4-fs (loop9): error restoring inline_data for inode -- potential data loss! (inode 12, error -30)
[  297.891271][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2018'.
[  297.921373][T11871] lo: entered allmulticast mode
[  297.931787][   T29] audit: type=1400 audit(1794158765.785:1846): avc:  denied  { setopt } for  pid=11855 comm="syz.7.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  298.132878][ T6519] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.356595][T11254] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.407513][T11890] FAULT_INJECTION: forcing a failure.
[  298.407513][T11890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.407685][T11890] CPU: 1 UID: 0 PID: 11890 Comm: syz.0.2024 Not tainted syzkaller #0 PREEMPT(lazy) 
[  298.407718][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  298.407742][T11890] Call Trace:
[  298.407750][T11890]  <TASK>
[  298.407760][T11890]  __dump_stack+0x1d/0x30
[  298.407787][T11890]  dump_stack_lvl+0x95/0xd0
[  298.407810][T11890]  dump_stack+0x15/0x1b
[  298.407878][T11890]  should_fail_ex+0x259/0x270
[  298.407909][T11890]  should_fail+0xb/0x20
[  298.408022][T11890]  should_fail_usercopy+0x1a/0x20
[  298.408064][T11890]  _copy_from_user+0x1c/0xb0
[  298.408097][T11890]  bpf_test_init+0xb9/0x130
[  298.408118][T11890]  bpf_prog_test_run_skb+0x274/0x11d0
[  298.408140][T11890]  ? __rcu_read_unlock+0x4e/0x70
[  298.408217][T11890]  ? _parse_integer_limit+0x173/0x190
[  298.408240][T11890]  ? __rcu_read_unlock+0x4e/0x70
[  298.408267][T11890]  ? __fget_files+0x184/0x1c0
[  298.408395][T11890]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  298.408424][T11890]  bpf_prog_test_run+0x208/0x340
[  298.408458][T11890]  __sys_bpf+0x914/0xc50
[  298.408488][T11890]  ? vfs_write+0x7b0/0x990
[  298.408609][T11890]  __x64_sys_bpf+0x69/0x80
[  298.408635][T11890]  x64_sys_call+0xf26/0x2550
[  298.408670][T11890]  do_syscall_64+0x112/0x360
[  298.408726][T11890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.408879][T11890] RIP: 0033:0x7ff28c3dfb19
[  298.408900][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.408922][T11890] RSP: 002b:00007ff28ae2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  298.408974][T11890] RAX: ffffffffffffffda RBX: 00007ff28c665fa0 RCX: 00007ff28c3dfb19
[  298.408993][T11890] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  298.409019][T11890] RBP: 00007ff28ae2f090 R08: 0000000000000000 R09: 0000000000000000
[  298.409037][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.409053][T11890] R13: 00007ff28c666038 R14: 00007ff28c665fa0 R15: 00007fff3f927018
[  298.409081][T11890]  </TASK>
[  298.509460][T11892] loop6: detected capacity change from 0 to 512
[  298.516644][T11892] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  298.526165][ T2978] ==================================================================
[  298.526199][ T2978] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat
[  298.526245][ T2978] 
[  298.526251][ T2978] write to 0xffff88811b4ff240 of 4 bytes by task 4469 on cpu 0:
[  298.526271][ T2978]  d_make_discardable+0x4f/0x90
[  298.526295][ T2978]  simple_unlink+0x68/0x80
[  298.526314][ T2978]  shmem_unlink+0x12d/0x140
[  298.526331][ T2978]  vfs_unlink+0x1c3/0x4a0
[  298.526352][ T2978]  filename_unlinkat+0x1db/0x400
[  298.526378][ T2978]  __se_sys_unlink+0x2b/0xe0
[  298.526403][ T2978]  __x64_sys_unlink+0x1f/0x30
[  298.526428][ T2978]  x64_sys_call+0x18ee/0x2550
[  298.526462][ T2978]  do_syscall_64+0x112/0x360
[  298.526486][ T2978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.526508][ T2978] 
[  298.526514][ T2978] read to 0xffff88811b4ff240 of 4 bytes by task 2978 on cpu 1:
[  298.526538][ T2978]  do_readlinkat+0xa0/0x2f0
[  298.526564][ T2978]  __x64_sys_readlink+0x47/0x60
[  298.526598][ T2978]  x64_sys_call+0x1d41/0x2550
[  298.526627][ T2978]  do_syscall_64+0x112/0x360
[  298.526644][ T2978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.526664][ T2978] 
[  298.526668][ T2978] value changed: 0x08300080 -> 0x00300180
[  298.526679][ T2978] 
[  298.526682][ T2978] Reported by Kernel Concurrency Sanitizer on:
[  298.526694][ T2978] CPU: 1 UID: 0 PID: 2978 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) 
[  298.526726][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  298.526743][ T2978] ==================================================================
[  298.554262][T11892] EXT4-fs (loop6): 1 orphan inode deleted
[  298.555325][T11892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.556069][T11892] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.580579][   T29] audit: type=1400 audit(1794158766.415:1847): avc:  denied  { write } for  pid=11881 comm="syz.6.2022" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  298.613975][   T29] audit: type=1400 audit(1794158766.455:1848): avc:  denied  { write } for  pid=11881 comm="syz.6.2022" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  298.618758][T11893] netlink: 'syz.9.2025': attribute type 8 has an invalid length.
[  299.333723][ T3981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.831800][   T29] audit: type=1400 audit(1794158770.685:1849): avc:  denied  { write } for  pid=11901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  302.872601][   T29] audit: type=1400 audit(1794158770.725:1850): avc:  denied  { write } for  pid=11912 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  306.241576][   T29] audit: type=1400 audit(1794158774.095:1851): avc:  denied  { write } for  pid=11916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  306.280912][   T29] audit: type=1400 audit(1794158774.135:1852): avc:  denied  { write } for  pid=11927 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  307.992433][   T29] audit: type=1400 audit(1794158775.845:1853): avc:  denied  { write } for  pid=11930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.031389][   T29] audit: type=1400 audit(1794158775.885:1854): avc:  denied  { write } for  pid=11941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.155952][   T29] audit: type=1400 audit(1794158776.005:1855): avc:  denied  { write } for  pid=11944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.192902][   T29] audit: type=1400 audit(1794158776.045:1856): avc:  denied  { write } for  pid=11955 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1